CSGalloway

New Entries [AM-DeadLink*] Default=False Detect=HKCU\Software\aignes\deadlink LangSecRef=3022 FileKey1=%AppData%\aignes\AM-DeadLink|deadlink.log [KC Software SUMo*] Default=False Detect=HKCU\Software\KC Softwares\SUMo LangSecRef=3022 FileKey1=%AppData%\KC Softwares\SUMo|db.bak [Yahoo Messenger Chat Icons*] LangSecRef=3022 DetectFile=%ProgramFiles%\Yahoo!\Messenger\ Warning=This will delete all chat user-defined display pictures. Default=False FileKey1=%ProgramFiles%\Yahoo!\Messenger\Profiles\*\My Icons|*.* FileKey2=%AppData%\Local\VirtualStore\Program Files\Yahoo!\Messenger\Profiles\*\My Icons|*.*

A general comment. Since winapp2.ini is getting huge now and many people just use the file and not extracting the entries they need, it would be very beneficial if DETECTFILE entries were replaced with DETECT ones, as reading from the Registry is always quicker than from the hard drive.

New entry please [AM-DeadLink*] Default=False Detect=HKCU\Software\aignes\deadlink LangSecRef=3022 FileKey1=%AppData%\aignes\AM-DeadLink|deadlink.log I think I have the correct LangSecRef, it checks browser favorites/bookmarks and downloads Fav-Icons, checks duplicates.

Does 3.09 support regkeys of the form: [HKEY_CURRENT_USER\Identities\{0A22DB1E-8412-4D38-9011-F2525F13D995}\Software\Microsoft\Outlook Express\5.0\Find History] where the \{whatever}\ can be anything? similar to the wildcard folder ability in this version?

Do you have a: %userprofile%\Local Settings\Application Data\Microsoft\Windows Live\Setup folder? If so that is what I will also need. and a HUGE thank you for PF.ZIP too

I found http://www.vistapcguy.net/?p=173 which says that locallowappdatya is valid for vista so it would be nice if %LocalLowAppData% was docuents in the first post of this thread. I did find a zapmessenger.exe that removed WLMessenger so was hoping to find someone who could send me compressed copies of the follwing folders on their system: FileKey8=%ProgramFiles%\Common Files\Windows Live\.cache|*.*|RECURSE FileKey9=%LocalAppData%\Microsoft\Windows Live\Setup|*.*|RECURSE call the first one PF.zip and the 2nd one LAD.zip - then tell me the web addresses of =where they are stored. I'll download them and go from there.

re: [Windows Live Messenger More*] FileKey8=%ProgramFiles%\Common Files\Windows Live\.cache|*.*|RECURSE FileKey9=%LocalLowAppData%\Microsoft\Windows Live\Setup|*.*|RECURSE These two lines cause Windows Live Messenger and WLMAil not to be able to be removed. At least for the WinXP version. Is there a Windows XP user who has WL Mail installed who wouldn't mind uploading the contents of the two folders to a website so I can uninstall mine? There will be no privacy issues here.....

Add the following line to: [Windows Live Messenger More*] ExcludeKey1=FILE|%ProgramFiles%\Common Files\Windows Live\.cache|*.msi|RECURSE to correct the problem I was having and posted about a little while ago.

I use Windows XP and recently tried to remove Windows Live Essentials. The uninstall EXE could not be found. I usually run CCleaner with [Windows Live Messenger More*] selected. I looked in the registry and saw the pertinent files for the uninstall are in: %ProgramFiles%\Common Files\Windows Live\.cache|*.* %LocalLowAppData%\Microsoft\Windows Live\Setup|*.* folders. Can a warning be added to he entry warning that if selected the user will no longer be able top remove any Windows Live Essential product? Or if not delete the two entries in the Winapp2.ini please? Also can the revised file be posted soon - at least for4 the Secunia PSI modification I posted a few hours earlier? Thank you.

re : ; Application Cleaning files ; Version: v1.0.110727 [secunia PSI*] LangSecRef=3021 DetectFile=%ProgramFiles%\Secunia\PSIsua.exe Detect=HKCU\Software\Secunia\PSI Default=False FileKey1=%ProgramFiles%SecuniaPSI|sualog.txt FileKey2=%ProgramFiles%SecuniaPSI|psialog.txt FileKey3=%ProgramFiles%\Secunia\PSI|psialog.txt2 should be: [secunia PSI*] LangSecRef=3021 DetectFile=%ProgramFiles%\Secunia\PSIsua.exe Detect=HKCU\Software\Secunia\PSI Default=False FileKey1=%ProgramFiles%\Secunia\PSI|sualog.txt FileKey2=%ProgramFiles%\Secunia\PSI|psialog.txt FileKey3=%ProgramFiles%\Secunia\PSI|psialog.txt2 leaving out the "\" in the FileKeys... Also what happens if the DetectFile= is false and the Detect= is true = will the File and Reg Keys be executed?

[secunia PSI*] : csg : correected DetectFile line below and commented it out, added Detect= line ..., correected FileKeys... LangSecRef=3021 : DetectFile=%ProgramFiles%\Secunia\PSI\psi.exe Detect=HKCU\Software\Secunia\PSI Default=False FileKey1=%ProgramFiles%\Secunia\PSI|sualog.txt FileKey2=%ProgramFiles%\Secunia\PSI|psialog.txt FileKey3=%ProgramFiles%\Secunia\PSI|psialog.txt2

[secunia PSI*] : csg : correected DetectFile line below and commented it out, added Detect= line ..., correected FileKeys... LangSecRef=3021 : DetectFile=%ProgramFiles%\Secunia\PSI\psi.exe Detect=HKCU\Software\Secunia\PSI Default=False FileKey1=%ProgramFiles%\Secunia\PSI|sualog.txt FileKey2=%ProgramFiles%\Secunia\PSI|psialog.txt FileKey3=%ProgramFiles%\Secunia\PSI|psialog.txt2

Fixing an entry I had submitted correctly but didn't end up in the file correctly. [AOL 9.6*] Default=False DetectFile=%CommonAppData%\AOL\C_AOL Desktop 9.6 LangSecRef=3022 FileKey1=%CommonAppData%\AOL\C_AOL Desktop 9.6\spool|*.tmp FileKey2=%CommonAppData%\AOL\C_AOL Desktop 9.6\bart|*.*|RECURSE The problem is there was no \ after the ending % on the DetectFile line...

[AOL 9.6*] Default=False DetectFile=%CommonAppData%AOL\C_AOL Desktop 9.6 LangSecRef=3022 FileKey1=%CommonAppData%AOL\C_AOL Desktop 9.6\spool|*.tmp FileKey2=%CommonAppData%AOL\C_AOL Desktop 9.6\bart|*.*|RECURSE should be [AOL 9.6*] Default=False DetectFile=%CommonAppData%\AOL\C_AOL Desktop 9.6 LangSecRef=3022 FileKey1=%CommonAppData%\AOL\C_AOL Desktop 9.6\spool|*.tmp FileKey2=%CommonAppData%\AOL\C_AOL Desktop 9.6\bart|*.*|RECURSE

Last I heard IE 9 does not work on XP

Why is the slim version released days after the full and portable versions? Seems like it could be released at the same time..

To TOM AZ : Just right click on each opf the ones you mentioned and select Analyze - that will show you what is deleted. To winapp2.ini: I see several occurnaces of the full pathnames like c:\documents and settings\all users\application data\ - be nice to globally change that to %allusersprofile%\application data\ and similar for the ones that have %whatever% appreviations. The following entry needs to be changed for Multi-Edit 2008 11.04 that I submitted a few weeks ago. [Multi-Edit 2008 11.04*] LangSecref=3021 Detect=HKCU\Software\Multi Edit Software\Multi-Edit\11.0 Default=False FileKey1=%appdata%\Multi Edit Software\Multi-Edit\11\Config.04\Tmp|*.* Is there a way toi remove all the registry entries under HKCU\Software\Piriform\CCleaner that start with "(app)" ?? - it would be helpful when there is a winapp2.ini entry that is renamed so the old name is not needed any more.

Add: [Multi-Edit 2008 11.04*] LangSecref=3021 Detect=HKCU\Software\Multi Edit Software\Multi-Edit\11.0 Default=False FileKey1=%appdata%\Multi Edit Software\Multi-Edit\11\Config.04\Tmp\*.* [ACDSee 6.0 Standard Registry*] Default=False Detect=HKCU\Software\ACD Systems\ACDSee 6.0 LangSecref=3023 RegKey1=HKU\S-1-5-21-1202660629-854245398-1801674531-1003\Software\ACD Systems\ACDSee\60|HistMCFDestFolder RegKey2=HKU\S-1-5-21-1202660629-854245398-1801674531-1003\Software\ACD Systems\ACDSee\60|HistPaths RegKey3=HKU\S-1-5-21-1202660629-854245398-1801674531-1003\Software\ACD Systems\ACDSee\60|LastOptionPageName RegKey4=HKU\S-1-5-21-1202660629-854245398-1801674531-1003\Software\ACD Systems\ACDSee\60|OpenFolder RegKey5=HKU\S-1-5-21-1202660629-854245398-1801674531-1003\Software\ACD Systems\ACDSee\60\PrintOptions\OutputContactSheet|ContactSheetFN RegKey6=HKU\S-1-5-21-1202660629-854245398-1801674531-1003\Software\ACD Systems\ACDSee\60\PrintOptions\OutputContactSheet|ImageMapFN [AOL 9.6*] Default=False DetectFile=C:\Documents and Settings\All Users\Application Data\AOL\C_AOL Desktop 9.6 LangSecRef=3022 FileKey1=C:\Documents and Settings\All Users\Application Data\AOL\C_AOL Desktop 9.6\spool|*.tmp FileKey2=C:\Documents and Settings\All Users\Application Data\AOL\C_AOL Desktop 9.6\bart|*.*|RECURSE Change: [ACDSee 6.0 Standard*] to: [ACDSee 6.0 Standard Database*]

Please add: [Multi-Edit 2008 11.04*] LangSecref=3021 Detect=HKCU\Software\Multi Edit Software\Multi-Edit\11.0 Default=False FileKey1=%appdata%\Multi Edit Software\Multi-Edit\11\Config.04\Tmp\*.*

Seems that not all of a message posting is being sent by email. Case in point: ============ Begin Paste ================= CSGalloway, randomcore has just posted a reply to a topic that you have subscribed to titled "Get the Latest Winapp2.ini File". ---------------------------------------------------------------------- ------------ QUOTE ---------- ----------------------------- why to exclude the virtual RegHives? can get wiped, too. if you clear the sandbox using sandboxie control the RegHive file won't remain. everything behind your username will be deleted. so after cleanup there is no "DefaultBox" and because of this there are no RegHives inside of DefaultBox. the only file that remains is "DONT-USE.TXT" ---------------------------------------------------------------------- The topic can be found here: http://forum.piriform.com/index.php?showtopic=29438&view=getnewpost If you have configured in your control panel to receive immediate topic reply notifications, you may receive an email for each reply made to this topic. Otherwise, only 1 email is sent per board visit for each subscribed topic. This is to limit the amount of mail that is sent to your inbox. Unsubscribing: -------------- You can unsubscribe at any time by logging into your control panel and clicking on the "Manage Watched Topics" link in the "Forums" tab. ============ End Paste ================= Can this be fixed please?

Please add: [AVG AntiVirus 10.0 More] ID=2170 LangSecRef=3024 Detect=HKLM\SOFTWARE\AVG\Avg10 Default=True FileKey1=%allusersprofile%\Application Data\AVG10\IDS\config\|*.bak FileKey2=%allusersprofile%\Application Data\AVG10\IDS\profile\|*.bak FileKey3=%allusersprofile%\Application Data\AVG10\Temp\|*.tmp Also when using the embedded INIs plus the winapp2.ini I have: (when run in debug mode) 19:38:20:156250[DEBUG] OnRuleStarted | 3022 | | Google Talk 19:38:20:156250[DEBUG] OnRuleFinished | 3022 | | Google Talk 19:38:20:156250[DEBUG] OnRuleStarted | 3022 | | Google Talk* 19:38:20:171875[DEBUG] OnRuleFinished | 3022 | | Google Talk*

once the normal shortcut cleaning is done - I think it would be nice if it would then remove the folder.

re: [More Windows Live Messenger] What do the lines in winapp2.ini do if you select this? e.g. what is kept in: C:\Documents and Settings\Charles\Local Settings\Application Data\Microsoft\Windows Live Contacts\{981d6c3b-6fa6-4082-b1a9-b666ccbe1482}\DBStore\LogFiles\ re: [jv16 2009/2010/2011**] earlier in this thread. this entry only works if the last DetectFile returns true. So for users of just 2009 or 2010 it doesn't show. Does DetectFile support a number before the "=" sign? or it needs to be split into three entries.

Hi, There are: : occurances of "RECURSE|REMOVESELF" which can just have "RECURSE" : some lines end in "|" which is not necessary : Entry [AOL 9.1*] does not work. I have WinXP and I have AOL 9.1 but it does not show up. Narrowed down to the Detectfile entry - C:\Documents and Settings\Charles\Application Data\AOL\C_AOL 9.1 so the problem is the "_" between L and 9 should be a space. "C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.1\bart" should be "*.*|RECURSE" .... : Some entries have "*" before product name like "[*BreezeBrowser Pro]" where most are after product name. : [Free Download Manager*] The RegKey lines have some stuff at EndOfLine that doesn't make sense : Some FileKeys have "\|" while most have "|"; Be nice to just have one or the other... : Please add: [AOL AIM Messenger*] Default=False DetectFile=%appdata%\acccore\caches\bart FileKey1=%appdata%\acccore\caches\bart|*.*|RECURSE FileKey2=%LocalAppData%\AIM\Settings\aolbartcache|*.*|RECURSE LangSecRef=3022

Hi. The following files can be safely removed for users of AVG10. I have also let MrG know... C:\Documents and Settings\All Users\Application Data\AVG10\IDS\config\internalList.zip.bak C:\Documents and Settings\All Users\Application Data\AVG10\IDS\config\quarantinedList.zip.bak C:\Documents and Settings\All Users\Application Data\AVG10\IDS\config\userList.zip.bak C:\Documents and Settings\All Users\Application Data\AVG10\IDS\profile\globalLoadable.bak C:\Documents and Settings\All Users\Application Data\AVG10\Temp\file9514.tmp Thanks.