siliconman01

New Entry: {Start Menu Reviver (Logs)*] [Start Menu Reviver (Logs)*] LangSecRef=3024 Detect=HKLM\Software\Start Menu Reviver Default=False FileKey1=%ProgramFiles%\ReviverSoft\Start Menu Reviver\Logs\|*.*

New entries for SnagIt 12: [Snagit 12 Local Dumps (.dmp)*] LangSecRef=3024 Detect=HKCU\Software\TechSmith\SnagIt\12 Default=False Warning=This will delete the local dump files (.dmp) automatically created SnagIt 12 if it encounters an error/crash. FileKey1=%LocalAppData%\TechSmith\Snagit\CrashDumps|*.* [Snagit 12 More*] LangSecRef=3024 Detect=HKCU\Software\TechSmith\SnagIt\12 Default=False Warning=This will delete the backups of the captures that you have performed with SnagIt 12. FileKey1=%LocalAppData%\TechSmith\Snagit|*.bin FileKey2=%LocalAppData%\TechSmith\Snagit\DataStore|*.sdf;*.SNAG;*.SNAGundo;*.MP4 FileKey3=%Documents%\|SnagItDebug.log RegKey1=HKCU\Software\TechSmith\Snagit\12|CaptureCount RegKey2=HKCU\Software\TechSmith\Snagit\Stamps|StampCustomFolder [Snagit 12*] ID=2293 LangSecRef=3024 Detect=HKCU\Software\TechSmith\SnagIt\12 Default=True RegKey1=HKCU\Software\TechSmith\SnagIt\12\Recent Captures RegKey2=HKCU\Software\TechSmith\SnagIt\12\SnagItEditor\Recent File List FileKey1=%LocalAppData%\TechSmith\SnagIt|Tray.bin FileKey2=%LocalAppData%\TechSmith\SnagIt\DataStore\AppIcons|*.* FileKey3=%LocalAppData%\TechSmith\SnagIt\DataStore\WebSiteIcons|*.* FileKey4=%LocalAppData%\TechSmith\SnagIt\Thumbnails|*.*

Modified Entry: Added FileKey3 [Snagit 11 More*] LangSecRef=3024 Detect=HKCU\Software\TechSmith\SnagIt\11 Default=False Warning=This will delete the backups of the captures that you have performed with SnagIt 11. FileKey1=%LocalAppData%\TechSmith\Snagit|*.bin FileKey2=%LocalAppData%\TechSmith\Snagit\DataStore|*.sdf;*.SNAG;*.SNAGundo;*.MP4 FileKey3=%Documents%\|SnagItDebug.log RegKey1=HKCU\Software\TechSmith\Snagit\11|CaptureCount RegKey2=HKCU\Software\TechSmith\Snagit\Stamps|StampCustomFolder

Thanks for the mid-term update.

I think you will need the following Detect1 and Detect2 code to combine the older MBAM code with the new 2.0 code. I don't think the old MBAM created an HKLM entry. And I suggest that the name be [MalwareBytes Anti-Malware More*] with the hyphen if the combination is made. Detect1=HKCU\Software\Malwarebytes' Anti-Malware Detect2=HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\mbam.exe

I use the normal/standard MS Notepad. I did not have "Word Wrap" selected. Code works okay with Word Wrap selected.

Matter of fact, it does on my system as well. It leaves an empty "Low" folder; however, that folder keeps coming back anyhow. Thus I removed my custom code from my Custom.ini which merges into Winapp2.ini. Thanks!

U da man! However you prefer is fine by me.

1. See the link below http://forum.piriform.com/index.php?showtopic=40907 2. Thanks 3. I use quotes so that if someone wishes to copy and paste the new code into their Winapp2.ini, it does not copy as all one line. At least that is what happens on my systems if the code is in /code. 4. Okay

New Entry: I am not sure if there is a way to make this clean this Temp folder for all users when CCleaner is run....or if that is desired.

I have an entry in my Custom.ini file of CCleaner that cleans out this Temp folder on my Windows 8.1.u1 x64 Professional system. Any files in use are not cleaned out because Windows locks them. I cannot remember why this code is not part of Winapp2.ini as issued. (The double * means that this code is in the/my Custom.ini file and not the issued Winapp.ini or Winapp2.ini file.....my own "convention" for labelling) If you use the Disk Cleanup tool in the Administrative Tools of Windows 7/8, it should also clean out this folder as well.

It might be more appropriate if the name is just [HostsMan Backups*] instead of [HostsMan Cache and Backups*]

Correct

HostsMan V4.3.100. See attached Pic.

FileKey1 in this recommended New code breaks HostsMan's option to "Mark all updates as not installed" and then re-download all the updates and build a fresh HOSTS file. I recommend that FileKey1 not be included.

So it does appear the FileKey1 is clearing the password. My suggestion is that Winapp2.ini remove the FileKey1 line from this block of code so the password is not deleted.

A friend of mine uses Winapp2.ini which I send to him on each update. On his Windows 7 x86 system, he uses Windows Live Mail. The code below wipes out his password to Windows Live Mail every time he runs CCleaner which is something he does not want. I don't use Windows Live Mail or for that matter Windows Live anything on my systems, so I cannot test which line entry is clearing out the password. My friend is not savvy enough for me to request that he edit Winapp2.ini to test. My opinion is that Winapp2.ini should not clear out password. I suspect that it is FileKey1 that is the culprit. Perhaps, if the group contributors agree, someone who uses Windows Live Mail could test this and recommend how to "fix" it. [Windows Live Photo Gallery*] LangSecRef=3023 Detect=HKCU\Software\Microsoft\Windows Live\Photo Gallery Default=False FileKey1=%LocalAppData%\Microsoft\Credentials|*.*|RECURSE FileKey2=%LocalAppData%\Microsoft\Windows Live Photo Gallery|*.*|RECURSE RegKey1=HKCU\Software\Microsoft\Windows Live\Photo Gallery|galleryscopedfolders RegKey2=HKCU\Software\Microsoft\Windows Live\Photo Aquisition\Camera|FinenameTemplate RegKey3=HKCU\Software\Microsoft\Windows Live\Photo Aquisition\Camera|RootDirectory

+1. Users of Winapp2.ini can use trim.bat to reduce size of file if desired.

New Entry [Foxit Reader 6.0 Crash Dumps*] LangSecRef=3021 Detect=HKCU\Software\Foxit Software\Foxit Reader 6.0 Default=False FileKey1=%LocalAppData%\Foxit Reader\|*.DMP;*.TXT;*.zip;*.reg

On Windows 8.1 x64, the entry finds a lot of files that are .bak, .log, .logx, and others that I believe would be pretty risky to remove. I do not recommend such a "global" code for Winapp2.ini.

On my Windows 8.1 x64 Professional system, the two suggested new entries shown below: should actually be: [LocalService Cached Certification Files*] LangSecRef=3025 Detect=HKLM\SOFTWARE\Microsoft\Windows Default=False FileKey1=%WinDir%\ServiceProfiles\LocalService\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content|*.*|RECURSE FileKey2=%WinDir%\ServiceProfiles\LocalService\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData|*.*|RECURSE [NetworkService Cached Certification Files*] LangSecRef=3025 Detect=HKLM\SOFTWARE\Microsoft\Windows Default=False FileKey1=%WinDir%\ServiceProfiles\NetworkService\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content|*.*|RECURSE FileKey2=%WinDir%\ServiceProfiles\NetworkService\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData|*.*|RECURSE

+4

For the soon to be released Malwarebytes Anti-Malware 2.0. I recommend that this code be "in addition" to the current Malwarebytes Anti-Malware code in Winapp2.ini because many people may elect not to upgrade to this new version. [Malwarebytes Anti-Malware 2.0*] LangSecRef=3024 Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\mbam.exe Default=False FileKey1=%CommonAppData%\Malwarebytes\Malwarebytes Anti-Malware\Logs|*.*

I do not use adwcleaner 3.0 so I cannot confirm this; however, post #2 on this forum thread indicates that quarantine restore is available. http://www.bleepingcomputer.com/forums/t/506366/does-adwcleaner-automatically-quarantine/

On Windows 8.1, the FileKey1 entry for [Windows Burn Cache*] is different. Here is the change. I suspect the original post is in error. [Windows Burn Cache*] LangSecRef=3025 Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CD Burning Default=False Warning=This option will wipe all files that are waiting to be burned to a CD/DVD/BRD FileKey1=%LocalAppData%\Microsoft\Windows\Burn\Temporary Burn Folder|*.*