(
exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\McShield\Configuration" of registry
)
AND
(
(
not exists value whose
(
(
it as string =
(
"3|7|" & pathname of parent folder of regapp "besclient.exe" & "\"
)
)
or
(
it as string =
(
"3|15|" & pathname of parent folder of regapp "besclient.exe" & "\"
)
)
or
(
it as string =
(
"3|7|" & pathname of parent folder of regapp "besclient.exe"
)
)
or
(
it as string =
(
"3|15|" & pathname of parent folder of regapp "besclient.exe"
)
)
AND
(
name of it as string
)
contains "ExcludedItem"
)
of key
(
"HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\McShield\Configuration\" &
(
if
(
value "OnlyUseDefaultConfig" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\McShield\Configuration\" of registry = 1
)
then "Default" else
(
if
(
value "ProcessList" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\McShield\Configuration\High" of registry as string contains "BESClient.exe"
)
then "High" else if
(
value "ProcessList" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\McShield\Configuration\Low" of registry as string contains "BESClient.exe"
)
then "Low" else "Default"
)
)
)
of registry
)
)
(exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\McShield\Configuration" of registry) AND ((not exists value whose ((it as string = ("3|7|" & pathname of parent folder of regapp "besclient.exe" & "\")) or (it as string = ("3|15|" & pathname of parent folder of regapp "besclient.exe" & "\")) or (it as string = ("3|7|" & pathname of parent folder of regapp "besclient.exe")) or (it as string = ("3|15|" & pathname of parent folder of regapp "besclient.exe")) AND (name of it as string) contains "ExcludedItem") of key ("HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\McShield\Configuration\" & (if (value "OnlyUseDefaultConfig" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\McShield\Configuration\" of registry = 1) then "Default" else (if (value "ProcessList" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\McShield\Configuration\High" of registry as string contains "BESClient.exe") then "High" else if (value "ProcessList" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\McShield\Configuration\Low" of registry as string contains "BESClient.exe") then "Low" else "Default"))) of registry))
