Jump to content

siliconman01

Experienced Members
  • Posts

    1,117
  • Joined

  • Last visited

Posts posted by siliconman01

  1. Modified Entry:  [Dropbox*] Added FileKey5

    [Dropbox*]
    LangSecRef=3024
    Detect=HKCU\Software\Dropbox
    Default=False
    FileKey1=%AppData%\DropBox|Filecache.db;SigStore.db
    FileKey2=%AppData%\DropBox\Bin|*.log
    FileKey3=%AppData%\Dropbox\logs|*.*|RECURSE
    FileKey4=%AppData%\Dropbox\Cache|*.*|RECURSE
    FileKey5=%ProgramData%\Dropbox\Update\Log\|*.*
    
  2. Sorry. Bleachbit, by default, is default-false and it removed the default=false parts off winapp2 to help save space. I must have forgotten to readd those there.

     

    EDIT: I edited my entries and fixed those.

     

    Thanks, I was hoping there was a simple explanation and thanks for fixing these. 

  3. The following entries I either shrunk, reworded, or fixed grammar issues in the warnings only:

    [bitDefender Total Security 2014 (Logs)*]

    LangSecRef=3024

    Detect=HKLM\Software\BitDefender\Bitdefender Total Security

    Warning=This removes logs created while scanning external drives and other unneeded scan logs generated by Bitdefender scanner.

    FileKey1=%AppData%\Bitdefender\Desktop\profiles\Logs\*|*.xml

     

    [CCDump*]

    LangSecRef=3024

    DetectFile=%ProgramFiles%\CCleaner\CCDump.exe

    Warning=This removes files winapp.ini, winsys.ini, winreg.ini and regkeys.output.txt from the CCleaner folder.  These files are retrieved from CCDump.exe.

    FileKey1=%ProgramFiles%\CCleaner|winapp.ini;winreg.ini;winsys.ini;regkeys.output.txt

     

    I do not recommend that "Default=False" be removed from [CCDump*]

     

    Also, during my process of reviewing some of the warning, I stumbled across this entry:

     

    [scribe (Finished Jobs)*]

    LangSecRef=3021

    Detect=HKCU\Software\NCH Software\Scribe

    Warning=This will copies of files related you have run through Scribe.

    FileKey1=%AppData%\NCH Software\Scribe\Done|*.*

     

    The warning makes no sense. Does anyone know what it is suppose to be saying and could edit it for me?

     

    I suspect that this should be "Warning=This will remove copies of related files that you have run through Scribe"

     

     

    and based on my post above, the Bitdefender entry becomes:  Again I do not recommend that "Default=False" be removed from [bitdefender Total Security 2014/15 (Logs)*]

    [BitDefender Total Security 2014/15 (Logs)*]
    LangSecRef=3024
    Detect1=HKLM\Software\BitDefender\Bitdefender Total Security
    Detect2=HKLM\Software\BitDefender\Bitdefender Total Security 2015
    Warning=This removes logs created while scanning external drives and other unneeded scan logs generated by Bitdefender scanner.
    Default=False
    FileKey1=%AppData%\Bitdefender\Desktop\profiles\Logs\*|*.xml
    
  4. Modified Entry:

     

    -  Changed Name from [bitDefender Total Security 2014 (Logs)*] to [bitDefender Total Security 2014/15 (Logs)*]

    -  Changed Detect to Detect1

    -  Added Detect2

    [BitDefender Total Security 2014/15 (Logs)*]
    LangSecRef=3024
    Detect1=HKLM\Software\BitDefender\Bitdefender Total Security
    Detect2=HKLM\Software\BitDefender\Bitdefender Total Security 2015
    Warning=This removes only logs created while scanning external drives and other special unneeded scan logs generated by Bitdefender scanner.
    Default=False
    FileKey1=%AppData%\Bitdefender\Desktop\profiles\Logs\*|*.xml
    
  5. New Entry:  [jv16 PowerTools X Backup Files*]

    [jv16 PowerTools X Backup Files*]
    LangSecRef=3024
    DetectFile=%ProgramFiles%\jv16 PowerTools X\jv16PT.exe
    Default=False
    FileKey1=%ProgramFiles%\jv16 PowerTools X\Backups|*.*|RECURSE
    FileKey2=%ProgramFiles%\jv16 PowerTools X\Settings|UserActionLog.txt
    FileKey3=%LocalAppData%\VirtualStore\Program Files*\jv16 PowerTools X\Backups|*.*|RECURSE
    FileKey4=%LocalAppData%\VirtualStore\Program Files*\jv16 PowerTools X\Settings|UserActionLog.txt
    ExcludeKey1=FILE|%ProgramFiles%\jv16 PowerTools X\Backups\License.xbin_backup
    

    Revised Entry to incorporate jv16 PowerTools X.  Plus shortened name a bit.

    [jv16 PowerTools Reg Compact Backups*]
    LangSecRef=3024
    DetectFile1=%ProgramFiles%\jv16 PowerTools 2009\jv16PT.exe
    DetectFile2=%ProgramFiles%\jv16 PowerTools 2010\jv16PT.exe
    DetectFile3=%ProgramFiles%\jv16 PowerTools 2011\jv16PT.exe
    DetectFile4=%ProgramFiles%\jv16 PowerTools 2012\jv16PT.exe
    DetectFile5=%ProgramFiles%\jv16 PowerTools 2013\jv16PT.exe
    DetectFile6=%ProgramFiles%\jv16 PowerTools 2014\jv16PT.exe
    DetectFile7=%ProgramFiles%\jv16 PowerTools X\jv16PT.exe
    Default=False
    Warning=This removes the registry hive backup files generated by jv16 PowerTools during a registry compaction. These files are not needed once the compaction is successfully completed. They can be safely deleted. NOTE that the system must be rebooted following a registry compaction completion in order for jv16 to release these files for deletion.
    FileKey1=%LocalAppData%\Microsoft\Windows|UsrClass.dat.jv16pt*
    FileKey2=%SystemDrive%\Documents and Settings\NetworkService|NTUSER.DAT.jv16pt*
    FileKey3=%SystemDrive%\Documents and Settings\LocalService|NTUSER.DAT.jv16pt*
    FileKey4=%SystemDrive%\Documents and Settings\NetworkService.NT*|NTUSER.DAT.jv16pt*
    FileKey5=%SystemDrive%\Documents and Settings\LocalService.NT*|NTUSER.DAT.jv16pt*
    FileKey6=%UserProfile%|NTUSER.DAT.jv16pt*
    FileKey7=%WinDir%\System32\config|Default.jv16pt*;software.jv16pt*;system.jv16pt*;SAM.jv16pt*;COMPONENTS.jv16pt*
    FileKey8=%WinDir%\ServiceProfiles\LocalService|NTUSER.DAT.jv16pt*
    FileKey9=%WinDir%\ServiceProfiles\NetworkService|NTUSER.DAT.jv16pt*
    
  6. New addition:  [The Weather Channel*]

    [The Weather Channel*]
    LangSecRef=3031
    Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\TheWeatherChannel_t3yemqpq4kp7p
    DetectFile=%LocalAppData%\Packages\Weather.TheWeatherChannel_t3yemqpq4kp7p
    Default=False
    FileKey1=%LocalAppData%\Packages\Weather.TheWeatherChannel_*\AC\INetCache|*.*|RECURSE
    FileKey2=%LocalAppData%\Packages\Weather.TheWeatherChannel_*\AC\INetCookies|*.*|RECURSE
    FileKey3=%LocalAppData%\Packages\Weather.TheWeatherChannel_*\AC\INetHistory|*.*|RECURSE
    FileKey4=%LocalAppData%\Packages\Weather.TheWeatherChannel_*\AC\Microsoft\CLR_v4.0\UsageLogs|*.log|RECURSE
    FileKey5=%LocalAppData%\Packages\Weather.TheWeatherChannel_*\AC\Temp|*.*
    FileKey6=%LocalAppData%\Packages\Weather.TheWeatherChannel_*\LocalState|*.tmp
    FileKey7=%LocalAppData%\Packages\Weather.TheWeatherChannel_*\TempState\Bing.Maps\Cache|*.*|RECURSE
    
  7. New entry:  [Panther*]

     

    Everything I read states the %Windir%\Panther directory can be safely removed.

     

    http://answers.microsoft.com/en-us/windows/forum/windows_8-files/what-is-panther-file/b72d559a-7732-4d74-b361-397905c1e9b2

     

    http://answers.microsoft.com/en-us/windows/forum/windows_7-files/what-is-panther-directory/424ed2df-ce11-4967-8f59-42ab9d6c9757

    [Panther*]
    LangSecRef=3025
    DetectFile=%Windir%\Panther
    Default=False
    Warning=The Windows\Panther directory is created/used during a Windows version upgrade.  Following the upgrade, this directory can be safely removed.
    FileKey1=%Windir%\Panther\|*.*|REMOVESELF
    
  8. Modified entry:  [Recent items*]  Modified warning message to show undesirable affect to the Windows 10 File Explorer Quick Access list.

    [Recent Items More*]
    LangSecRef=3025
    DetectFile=%AppData%\Microsoft\windows\recent\customdestinations
    Default=False
    Warning=Running this will remove task lists from the start menu (the expandable triangle next to some applications. It also removes user pinned items to the Quick Access list of Windows 10 File Explorer.  
    FileKey1=%AppData%\Microsoft\windows\recent\automaticdestinations|*.*|RECURSE
    FileKey2=%AppData%\Microsoft\windows\recent\customdestinations|*.*|RECURSE
    

    With the main program CCleaner starting to incorporate Windows 10, it seems appropriate to start modified Winapp2.ini to show Windows 10 items as well.

     

    New entry:  [Cortana*]

    [Cortana*]
    LangSecRef=3031
    Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Cortana_8wekyb3d8bbwe
    DetectFile=%LocalAppData%\Packages\Microsoft.Cortana_8wekyb3d8bbwe
    Default=False
    FileKey1=%LocalAppData%\Packages\Microsoft.Cortana_*\AC\AppCache|*.*|RECURSE
    FileKey2=%LocalAppData%\Packages\Microsoft.Cortana_*\TempState|*.*|RECURSE
    FileKey3=%LocalAppData%\Packages\Microsoft.Cortana_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
    FileKey4=%LocalAppData%\Packages\Microsoft.Cortana_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
    FileKey5=%LocalAppData%\Packages\Microsoft.Cortana_*\AC\INetCache|*.*|RECURSE
    FileKey6=%LocalAppData%\Packages\Microsoft.Cortana_*\AC\INetCookies|*.*|RECURSE
    FileKey7=%LocalAppData%\Packages\Microsoft.Cortana_*\AC\INetHistory|*.*|RECURSE
    FileKey8=%LocalAppData%\Packages\Microsoft.Cortana_*\AC\Temp|*.*
    FileKey9=%LocalAppData%\Packages\Microsoft.Cortana_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE
    
  9. Modified entry:  [snagIt 12 More*]  Removed *.sdf from FileKey1.  This is causing CCleaner to remove a file named Snagit900.sdf which contains the address of where SnagIt stores pictures during the capture.   See pic below

    [Snagit 12 More*]
    LangSecRef=3024
    Detect=HKCU\Software\TechSmith\SnagIt\12
    Default=False
    Warning=This will delete the backups of the captures that you have performed with SnagIt 12.
    ; FileKey1=%LocalAppData%\TechSmith\Snagit\DataStore|*.sdf;*.SNAG;*.SNAGundo;*.MP4
    FileKey1=%LocalAppData%\TechSmith\Snagit\DataStore|*.SNAG;*.SNAGundo;*.MP4
    FileKey2=%Documents%\|SnagItDebug.log
    RegKey1=HKCU\Software\TechSmith\Snagit\12|CaptureCount
    RegKey2=HKCU\Software\TechSmith\Snagit\Stamps|StampCustomFolder
    
  10. Modified Entry:  [AVG PC TuneUp & TuneUp Utilities Reg Defrag Cleanup*]

     

    -  Added SOFTWARE_tureg_new;SYSTEM_tureg_new  to FileKey10

    -  Added FileKey13

    -  Added FileKey14
     

    [AVG PC TuneUp & TuneUp Utilities Reg Defrag Cleanup*]
    LangSecRef=3024
    Detect1=HKCU\Software\TuneUp\Utilities\10.0
    Detect2=HKCU\Software\TuneUp\Utilities\12.0
    Detect3=HKCU\Software\TuneUp\Utilities\13.0
    Detect4=HKCU\Software\TuneUp\Utilities\14.0
    Detect5=HKCU\Software\AVG\AWL\RegistryCleaner
    Default=False
    FileKey1=%LocalAppData%\Microsoft\Windows|USRCLASS.DAT_tureg_new.LOG*;USRCLASS.DAT_tureg_old
    FileKey2=%SystemDrive%\Boot|BCD_tureg_new.LOG*;BCD_tureg_old
    FileKey3=%SystemDrive%\Documents and Settings\LocalService|NTUSER.DAT_tureg_new.LOG*;NTUSER.DAT_tureg_old
    FileKey4=%SystemDrive%\Documents and Settings\LocalService.NT*|NTUSER.DAT_tureg_new.LOG*;NTUSER.DAT_tureg_old
    FileKey5=%SystemDrive%\Documents and Settings\NetworkService|NTUSER.DAT_tureg_new.LOG*;NTUSER.DAT_tureg_old
    FileKey6=%SystemDrive%\Documents and Settings\NetworkService.NT*|NTUSER.DAT_tureg_new.LOG*;NTUSER.DAT_tureg_old
    FileKey7=%UserProfile%|NTUSER.DAT_tureg_new.LOG*;NTUSER.DAT_tureg_old
    FileKey8=%WinDir%\ServiceProfiles\LocalService|NTUSER.DAT_tureg_new.LOG*;NTUSER.DAT_tureg_old
    FileKey9=%WinDir%\ServiceProfiles\NetworkService|NTUSER.DAT_tureg_new.LOG*;NTUSER.DAT_tureg_old
    FileKey10=%WinDir%\System32\config|COMPONENTS_tureg_new.LOG*;COMPONENTS_tureg_old;DEFAULT_tureg_new.LOG*;DEFAULT_tureg_old;SAM_tureg_new.LOG*;SAM_tureg_old;SECURITY_tureg_new.LOG*;SECURITY_tureg_old;SOFTWARE_tureg_new.LOG*;SOFTWARE_tureg_old;SYSTEM_tureg_new.LOG*;SYSTEM_tureg_old;DRIVERS_tureg_new.LOG*;DRIVERS_tureg_old;SOFTWARE_tureg_new;SYSTEM_tureg_new
    FileKey11=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\|USRCLASS.DAT_tureg_old;USRCLASS.DAT_tureg_new.LOG*
    FileKey12=%WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\|USRCLASS.DAT_tureg_old;USRCLASS.DAT_tureg_new.LOG*
    FileKey13=%CommonAppData%|NTUSER.DAT_tureg_new.LOG1;NTUSER.DAT_tureg_new.LOG2;NTUSER.DAT_tureg_old
    FileKey14=%SystemDrive%\Users\Public|NTUSER.DAT_tureg_new.LOG1;NTUSER.DAT_tureg_new.LOG2;NTUSER.DAT_tureg_old
    
  11. I don't know why you don't have this location. Let me look into this.

     

    I do have a long list of keys at :

     

    HKCU\Software\Classes\Local Settings\MuiCache\805\52C64B7E

    and

    HKCR\Local Settings\MuiCache\805\52C64B7E

    and

    HKU\Software\Classes\Local Settings\MuiCache\805\52C64B7E

    and

    S-1-5-18\Software\Classes\Local Settings\MuiCache\805\52C64B7E

    and

    S-1-5-21-....................1001\Software\Classes\Local Settings\MuiCache\805\52C64B7E

    and

    S-1-5-21-....................1001_Classes\Local Settings\MuiCache\805\52C64B7E

  12. You're right I made a mistake. It should be: HKCR\Local Settings\Software\Microsoft\Windows\Shell\MuiCache

     

    It is also at HKCR\Local Settings\MuiCache, but I suggest that we should not wipe it. It belongs to system.

     

    Hmmmm.... I do not have that key either.  Under HKCR\Local Settings\............\Shell, I only have BagMRU and Bags as subkeys.

  13.  

    Revised Entries

    Changed HKCU to HKCR

     

    [Windows 7/8 MUICache*]
    DetectOS=6.1|
    LangSecRef=3025
    Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell
    Default=False
    RegKey1=HKCR\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
     
    [Windows 7/8 ShellBags*]
    DetectOS=6.1|
    LangSecRef=3025
    Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell
    Default=False
    Warning=This will delete window size, window position and view setting of all folders.
    RegKey1=HKCR\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
    RegKey2=HKCR\Local Settings\Software\Microsoft\Windows\Shell\Bags

     

     

    Are you sure that [Windows 7/8 MuiCache*] should be changed?  My Windows 8.1.1 x64 Professional registry does not have a HKCR\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache.  It has a HKCR\Local Settings\MuiCache.

  14. My entry was better because I excluded the files that are locked. But now it does not matter because I think Microsoft has removed Scm logging from Windows in the latest update.

     

    I am seeing newly created log entries in the Scm folder with Windows 8.1.1 x64 Professional with all the latest hotfixes for Windows 8.1 :blink:

  15.  

    You should rethink adding this entry. It is included in almost all known privacy eraser programs. I'll send you the names of the programs in a PM.

     

    [Windows SCM Logs*]
    LangSecRef=3025
    Detect=HKCU\Software\Microsoft\Windows
    Default=False
    FileKey1=%WinDir%\System32\LogFiles\Scm|*.*
    ExcludeKey1=FILE|%WinDir%\System32\LogFiles\Scm|*.EVM*

     

     

    The Task Scheduler stores its run logs in the Scm folder.  If the log files are cleaned out of this folder, it will cause the "Last Run Time" of a scheduled task to be cleared and set to Never.   If a scheduled task has the option set "Run task as soon as possible after a scheduled start is missed", this will cause this specific program to be started because the Task Scheduler thinks the program failed to run.

     

    If the user does not care about these 2 "results" within his/her task scheduler, then there are no other problems with cleaning out this folder. 

  16.  

    The paths in the entry belong to PowerDirector. I think we should merge this into PowerDirector and remove this entry.
     
     
    [CyberLink Crash Dumps*]
    LangSecRef=3023
    Detect=HKCU\Software\CyberLink
    Default=False
    FileKey1=%CommonAppData%\CyberLink\Boomerang\*\|*.xml;*.dmp
    FileKey2=%LocalAppData%\VirtualStore\ProgramData\CyberLink\Boomerang\*\|*.xml;*.dmp

     

    Cyberlink PowerDVD also has a Boomerang folder at this same path.  Although I cannot confirm this, I suspect that PowerDVD stores its dumps in this same path.  PowerDVD installs/uses Cyberlink's Boomerang.exe as well.  Therefore I suggest this code not be changed. 

  17. Modified Entry:  [Dropbox*]  Added new FileKey3=%AppData%\Dropbox\logs|*.*|RECURSE

    [Dropbox*]
    LangSecRef=3024
    Detect=HKCU\Software\Dropbox
    Default=False
    FileKey1=%AppData%\DropBox|Filecache.db;SigStore.db
    FileKey2=%AppData%\DropBox\Bin|*.log
    FileKey3=%AppData%\Dropbox\logs|*.*|RECURSE
    FileKey4=%AppData%\Dropbox\Cache|*.*|RECURSE
    
  18.  

    [NVIDIA (Startup)*]
    LangSecRef=3023
    Detect=HKLM\Software\NVIDIA Corporation
    Default=False
    RegKey1=HKLM\Software\Microsoft\Windows\CurrentVersion\Run|NvMediaCenter

     

    You may wish to add a warning message for those people who want the NvMediaCenter running so they can quickly change nVidia settings

     

    Warning=If you want the nVidia Media Center to start automatically on system startup, DO NOT check mark this cleaning element. 

  19. I will look into the settings and applications. I'll be back on this.

     

    You say that you have no problems with CCleaner v.5 on your Windows 8.1 systems(*).

    Do you also have KB3000850 installed as I do ?

     

     

    (*) Win. 10 is a different matter...

    Yes, I have KB3000850 installed on all my Windows 8.1.1 x64 systems

  20. I'm running V5.0 on more than one 8.1.1 x64 Professional systems and also on Windows 10 Technical Preview with no problems.  Can you identify which cleaning component is causing the hang?  Uncheck a block of say 5 items at a time and run the CCleaner to see if it completes.  I would start on the Applications tab first.  Once you isolate which cleaning item is causing the hang, then perhaps the developers can find the cause.  There may be a file on your system that is corrupt that is causing the issue. 

     

    You could also see if starting CCleaner via "Run as Administrator" with all Monitoring turned OFF via Options>Monitoring helps. 

  21. Could this failure be somehow related to the Windows Update KB3000850 ?

    I installed it 10 hours before the CCleaner v.5 update.

     

    Mulaw,

     

    Run "Disk Cleanup" in Administrative Tools.  Right click on Disk Cleanup and select "Run as Adminstrator".  Check mark all the items that Disk Cleanup displays to clean.  One of these items should be Windows Update Cleanup and it will be many megabytes in size.  The cleaning process may take an hour or so if you have never done this before or because of the huge update of KB3000850.  After Disk Cleanup is completed, try running CCleaner again. 

     

    Here is a MS link concerning Disk Cleanup:

    http://windows.microsoft.com/en-us/windows/delete-files-using-disk-cleanup#delete-files-using-disk-cleanup=windows-8

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.