Sister Carrie

<rulerefentry rulegroupref=“protourreg3”/>

<rulerefentry rulegroupref=“protourExecs”/>

<rulerefentry rulegroupref=“protAvDatVersion”/>

<rulerefentry rulegroupref=“protAvEngVersion”/>

<rulerefLDBX%&entry rulegroupref=“protAvSDKVersion”/>

<rulerefentry rulegroupref=“ask-ie-desktop-wp”/>

<rulerefentry rulegroupref=“prot-ie-advanced-tab”/>

<rulerefentry rulegroupref=“prot-ie-connections-tab”/>

<rulerefentry rulegroupref=“prot-ie-content-tab”/>

<rulerefentry rulegroupref=“prot-ie-general-tab”/>

<rulerefentry rulegroupref=“prot-ie-homepage”/>

<ruLDBX&‘lerefentry rulegroupref=“prot-ie-privacy-tab”/>

<rulerefentry rulegroupref=“prot-ie-programs-tab”/>

<rulerefentry rulegroupref=“prot-ie-security-tab”/>

<rulerefentry rulegroupref=“protect-run5U”/>

<rulerefentry rulegroupref=“protScreenSaver”/>

<rulerefentry rulegroupref=“protlogonGina”/>

<rulerefentry rulegroupref=“protlogonSys”/>

<rulerefentry ruLDBX’(legroupref=“protlogonSysU”/>

<rulerefentry rulegroupref=“protlogonTMan”/>

<rulerefentry rulegroupref=“protsysStartup”/>

<rulerefentry rulegroupref=“protcmdAutoRun”/>

<rulerefentry rulegroupref=“protcmdAutoRunU”/>

<rulerefentry rulegroupref=“protSecuPack”/>

<rulerefentry rulegroupref=“protAuthPack”/>

<rulerefentry rulegroupref=“protNotiPack”/>

LDBX() <rulerefentry rulegroupref=“protSessManager”/>

<rulerefentry rulegroupref=“protBootImage”/>

<rulerefentry rulegroupref=“protImageFExec”/>

<rulerefentry rulegroupref=“proIFMapWLogon”/>

<rulerefentry rulegroupref=“protDNSLibPath”/>

<rulerefentry rulegroupref=“protSTScheduler”/>

<rulerefentry rulegroupref=“protShExecHooks”/>

</ruleset>LDBX) *

<!— Block Deleting Startup —>

<rulegroup name=“block-run1”>

<ruleentry event=“registry” match=“any” allow=“false” notify=“true” customtext=“4004”>

<!— Windows AutoRuns Registry Keys —>

<itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindows CurrentVersionRun” />

<itementry param=“key” operator=“equalnocase” type=“anLDBX*+si” value=“HKCUSoftwareMicrosoft WindowsCurrentVersionRunServices” />

<itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindows CurrentVersionRunServicesOnce” />

<itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindows CurrentVersionRunOnce” />

<itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWiLDBX +,ndowsCurrentVersionRunOnceEx” />

<itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindows CurrentVersionPoliciesExplorerRun” />

<itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKCUSoftwareMicrosoftWindows CurrentVersionShellServiceObjectDelayLoad” />

<itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMSoftwareMicrosoftWindows CurrentLDBX,-VersionRun” />

<itementry param=“key” operator=“equalnocase” type=“ansi” value=“HKLMSoftwareMicrosoftWindows