<monitor>
	<param_info>
		<ThunderExePath file="getpath.lua" func="GetThunderExePath" />	
		<CurProcName file="getpath.lua" func="GetCurProcName" />	
		<ThunderInstDir file="getpath.lua" func="GetThunderInstDir" />
		<SystemPath file="getpath.lua" func="GetSystemPath" />
	</param_info>

	<fileMon>
		<filter type="exclude" operate="rw">
			<name>csrss.exe</name>
			<name>#CurProcName#</name>
			<name>ThunderPlatform.exe</name>
		</filter>
		<file>
			<path>#SystemPath#\drivers\etc\hosts</path>
			<path>#ThunderInstDir#</path>
		</file>
	</fileMon>

	<regMon>
		<filter type="exclude" operate="rw">
			<name>#CurProcName#</name>
			<name>thunder.exe</name>
			<name>ThunderPlatform.exe</name>
		</filter>
		<reg>
			<path>HKCR\ThunderAgent.Agent\CLSID</path>
			<path>HKCU\Software\Microsoft\Windows\CurrentVersion\Run\thunder</path>
			<path>HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{485463B7-8FB2-4B3B-B29B-8B919B0EACCE}</path>
			<path>HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{01443AEC-0FD1-40FD-9C87-E93D1494C233}</path>
			<path>HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{485463B7-8FB2-4B3B-B29B-8B919B0EACCE}\iexplore\AllowedDomains</path>
			<path>HKCU\Software\Microsoft\Internet Explorer\DownloadUI</path>
			<path>HKLM\SOFTWARE\Microsoft\Internet Explorer\DownloadUI</path>
			<path>HKCR\CLSID\{889D2FEB-5411-4565-8998-1DD2C5261283}\InprocServer32</path>
			<path>HKCR\CLSID\{802F530B-A8F6-4631-AE49-6BACAAC6373E}\InprocServer32</path>
			<path>HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{889D2FEB-5411-4565-8998-1DD2C5261283}</path>
			<path>HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{889D2FEB-5411-4565-8998-1DD2C5261283}</path>
		</reg>
	</regMon>
</monitor>