Sister Carrie

  <rulerefentry rulegroupref=“ask-ie-search9”/>

  <rulerefentry rulegroupref=“ask-ie-search10”/>

  <rulerefentry rulegroupref=“ask-ie-home1”/>

  <rulerefentry rulegroupref=“ask-ie-home2”/>

  <rulerefentry rulegroupref=“ask-ie-lcpage1”/>

  <rulerefentry rulegroupref=“ask-ie-lcpage2”/>

  <rulerefentry rulegroupref=“ask-ie-stpgLDBXö÷def”/>

  <rulerefentry rulegroupref=“protourreg”/>

  <rulerefentry rulegroupref=“protourreg1”/>

  <rulerefentry rulegroupref=“protourreg2”/>

  <rulerefentry rulegroupref=“protourreg3”/>

  <rulerefentry rulegroupref=“protourExecs”/>

  <rulerefentry rulegroupref=“protAvDatVersion”/>

  <rulerefentry rulegroupref=“protAvEngVersion”/>

  <rulerefenLDBX÷řtry rulegroupref=“protAvSDKVersion”/>

  <rulerefentry rulegroupref=“ask-ie-desktop-wp”/>

  <rulerefentry rulegroupref=“prot-ie-advanced-tab”/>

  <rulerefentry rulegroupref=“prot-ie-connections-tab”/>

  <rulerefentry rulegroupref=“prot-ie-content-tab”/>

  <rulerefentry rulegroupref=“prot-ie-general-tab”/>

  <rulerefentry rulegroupref=“prot-ie-homepage”/>

  <ruleLDBXřůrefentry rulegroupref=“prot-ie-privacy-tab”/>

  <rulerefentry rulegroupref=“prot-ie-programs-tab”/>

  <rulerefentry rulegroupref=“prot-ie-security-tab”/>

  <rulerefentry rulegroupref=“protect-run5U”/>

  <rulerefentry rulegroupref=“protScreenSaver”/>

  <rulerefentry rulegroupref=“protlogonGina”/>

  <rulerefentry rulegroupref=“protlogonSys”/>

  <rulerefentry ruleLDBXůúgroupref=“protlogonSysU”/>

  <rulerefentry rulegroupref=“protlogonTMan”/>

  <rulerefentry rulegroupref=“protsysStartup”/>

  <rulerefentry rulegroupref=“protcmdAutoRun”/>

  <rulerefentry rulegroupref=“protcmdAutoRunU”/>

  <rulerefentry rulegroupref=“protSecuPack”/>

  <rulerefentry rulegroupref=“protAuthPack”/>

  <rulerefentry rulegroupref=“protNotiPack”/>

  LDBXúű <rulerefentry rulegroupref=“protSessManager”/>

  <rulerefentry rulegroupref=“protBootImage”/>

  <rulerefentry rulegroupref=“protImageFExec”/>

  <rulerefentry rulegroupref=“proIFMapWLogon”/>

  <rulerefentry rulegroupref=“protDNSLibPath”/>

  <rulerefentry rulegroupref=“protSTScheduler”/>

  <rulerefentry rulegroupref=“protShExecHooks”/>

  </ruleset>

  LDBXűü

  <!— AskSD registry protection —>

  <ruleset name=“rs-rega-asad” allow=“true”>

  <rulerefentry rulegroupref=“protect-run1”/>

  <rulerefentry rulegroupref=“protect-run2”/>

  <rulerefentry rulegroupref=“protect-run3”/>

  <rulerefentry rulegroupref=“protect-run4”/>

  <rulerefentry rulegroupref=“protect-run5”/>

  <rulerefentry rulegroupref=“protect-rLDBXüýun6”/>

  <rulerefentry rulegroupref=“prot-shellex”/>

  <rulerefentry rulegroupref=“prot-appinit”/>

  <rulerefentry rulegroupref=“ask-ie-srchdef”/>

  <rulerefentry rulegroupref=“ask-ie-search1”/>

  <rulerefentry rulegroupref=“ask-ie-search2”/>

  <rulerefentry rulegroupref=“ask-ie-search3”/>

  <rulerefentry rulegroupref=“ask-ie-search4”/>

  <ruLDBXýţlerefentry rulegroupref=“ask-ie-search5”/>

  <rulerefentry rulegroupref=“ask-ie-search6”/>

  <rulerefentry rulegroupref=“ask-ie-search7”/>

  <rulerefentry rulegroupref=“ask-ie-search8”/>

  <rulerefentry rulegroupref=“ask-ie-search9”/>

  <rulerefentry rulegroupref=“ask-ie-search10”/>

  <rulerefentry rulegroupref=“ask-ie-home1”/>

  <rulerefentry rulegroupref=“askLDBXţ˙-ie-home2”/>

  <rulerefentry rulegroupref=“ask-ie-lcpage1”/>

  <rulerefentry rulegroupref=“ask-ie-lcpage2”/>

  <rulerefentry rulegroupref=“ask-ie-stpgdef”/>

  <rulerefentry rulegroupref=“protourreg”/>

  <rulerefentry rulegroupref=“protourreg1”/>

  <rulerefentry rulegroupref=“protourreg2”/>

  <rulerefentry rulegroupref=“protourreg3”/>

  <rulerLDBX˙efentry rulegroupref=“protourExecs”/>

  <rulerefentry rulegroupref=“protAvDatVersion”/>

  <rulerefentry rulegroupref=“protAvEngVersion”/>

  <rulerefentry rulegroupref=“protAvSDKVersion”/>

  <rulerefentry rulegroupref=“ask-ie-desktop-wp”/>

  <rulerefentry rulegroupref=“prot-ie-advanced-tab”/>

  <rulerefentry rulegroupref=“prot-ie-connections-tab”/>

  <rulerefentLDBXry rulegroupref=“prot-ie-content-tab”/>

  <rulerefentry rulegroupref=“prot-ie-general-tab”/>

  <rulerefentry rulegroupref=“prot-ie-homepage”/>

  <rulerefentry rulegroupref=“prot-ie-privacy-tab”/>

  <rulerefentry rulegroupref=“prot-ie-programs-tab”/>

  <rulerefentry rulegroupref=“prot-ie-security-tab”/>

  <rulerefentry rulegroupref=“protect-run5U”/>

  <rulerefenLDBXtry rulegroupref=“protScreenSaver”/>

  <rulerefentry rulegroupref=“protlogonGina”/>

  <rulerefentry rulegroupref=“protlogonSys”/>

  <rulerefentry rulegroupref=“protlogonSysU”/>

  <rulerefentry rulegroupref=“protlogonTMan”/>

  <rulerefentry rulegroupref=“protsysStartup”/>

  <rulerefentry rulegroupref=“protcmdAutoRun”/>

  <rulerefentry rulegroupref=“protcmdAutoRuLDBXnU”/>

  <rulerefentry rulegroupref=“protSecuPack”/>

  <rulerefentry rulegroupref=“protAuthPack”/>

  <rulerefentry rulegroupref=“protNotiPack”/>

  <rulerefentry rulegroupref=“protSessManager”/>

  <rulerefentry rulegroupref=“protBootImage”/>

  <rulerefentry rulegroupref=“protImageFExec”/>

  <rulerefentry rulegroupref=“proIFMapWLogon”/>

  <rulerLDBXefentry rulegroupref=“protDNSLibPath”/>

  <rulerefentry rulegroupref=“protSTScheduler”/>

  <rulerefentry rulegroupref=“protShExecHooks”/>

  </ruleset>

  <!— Ask about Deleting Startup —>

  <rulegroup name=“askdel-run1”>

  <ruleentry event=“registry” match=“any” ask=“true” customtext=“4004”>

  <!— Windows AutoRuns Registry Keys —>

  <itemeLDBXntry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindowsCurrentVersionRun” />

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindowsCurrentVersionRunServices” />

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerRun” />

  <itementry param=“key” operator=“equalnocLDBXase” type=“ansi” value=“HKCUSoftwareMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad” />

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMSoftwareMicrosoftWindowsCurrentVersionRun” />

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMSoftwareMicrosoftWindowsCurrentVersionRunServices” />

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMLDBXSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerRun” />

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLM
SoftwareMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad” />

  </ruleentry>

  </rulegroup>

  <rulegroup name=“askdel-run2”>

  <ruleentry event=“registry” match=“all” ask=“true” customtext=“4004”>

  <!— Windows AutoRuns Registry LDBXValues —>

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindows NTCurrentVersionWindows” />

  <itementry param=“value” operator=“equalnocase” type=“ansi” value=“Run” />

  </ruleentry>

  </rulegroup>

  <rulegroup name=“askdel-run3”>

  <ruleentry event=“registry” match=“all” ask=“true” customtext=“4004”>

  <!— LDBXWindows AutoRuns Registry Values —>

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindows NTCurrentVersionWindows” />

  <itementry param=“value” operator=“equalnocase” type=“ansi” value=“Load” />

  </ruleentry>

  </rulegroup>

  <rulegroup name=“askdel-run4”>

  <ruleentry event=“registry” match=“all” ask=“true” customtext=“4004”>

  LDBX

  <!— Windows AutoRuns Registry Values —>

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogon” />

  <itementry param=“value” operator=“equalnocase” type=“ansi” value=“Userinit” />

  </ruleentry>

  </rulegroup>

  <rulegroup name=“askdel-run5”>

  <ruleentry event=“registry” match=“all” aLDBX

  sk=“true” customtext=“4004”>

  <!— Windows AutoRuns Registry Values —>

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogon” />

  <itementry param=“value” operator=“equalnocase” type=“ansi” value=“Shell” />

  </ruleentry>

  </rulegroup>

  <rulegroup name=“askdel-run6”>

  <ruleentry eLDBX

  vent=“registry” match=“all” ask=“true” customtext=“4011”>

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotify” />

  </ruleentry>

  </rulegroup>

  <rulegroup name=“askdel-appinit”>

  <ruleentry event=“registry” match=“all” ask=“true” customtext=“4013”>

  <itementry param=“key” operator=“equalnocase” tLDBX

  ype=“ansi” value=“HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWindows” />

  <itementry param=“value” operator=“equalnocase” type=“ansi” value=“AppInit_DLLs” />

  </ruleentry>

  </rulegroup>

  <!— AskSDenyD delete registry protection —>

  <ruleset name=“rs-regd-asdd” allow=“true”>

  <rulerefentry rulegroupref=“askdel-run1”/>

  <rulerefentry rulLDBX

  egroupref=“askdel-run2”/>

  <rulerefentry rulegroupref=“askdel-run3”/>

  <rulerefentry rulegroupref=“askdel-run4”/>

  <rulerefentry rulegroupref=“askdel-run5”/>

  <rulerefentry rulegroupref=“askdel-run6”/>

  <rulerefentry rulegroupref=“askdel-appinit”/>

  <rulerefentry rulegroupref=“protourreg”/>

  <rulerefentry rulegroupref=“protourreg1”/>

  LDBX <rulerefentry rulegroupref=“protourreg2”/>

  <rulerefentry rulegroupref=“protourreg3”/>

  <rulerefentry rulegroupref=“protourExecs”/>

  <rulerefentry rulegroupref=“protAvDatVersion”/>

  <rulerefentry rulegroupref=“protAvEngVersion”/>

  <rulerefentry rulegroupref=“protAvSDKVersion”/>

  </ruleset>

  <!— AskSD delete registry protection —>

  <ruleset nLDBXame=“rs-regd-asad” allow=“true”>

  <rulerefentry rulegroupref=“askdel-run1”/>

  <rulerefentry rulegroupref=“askdel-run2”/>

  <rulerefentry rulegroupref=“askdel-run3”/>

  <rulerefentry rulegroupref=“askdel-run4”/>

  <rulerefentry rulegroupref=“askdel-run5”/>

  <rulerefentry rulegroupref=“askdel-run6”/>

  <rulerefentry rulegroupref=“askdel-appinit”/>

  LDBX <rulerefentry rulegroupref=“protourreg”/>

  <rulerefentry rulegroupref=“protourreg1”/>

  <rulerefentry rulegroupref=“protourreg2”/>

  <rulerefentry rulegroupref=“protourreg3”/>

  <rulerefentry rulegroupref=“protourExecs”/>

  <rulerefentry rulegroupref=“protAvDatVersion”/>

  <rulerefentry rulegroupref=“protAvEngVersion”/>

  <rulerefentry rulegroupref=“pLDBXrotAvSDKVersion”/>

  </ruleset>

  <!— AllowSAskD delete registry protection —>

  <ruleset name=“rs-regd-sad” allow=“true”>

  <rulerefentry rulegroupref=“protourreg”/>

  <rulerefentry rulegroupref=“protourreg1”/>

  <rulerefentry rulegroupref=“protourreg2”/>

  <rulerefentry rulegroupref=“protourreg3”/>

  <rulerefentry rulegroupref=“protourExecs”/>

  LDBX <rulerefentry rulegroupref=“protAvDatVersion”/>

  <rulerefentry rulegroupref=“protAvEngVersion”/>

  <rulerefentry rulegroupref=“protAvSDKVersion”/>

  </ruleset>

  <!— AllowSDenyD delete registry protection —>

  <ruleset name=“rs-regd-sdd” allow=“true”>

  <rulerefentry rulegroupref=“protourreg”/>

  <rulerefentry rulegroupref=“protourreg1”/>

  LDBX <rulerefentry rulegroupref=“protourreg2”/>

  <rulerefentry rulegroupref=“protourreg3”/>

  <rulerefentry rulegroupref=“protourExecs”/>

  <rulerefentry rulegroupref=“protAvDatVersion”/>

  <rulerefentry rulegroupref=“protAvEngVersion”/>

  <rulerefentry rulegroupref=“protAvSDKVersion”/>

  </ruleset>

  <!— Block Adding Startup —>

  <rulegroup namLDBXe=“block-run1”>

  <ruleentry event=“registry” match=“any” allow=“false” notify=“true” customtext=“4001”>

  <!— Windows AutoRuns Registry Keys —>

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindowsCurrentVersionRun” />

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindowsCurrentVersionRunServices” />

  LDBX <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindowsCurrentVersionRunServicesOnce” />

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindowsCurrentVersionRunOnce” />

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindowsCurrentVersionRunOnceEx” />

  <itementry param=“key” LDBXoperator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerRun” />

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad” />

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMSoftwareMicrosoftWindowsCurrentVersionRun” />

  <itementry param=“key” operator=“equalnocaLDBXse” type=“ansi” value=“HKLMSoftwareMicrosoftWindowsCurrentVersionRunServices” />


  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMSoftwareMicrosoftWindowsCurrentVersionRunServicesOnce” />

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMSoftwareMicrosoftWindowsCurrentVersionRunOnce” />

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMSoftwareLDBXMicrosoftWindowsCurrentVersionRunOnceEx” />

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerRun” />

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMSoftwareMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad” />

  </ruleentry>

  </rulegroup>

  <rulegroup name=“block-run2”>

  LDBX <ruleentry event=“registry” match=“all” allow=“false” notify=“true” customtext=“4001”>

  <!— Windows AutoRuns Registry Values —>

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindows NTCurrentVersionWindows” />

  <itementry param=“value” operator=“equalnocase” type=“ansi” value=“Run” />

  </ruleentry>

  </rulegroup>

  LDBX <rulegroup name=“block-run3”>

  <ruleentry event=“registry” match=“all” allow=“false” notify=“true” customtext=“4001”>

  <!— Windows AutoRuns Registry Values —>

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindows NTCurrentVersionWindows” />

  <itementry param=“value” operator=“equalnocase” type=“ansi” value=“Load” />

  </ruleentryLDBX

  >

  </rulegroup>

  <rulegroup name=“block-run4”>

  <ruleentry event=“registry” match=“all” allow=“false” notify=“true” customtext=“4001”>

  <!— Windows AutoRuns Registry Values —>

  <itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogon” />

  <itementry param=“value” operator=“equalnocase” type=“ansi” valuLDBX

  e=“Userinit” />

  </ruleentry>

  </rulegroup>

  <rulegroup name=“block-run5”>

  <ruleentry event=“registry” match=“all” allow=“false” notify=“true” customtext=“4001”>