siliconman01

Did you decide against the discussion at? http://forum.piriform.com/index.php?showtopic=32310&view=findpost&p=222634 Either removing the items or including DETECTOS=|5.1 in each of them?

ah HA! Thanks for the quick response/clarification. Suggest that the explanation be included in your Spoiler SHOW for how to make winapp2.ini entries.

Technical question ..... Should it be DetectOS=|5.1 or DetectOS=5.1? In other words, is the | required in the DetectOS command? DetectOS=5.1 does not seem to work. If it is supposed to be DetectOS=|5.1, then why are there so many DetectOS=6.0 entries in Winapp2.ini ?

The three codes below do NOT seem to apply to Windows 7; however, they show up in the Applications tab on Windows 7 systems. It appears to me that they are intended for Windows XP. They should either be modified to include Windows 7 (and probably Vista) or they should have a DetectOS=|5.1 added to the code. [Windows Media Player (Album Art Cache)*] LangSecRef=3023 Detect=HKCU\Software\Microsoft\MediaPlayer Default=False FileKey1=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Media Player\Art Cache\LocalMLS|*.*|RECURSE FileKey2=%SystemDrive%\Documents and Settings\NetworkService\Local Settings\Microsoft\Media Player\Art Cache\LocalMLS|*.*|RECURSE FileKey3=%SystemDrive%\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Media Player\Art Cache\LocalMLS|*.*|RECURSE [Windows Media Player (Databases)*] LangSecRef=3023 Detect=HKCU\Software\Microsoft\MediaPlayer Warning=This will remove ratings, play counts, last played, etc. Default=False FileKey1=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Media Player|*.*|REMOVESELF FileKey2=%SystemDrive%\Documents and Settings\NetworkService\Local Settings\Microsoft\Media Player|*.*|REMOVESELF FileKey3=%SystemDrive%\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Media Player|*.*|REMOVESELF [Windows Media Player (MediaGuide)*] LangSecRef=3023 Detect=HKCU\Software\Microsoft\MediaPlayer Default=False RegKey1=HKCU\Software\Microsoft\MediaPlayer\Preferences|CurrentBackgroundScanFolder RegKey2=HKCU\Software\Microsoft\MediaPlayer\Services\MediaGuide|CachedIconPath RegKey3=HKCU\Software\Microsoft\MediaPlayer\Services\MediaGuide|CachedLargeLogoPath It actually looks like the three above codes can be removed because they are included in winapp.ini. [Windows Media Player] ID=2033 LangSecRef=3023 Detect=HKCU\Software\Microsoft\MediaPlayer\Player Default=True RegKey1=HKCU\Software\Microsoft\MediaPlayer\Player\RecentFileList RegKey2=HKCU\Software\Microsoft\MediaPlayer\Player\RecentURLList RegKey3=HKCU\Software\Microsoft\MediaPlayer\Preferences|LastPlayList RegKey4=HKCU\Software\Microsoft\MediaPlayer\Preferences|LastPlayListIndex RegKey5=HKCU\Software\Microsoft\MediaPlayer\Player\Settings|SaveAsDir RegKey6=HKCU\Software\Microsoft\MediaPlayer\AutoComplete\MediaEdit RegKey7=HKCU\Software\Microsoft\MediaPlayer\Radio\MRUList RegKey8=HKCU\Software\Microsoft\MediaPlayer\Services\MediaGuide|CachedIconPath RegKey9=HKCU\Software\Microsoft\MediaPlayer\Services\MediaGuide|CachedLargeLogoPath FileKey1=%LocalAppData%\Microsoft\Media Player|lastplayed.wpl FileKey2=%LocalAppData%\Microsoft\Media Player|cacheentry*.*|RECURSE FileKey3=%LocalAppData%\Microsoft\Media Player\Art Cache\LocalMLS|*.*|RECURSE FileKey4=%LocalAppData%\Microsoft\Media Player\Transcoded Files Cache|*.*|RECURSE

Thanks for the update!

I recommend that the following codes be changed from LangSecRef=3025 to LangSecRef=3022 because they are Internet related. [LocalService Cookies*] [LocalService History*] [LocalService Temporary Internet Files*] [iETldCache*] [NetworkService Cookies*] [NetworkService History*] [NetworkService Temporary Internet Files*] [iE7pro*] probably should be changed from 3024 to 3022 as well.

I honestly do not feel that winapp2.ini should be permitted to remove "quarantined" files of security programs. All security programs have their own option to remove one or all quarantined files. The potential of a CCleaner user deleting a false positive in quarantine by having winapp2.ini code such as {superantispyware quarantine*] check marked is pretty great in my opinion. Obviously this would prevent the user from returning a valid file (flagged as false positive) to its normal location. I feel the user should have to "think twice" by having to use the security program's option to empty quarantined files. Most security companies recommend that a quarantined file should not be dumped for at least a week. And I continue to feel that Piriform should fix the winapp.ini code for Malwarebytes so that it does NOT delete quarantined items. JMO...

winapp2.ini, please consider removing the code below. it is not really the proper or best way to handle the ctfmon.exe running issue. [ctfmon.exe (disable startup)*] langsecref=3021 detect1=hkcu\software\microsoft\office detect2=hklm\software\microsoft\office default=false warning=this will only temporarily disable the microsoft office installed file ctfmon.exe from starting with windows. ctfmon.exe is known to cause severe system slow downs and can be permanently disabled using the free ctfmon-remover: http://www.gerhard-schlager.at/en/projects/ctfmonremover/ regkey1=hklm\software\microsoft\windows\currentversion\run|ctfmon.exe regkey2=hkcu\software\microsoft\windows\currentversion\run|ctfmon.exe regkey3=hku\.default\software\microsoft\windows\currentversion\run|ctfmon.exe

Personally, I think the ctfmon.exe code should be removed from Winapp2.ini. If a person is having an issue with ctfmon running, then links such as the ones below will assist in correcting the problem. http://www.howtogeek.com/howto/windows-vista/what-is-ctfmonexe-and-why-is-it-running/ http://support.microsoft.com/kb/823586 and many others that can be viewed by googling Office XP ctfmon.exe or Office 2003 ctfmon.exe, Office 2007 ctfmon.exe or Office 2010 ctfmon.exe

The original coder of ctfmon.exe is attempting to stop ctfmon.exe from starting up on system reboot. ctfmon.exe can be present on the system, but its the continuous running of the it that has caused many users problems. There are procedures to totally deactivate it, but the original coder just wants to stop it from starting up. A DetectFile will still show the code even if it is not in the RUN keys to start up.

I assume you are referring to the ctfmon.exe code. And the answer is "No". I put in a test ctfmon.exe string in the registry and my modification did not detect it. Ugggh. Any suggestions as to how to make it detect if there is an active RUN string that needs to be deleted? But once deleted the code should no longer be visible.

Modified ctfmon.exe to include Detect1/2/3 which prevents this code from showing up on systems where ctfmon.exe has been properly deactivated already. [ctfmon.exe (Disable Startup)*] LangSecRef=3021 Detect1=HKLM\Software\Microsoft\Windows\CurrentVersion\Run|ctfmon.exe Detect2=HKCU\Software\Microsoft\Windows\CurrentVersion\Run|ctfmon.exe Detect3=HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run|ctfmon.exe Default=False Warning=This will only temporarily disable the Microsoft Office installed file ctfmon.exe from starting with Windows. ctfmon.exe is known to cause severe system slow downs and can be permanently disabled using the free CTFMON-Remover: http://www.gerhard-schlager.at/en/projects/ctfmonremover/ RegKey1=HKLM\Software\Microsoft\Windows\CurrentVersion\Run|ctfmon.exe RegKey2=HKCU\Software\Microsoft\Windows\CurrentVersion\Run|ctfmon.exe RegKey3=HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run|ctfmon.exe

When upgrading versions of MS Office, some registry keys are left over that show previous versions of MS Office that have been installed on the user's computer. The code below cleans out these registry keys based on the highest MS Office version currently installed on the user computer. This helps prevent third party programs from misinterpreting which Office version is on a user's computer. MS Office 2010 [MS Office 2010 Upgrade: MS Office XP/2003/2007 Registry Cleanup*] LangSecRef=3021 Detect1=HKCU\Software\Microsoft\Office\14.0 Detect2=HKLM\Software\Microsoft\Office\14.0 Default=False Warning=This cleans out registry entries/remnants of Microsoft Office XP/2003/2007 after Microsoft Office 2010 is installed. RegKey1=HKCU\Software\Microsoft\Office\12.0 RegKey2=HKLM\Software\Microsoft\Office\12.0 RegKey3=HKCU\Software\Microsoft\Office\11.0 RegKey4=HKLM\Software\Microsoft\Office\11.0 RegKey5=HKCU\Software\Microsoft\Office\10.0 RegKey6=HKLM\Software\Microsoft\Office\10.0 RegKey7=HKLM\Software\Wow6432Node\Microsoft\Office\12.0 RegKey8=HKLM\Software\Wow6432Node\Microsoft\Office\11.0 RegKey9=HKLM\Software\Wow6432Node\Microsoft\Office\10.0 MS Office 2007 [MS Office 2007 Upgrade: MS Office XP/2003 Registry Cleanup*] LangSecRef=3021 Detect1=HKCU\Software\Microsoft\Office\12.0 Detect2=HKLM\Software\Microsoft\Office\12.0 Default=False Warning=This cleans out registry entries/remnants of Microsoft Office XP/2003 after Microsoft Office 2007 is installed. RegKey1=HKCU\Software\Microsoft\Office\11.0 RegKey2=HKLM\Software\Microsoft\Office\11.0 RegKey3=HKCU\Software\Microsoft\Office\10.0 RegKey4=HKLM\Software\Microsoft\Office\10.0 RegKey5=HKLM\Software\Wow6432Node\Microsoft\Office\11.0 RegKey6=HKLM\Software\Wow6432Node\Microsoft\Office\10.0 MS Office 2003 [MS Office 2003 Upgrade: MS Office XP Registry Cleanup*] LangSecRef=3021 Detect1=HKCU\Software\Microsoft\Office\11.0 Detect2=HKLM\Software\Microsoft\Office\11.0 Default=False Warning=This cleans out registry entries/remnants of Microsoft Office XP after Microsoft Office 2003 is installed. RegKey1=HKCU\Software\Microsoft\Office\10.0 RegKey2=HKLM\Software\Microsoft\Office\10.0 RegKey3=HKLM\Software\Wow6432Node\Microsoft\Office\10.0

I don't have PaintShop on my system. Should the existing [Corel PaintShop Pro X4 More*] be modified to include FileKey2=%LocalAppData%\Corel PaintShop Pro\14.0\Thumbs|*.*|RECURSE [Corel PaintShop Pro X4 More*] LangSecRef=3023 Detect=HKCU\Software\Corel\PaintShop Pro\X4 Default=False FileKey1=%LocalAppData%\Corel PaintShop Pro\14.0\Database|*.db

Recommended modification to TuneUp Utilities*. Changed name and added warning messages. [TuneUp Utilities (Backups)*] LangSecRef=3024 Detect=HKCU\Software\TuneUp Warning=This removes ALL backups created by TuneUp Utilities during its registry and other cleaning activities. Default=False FileKey1=%AppData%\TuneUp Software\*\Backups|*.rcb

See the post below: http://forum.pirifor...ndpost&p=221121 TuneUp Utilities* applies to 2013 as it is currently coded for previous versions of TuneUp

It looks to me like Avira More* needs to be deleted because it is covered in winapp.ini winapp.ini Avira Desktop code [AntiVir Desktop] ID=2138 LangSecRef=3024 Detect=HKLM\SOFTWARE\Avira\AntiVir Desktop Default=True FileKey1=%CommonAppData%\Avira\AntiVir Desktop\TEMP|*.* FileKey2=%CommonAppData%\Avira\Antivir Desktop\BACKUP\FAILSAFE\*.tmp FileKey3=%CommonAppData%\Avira\AntiVir Desktop|*.old FileKey4=%CommonAppData%\Avira\AntiVir Desktop|*.tmp FileKey5=%ProgramFiles%\Avira\AntiVir Desktop|*.old FileKey6=%ProgramFiles%\Avira\AntiVir Desktop|*.tmp FileKey7=%ProgramFiles%\Avira\AntiVir Desktop\FAILSAFE|*.tmp FileKey8=%CommonAppData%\Avira\AntiVir Desktop\LOGFILES|*.* Winapp2.ini Avira More* code [Avira More*] LangSecRef=3024 Detect=HKLM\SOFTWARE\Avira Default=False FileKey1=%CommonAppData%\Avira|*.tmp|RECURSE FileKey2=%CommonAppData%\Avira|*.log|RECURSE FileKey3=%ProgramFiles%\Avira|*.tmp|RECURSE FileKey4=%ProgramFiles%\Avira|*.log|RECURSE FileKey5=%ProgramFiles%\Avira GmbH|*.log|RECURSE Avira More* looks like it is outdated and applies to old versions of Avira. It certainly does not apply to Avira Internet Security 2010/11/12/13

Modification to TuneUp Utilities Reg Defrag Cleanup for TuneUp Utilities 2013. Modified name and added Detect3. [TuneUp Utilities 2011/12/13 Reg Defrag Cleanup*] LangSecRef=3024 Detect1=HKCU\Software\TuneUp\Utilities\10.0 Detect2=HKCU\Software\TuneUp\Utilities\12.0 Detect3=HKCU\Software\TuneUp\Utilities\13.0 Default=False FileKey1=%WinDir%\System32\config|SECURITY_tureg_old FileKey2=%WinDir%\System32\config|SOFTWARE_tureg_old FileKey3=%WinDir%\System32\config|SYSTEM_tureg_old FileKey4=%WinDir%\System32\config|DEFAULT_tureg_new.LOG* FileKey5=%WinDir%\System32\config|SAM_tureg_new.LOG* FileKey6=%WinDir%\System32\config|SECURITY_tureg_new.LOG* FileKey7=%WinDir%\System32\config|SOFTWARE_tureg_new.LOG* FileKey8=%WinDir%\System32\config|SYSTEM_tureg_new.LOG* FileKey9=%WinDir%\System32\config|DEFAULT_tureg_old FileKey10=%WinDir%\System32\config|SAM_tureg_old FileKey11=%WinDir%\ServiceProfiles\LocalService|NTUSER.DAT_tureg_old FileKey12=%WinDir%\ServiceProfiles\LocalService|NTUSER.DAT_tureg_new.LOG* FileKey13=%WinDir%\ServiceProfiles\NetworkService|NTUSER.DAT_tureg_old FileKey14=%WinDir%\ServiceProfiles\NetworkService|NTUSER.DAT_tureg_new.LOG* FileKey15=%WinDir%\System32\config|COMPONENTS_tureg_old FileKey16=%WinDir%\System32\config|COMPONENTS_tureg_new.LOG* FileKey17=%LocalAppData%\Microsoft\Windows|USRCLASS.DAT_tureg_old FileKey18=%UserProfile%|NTUSER.DAT_tureg_new.LOG* FileKey19=%UserProfile%|NTUSER.DAT_tureg_old FileKey20=%SystemDrive%\Boot|BCD_tureg_new.LOG* FileKey21=%SystemDrive%\Boot|BCD_tureg_old FileKey22=%LocalAppData%\Microsoft\Windows|USRCLASS.DAT_tureg_new.LOG*

Some of the names are a bit shy of explanation as to what they affect or are associated with. This may make it difficult for non-experts to decide whether they should use them. Perhaps: [urlclassifier3.sqlite*] = [Firefox/Pale Moon urlclassifier3.sqlite*] [implicitAppShortcuts*] = [Windows QuickLaunch ImplicitAppShortcuts*] [DiagnosedApplications*]= [Windows QuickLaunch DiagnosedApplications*] JMO

Here are some more US English Language cleanup modules. I also added a Warning message in each module to specify that these will delete all language files EXCEPT the United States English files. Modified entry: [sticky Password (Lng)*] Section=US English Language Detect=HKCU\Software\Lamantine\Sticky Password Warning=This deletes all languages EXCEPT the United States English language. Default=False FileKey1=%ProgramFiles%\Sticky Password\Language\|*.* ExcludeKey1=FILE|%ProgramFiles%\Sticky Password\Language\|spCapBtn.ENU.lng ExcludeKey2=FILE|%ProgramFiles%\Sticky Password\Language\|stpass.ENU.lng ExcludeKey3=FILE|%ProgramFiles%\Sticky Password\Language\|spCapBtn.ntv.lng ExcludeKey4=FILE|%ProgramFiles%\Sticky Password\Language\|stpass.ntv.lng FileKey2=%ProgramFiles%\Sticky Password\|spCapBtn.CSV FileKey3=%ProgramFiles%\Sticky Password\|spCapBtn.DE FileKey4=%ProgramFiles%\Sticky Password\|spCapBtn.ES FileKey5=%ProgramFiles%\Sticky Password\|spCapBtn.FR FileKey6=%ProgramFiles%\Sticky Password\|spCapBtn.PLK FileKey7=%ProgramFiles%\Sticky Password\|spCapBtn.PTB FileKey8=%ProgramFiles%\Sticky Password\|spCapBtn.RUS FileKey9=%ProgramFiles%\Sticky Password\|spCapBtn.CSY FileKey10=%ProgramFiles%\Sticky Password\|stpass.CSV FileKey11=%ProgramFiles%\Sticky Password\|stpass.DE FileKey12=%ProgramFiles%\Sticky Password\|stpass.ES FileKey13=%ProgramFiles%\Sticky Password\|stpass.FR FileKey14=%ProgramFiles%\Sticky Password\|stpass.PLK FileKey15=%ProgramFiles%\Sticky Password\|stpass.PTB FileKey16=%ProgramFiles%\Sticky Password\|stpass.RUS FileKey17=%ProgramFiles%\Sticky Password\|stpass.CSY FileKey18=%ProgramFiles%\Sticky Password\welcome\csy\|*.*|REMOVESELF FileKey19=%ProgramFiles%\Sticky Password\welcome\de\|*.*|REMOVESELF FileKey20=%ProgramFiles%\Sticky Password\welcome\es\|*.*|REMOVESELF FileKey21=%ProgramFiles%\Sticky Password\welcome\fr\|*.*|REMOVESELF FileKey22=%ProgramFiles%\Sticky Password\welcome\rus\|*.*|REMOVESELF New Entry: [LightScribe Template Labeler (Lng)*] Section=US English Language Detect=HKCU\Software\LightScribe\LightScribe Template Labeler Warning=This deletes all languages EXCEPT the United States English language. Default=False FileKey1=%ProgramFiles%\LightScribe Template Labeler\templatelabeler\content\help\|*.*|RECURSE ExcludeKey1=FILE|%ProgramFiles%\LightScribe Template Labeler\templatelabeler\content\help\enu\|*.* ExcludeKey2=FILE|%ProgramFiles%\LightScribe Template Labeler\templatelabeler\content\help\images\|*.* FileKey2=%ProgramFiles%\Common Files\LightScribe\lssmui\|*.*|RECURSE ExcludeKey3=FILE|%ProgramFiles%\Common Files\LightScribe\lssmui\en-US\|*.* ExcludeKey4=FILE|%ProgramFiles%\Common Files\LightScribe\lssmui\lssmui.dll FileKey3=%ProgramFiles%\Common Files\LightScribe\Content\|*.*|RECURSE ExcludeKey5=FILE|%ProgramFiles%\Common Files\LightScribe\Content\enu\|*.* ExcludeKey6=FILE|%ProgramFiles%\Common Files\LightScribe\Content\images\|*.* FileKey4=%ProgramFiles%\Common Files\LightScribe\Content\help\|*.*|RECURSE ExcludeKey7=FILE|%ProgramFiles%\Common Files\LightScribe\Content\help\enu\|*.* ExcludeKey8=FILE|%ProgramFiles%\Common Files\LightScribe\Content\help\images\|*.* New Entry: [Creative Sound Blaster Audio (Lng)*] Section=US English Language Detect=HKCU\Software\CREATIVE TECH Warning=This deletes all languages EXCEPT the United States English language. Default=False FileKey1=%ProgramFiles%\Common Files\Creative\Installation\|*.*|RECURSE ExcludeKey1=FILE|%ProgramFiles%\Common Files\Creative\Installation\Common\|*.* ExcludeKey2=FILE|%ProgramFiles%\Common Files\Creative\Installation\English\*.* FileKey2=%ProgramFiles%\Creative\AudioCS\de-DE\|*.*|REMOVESELF FileKey3=%ProgramFiles%\Creative\AudioCS\es-ES\|*.*|REMOVESELF FileKey4=%ProgramFiles%\Creative\AudioCS\fr-FR\|*.*|REMOVESELF FileKey5=%ProgramFiles%\Creative\AudioCS\it-IT\|*.*|REMOVESELF FileKey6=%ProgramFiles%\Creative\AudioCS\ja-JP\|*.*|REMOVESELF FileKey7=%ProgramFiles%\Creative\AudioCS\ko-KR\|*.*|REMOVESELF FileKey8=%ProgramFiles%\Creative\AudioCS\nl-NL\|*.*|REMOVESELF FileKey9=%ProgramFiles%\Creative\AudioCS\pt-BR\|*.*|REMOVESELF FileKey10=%ProgramFiles%\Creative\AudioCS\zh-CN\|*.*|REMOVESELF FileKey11=%ProgramFiles%\Creative\AudioCS\zh-TW\|*.*|REMOVESELF New Entry: [RT LITE (Lng)*] Section=US English Language Detect=HKCU\Software\Rockers Team Warning=This deletes all languages EXCEPT the United States English language. Default=False Filekey1=%ProgramFiles%\Rockers Team\RT 7 Lite x64\ar-SA\|*.*|REMOVESELF Filekey2=%ProgramFiles%\Rockers Team\RT 7 Lite x64\da-DK\|*.*|REMOVESELF Filekey3=%ProgramFiles%\Rockers Team\RT 7 Lite x64\de-DE\|*.*|REMOVESELF Filekey4=%ProgramFiles%\Rockers Team\RT 7 Lite x64\el-GR\|*.*|REMOVESELF Filekey5=%ProgramFiles%\Rockers Team\RT 7 Lite x64\es-ES\|*.*|REMOVESELF Filekey6=%ProgramFiles%\Rockers Team\RT 7 Lite x64\fr-FR\|*.*|REMOVESELF Filekey7=%ProgramFiles%\Rockers Team\RT 7 Lite x64\he-IL\|*.*|REMOVESELF Filekey8=%ProgramFiles%\Rockers Team\RT 7 Lite x64\hi-IN\|*.*|REMOVESELF Filekey9=%ProgramFiles%\Rockers Team\RT 7 Lite x64\ja-JP\|*.*|REMOVESELF Filekey10=%ProgramFiles%\Rockers Team\RT 7 Lite x64\ko-KR\|*.*|REMOVESELF Filekey11=%ProgramFiles%\Rockers Team\RT 7 Lite x64\pt-BR\|*.*|REMOVESELF Filekey12=%ProgramFiles%\Rockers Team\RT 7 Lite x64\ru-RU\|*.*|REMOVESELF Filekey13=%ProgramFiles%\Rockers Team\RT 7 Lite x64\sv-SE\|*.*|REMOVESELF Filekey14=%ProgramFiles%\Rockers Team\RT 7 Lite x64\zh-CN\|*.*|REMOVESELF Filekey15=%ProgramFiles%\Rockers Team\RT 7 Lite x64\zh-TW\|*.*|REMOVESELF Filekey16=%ProgramFiles%\Rockers Team\RT 7 Lite x86\ar-SA\|*.*|REMOVESELF Filekey17=%ProgramFiles%\Rockers Team\RT 7 Lite x86\da-DK\|*.*|REMOVESELF Filekey18=%ProgramFiles%\Rockers Team\RT 7 Lite x86\de-DE\|*.*|REMOVESELF Filekey19=%ProgramFiles%\Rockers Team\RT 7 Lite x86\el-GR\|*.*|REMOVESELF Filekey20=%ProgramFiles%\Rockers Team\RT 7 Lite x86\es-ES\|*.*|REMOVESELF Filekey21=%ProgramFiles%\Rockers Team\RT 7 Lite x86\fr-FR\|*.*|REMOVESELF Filekey22=%ProgramFiles%\Rockers Team\RT 7 Lite x86\he-IL\|*.*|REMOVESELF Filekey23=%ProgramFiles%\Rockers Team\RT 7 Lite x86\hi-IN\|*.*|REMOVESELF Filekey24=%ProgramFiles%\Rockers Team\RT 7 Lite x86\ja-JP\|*.*|REMOVESELF Filekey25=%ProgramFiles%\Rockers Team\RT 7 Lite x86\ko-KR\|*.*|REMOVESELF Filekey26=%ProgramFiles%\Rockers Team\RT 7 Lite x86\pt-BR\|*.*|REMOVESELF Filekey27=%ProgramFiles%\Rockers Team\RT 7 Lite x86\ru-RU\|*.*|REMOVESELF Filekey28=%ProgramFiles%\Rockers Team\RT 7 Lite x86\sv-SE\|*.*|REMOVESELF Filekey29=%ProgramFiles%\Rockers Team\RT 7 Lite x86\zh-CN\|*.*|REMOVESELF Filekey30=%ProgramFiles%\Rockers Team\RT 7 Lite x86\zh-TW\|*.*|REMOVESELF New Entry: [intel Control Center (Lng)*] Section=US English Language Detect=HKLM\Software\Wow6432Node\Intel\ICCInst Detect2=HKLM\Software\Intel\ICCInst Warning=This deletes all languages EXCEPT the United States English language. Default=False FileKey1=%ProgramFiles%\Intel\Intel Control Center\ar-SA\|*.*|REMOVESELF FileKey2=%ProgramFiles%\Intel\Intel Control Center\cs-CZ\|*.*|REMOVESELF FileKey3=%ProgramFiles%\Intel\Intel Control Center\da-DK\|*.*|REMOVESELF FileKey4=%ProgramFiles%\Intel\Intel Control Center\de-DE\|*.*|REMOVESELF FileKey5=%ProgramFiles%\Intel\Intel Control Center\el-GR\|*.*|REMOVESELF FileKey6=%ProgramFiles%\Intel\Intel Control Center\es-ES\|*.*|REMOVESELF FileKey7=%ProgramFiles%\Intel\Intel Control Center\fi-FI\|*.*|REMOVESELF FileKey8=%ProgramFiles%\Intel\Intel Control Center\fr-FR\|*.*|REMOVESELF FileKey9=%ProgramFiles%\Intel\Intel Control Center\he-IL\|*.*|REMOVESELF FileKey10=%ProgramFiles%\Intel\Intel Control Center\hu-HU\|*.*|REMOVESELF FileKey11=%ProgramFiles%\Intel\Intel Control Center\it-IT\|*.*|REMOVESELF FileKey12=%ProgramFiles%\Intel\Intel Control Center\ja-JP\|*.*|REMOVESELF FileKey13=%ProgramFiles%\Intel\Intel Control Center\ko-KR\|*.*|REMOVESELF FileKey14=%ProgramFiles%\Intel\Intel Control Center\nb-NO\|*.*|REMOVESELF FileKey15=%ProgramFiles%\Intel\Intel Control Center\nl-NL\|*.*|REMOVESELF FileKey16=%ProgramFiles%\Intel\Intel Control Center\pl-PL\|*.*|REMOVESELF FileKey17=%ProgramFiles%\Intel\Intel Control Center\pt-BR\|*.*|REMOVESELF FileKey18=%ProgramFiles%\Intel\Intel Control Center\pt-PT\|*.*|REMOVESELF FileKey19=%ProgramFiles%\Intel\Intel Control Center\ru-RU\|*.*|REMOVESELF FileKey20=%ProgramFiles%\Intel\Intel Control Center\sk-SK\|*.*|REMOVESELF FileKey21=%ProgramFiles%\Intel\Intel Control Center\sl-SI\|*.*|REMOVESELF FileKey22=%ProgramFiles%\Intel\Intel Control Center\sv-SE\|*.*|REMOVESELF FileKey23=%ProgramFiles%\Intel\Intel Control Center\th-TH\|*.*|REMOVESELF FileKey24=%ProgramFiles%\Intel\Intel Control Center\tr-TR\|*.*|REMOVESELF FileKey25=%ProgramFiles%\Intel\Intel Control Center\zh-CN\|*.*|REMOVESELF FileKey26=%ProgramFiles%\Intel\Intel Control Center\zh-TW\|*.*|REMOVESELF New Entry: [speccy (Lng)*] Section=US English Language Detect=HKLM\Software\Piriform\Speccy Warning=This deletes all languages EXCEPT the United States English language. Default=False Filekey1=%ProgramFiles%\Speccy\Lang\|*.* ExcludeKey1=FILE|%ProgramFiles%\Speccy\Lang\|lang-9999.dll

Modified Entry: Added FileKey4/5/6 [belarc*] LangSecRef=3024 Detect=HKCU\Software\Belarc Default=False FileKey1=%ProgramFiles%\Belarc\Advisor|INSTALL.Log FileKey2=%ProgramFiles%\Belarc\Advisor\System|Progress.Log FileKey3=%ProgramFiles%\Belarc\Advisor\System\Tmp|*.* FileKey4=%ProgramFiles%\Belarc\Advisor\System\Security\BelNotify\|BelNotify.log FileKey5=%ProgramFiles%\Belarc\Advisor\System\Security\BelNotify\|History.log FileKey6=%ProgramFiles%\Belarc\Advisor\System\Security\BelNotify\|HistoryHF.log

New Entries [Norton Internet Security 2012/13 (logs)*] LangSecRef=3024 DetectFile=%ProgramData%\NortonInstaller\Logs Default=False FileKey1=%ProgramData%\NortonInstaller\Logs|*.*|RECURSE [Logitech Harmony Remote Cache*] LangSecRef=3021 Detect=HKCU\Software\JavaSoft\Prefs\Com\Logitech\harmony Default=False Filekey1=%UserProfile%\Logitech\browser - logitech\Cache\|*.* [Amazon MP3 Downloader Log*] LangSecRef=3023 Detect=HKCR\Amazon.AmazonMP3DownloaderPlugin Default=False FileKey1=%Documents%\Amazon MP3\Logs\|*.*|REMOVESELF Edit: Corrected Amazon MP3 Downloader Log* code per nodles input. Thanks much.

Would you mind elaborating on how to set up a "specialdetect". I am not familar with its usage. Would it be ??: SpecialDetect=DET_CHROME

The new "Chrome Installer*" code shows up on my Windows 7 systems that have Norton Internet Security 2013 installed on them. Chrome has never been installed on these systems and the only browser that has ever been installed is IE8 and then IE9. [Chrome Installer*] LangSecRef=3029 Detect=HKLM\SOFTWARE\Google\Chrome Default=False FileKey1=%LocalAppData%\Google\Chrome\Application\*\Installer|*.*|REMOVESELF My registry contains a Google key that is set up by NIS 2013 and contains the following. Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Google] [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome] [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions] [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk] "path"="C:\\Program Files\\Norton Internet Security\\Engine\\20.1.1.2\\Exts\\Chrome.crx" "version"="2013.1.1.4" [HKEY_LOCAL_MACHINE\SOFTWARE\Google\NavClient] [HKEY_LOCAL_MACHINE\SOFTWARE\Google\No Chrome Offer Until] "SUPERAntiSpyware.com"=dword:0133061d "Piriform Ltd"=dword:0133293f [HKEY_LOCAL_MACHINE\SOFTWARE\Google\No Toolbar Offer Until] "Piriform Ltd"=dword:01330689 [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Update] [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Update\Clients] [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}] Chrome Installer* needs a more positive DETECT to determine if Chrome has been installed on a system.

Because there is Canadian english, US english, and Great Britian english, I changed the name of my language section from "English Language" to "US English Language".