<rulerefentry rulegroupref=“prot-ie-programs-tab”/>
<rulerefentry rulegroupref=“prot-ie-security-tab”/>
<rulerefentry rulegroupref=“protect-run5U”/>
<rulerefenLDBXtry rulegroupref=“protScreenSaver”/>
<rulerefentry rulegroupref=“protlogonGina”/>
<rulerefentry rulegroupref=“protlogonSys”/>
<rulerefentry rulegroupref=“protlogonSysU”/>
<rulerefentry rulegroupref=“protlogonTMan”/>
<rulerefentry rulegroupref=“protsysStartup”/>
<rulerefentry rulegroupref=“protcmdAutoRun”/>
<rulerefentry rulegroupref=“protcmdAutoRuLDBXnU”/>
<rulerefentry rulegroupref=“protSecuPack”/>
<rulerefentry rulegroupref=“protAuthPack”/>
<rulerefentry rulegroupref=“protNotiPack”/>
<rulerefentry rulegroupref=“protSessManager”/>
<rulerefentry rulegroupref=“protBootImage”/>
<rulerefentry rulegroupref=“protImageFExec”/>
<rulerefentry rulegroupref=“proIFMapWLogon”/>
<rulerLDBXefentry rulegroupref=“protDNSLibPath”/>
<rulerefentry rulegroupref=“protSTScheduler”/>
<rulerefentry rulegroupref=“protShExecHooks”/>
</ruleset>
<!— Ask about Deleting Startup —>
<rulegroup name=“askdel-run1”>
<ruleentry event=“registry” match=“any” ask=“true” customtext=“4004”>
<!— Windows AutoRuns Registry Keys —>
<itemeLDBXntry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoft WindowsCurrentVersionRun” />
<itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindows CurrentVersionRunServices” />
<itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindows CurrentVersionPoliciesExplorerRun” />
<itementry param=“key” operator=“equalnocLDBXase” type=“ansi” value=“HKCUSoftwareMicrosoft WindowsCurrentVersionShellServiceObjectDelayLoad” />
<itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMSoftwareMicrosoftWindows CurrentVersionRun” />
<itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMSoftwareMicrosoftWindows CurrentVersionRunServices” />
<itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMLDBXSoftwareMicrosoft WindowsCurrentVersionPoliciesExplorerRun” />
<itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMSoftwareMicrosoftWindows CurrentVersionShellServiceObjectDelayLoad” />
</ruleentry>
</rulegroup>
<rulegroup name=“askdel-run2”>
<ruleentry event=“registry” match=“all” ask=“true” customtext=“4004”>
<!— Windows AutoRuns Registry LDBXValues —>
<itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindows NTCurrentVersionWindows” />
<itementry param=“value” operator=“equalnocase” type=“ansi” value=“Run” />
</ruleentry>
</rulegroup>
<rulegroup name=“askdel-run3”>
<ruleentry event=“registry” match=“all” ask=“true” customtext=“4004”>
<!— LDBX Windows AutoRuns Registry Values —>
<itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindows