[general]
version=1.1.0.0
logInstalled=1
logActions=1

[registry_check]
count=1
reg1=HKLM|64|SOFTWARE\RZ\FSV|FSVActive|0

[registry_pre]
count=2
reg1=HKLM|64|SOFTWARE\RZ\FSV|FSVActive|1|REG_SZ
reg2=HKLM|64|SOFTWARE\opsi.org\Winst|Active|1|REG_SZ

[registry_post]
count=3
reg1=HKLM|64|SOFTWARE\RZ\FSV|FSVActive|0|REG_SZ
reg2=HKLM|64|SOFTWARE\opsi.org\Winst|Active|0|REG_SZ
reg3=HKLM|32|SOFTWARE\Somewhere\Else|SomeOtherValue|50|REG_DWORD

[process_check]
count=1
proc1=svchost.exe