siliconman01

Recommended change in the code below. Warning Message plus FileKey4 and FileKey5 added. [snagit 10 More*] LangSecRef=3024 Detect=HKCU\Software\TechSmith\SnagIt\10 Default=False Warning=This will delete the backups of the captures that you have performed with SnagIt 10. FileKey1=%LocalAppData%\TechSmith\Snagit\DataStore\AppIcons|*.* FileKey2=%LocalAppData%\TechSmith\Snagit\DataStore\WebSiteIcons|*.* FileKey3=%LocalAppData%\TechSmith\Snagit\DataStore|*.sdf FileKey4=%LocalAppData%\TechSmith\Snagit\DataStore|*.SNAG FileKey5=%LocalAppData%\TechSmith\Snagit\DataStore|*.SNAGundo FileKey6=%LocalAppData%\TechSmith\SnagIt\Thumbnails|*.* RegKey1=HKCU\Software\TechSmith\SnagIt\10|StampCustomFolder

The following needs to be changed for DisplayFusion: [DisplayFusion*] LangSecRef=3024 Detect=HKCU\Software\Binary Fortress Software\DisplayFusion Default=False FileKey1=%AppData%\DisplayFusion|DisplayFusion.log FileKey2=%AppData%\DisplayFusion|DisplayFusionSetup.exe change the above code to: [DisplayFusion TroubleShooting Log*] LangSecRef=3024 Detect=HKCU\Software\Binary Fortress Software\DisplayFusion Default=False FileKey1=%AppData%\DisplayFusion|DisplayFusion.log And this code needs to added: [DisplayFusion (Setup File & Log)*] Warning=This removes the DisplayFusionSetup.exe file and DisplayFusionSetup.log generated during the installation of DisplayFusion. Both are unneeded after the installation is completed. LangSecRef=3024 Detect=HKCU\Software\Binary Fortress Software\DisplayFusion Default=False FileKey1=%AppData%\DisplayFusion|DisplayFusionSetup.log FileKey2=%AppData%\DisplayFusion|DisplayFusionSetup.exe

The two codes below show up on Windows 7 systems. An OS detect needs to be included. [Windows XP MUICache*] LangSecRef=3025 Detect=HKCU\Software\Microsoft\Windows\ShellNoRoam\ Default=False RegKey1=HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache [Windows XP ShellBags*] LangSecRef=3025 Detect=HKCU\Software\Microsoft\Windows\ShellNoRoam\ Warning=This will delete window size, window position and view setting of all folders. Default=False RegKey1=HKCU\Software\Microsoft\Windows\ShellNoRoam\BagMRU RegKey2=HKCU\Software\Microsoft\Windows\ShellNoRoam\Bags

I suggest the following warning message be added in the code below: [MS Management Console More*] LangSecRef=3025 DetectFile=%AppData%\Microsoft\MMC Warning=This resets the window size of Task Scheduler and Event Viewer back to the default size. Default=False FileKey1=%AppData%\Microsoft\MMC|*.*

[Cached File Extensions*] LangSecRef=3025 Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer Default=False RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts I recommend that this code be removed from WinApp2.ini. On doing a manual removal of this key, several of my programs no long recognized their file associations. Outlook also lost the fact that it was the default email client. The FileExts key does start to regenerate itself, but it does require some manual intervention (as stated above) during this regeneration. I don't think this is something that WinApp2.ini should invoke on users. Note: I had manually backed up the FileExts key before manually removing it.

The above modification does not work either. I'm wondering if its because Explorer.exe is running continuously.

The above is "detected" but does not clean on either Windows 7 SP1 x64 Professional or Windows 7 SP1 x86 Professional. I do not see anything invalid in the RegKey1 code

I recommend that [HostsMan*] be changed to: [HostsMan's HostsServer (Log)*] And I would like to see the following added: [TrojanHunter (Debug Logs)*] LangSecRef=3024 Detect=HKCU\Software\TrojanHunter Default=False FileKey1=%ProgramFiles%\TrojanHunter *\|Debug.log FileKey2=%ProgramFiles%\TrojanHunter *\|DebugLog.txt [DisplayFusion (Setup File & Log)*] Warning=This removes the DisplayFusionSetup.exe file and DisplayFusionSetup.log generated during the installation of DisplayFusion. Both are unneeded after the installation is completed. LangSecRef=3024 Detect=HKCU\Software\Binary Fortress Software\DisplayFusion Default=False FileKey1=%AppData%\DisplayFusion|DisplayFusionSetup.log FileKey2=%AppData%\DisplayFusion|DisplayFusionSetup.exe [DisplayFusion (Auto Backups)*] Warning=This removes the DisplayFusion auto backups of the Program's settings. This settings backup file is automatically created when a new version of DisplayFusion is installed. The folder is located at %SystemDrive%\User\My Documents\DisplayFusion Backups LangSecRef=3024 Detect=HKCU\Software\Binary Fortress Software\DisplayFusion Default=False FileKey1=%UserProfile%\My Documents\DisplayFusion Backups\|*.* [Logitech Setpoint 6 (Logs)*] LangSecRef=3024 DetectFile=%ProgramFiles%\Logitech\SetPointG\SetPointII.exe Default=False FileKey1=%AppData%\Logishrd\sp6_Log\|*.*|REMOVESELF

I would prefer that you not remove FileKey2 from this code because the built in code for MalwareBytes removes the quarantined items. I leave that one unchecked because I do not like removing quarantined security items as a normal cleaning element. I would like this cleaning element clean all logs on its own.

[Defragmentation List*] LangSecRef=3025 DetectFile=%WinDir% Default=False FileKey1=%WinDir%\Prefetch|Layout.ini The above entry negates part of the features of Perfectdisk in that it prevents Perfectdisk from aligning programs so that the system will boot faster. I recommend that this entry before or a warning message be inserted. It may also negatively affect other third party defraggers (I do not know this for fact, but it may). The link below further explains how Perfectdisk interfaces with Layout.ini. http://superuser.com...agement-options Suggested Warning message: [Defragmentation List*] LangSecRef=3025 Warning=DO NOT use if your system has PerfectDisk defragging software. DetectFile=%WinDir% Default=False FileKey1=%WinDir%\Prefetch|Layout.ini

Personally I do not checkmark this code because I use Office 2007 and Office 2010. As stated, this code clears out the Custom.dic which is undesirable to me for Outlook and other Office programs.

Added FileKey32 and FileKey33 [TuneUp Utilities 2011/2012 Reg Defrag Cleanup*] LangSecRef=3024 Detect=HKCU\Software\TuneUp\Utilities\10.0 Detect2=HKCU\Software\TuneUp\Utilities\12.0 Default=False FileKey1=%WinDir%\System32\config|SECURITY_tureg_old FileKey2=%WinDir%\System32\config|SOFTWARE_tureg_old FileKey3=%WinDir%\System32\config|SYSTEM_tureg_old FileKey4=%WinDir%\System32\config|DEFAULT_tureg_new.LOG1 FileKey5=%WinDir%\System32\config|DEFAULT_tureg_new.LOG2 FileKey6=%WinDir%\System32\config|SAM_tureg_new.LOG1 FileKey7=%WinDir%\System32\config|SAM_tureg_new.LOG2 FileKey8=%WinDir%\System32\config|SECURITY_tureg_new.LOG1 FileKey9=%WinDir%\System32\config|SECURITY_tureg_new.LOG2 FileKey10=%WinDir%\System32\config|SOFTWARE_tureg_new.LOG1 FileKey11=%WinDir%\System32\config|SOFTWARE_tureg_new.LOG2 FileKey12=%WinDir%\System32\config|SYSTEM_tureg_new.LOG1 FileKey13=%WinDir%\System32\config|SYSTEM_tureg_new.LOG2 FileKey14=%WinDir%\System32\config|DEFAULT_tureg_old FileKey15=%WinDir%\System32\config|SAM_tureg_old FileKey16=%WinDir%\ServiceProfiles\LocalService|NTUSER.DAT_tureg_old FileKey17=%WinDir%\ServiceProfiles\LocalService|NTUSER.DAT_tureg_new.LOG1 FileKey18=%WinDir%\ServiceProfiles\LocalService|NTUSER.DAT_tureg_new.LOG2 FileKey19=%WinDir%\ServiceProfiles\NetworkService|NTUSER.DAT_tureg_old FileKey20=%WinDir%\ServiceProfiles\NetworkService|NTUSER.DAT_tureg_new.LOG1 FileKey21=%WinDir%\ServiceProfiles\NetworkService|NTUSER.DAT_tureg_new.LOG2 Filekey22=%WinDir%\System32\config|COMPONENTS_tureg_old Filekey23=%WinDir%\System32\config|COMPONENTS_tureg_new.LOG1 Filekey24=%WinDir%\System32\config|COMPONENTS_tureg_new.LOG2 FileKey25=%LocalAppData%\Microsoft\Windows\|USRCLASS.DAT_tureg_old FileKey26=%UserProfile%|NTUSER.DAT_tureg_new.LOG1 FileKey27=%UserProfile%|NTUSER.DAT_tureg_new.LOG2 FileKey28=%UserProfile%|NTUSER.DAT_tureg_old FileKey29=%SystemDrive%\Boot\|BCD_tureg_new.LOG1 FileKey30=%SystemDrive%\Boot\|BCD_tureg_new.LOG2 FileKey31=%SystemDrive%\Boot\|BCD_tureg_old FileKey32=%LocalAppData%\Microsoft\Windows\|USRCLASS.DAT_tureg_new.LOG1 FileKey33=%LocalAppData%\Microsoft\Windows\|USRCLASS.DAT_tureg_new.LOG2

This leftover code needs to be removed from the latest version. [Adobe Flash Install Logs*] LangSecRef=3023 DetectFile=%WinDir%\System32\Macromed\Flash|FlashInstall.log Default=False FileKey1=%WinDir%\System32\Macromed\Flash|FlashInstall.log

I certainly agree too

For 64-bit Internet Explorer systems, [Adobe Flash 64-bit Install Logs*] LangSecRef=3023 DetectFile=%WinDir%\SysWOW64\Macromed\Flash\FlashInstall.log Default=False FileKey1=%WinDir%\SysWOW64\Macromed\Flash|FlashInstall.log

There is an error in this new entry: [Adobe Flash Install Logs*] LangSecRef=3023 DetectFile=%WinDir%\System32\Macromed\Flash|FlashInstall.log Default=False FileKey1=%WinDir%\System32\Macromed\Flash|FlashInstall.log The third line should be: DetectFile=%WinDir%\System32\Macromed\Flash\FlashInstall.log

I agree with redxii. I have been emptying the %WinDir%\SoftwareDistribution\Download folder for 9-10 years....xp, vista, and now Windows 7 (32-bit and 64-bit) with no problems ever encountered. However, I have not attempted to disable IE9, WMC nor WMP.

For Logitech Setpoint 6 users. [Logitech Setpoint 6 (Logs)*] LangSecRef=3024 DetectFile=%ProgramFiles%\Logitech\SetPointG\SetPointII.exe Default=False FileKey1=%AppData%\Logishrd\sp6_Log\|*.*|REMOVESELF

For TrojanHunter users: [TrojanHunter (Debug Logs)*] LangSecRef=3024 Detect=HKCU\Software\TrojanHunter Default=False FileKey1=%ProgramFiles%\TrojanHunter *\|Debug.log FileKey2=%ProgramFiles%\TrojanHunter *\|DebugLog.txt

More cleanup of multi-monitor program DisplayFusion [DisplayFusion (Setup File & Log)*] Warning=This removes the DisplayFusionSetup.exe file and DisplayFusionSetup.log generated during the installation of DisplayFusion. Both are unneeded after the installation is completed. LangSecRef=3024 Detect=HKCU\Software\Binary Fortress Software\DisplayFusion Default=False FileKey1=%AppData%\DisplayFusion|DisplayFusionSetup.log FileKey2=%AppData%\DisplayFusion|DisplayFusionSetup.exe [DisplayFusion (Auto Backups)*] Warning=This removes the DisplayFusion auto backups of the Program's settings. This settings backup file is automatically created when a new version of DisplayFusion is installed. The folder is located at %SystemDrive%\User\My Documents\DisplayFusion Backups LangSecRef=3024 Detect=HKCU\Software\Binary Fortress Software\DisplayFusion Default=False FileKey1=%UserProfile%\My Documents\DisplayFusion Backups\|*.*

Until such time as PerfectDisk 12.5 is included in the internal winapp.ini, the following is needed: [PerfectDisk 12.5*] LangSecRef=3024 Detect=HKCU\Software\Raxco\PerfectDisk\12.5 Default=False FileKey1=%CommonAppData%\Raxco\PerfectDisk\12.5|PDBootLog Also I think the MORE entry should only be for *.log: [PerfectDisk 12.5 More*] LangSecRef=3024 Detect=HKCU\Software\Raxco\PerfectDisk\12.5 Default=False FileKey1=%CommonAppData%\Raxco\PerfectDisk\12.5|*.log

For Quicken Deluxe 2012 logs [Quicken Deluxe 2012 (logs)*] LangSecRef=3021 DetectFile=%ProgramFiles%\Quicken\qw.exe Default=False Filekey1=%AppData%\Intuit\Quicken\Log\|*.txt FileKey2=%AppData%\Intuit\Quicken\Log\|*.log Filekey3=%ProgramData%\Intuit\Quicken\Log\|*.log Filekey4=%ProgramData%\Intuit\Quicken\Log\installer|*.*|RECURSE Excludekey1=FILE|%ProgramData%\Intuit\Quicken\Log\installer\|*.htm

Ashampoo Burning Studio 11 (to be released on 23-Nov-2011) [Ashampoo Burning Studio 11 *] LangSecRef=3024 Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 11 Default=False FileKey1=%AppData%\Ashampoo\Ashampoo Burning Studio 11|backupmetainfo.xml FileKey2=%AppData%\Ashampoo\Ashampoo Burning Studio 11\Log|*.xml FileKey3=%AppData%\Ashampoo\Log|*.txt

I stand corrected....thanks much!

The "MS Management Console More*" code causes (in Windows 7 x86) the Task Scheduler to issue an error message "Task BackgroundConfigSurveryor: The task image is corrupt or has been tampered with". This error occurs on opening the Task Scheduler following a CCleaner run. I recommend that this code be removed. [MS Management Console More*] LangSecRef=3025 DetectFile=%AppData%\Microsoft\MMC Default=False FileKey1=%AppData%\Microsoft\MMC|*.*