Winapp2.ini

Recall that much has changed in winapp2.ini on the Branch1 and many entries have been merged, renamed, or reworked. You may want to carefully review your scan results before cleaning. winapp2ool on branch1 has been updated to support diffing this massive set of changes more helpfully. (listing which entries have been merged or renamed, for example)

Branch1 is where "beta" versions of winapp2ool and winapp2.ini live (at least, as far as this particular major revision to winapp2.ini is concerned). I should be ready to push it to master soon, but I had some winapp2ool work to cover and in pursuit of that found numerous bugs that also needed to be fixed to be compatible with some of the changes I made to winapp2.ini. The work is almost done (sorry for the wait - I wasn't able to work meaningfully on this for several months) as of right now, the latest pending winapp2.ini can be found at the branch1 link, but once to push to master is complete it will be available in the normal link.

There's a more recent revision with a substantial number of large changes last posted in July, I'm hoping to find time very soon to finish the remaining work on winapp2ool required to pivot to distributing this version. Apologies for the large delay, midway through this project very many real-life things cropped up which prevented me from working on it for about 2.5 months. relevant github PR: https://github.com/MoscaDotTo/Winapp2/pull/895 my current local copy (dated 220718 but this isn't accurate) diff vs 220615: https://github.com/MoscaDotTo/Winapp2/files/9786452/diff.txt diff.txt is best viewed with a monowidth font v220717 (most recent available on github): https://raw.githubusercontent.com/MoscaDotTo/Winapp2/Branch1/Winapp2.ini

I'll have more time for this soon! very busy summer for me. Things are cooling down though and I'll have time to push that (and some changes to winapp2ool) through soon. The scope of the changes has broadened far beyond my last update here I think, you can follow the changes on GitHub for now but I'll post a summary here as well when they're pushed

I've made a change to winapp2ool that'll be available alongside the next update that will prevent this issue. in the future it will silently discard any extra flags attached to an ExcludeKey Likewise, winappdebug has been modified to detect extra flags in ExcludeKeys

Remove the |RECURSE from ExcludeKey6-8

Does the problem still occur if you remove this entry? [Logitech Setpoint/Options Language *] This entry has |RECURSE attached to some of the ExcludeKeys (6, 7, and 8) which I don't believe is a supported flag for that KeyType, Perhaps I'll add a check for this in winappdebug

This is definitely the issue, I just updated to 6.0.6 and can reproduce. I will investigate

I had no issues trimming this file and don't see any obvious syntax errors inside it or custom.ini. Likewise, winappdebug doesn't report any major issues. Is the UAC enabled? My best guess is that this is a permissions issue when trying to access something in VirtualStore, perhaps for an application that is running?

I've opened an issue on github to track this: https://github.com/MoscaDotTo/Winapp2/issues/899

I can't reproduce this on 1.5.8220.27841 using either a local or remote file, are you using an include/exclude list or a non-default winapp2.ini? If so, do you mind sharing? Also, is the user account control enabled and is winapp2ool running as administrator? Looking at the stack there it looks like a permissions error while trying to access a VirtualStore location.

This work is nearing completion, take a look at the current diff between the latest available version and the next major update a link to the plain text version of this is available in this comment; it is best viewed with a monowidth font (read: it's probably borderline unreadable without a monowidth font)

This is a change I'm proposing and isnt available yet via winapp2ool

https://github.com/MoscaDotTo/Winapp2/pull/895

A small update for winapp2ool is available, there probably aren't any major changes to your normal workflow unless winapp2ool was crashing but there's some issued addressed that affect commandline usage (nothing for the end user has changed) • Winapp2ool now waits until the commandline arguments have been processed before modifying the console window. this seems to address an uncommon and difficult to reproduce crash that can happen when calling winapp2ool in silent mode from a batch file. This has the secondary effect of preventing the winapp2ool console window from "jittering" to a wider size for seemingly "no reason" when silent mode is enabled • Winapp2ool will no longer crash if you set a target output file through the commandline that points to a directory which doesn't exist. If the directory does not exist, it will now be created

winapp2ool builds are signed again, you may need to redownload from github. you may also need to manually unblock from smartscreen if you have it enabled

FWIW downloads work fine for me on Firefox 100.0a1 I've had mine off the bar for years, but you can summon the downloads pane of the library with CTRL+J

Good news! At long last, I've been able to update my Photo ID and will be renewing the code signing certificate soon, after which I'll be able to publish new builds of winapp2ool without antivirus vendors considering it malicious. I'll post here as that situation develops

21H2 19044.1415

FWIW I downloaded cc5.40 and had no issues cleaning Chrome 99 canary

unfortunately there is nothing I can do about this at this time. it was inevitable as soon as I started releasing updated builds that weren't signed. The process to get my photo ID updated with my new legal name is long and arduous and most aspects of it are completely out of my hands. I will get a new code signing cert as soon as i am able but it will likely be at least another month

a large update for winapp2.ini is now available ╔══════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════╗ ║ Changes between version 210920 and version 211208 ║ ╠ ╣ ║ ║ ║ Crash Reports * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey25=%LocalAppData%\Epic Privacy Browser\CrashReports|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Edge Logs * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey4=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\Edge\*\*|Log.Old|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Brave Logs * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 RegKeys ║ ║ ║ ║ RegKey1=HKCU\Software\BraveSoftware\Promo|StubInstallerPath ║ ║ ║ ╠ ╣ ║ ║ ║ Opera Logs * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey2=%LocalAppData%\Programs\Opera*|*.log|REMOVESELF ║ ║ ║ ╠ ╣ ║ Removed 1 FileKeys ║ ║ ║ ║ FileKey2=%LocalAppData%\Programs\Opera*|*.log|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Internet Explorer * has been modified ║ ║ ║ ╠ ╣ ║ Removed 3 FileKeys ║ ║ ║ ║ FileKey32=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History|*.*|RECURSE ║ ║ FileKey33=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\INetCache|*.*|RECURSE ║ ║ FileKey34=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\INetCookies|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ Modified 3 FileKeys ║ ║ ║ ║ Old: FileKey29=%WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History|*.*|RECURSE ║ ║ New: FileKey29=%WinDir%\ServiceProfiles\*\AppData\Local\Microsoft\Windows\History|*.*|RECURSE ║ ║ Old: FileKey30=%WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\INetCache|*.*|RECURSE ║ ║ New: FileKey30=%WinDir%\ServiceProfiles\*\AppData\Local\Microsoft\Windows\INetCache|*.*|RECURSE ║ ║ Old: FileKey31=%WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\INetCookies|*.*|RECURSE ║ ║ New: FileKey31=%WinDir%\ServiceProfiles\*\AppData\Local\Microsoft\Windows\INetCookies|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ ABBYY FineReader * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey14=%SystemDrive%\temp\FR15|*.*|REMOVESELF ║ ║ New: FileKey14=%SystemDrive%\temp\FR*|*.*|REMOVESELF ║ ║ ║ ╠ ╣ ║ ║ ║ Actual Window Guard * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 RegKeys ║ ║ ║ ║ RegKey1=HKCU\Software\Actual Tools\Actual Window Guard|LastNagScreenDate ║ ║ ║ ╠ ╣ ║ ║ ║ Adobe Acrobat DC * has been modified ║ ║ ║ ╠ ╣ ║ Added 4 RegKeys ║ ║ ║ ║ RegKey4=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral|iNumAcrobatLaunches ║ ║ RegKey5=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral|iNumOfAVDocsOpened ║ ║ RegKey6=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral|uLastAppLaunchTimeStamp ║ ║ RegKey14=HKCU\Software\Adobe\Adobe Acrobat\DC\SessionManagement|uLastAppExitTimeStamp ║ ║ ║ ╠ ╣ ║ ║ ║ Adobe Acrobat Distiller DC * has been removed ║ ║ ║ ╠ ╣ ║ ║ ║ Adobe Acrobat Distiller XI * has been removed ║ ║ ║ ╠ ╣ ║ ║ ║ Adobe CC * has been modified ║ ║ ║ ╠ ╣ ║ Added 5 FileKeys ║ ║ ║ ║ FileKey6=%AppData%\Adobe\Adobe Photoshop*\FontFeatureCache|*.*|RECURSE ║ ║ FileKey7=%AppData%\Adobe\Adobe Photoshop*\Logs|*.*|RECURSE ║ ║ FileKey8=%AppData%\Adobe\CameraRaw\Logs|*.* ║ ║ FileKey9=%AppData%\Adobe\Color|*.lst ║ ║ FileKey26=%LocalAppData%\Adobe\CameraRaw\Cache*|*.* ║ ║ ║ ╠ ╣ ║ Modified 4 FileKeys ║ ║ ║ ║ Old: FileKey2=%AppData%\Adobe\Adobe Photoshop CC*\Adobe Photoshop CC*Settings|PSErrorLog.txt;sniffer-*.txt ║ ║ New: FileKey2=%AppData%\Adobe\Adobe Photoshop*\Adobe Photoshop*Settings|PSErrorLog.txt;sniffer-*.txt ║ ║ Old: FileKey3=%AppData%\Adobe\Adobe Photoshop CC*\Adobe Photoshop CC*Settings\CrashLogs|*.*|RECURSE ║ ║ New: FileKey3=%AppData%\Adobe\Adobe Photoshop*\Adobe Photoshop*Settings\CrashLogs|*.*|RECURSE ║ ║ Old: FileKey4=%AppData%\Adobe\Adobe Photoshop CC*\Adobe Photoshop CC*Settings\web-cache-temp|*.*|RECURSE ║ ║ New: FileKey4=%AppData%\Adobe\Adobe Photoshop*\Adobe Photoshop*Settings\web-cache-temp|*.*|RECURSE ║ ║ Old: FileKey5=%AppData%\Adobe\Adobe Photoshop CC*\Logs|*.*|RECURSE ║ ║ New: FileKey5=%AppData%\Adobe\Adobe Photoshop*\CT Font Cache|*.lst ║ ║ ║ ╠ ╣ ║ ║ ║ Adobe Reader DC * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey2=%LocalAppData%\Adobe\Acrobat\DC|IconCacheRdr*.dat;UserCache.bin;SharedDataEvents ║ ║ New: FileKey2=%LocalAppData%\Adobe\Acrobat\DC|DCAPIDiscoveryCacheReader;IconCacheRdr*.dat;UserCache.bin;SharedDataEvents ║ ║ ║ ╠ ╣ ║ ║ ║ Age of Empires * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey4=%ProgramFiles%\Microsoft Games\Age of Mythology|*log.txt ║ ║ ║ ╠ ╣ ║ ║ ║ AIMP * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 DetectFiles ║ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: DetectFile=%ProgramFiles%\AIMP* ║ ║ New: DetectFile=%AppData%\AIMP* ║ ║ Old: FileKey1=%AppData%\AIMP|*.bak ║ ║ New: FileKey1=%AppData%\AIMP*|*.bak ║ ║ ║ ╠ ╣ ║ ║ ║ AMD/ATI * has been modified ║ ║ ║ ╠ ╣ ║ Added 17 FileKeys ║ ║ ║ ║ FileKey6=%LocalAppData%\AMD\cn|*.log ║ ║ FileKey9=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default|*-journal;*.old;LOG|RECURSE ║ ║ FileKey10=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default|QuotaManager;Visited Links ║ ║ FileKey11=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default\blob_storage|*.*|RECURSE ║ ║ FileKey13=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default\Service Worker\*Cache*|*.*|RECURSE ║ ║ FileKey15=%LocalAppData%\AMD\RadeonSoftware\vkcache|*.* ║ ║ FileKey16=%LocalAppData%\AMD\Ryzen Master\cache\qmlcache|*.* ║ ║ FileKey17=%LocalAppData%\AMD\StoreMI\cache\qmlcache|*.* ║ ║ FileKey21=%LocalAppData%\RadeonInstaller\Cache\qmlcache|*.* ║ ║ FileKey23=%LocalAppData%\RadeonSettings\Cache\QtWebEngine\Default\Cache|*.* ║ ║ FileKey24=%LocalAppData%\RadeonSettings\QtWebEngine\Default|*-journal;*.old;LOG|RECURSE ║ ║ FileKey25=%LocalAppData%\RadeonSettings\QtWebEngine\Default|Visited Links ║ ║ FileKey26=%LocalAppData%\RadeonSettings\QtWebEngine\Default\blob_storage|*.*|RECURSE ║ ║ FileKey27=%LocalAppData%\Setup\cache\qmlcache|*.* ║ ║ FileKey29=%ProgramFiles%\AMD|*.log ║ ║ FileKey42=%UserProfile%|AMD_*.log;AMDRM_Install.log;ChipsetExtraction.log;Device_ID.log ║ ║ FileKey44=%WinDir%\System32\config\systemprofile\AppData\Local\AMD\DxCache|*.* ║ ║ ║ ╠ ╣ ║ Removed 2 FileKeys ║ ║ ║ ║ FileKey7=%LocalAppData%\AMD\Ryzen Master\cache\qmlcache|*.qmlc ║ ║ FileKey28=%UserProfile%|AMD_Chipset_Drivers.log;ChipsetExtraction.log;Device_ID.log ║ ║ ║ ╠ ╣ ║ Modified 4 FileKeys ║ ║ ║ ║ Old: FileKey4=%LocalAppData%\AMD Ryzen Master\cache\qmlcache|*.qmlc ║ ║ New: FileKey4=%LocalAppData%\AMD Ryzen Master\cache\qmlcache|*.* ║ ║ Old: FileKey8=%LocalAppData%\AMD\StoreMI\cache\qmlcache|*.qmlc ║ ║ New: FileKey8=%LocalAppData%\AMD\RadeonSoftware\Cache|*.* ║ ║ Old: FileKey12=%LocalAppData%\RadeonInstaller\Cache\qmlcache|*.jsc;*.qmlc ║ ║ New: FileKey12=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default\GPUCache|*.* ║ ║ Old: FileKey14=%LocalAppData%\Setup\cache\qmlcache|*.qmlc ║ ║ New: FileKey14=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default\VideoDecodeStats|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ AnyDesk * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey1=%AppData%\AnyDesk|ad.trace ║ ║ New: FileKey1=%AppData%\AnyDesk|ad.trace;connection_trace.txt ║ ║ ║ ╠ ╣ ║ ║ ║ AVG PC TuneUp * has been modified ║ ║ ║ ╠ ╣ ║ Removed 2 FileKeys ║ ║ ║ ║ FileKey37=%WinDir%\ServiceProfiles\NetworkService|NTUSER.DAT_tureg_new.LOG*;NTUSER.DAT_tureg_old ║ FileKey38=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows|USRCLASS.DAT_tureg_old;USRCLASS.DAT_tureg_new.LOG* ║ ║ ╠ ╣ ║ Modified 2 FileKeys ║ ║ ║ ║ Old: FileKey35=%WinDir%\ServiceProfiles\LocalService|NTUSER.DAT_tureg_new.LOG*;NTUSER.DAT_tureg_old ║ ║ New: FileKey35=%WinDir%\ServiceProfiles\*|NTUSER.DAT_tureg_new.LOG*;NTUSER.DAT_tureg_old ║ Old: FileKey36=%WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows|USRCLASS.DAT_tureg_old;USRCLASS.DAT_tureg_new.LOG* ║ New: FileKey36=%WinDir%\ServiceProfiles\*\AppData\Local\Microsoft\Windows|USRCLASS.DAT_tureg_old;USRCLASS.DAT_tureg_new.LOG*║ ║ ║ ╠ ╣ ║ ║ ║ AVS Audio Converter 6 * has been removed ║ ║ ║ ╠ ╣ ║ ║ ║ Battle.net * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey1=%AppData%\Battle.net\Telemetry|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ BDtoAVCHD * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey1=%ProgramFiles%\BDtoAVCHD\ac3to|log.txt ║ ║ New: FileKey1=%ProgramFiles%\BDtoAVCHD\*ac3to|log.txt ║ ║ ║ ╠ ╣ ║ ║ ║ Behringer Neutron * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey3=%LocalAppData%\Behringer\Synthtribe\Cache\qmlcache|*.qmlc ║ ║ New: FileKey3=%LocalAppData%\Behringer\Synthtribe\Cache\qmlcache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ BitTorrent * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey2=%AppData%\BitTorrent\Updates|*.exe|REMOVESELF ║ ║ ║ ╠ ╣ ║ Removed 1 FileKeys ║ ║ ║ ║ FileKey2=%AppData%\BitTorrent\Updates|*.exe ║ ║ ║ ╠ ╣ ║ ║ ║ Cached Certification Files * has been modified ║ ║ ║ ╠ ╣ ║ Removed 2 FileKeys ║ ║ ║ ║ FileKey5=%WinDir%\ServiceProfiles\NetworkService\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content|*.*|RECURSE ║ ║ FileKey6=%WinDir%\ServiceProfiles\NetworkService\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ Modified 2 FileKeys ║ ║ ║ ║ Old: FileKey3=%WinDir%\ServiceProfiles\LocalService\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content|*.*|RECURSE ║ ║ New: FileKey3=%WinDir%\ServiceProfiles\*\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content|*.*|RECURSE ║ ║ Old: FileKey4=%WinDir%\ServiceProfiles\LocalService\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData|*.*|RECURSE ║ ║ New: FileKey4=%WinDir%\ServiceProfiles\*\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Calibre * has been modified ║ ║ ║ ╠ ╣ ║ Added 6 FileKeys ║ ║ ║ ║ FileKey2=%LocalAppData%\calibre-ebook.com\calibre\QtWebEngine\OffTheRecord\GPUCache|*.*|RECURSE ║ ║ FileKey3=%LocalAppData%\calibre-ebook.com\calibre\QtWebEngine\viewer-lookup|Network Persistent State;Visited Links ║ ║ FileKey4=%LocalAppData%\calibre-ebook.com\calibre\QtWebEngine\viewer-lookup\blob_storage|*.*|RECURSE ║ ║ FileKey5=%LocalAppData%\calibre-ebook.com\calibre\QtWebEngine\viewer-lookup\GPUCache|*.*|RECURSE ║ ║ FileKey6=%LocalAppData%\calibre-ebook.com\calibre\QtWebEngine\viewer-lookup\Platform Notifications|*.*|RECURSE ║ ║ FileKey7=%LocalAppData%\calibre-ebook.com\calibre\QtWebEngine\viewer-lookup\Session Storage|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ Modified 1 DetectFiles ║ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: DetectFile=%LocalAppData%\calibre-cache\jsbrowser ║ ║ New: DetectFile=%LocalAppData%\calibre-cache ║ ║ Old: FileKey1=%LocalAppData%\calibre-cache\jsbrowser\data*|*.*|RECURSE ║ ║ New: FileKey1=%LocalAppData%\calibre-cache|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ CCleaner * has been modified ║ ║ ║ ╠ ╣ ║ Added 13 RegKeys ║ ║ ║ ║ RegKey1=HKLM\Software\Piriform\CCleaner|(Cfg)ABTestingNames ║ ║ RegKey2=HKLM\Software\Piriform\CCleaner|(Cfg)DTNP ║ ║ RegKey3=HKLM\Software\Piriform\CCleaner|(Cfg)DUNP ║ ║ RegKey4=HKLM\Software\Piriform\CCleaner|(Cfg)LastUpdate ║ ║ RegKey5=HKLM\Software\Piriform\CCleaner|BCD ║ ║ RegKey6=HKLM\Software\Piriform\CCleaner|FTU ║ ║ RegKey7=HKLM\Software\Piriform\CCleaner|GD ║ ║ RegKey8=HKLM\Software\Piriform\CCleaner|LatestICS ║ ║ RegKey9=HKLM\Software\Piriform\CCleaner|LLSR ║ ║ RegKey10=HKLM\Software\Piriform\CCleaner|PPC ║ ║ RegKey11=HKLM\Software\Piriform\CCleaner|StateSig ║ ║ RegKey12=HKLM\Software\Piriform\CCleaner|STS ║ ║ RegKey13=HKLM\Software\Piriform\CCleaner|UpdateKey ║ ║ ║ ╠ ╣ ║ ║ ║ CCleaner Network * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey2=%ProgramFiles%\CCleaner Network\Management Server\Logs|*.log ║ ║ New: FileKey2=%ProgramFiles%\CCleaner Network\Management Server\Logs|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Civilization Cache * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 DetectFiles ║ ║ ║ ║ DetectFile=%AppData%\My Games\Civilizaton 4 ║ ║ ║ ╠ ╣ ║ Removed 2 Detects ║ ║ Removed 6 FileKeys ║ ║ ║ ║ Detect1=HKCU\Software\Firaxis\Civilization5 ║ ║ Detect2=HKLM\Software\Firaxis Games ║ ║ FileKey2=%AppData%\My Games\Sid Meier's Civilization *\cache|*.dat ║ ║ FileKey3=%AppData%\My Games\Warlords\cache|*.dat ║ ║ FileKey4=%Documents%\My Games\Sid Meier's Civilization *\cache|*.db ║ ║ FileKey5=%LocalAppData%\My Games\Beyond the Sword\cache|*.dat ║ ║ FileKey6=%LocalAppData%\My Games\Sid Meier's Civilization *\cache|*.dat ║ ║ FileKey7=%LocalAppData%\My Games\Warlords\cache|*.dat ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey1=%AppData%\My Games\Beyond the Sword\cache|*.dat ║ ║ New: FileKey1=%AppData%\My Games\Civilizaton 4\Cache|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Discord * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey6=%AppData%\discord*\module_data\discord_hook|*.log ║ ║ ║ ╠ ╣ ║ ║ ║ DU Meter * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey1=%CommonAppData%\Hagel Technologies\DU Meter|*.csv ║ ║ New: FileKey1=%CommonAppData%\Hagel Technologies\DU Meter|*.csv;error.elf ║ ║ ║ ╠ ╣ ║ ║ ║ eMule * has been modified ║ ║ ║ ╠ ╣ ║ Added 5 FileKeys ║ ║ ║ ║ FileKey1=%CommonAppData%\eMule\config|*.bak;*.old ║ ║ FileKey2=%CommonAppData%\eMule\logs|*.* ║ ║ FileKey4=%LocalAppData%\eMule\logs|*.* ║ ║ FileKey5=%ProgramFiles%\eMule\config|*.bak;*.old ║ ║ FileKey6=%ProgramFiles%\eMule\logs|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ GetFLV * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ Added 1 RegKeys ║ ║ ║ ║ FileKey5=%ProgramFiles%\GetFLV\site_files|*.tmp ║ ║ RegKey1=HKCU\Software\GetFLV|AutoCaptureURL ║ ║ ║ ╠ ╣ ║ ║ ║ Getting Over It with Bennett Foddy * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 Detects ║ ║ ║ ║ Old: Detect=HKCU\Software\steam\apps\266490 ║ ║ New: Detect=HKCU\Software\Valve\Steam\Apps\266490 ║ ║ ║ ╠ ╣ ║ ║ ║ Google Update * has been modified ║ ║ ║ ╠ ╣ ║ Added 2 RegKeys ║ ║ ║ ║ RegKey1=HKLM\Software\Google\Update|LastCodeRedCheck ║ ║ RegKey2=HKLM\Software\Google\Update|LastStartedAU ║ ║ ║ ╠ ╣ ║ ║ ║ Hearthstone * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey2=%ProgramFiles%\Hearthstone|*.log;*.log.txt;*.dmp|RECURSE ║ ║ New: FileKey2=%ProgramFiles%\Hearthstone|*.log;*_log.txt;*.log.txt;*.dmp|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ HP Logs * has been modified ║ ║ ║ ╠ ╣ ║ Added 7 FileKeys ║ ║ ║ ║ FileKey8=%CommonAppData%\HP\HP Touchpoint Analytics Client\Logs|*.* ║ ║ FileKey9=%CommonAppData%\HP\HP Touchpoint Analytics Client\Monitor-History|*.* ║ ║ FileKey10=%CommonAppData%\HP\HP Touchpoint Analytics Client\MRU|*.* ║ ║ FileKey11=%CommonAppData%\HP\logs|*.*|RECURSE ║ ║ FileKey12=%CommonAppData%\HP\StreamLog|*.*|RECURSE ║ ║ FileKey16=%SystemDrive%|dism.log ║ ║ FileKey18=%WinDir%\HP|Installer.log ║ ║ ║ ╠ ╣ ║ ║ ║ IMVU * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 DetectFiles ║ ║ Added 8 FileKeys ║ ║ ║ ║ DetectFile=%AppData%\IMVU* ║ ║ FileKey3=%AppData%\IMVU Desktop*|cookies*;network persistent state ║ ║ FileKey4=%AppData%\IMVU Desktop*\blob_storage|*.*|RECURSE ║ ║ FileKey5=%AppData%\IMVU Desktop*\cache|*.*|RECURSE ║ ║ FileKey6=%AppData%\IMVU Desktop*\code cache|*.*|RECURSE ║ ║ FileKey7=%AppData%\IMVU Desktop*\crashpad\reports|*.*|RECURSE ║ ║ FileKey8=%AppData%\IMVU Desktop*\gpucache|*.*|RECURSE ║ ║ FileKey10=%AppData%\IMVUApp|*.log ║ ║ FileKey15=%LocalAppData%\IMVU*|*.log ║ ║ ║ ╠ ╣ ║ ║ ║ Inpaint * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 RegKeys ║ ║ ║ ║ RegKey3=HKCU\Software\Teorex\Inpaint\Settings|Folder ║ ║ ║ ╠ ╣ ║ ║ ║ IObit Advanced SystemCare * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey2=%AppData%\IObit\Advanced SystemCare*\Backup|*.reg ║ ║ ║ ╠ ╣ ║ ║ ║ IObit Smart Defrag * has been modified ║ ║ ║ ╠ ╣ ║ Modified 4 FileKeys ║ ║ ║ ║ Old: FileKey1=%ProgramFiles%\IObit\Smart Defrag *|*.log ║ ║ New: FileKey1=%ProgramFiles%\IObit\Smart Defrag*|*.log ║ ║ Old: FileKey2=%ProgramFiles%\IObit\Smart Defrag *\Log|*.* ║ ║ New: FileKey2=%ProgramFiles%\IObit\Smart Defrag*\Log|*.* ║ ║ Old: FileKey3=%ProgramFiles%\IObit\Smart Defrag *\Temp|*.*|RECURSE ║ ║ New: FileKey3=%ProgramFiles%\IObit\Smart Defrag*\Temp|*.*|RECURSE ║ ║ Old: FileKey4=%ProgramFiles%\IObit\Smart Defrag *\Update|*.tmp ║ ║ New: FileKey4=%ProgramFiles%\IObit\Smart Defrag*\Update|*.tmp ║ ║ ║ ╠ ╣ ║ ║ ║ IObit Uninstaller * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey2=%AppData%\IObit\IObit Uninstaller\Installer|*.dbg ║ ║ ║ ╠ ╣ ║ ║ ║ Kamo * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 Detects ║ ║ Added 4 RegKeys ║ ║ ║ ║ Detect=HKCU\Software\Piriform\Kamo ║ ║ RegKey1=HKCU\Software\Piriform\Kamo|epochAtInstall ║ ║ RegKey2=HKCU\Software\Piriform\Kamo|epochAtLastIPM ║ ║ RegKey3=HKCU\Software\Piriform\Kamo|epochForNextIPM ║ ║ RegKey4=HKCU\Software\Piriform\Kamo|epochSinceUILastUsed ║ ║ ║ ╠ ╣ ║ Removed 1 DetectFiles ║ ║ ║ ║ DetectFile=%ProgramFiles%\Kamo ║ ║ ║ ╠ ╣ ║ ║ ║ KMS Emulator * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 DetectFiles ║ ║ Added 1 FileKeys ║ ║ ║ ║ DetectFile2=%CommonAppData%\Online_KMS_Activation ║ ║ FileKey2=%CommonAppData%\Online_KMS_Activation|Logs.txt ║ ║ ║ ╠ ╣ ║ Modified 1 DetectFiles ║ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: DetectFile1=%CommonAppData%\KMSAuto ║ ║ New: DetectFile1=%CommonAppData%\KMSAuto* ║ ║ Old: FileKey1=%CommonAppData%\KMSAuto\bin|*.log ║ ║ New: FileKey1=%CommonAppData%\KMSAuto*\bin|*.log ║ ║ ║ ╠ ╣ ║ ║ ║ Lock Screen * has been modified ║ ║ ║ ╠ ╣ ║ Added 2 FileKeys ║ ║ ║ ║ FileKey4=%LocalAppData%\Packages\Microsoft.LockApp_*\AC\NVIDIA Corporation\NV_Cache|*.* ║ ║ FileKey5=%LocalAppData%\Packages\Microsoft.LockApp_*\AC\NVIDIA\DXCache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Malwarebytes Anti-Malware * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey10=%LocalAppData%\MBAM*\Cache\qmlcache|*.jsc;*.qmlc ║ ║ New: FileKey10=%LocalAppData%\MBAM*\Cache\qmlcache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Melodics * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey1=%LocalAppData%\Melodics\Melodics\Cache\qmlcache|*jsc;*.qmlc ║ ║ New: FileKey1=%LocalAppData%\Melodics\Melodics\Cache\qmlcache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Microsoft Teams * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey9=%AppData%\Microsoft\Teams\Service Worker\CacheStorage|*.*|REMOVESELF ║ ║ New: FileKey9=%AppData%\Microsoft\Teams\Service Worker\*Cache*|*.*|REMOVESELF ║ ║ ║ ╠ ╣ ║ ║ ║ MS Office * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey16=%LocalAppData%\TempOffice*|*.*|REMOVESELF ║ ║ ║ ╠ ╣ ║ ║ ║ MS OneDrive * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey5=%ProgramFiles%\Microsoft OneDrive\Setup\Logs|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Nero * has been modified ║ ║ ║ ╠ ╣ ║ Modified 2 FileKeys ║ ║ ║ ║ Old: FileKey20=%LocalAppData%\Nero\Nero *\Nero Vision\Cache|*.* ║ ║ New: FileKey20=%LocalAppData%\Nero\Nero*\Nero Vision\Cache|*.* ║ ║ Old: FileKey21=%LocalAppData%\Nero\Nero *\Nero Vision\Cache\GraphicObjectCache|*.* ║ ║ New: FileKey21=%LocalAppData%\Nero\Nero*\Nero Vision\Cache\GraphicObjectCache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Norton Secure VPN * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey2=%LocalAppData%\Norton Secure VPN\Cache\qmlcache|*.qmlc ║ ║ New: FileKey2=%LocalAppData%\Norton Secure VPN\Cache\qmlcache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ NT Registry Optimizer * has been modified ║ ║ ║ ╠ ╣ ║ Removed 1 FileKeys ║ ║ ║ ║ FileKey3=%WinDir%\ServiceProfiles\NetworkService|NTUSER.bak ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey2=%WinDir%\ServiceProfiles\LocalService|NTUSER.bak ║ ║ New: FileKey2=%WinDir%\*\LocalService|NTUSER.bak ║ ║ ║ ╠ ╣ ║ ║ ║ NVIDIA * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey20=%ProgramFiles%\NVIDIA Corporation\NVIDIA GeForce Experience|*.log ║ ║ ║ ╠ ╣ ║ ║ ║ OBS * has been modified ║ ║ ║ ╠ ╣ ║ Added 4 FileKeys ║ ║ ║ ║ FileKey5=%AppData%\obs-studio\plugin_config|*-journal;*.old;LOG|RECURSE ║ ║ FileKey6=%AppData%\obs-studio\plugin_config|Network Persistent State;Visited Links ║ ║ FileKey7=%AppData%\obs-studio\plugin_config\*Cache|*.*|RECURSE ║ ║ FileKey8=%AppData%\obs-studio\plugin_config\blob_storage|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Origin * has been modified ║ ║ ║ ╠ ╣ ║ Added 3 FileKeys ║ ║ ║ ║ FileKey6=%CommonAppData%\Origin\SelfUpdate\Staged|*.log ║ ║ FileKey10=%LocalAppData%\Origin\Origin\QtWebEngine\Default\Application Cache|*.*|RECURSE ║ ║ FileKey11=%LocalAppData%\Origin\Origin\QtWebEngine\Default\Service Worker\*Cache*|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Paradox Interactive Launcher * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 DetectFiles ║ ║ Added 9 FileKeys ║ ║ ║ ║ DetectFile1=%AppData%\Launcher-main ║ ║ FileKey1=%AppData%\Launcher-main|*-journal;*.old;LOG|RECURSE ║ ║ FileKey3=%AppData%\Launcher-main\*Cache|*.* ║ ║ FileKey5=%AppData%\Paradox Launcher\Logs|*.* ║ ║ FileKey6=%Documents%\Paradox Interactive\CrashReporter\Logs|*.* ║ ║ FileKey7=%Documents%\Paradox Interactive\CrashReporter\ShaderCache\dx*|*.*|RECURSE ║ ║ FileKey9=%LocalAppData%\Paradox Interactive\Launcher*\Chromium-Data|*-journal;*.old;LOG|RECURSE ║ ║ FileKey10=%LocalAppData%\Paradox Interactive\Launcher*\Chromium-Data|Network Persistent State;QuotaManager ║ ║ FileKey12=%LocalAppData%\Paradox Interactive\Launcher*\Chromium-Data\blob_storage|*.*|RECURSE ║ ║ FileKey13=%LocalAppData%\Paradox Interactive\Launcher*\Logs|*.* ║ ║ ║ ╠ ╣ ║ Modified 2 FileKeys ║ ║ ║ ║ Old: FileKey2=%LocalAppData%\Paradox Interactive\Launcher*\chromium-data|*.old;LOG|RECURSE ║ ║ New: FileKey2=%AppData%\Launcher-main|Network Persistent State;QuotaManager ║ ║ Old: FileKey4=%LocalAppData%\Paradox Interactive\Launcher*\Logs|*.log ║ ║ New: FileKey4=%AppData%\Launcher-main\blob_storage|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Plantronics Spokes * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey1=%LocalAppData%\Plantronics\Logs|*.dmp;*.log ║ ║ New: FileKey1=%LocalAppData%\Plantronics\Logs|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Plex Media Server * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey5=%LocalAppData%\Plex\Cache\qmlcache|*.jsc;*.qmlc ║ ║ New: FileKey5=%LocalAppData%\Plex\Cache\qmlcache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Prince of Persia * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 DetectFiles ║ ║ Modified 2 FileKeys ║ ║ ║ ║ Old: DetectFile=%ProgramFiles%\Ubisoft\Prince of Persia T2T ║ ║ New: DetectFile=%ProgramFiles%\Ubisoft\Prince of Persia* ║ ║ Old: FileKey1=%LocalAppData%\Ubisoft\Prince of Persia *|*.log ║ ║ New: FileKey1=%LocalAppData%\Ubisoft\Prince of Persia*|*.log ║ ║ Old: FileKey2=%ProgramFiles%\Ubisoft\Prince of Persia *|*.log;POPError.DAT ║ ║ New: FileKey2=%ProgramFiles%\Ubisoft\Prince of Persia*|*.log;POPError.DAT ║ ║ ║ ╠ ╣ ║ ║ ║ ProcessLasso * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey2=%LocalAppData%\ProcessLasso\Logs|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Quicken * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey11=%CommonAppData%\Quicken\Inet\QWWebData\Session Storage|Log.old ║ ║ ║ ╠ ╣ ║ ║ ║ RealPlayer * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey15=%LocalAppData%\Real\RealPlayer|*.db-shm;*.db-wal ║ ║ ║ ╠ ╣ ║ ║ ║ Realtek * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey1=%CommonAppData%\Realtek|*.log ║ ║ ║ ╠ ╣ ║ ║ ║ RegEditX * has been removed ║ ║ ║ ╠ ╣ ║ ║ ║ Roland Cloud Manager * has been modified ║ ║ ║ ╠ ╣ ║ Added 6 FileKeys ║ ║ ║ ║ FileKey6=%LocalAppData%\Roland Cloud\Cloud Manager*\Cache\QtWebEngine\Default\Cache|*.* ║ ║ FileKey7=%LocalAppData%\Roland Cloud\Cloud Manager*\QtWebEngine\Default|*-journal;*.old;LOG|RECURSE ║ ║ FileKey8=%LocalAppData%\Roland Cloud\Cloud Manager*\QtWebEngine\Default|QuotaManager;Visited Links ║ ║ FileKey9=%LocalAppData%\Roland Cloud\Cloud Manager*\QtWebEngine\Default\*Cache|*.*|RECURSE ║ ║ FileKey10=%LocalAppData%\Roland Cloud\Cloud Manager*\QtWebEngine\Default\blob_storage|*.*|RECURSE ║ ║ FileKey11=%LocalAppData%\Roland Cloud\Cloud Manager*\QtWebEngine\Default\VideoDecodeStats|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Samsung Magician * has been modified ║ ║ ║ ╠ ╣ ║ Added 2 FileKeys ║ ║ ║ ║ FileKey1=%AppData%\Samsung Magician\Local Storage\leveldb|*.old ║ ║ FileKey2=%AppData%\Samsung Magician\Session Storage|*.old ║ ║ ║ ╠ ╣ ║ ║ ║ Skype * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 RegKeys ║ ║ ║ ║ RegKey1=HKLM\Software\Skype\Installer|DonwloadLastModified ║ ║ ║ ╠ ╣ ║ ║ ║ Skype App * has been modified ║ ║ ║ ╠ ╣ ║ Added 6 FileKeys ║ ║ ║ ║ FileKey1=%LocalAppData%\Packages\Microsoft.SkypeApp_*\AC\amd\dxcache|*.* ║ ║ FileKey7=%LocalAppData%\Packages\Microsoft.SkypeApp_*\AC\Temp|*.* ║ ║ FileKey9=%LocalAppData%\Packages\Microsoft.SkypeApp_*\LocalCache\Roaming\Microsoft\Skype for Store|Network Persistent State║ ║ FileKey12=%LocalAppData%\Packages\Microsoft.SkypeApp_*\LocalState|*-shm;*-wal ║ ║ FileKey13=%LocalAppData%\Packages\Microsoft.SkypeApp_*\LocalState\DiagOutputDir|*.* ║ ║ FileKey15=%LocalAppData%\Packages\Microsoft.SkypeApp_*\LocalState\tracing\wppmedia|*.bak;*.etl ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey8=%LocalAppData%\Packages\Microsoft.SkypeApp_*\LocalState\DiagOutputDir|*.txt ║ New: FileKey8=%LocalAppData%\Packages\Microsoft.SkypeApp_*\LocalCache\Roaming\Microsoft\Skype for Store|*-journal;*.old;LOG|RECURSE ║ ║ ╠ ╣ ║ ║ ║ Skype for Desktop * has been modified ║ ║ ║ ╠ ╣ ║ Added 4 FileKeys ║ ║ ║ ║ FileKey2=%AppData%\Microsoft\Skype for Desktop|Network Persistent State;QuotaManager;Skype-Setup.exe ║ ║ FileKey3=%AppData%\Microsoft\Skype for Desktop\blob_storage|*.*|RECURSE ║ ║ FileKey6=%AppData%\Microsoft\Skype for Desktop\Media-stack|*.bak;*.blog;*.etl ║ ║ FileKey7=%AppData%\Microsoft\Skype for Desktop\skylib|*.blog ║ ║ ║ ╠ ╣ ║ Removed 1 FileKeys ║ ║ ║ ║ FileKey4=%AppData%\Microsoft\Skype for Desktop\Media-stack|*.bak;*.etl ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey1=%AppData%\Microsoft\Skype for Desktop|Skype-Setup.exe ║ ║ New: FileKey1=%AppData%\Microsoft\Skype for Desktop|*-journal;*.old;LOG|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Snagit * has been modified ║ ║ ║ ╠ ╣ ║ Added 6 RegKeys ║ ║ ║ ║ RegKey49=HKCU\Software\TechSmith\Snagit\22|CaptureOpenCount ║ ║ RegKey50=HKCU\Software\TechSmith\Snagit\22|OutputDirLastUsed ║ ║ RegKey51=HKCU\Software\TechSmith\Snagit\22|VidOutputDirLastUsed ║ ║ RegKey52=HKCU\Software\TechSmith\Snagit\22\Recent Captures ║ ║ RegKey53=HKCU\Software\TechSmith\Snagit\22\SnagitEditor\Recent File List ║ ║ RegKey54=HKCU\Software\TechSmith\Snagit\22\SnagItEditor\Tray|Thumbnailsize ║ ║ ║ ╠ ╣ ║ Modified 1 RegKeys ║ ║ ║ ║ Old: RegKey48=HKCU\Software\TechSmith\Snagit\Stamps|StampCustomFolder ║ ║ New: RegKey48=HKCU\Software\TechSmith\Snagit\22|CaptureCount ║ ║ ║ ╠ ╣ ║ ║ ║ Spotify * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 LangSecRefs ║ ║ ║ ║ Old: LangSecRef=3023 ║ ║ New: LangSecRef=3036 ║ ║ ║ ╠ ╣ ║ ║ ║ StarCraft II * has been modified ║ ║ ║ ╠ ╣ ║ Added 3 FileKeys ║ ║ ║ ║ FileKey2=%LocalAppData%\Blizzard Entertainment\StarCraft II\BrowserCookies|*-journal;*.old;LOG|RECURSE ║ ║ FileKey3=%LocalAppData%\Blizzard Entertainment\StarCraft II\BrowserCookies|Visited Links ║ ║ FileKey4=%LocalAppData%\Blizzard Entertainment\StarCraft II\BrowserCookies\*Cache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Steam Cache * has been modified ║ ║ ║ ╠ ╣ ║ Added 6 FileKeys ║ ║ ║ ║ FileKey3=%ProgramFiles%\Steam\appcache\librarycache|*.*|RECURSE ║ ║ FileKey8=%ProgramFiles%\Steam\steam\cached|*.*|RECURSE ║ ║ FileKey11=%ProgramFiles%\Steam\userdata\*\*|remotecache.vdf ║ ║ FileKey12=%ProgramFiles%\Steam\userdata\*\*\local|socache.dt ║ ║ FileKey13=%ProgramFiles%\Steam\userdata\*\config\librarycache|*.*|RECURSE ║ ║ FileKey14=%ProgramFiles%\Steam\userdata\*\inventorymsgcache|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ Removed 1 FileKeys ║ ║ ║ ║ FileKey7=%ProgramFiles%\Steam\steamapps\shadercache|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Steam Games * has been modified ║ ║ ║ ╠ ╣ ║ Added 4 FileKeys ║ ║ ║ ║ FileKey6=%ProgramFiles%\Steam\steamapps\downloading|*.*|RECURSE ║ ║ FileKey7=%ProgramFiles%\Steam\steamapps\shadercache|*.*|RECURSE ║ ║ FileKey9=%ProgramFiles%\Steam\steamapps\workshop\downloads|*.*|RECURSE ║ ║ FileKey10=%ProgramFiles%\Steam\steamapps\workshop\temp|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Sticky Notes * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey3=%LocalAppData%\Packages\Microsoft.MicrosoftStickyNotes_*\AC\NVIDIA\DXCache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Temporary Files * has been modified ║ ║ ║ ╠ ╣ ║ Modified 2 FileKeys ║ ║ ║ ║ Old: FileKey3=%WinDir%\ServiceProfiles\LocalService\AppData\Local\Temp|*.*|RECURSE ║ ║ New: FileKey3=%WinDir%\ServiceProfiles\*\AppData\Local\Temp|*.*|RECURSE ║ ║ Old: FileKey4=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Temp|*.*|RECURSE ║ ║ New: FileKey4=%WinDir%\System32\config\systemprofile\AppData\Local\Temp|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ The Binding of Isaac * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 DetectFiles ║ ║ ║ ║ DetectFile=%Documents%\My Games\Binding of Isaac* ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey1=%Documents%\My Games\Binding of Isaac *|*.dmp;isaacv*.txt;log.txt ║ ║ New: FileKey1=%Documents%\My Games\Binding of Isaac*|*.dmp;isaacv*.txt;log.txt ║ ║ ║ ╠ ╣ ║ ║ ║ The Binding of Isaac Rebirth * has been removed ║ ║ ║ ╠ ╣ ║ ║ ║ The Witcher * has been modified ║ ║ ║ ╠ ╣ ║ Modified 2 FileKeys ║ ║ ║ ║ Old: FileKey1=%LocalAppData%\The Witcher 2\temp|*.* ║ ║ New: FileKey1=%LocalAppData%\The Witcher*\logs|*.* ║ ║ Old: FileKey2=%LocalAppData%\The Witcher\logs|*.* ║ ║ New: FileKey2=%LocalAppData%\The Witcher*\Temp|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ VHD Attach * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey1=%ProgramFiles%\Josip Medved\VHD Attach|*.InstallLog ║ ║ ║ ╠ ╣ ║ ║ ║ VMware Personal Desktop Virtualization * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey8=%LocalAppData%\VMware\wdm\Logs|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Warhammer * has been modified ║ ║ ║ ╠ ╣ ║ Removed 6 FileKeys ║ ║ ║ ║ FileKey1=%AppData%\The Creative Assembly\Launcher|*.log;*_logs.txt ║ ║ FileKey2=%AppData%\The Creative Assembly\Launcher\electron|*.old;LOG|RECURSE ║ ║ FileKey3=%AppData%\The Creative Assembly\Launcher\electron\Cache|*.* ║ ║ FileKey4=%AppData%\The Creative Assembly\Launcher\electron\Service Worker\CacheStorage|*.*|RECURSE ║ ║ FileKey5=%AppData%\The Creative Assembly\Launcher\electron\Service Worker\ScriptCache|*.*|RECURSE ║ ║ FileKey6=%AppData%\The Creative Assembly\Warhammer*\*_cache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ WhatsApp * has been modified ║ ║ ║ ╠ ╣ ║ Added 2 FileKeys ║ ║ ║ ║ FileKey7=%AppData%\WhatsApp\Service Worker\*Cache*|*.*|RECURSE ║ ║ FileKey8=%AppData%\WhatsApp\VideoDecodeStats|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Windows Logs * has been modified ║ ║ ║ ╠ ╣ ║ Removed 4 FileKeys ║ ║ ║ ║ FileKey22=%WinDir%\Logs\dosvc|*.*|RECURSE ║ ║ FileKey23=%WinDir%\Logs\NetSetup|*.*|RECURSE ║ ║ FileKey24=%WinDir%\Logs\SIH|*.*|RECURSE ║ ║ FileKey25=%WinDir%\Logs\WindowsBackup|*.etl ║ ║ ║ ╠ ╣ ║ ║ ║ Windows Update * has been modified ║ ║ ║ ╠ ╣ ║ Removed 2 FileKeys ║ ║ ║ ║ FileKey1=%WinDir%\Logs\waasmedic*|*.*|RECURSE ║ ║ FileKey2=%WinDir%\Logs\WindowsUpdate|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Wondershare UniConverter * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 Detects ║ ║ ║ ║ Detect2=HKLM\Software\Wondershare\Wondershare UniConverter 13 ║ ║ ║ ╠ ╣ ║ Modified 3 FileKeys ║ ║ ║ ║ Old: FileKey2=%CommonAppData%\Wondershare\UniConverter\DataTrack|tmp;*.bak;*.log ║ ║ New: FileKey2=%CommonAppData%\Wondershare\UniConverter*\DataTrack|tmp;*.bak;*.log ║ ║ Old: FileKey3=%CommonAppData%\Wondershare\UniConverter\TempThumbDir|*.*|RECURSE ║ ║ New: FileKey3=%CommonAppData%\Wondershare\UniConverter*\TempThumbDir|*.*|RECURSE ║ ║ Old: FileKey5=%ProgramFiles%\Wondershare\UniConverter\Log|*.*|RECURSE ║ ║ New: FileKey5=%ProgramFiles%\Wondershare\*UniConverter*\Log|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ World of Warcraft * has been modified ║ ║ ║ ╠ ╣ ║ Added 4 FileKeys ║ ║ ║ ║ FileKey1=%ProgramFiles%\World of Warcraft\_*_\Logs|*.* ║ ║ FileKey4=%ProgramFiles%\World of Warcraft\Logs|*.* ║ ║ FileKey7=%Public%\games\World of Warcraft\Logs|*.* ║ ║ FileKey10=%SystemDrive%\World of Warcraft\Logs|*.* ║ ║ ║ ╠ ╣ ║ Removed 3 FileKeys ║ ║ ║ ║ FileKey3=%ProgramFiles%\World of Warcraft\Logs|*.log ║ ║ FileKey6=%Public%\games\World of Warcraft\Logs|*.log ║ ║ FileKey9=%SystemDrive%\World of Warcraft\Logs|*.log ║ ║ ║ ╠ ╣ ║ ║ ║ Service Worker * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ 2K Launcher * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ 4t Tray Minimizer * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ 7-Zip ZS * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Adaware * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Adobe Acrobat Distiller * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Aero Glass * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ AnalogX PortMapper * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Ankama Dofus * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Ankama Wakfu * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Anno 1404 * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Apowersoft iPhone Recorder * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Applet Password Wizard * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Attila * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ aTube Catcher * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Audio Control * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Avast TuneUp * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ AVS Audio Converter * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ AxCrypt * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Bitwarden * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Bloodstained: Ritual of the Night * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Box for Office * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Bulk Image Downloader * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ CareUEyes * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Comfort Keys Pro * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ CopyQ * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Crusader Kings II * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Danger Scavenger * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Dawn of War * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Doremi * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Dragon Age Origins Ultimate * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Dream Aquarium * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Dungeon Siege * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Empire Earth * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Endless Space * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Everything Toolbar * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Foxit PDF Editor * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Hearts of Iron IV * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Heroes of Hammerwatch * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Icewind Dale * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Imo Messenger * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ IObit Screen Recorder * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ IObit Software Updater * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ iTop Screen Recorder * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ iTop Screenshot * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ iTop VPN * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Jade Empire * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Jubler Subtitle Editor * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ KeyMapper * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ LBRY * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Leica Cyclone * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ LINE Messenger * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Magic: The Gathering Arena * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Men of War - Assault Squad * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Microsoft Support and Recovery Assistant * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Microsoft Whiteboard * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Microsys Backgammon Classic * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Microsys Gammonet * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Mortal Kombat Arcade Kollection * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ MS PowerToys * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Napoleon * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Picasa 3 * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Plague Inc: Evolved * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Polyball * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Red Button * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ RimWorld * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Rise Of Legends * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ RivetNetworks * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ She and the Light Bearer * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Shogun2 * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Sid Meier's Civilization V * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Signal Desktop * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Sins of a Solar Empire Rebellion * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Slack * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Solway Disk Investigator * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Steam Games Skin Cache * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ SubiT * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ TeamLink * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Telerik Fiddler Everywhere * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Terminal Studio * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ The Creative Assembly Launcher * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ The Da Vinci Code * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Titan Quest Anniversary Edition * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Turnip Boy Commits Tax Evasion * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Unreal Tournament: Game of the Year * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ UPnP Wizard * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ VoiCenter * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Wacom Tablet * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Windows Client WebExperience * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ XYplorer * has been added ║ ║ ║ ╠ ╣ ║ ║ ╚══════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════╝ ╔══════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════╗ ║ Summary ║ ╠══════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════╣ ║ Added entries: 90 ║ ║ Removed entries: 5 ║ ║ Modified entries: 81 ║ ║ * 165 added keys (total between all entries) ║ ║ * 38 removed keys (total between all entries) ║ ║ * 122 updated keys (total between all entries) ║ ╚══════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════╝

Encountered a setback in updating my documentation to reflect my new name which will delay things by at least several weeks. I will resume signing builds as soon as I am able.

https://github.com/MoscaDotTo/Winapp2/pull/824 Yes, just pending review and gathering up some entry requests from various submissions

There's been a few winapp2ool updates recently, just a reminder that until I get a new code signing certificate in my current name, builds will be unsigned and may cause false positives with your antivirus software because of this. Hopefully by mid December this should be resolved.