Nergal

Use, CCleaner's remove desktop shortcuts?

Did you use the cleaner? or Did you use the reg integrety part and clean everything. I have never experienced this with my CCleaner use (on any computer and I use it on a lot)

Alix Do you have access to another computer??? Hijak this and CCleaner will run portably, this may be the way to go. Also, esp if this is Bagel, here is a link to portible multivirus cleaner (at portablefreeware.com) it handles bagel http://www.portablefreeware.com/?id=810 and here is trend micro's cleaner that'll run porably and in safe mode http://www.portablefreeware.com/?id=643

Get systernal's Process explorer from the MS Site http://technet.microsoft.com/en-us/sysinte...s/bb896653.aspx and see what is opening and closing each time you do this. I've never heard of something like this happening that's soooooo bizarre. See if it still does it in Safe Mode. Run and live cd version of a antivirus and a rootkit revealer and make sure you don't have some sneaky fellow.

Unsure where you found freewarefiles.com. It doesn't seem very up and up http://www.siteadvisor.com/sites/freewaref...mp;locale=en-US

Davy Put it very well Put just in case: Read My signature at the bottom of my post. Really only remove things from the registry that you know no longer exist Example You uninstall RealPlayer You run the registry integ and see some thing along the lines of Missing Shared DLL C:\program files\RealPlayer\player.dll HKCU\Software\Realone\Realplayer That would be ok to remove because you've uninstalled realplayer. AS I said read and FOLLOW my signature and you'll be ok. (And listen to davey I've yet to see him steer someone wrong )

No this is just a shortcut in the recent documents section (Start Menu >Documents shows the most recent documents//songs you opened CCleaner removes the quick link) But there is no reason to CCleaner UNTIL the TROJAN IS GONE. Clean that first deal with your "Crap" (Thus the name crap cleaner) Later

This is ABSOLUTLY normal behavior (and this does happen (less frequently) with large files on XP as Well)

???? why not just run CCleaner after using the unistaller ???

I've NEVER encountered a cookie that couldn't be deleted you'll just have to resign in to any sites that you have set to remain logged in for ever (like piriform )

Also, How much space does CCleaner say it's removed. Because you have too much on your drive that isn't defined as "CRAP" by CCleaner (i.e. programs, Documents etc)

Just because something comes up on the REGCleaner section does not mean that you SHOULD remove it. In specific regards to IWinPwdSvc as I have said before IWinPwdSvc is a part of Symantec/Norton products (maybe other security Products too) The reason you can't remove it is that the security program sees you trying to remove it and says "Hey, that's not right, you must be malware trying to disable me by removing my secret Reg entries. I'm not going to let you do that." http://siteadvisor.cn/sites/digitalriver.c...nloads/3620018/

Just because something comes up on the REGCleaner section does not mean that you SHOULD remove it. In specific regards to IWinPwdSvc as I have said before IWinPwdSvc is a part of Symantec/Norton products (maybe other security Products too) The reason you can't remove it is that the security program sees you trying to remove it and says "Hey, that's not right, you must be malware trying to disable me by removing my secret Reg entries. I'm not going to let you do that." http://siteadvisor.cn/sites/digitalriver.c...nloads/3620018/

I'm going to guess that Chi is using and just started using FF3 and that this upgrade coincides with the lack of cookie cleaning. There are some amount of multiple ff3 users opening new threads about how CCleaner is not cleaning their firefox. I'm sure the developers are working on this for the next version. The Long and shirt of it is that ff3 does cookies and history differently than ff1 and ff2 did

here is a forum topic which uses a combination of domain controller scripts, Installing CCleaner on each computer with the same ini file (in my version the putting a portable version on a shared access read/write drive should work), and using the /auto switch within the script Hope that helps

??? ed, I'm assuming you mean the Firefox from John Haller's portableapps.com.(ver 3 or ver 2?) How come you don't just set the FF to delete privacy stuff at the end of the session. Tools > Options > Privacy in the Private data Section, check both options, press the settings and set the ones you want cleared. Then when you close your Firefox window you'll be given the option to clean or not. it's not the securely scrubbing you want but it does well. Otherwise yeah you'll need custom folders and to always have your portable drive mount to the same drive letter on every computer u use it on. Perhaps also (though I've never looked) there is a Firefox extension that will securely (in an amount of passes you approve of) delete your history and all. EDIT I found some extensions for you: Stealther: https://addons.mozilla.org/en-US/firefox/addon/1306 CookieSafe: https://addons.mozilla.org/en-US/firefox/addon/2497

As Corona insinuated the CCleaner reg cleaner is only as good as your knowledge of your own computer. The Best practice (IMHO) is three fold 1) Go in small Chunks (this will help when restoring reg entries that you backed up see 2) go checkmark by checkmark 2) Back up each time you clean and name each file, not the default but the name of the tree you are cleaning and the date you cleaned it. 3) DON'T Just Click and clean. If you don't know what something is Google it. Start by googling the entire reg key then if you get no (helpful) results pare down your search. (Helpful results might include someone's hijackthis log if someone has pointed out what something is, but usually these are a mess to go through). Many things are found by CCleaner that doesn't mean you don't use/need them examples below a) security Programs (i.e. Symantec/Norton, Mcafee) will often have reg entries that aren't "related" to anything, this helps keep hackers from being able to easily disable your security. b)File Extensions often just because a file extension is not assigned to a program this doesn't mean that a program doesn't exist on your computer that needs these extensions. (ex from my computer .amz is assigned to the Amazon File Downloader but still shows up in unused file extensions) That said, some of the Recent Changes to CCleaner's reg handler have greatly improved my accidental removal of entries I need. so really the most important items in my list are 1 and 2

????? um why not just use the Portable version????

yup, no auto script with VISTA AFAIK

The Following is MY OPINION ONLY AND REALLY I THINK IT IS UP TO YOU BUT IF I CAN HELP SOME BY GIVING MHO THAN I WILL. advanced old prefetch data (yes) menu order cache I use classic Start menu so I don't know about this one tray notifications cache (if you have specific things you've told Vista to always show or always Hide DO NOT DO THIS ONE else go for it it'll get rid of some programs that may have been one shots) windows sze/location cache Yes user assist history iis log files yes hotfix unistallers I do this but only just before the new patch tuesday when I've been using patches for a month and know I won't need to uninstall them custom files and folders only if you have custom files or folders set in the options section LOL

Mike, I'm assuming the CCleaner part you are running is the REG cleaner. When you go to reinstall the program first use REGShot and take the first shot before you install and the Second Shot after. This will tell you the regentries created by your keylogging program. Then when you run the CCleaner RegFIXER uncheck the regs you wish to keep. If it is the Cleaner Section you are using when it removes the program, you are going to have to do a click by click on the CCleaner list to find what's removing it. Here is a quick rundown on how to do a click by click uncheck everything in both the windows and the applications tab Check (put a checkmark) the first thing (Temporary Internet Files) click clean See if your logger still runs If so continue Check Cookies (so that it and Temporary files have check marks) Run Clean Continue in this manner with each setting that you have been using until the Keylogger ceases function. Come Back here when this is accomplished. NERGAL DOES NOT SUPPORT SPYING ON ANYONE INCLUDING YOUR OWN CHILDREN, THAT SAID WHAT YOU DO (AND HOW YOU HANDLE YOUR CHILD'S WEB USAGE) IS YOUR CHOICE AND I WILL PROVIDE HELP AS NEEDED.

Hi you wrote this while I was modifying my post so I'm posting so you get a modi email

Did you install G-Earth in the default location? If not please post the location you installed it to and some one will be able to modify the winapp2 entry to reflect your differences. Also you may need help on winapp2 (either obtaining or editing). you can find this at this thread and here in the beginner's guide It also seems that users seem to be assuming you have either plus or pro version of G-Earth installed. Thereis also the Regular version of G-Earth. I have run the installer for g-earth and found that (while it does write the reg entries as plus) there are two locations that need to have cleaning looked at by app2 writers: %appdata%\roaming contains the users location xml files %appdata%\local contains the dbcache.dat and dbcache.dat.index files (as weel as icons, images, and models folders) This is where the Vista version is differing when typing %appdata%\google\googleearth into the run box the roaming folder is opened thus Winapp2 and winapp are looking in the incorrect place for the dbcache files they need to look in the local folder (Note I do not know how to appropriately set this up for APP2 to do this but this is the info that a competent person needs) Cheers Nergal

I'd like to bump the suggestion for unlocker (from the post above). I've used it VERY successfully on my XP laptop for a number of years and it was often worked to get rid of stubborn folders and files. There are also a number of deletion programs that if they can't delete the file at that moment they will queue the file to bew deleted at the next computer bootup. The Custom Folder in CC is more for specific temp files that are created and not handled by CC in it's normal form (I use mine to remove a RSS Attchment folder that keeps being made because my Reader program won't honor the setting of don't download the attachment for this specific feed)

Rogue Remover should remove Antivirus 2008. You can use RR portably (so you aren't installing something that the rogue program will stop you from installing) Here is a link to RR on The Portable Freeware Collection (TPFC) which will also tell you how to set it up Portably. You'll need to use an extractor to make RR portable. Also instead of installing CC you may wish to use the portable version of it.