SMalik

I have made some changes to http://forum.piriform.com/index.php?showtopic=32310&p=246415 after I posted it.

New Entry [Wondershare Video Converter Ultimate*] LangSecRef=3023 Detect=HKLM\SOFTWARE\Wondershare Video Converter Ultimate Default=False FileKey1=%ProgramFiles%\Wondershare Video Converter Ultimate\Log|*.*|RECURSE FileKey2=%ProgramFiles%\Wondershare Video Converter Ultimate\TempThumbDir|*.*|RECURSE FileKey3=%CommonAppData%\Wondershare Video Converter Ultimate|*.dat.bak FileKey4=%CommonAppData%\Wondershare Video Converter Ultimate\TempSiteIconDir FileKey5=%CommonAppData%\Wondershare Video Converter Ultimate\TempThumbDir Revised Entries Added the highlighted lines. [Aimersoft Video Converter Ultimate*] LangSecRef=3023 Detect=HKLM\SOFTWARE\Aimersoft\Aimersoft Video Converter Ultimate Default=False FileKey1=%ProgramFiles%\Aimersoft\Video Converter Ultimate\Log|*.*|RECURSE FileKey2=%ProgramFiles%\Aimersoft\Video Converter Ultimate\TempThumbDir|*.*|RECURSE FileKey3=%CommonAppData%\Aimersoft Video Converter Ultimate|*.dat.bak FileKey4=%CommonAppData%\Aimersoft Video Converter Ultimate\TempSiteIconDir FileKey5=%CommonAppData%\Aimersoft Video Converter Ultimate\TempThumbDir [iSkysoft Video Converter Ultimate*] LangSecRef=3023 Detect=HKLM\SOFTWARE\iSkysoft\iSkysoft Video Converter Ultimate Default=False FileKey1=%ProgramFiles%\iSkysoft\Video Converter Ultimate\Log|*.*|RECURSE FileKey2=%ProgramFiles%\iSkysoft\Video Converter Ultimate\TempThumbDir|*.*|RECURSE FileKey3=%CommonAppData%\iSkysoft Video Converter Ultimate|*.dat.bak FileKey4=%CommonAppData%\iSkysoft Video Converter Ultimate\TempSiteIconDir FileKey5=%CommonAppData%\iSkysoft Video Converter Ultimate\TempThumbDir Wondershare Video Converter Pro is replaced by Ultimate. I think this entry should be removed. If you still like to keep it, then replace it with the one listed here. [Wondershare Video Converter Pro*] LangSecRef=3023 Detect=HKLM\SOFTWARE\Wondershare\Wondershare Video Converter Pro Default=False FileKey1=%ProgramFiles%\Wondershare Video Converter Pro\Log|*.*|RECURSE FileKey2=%ProgramFiles%\Wondershare Video Converter Pro\TempThumbDir|*.*|RECURSE FileKey3=%CommonAppData%\Wondershare Video Converter Pro|*.dat.bak FileKey4=%CommonAppData%\Wondershare Video Converter Pro\TempSiteIconDir FileKey5=%CommonAppData%\Wondershare Video Converter Pro\TempThumbDir

I'm not in favor either, but what about the other Winapp2 entries that remove registry backups?

Revised Entry Added *.powerlog into FileKey1 [iTunes Logs*] LangSecRef=3023 Detect=HKLM\SOFTWARE\Apple Computer, Inc.\iTunes Default=False FileKey1=%AppData%\Apple Computer\Logs\CrashReporter\MobileDevice|*.crash;*.log;*.powerlog|RECURSE FileKey2=%AppData%\Apple Computer\Logs\CrashReporter\MobileDevice\*\DiagnosticLogs|*.*|RECURSE FileKey3=%AppData%\Apple Computer\Logs\DeviceLink|*.log FileKey4=%AppData%\Apple Computer\Logs\MobileBackup|*.log FileKey5=%WinDir%\System32\config\systemprofile\AppData\Roaming\Apple Computer\Logs|*.log|RECURSE FileKey6=%WinDir%\SysWOW64\config\systemprofile\AppData\Roaming\Apple Computer\Logs|*.log|RECURSE

Registry backups in a .reg file.

Revised Entry Changed the DetectFile with Detect. [Wise Care 365*] LangSecRef=3024 Detect=HKLM\SOFTWARE\WiseCleaner\WiseCare365 Default=False FileKey1=%AppData%\Wise Care 365|Errorlog.txt;FailToRemove.dat New Entry [Wise Care 365 Backups*] LangSecRef=3024 Detect=HKLM\SOFTWARE\WiseCleaner\WiseCare365 Default=False FileKey1=%AppData%\Wise Care 365\Backup|*.*

Thanks for the update. [Wondershare SafeEraser*] entry missing in the "Full list of changes".

Thanks for explaining it.

Can we change the Detect to limit the [Adobe Incompatible Icons*] to Mac OS?

Any idea what is this for? [Adobe Incompatible Icons*] LangSecRef=3021 Detect=HKCU\Software\Adobe Default=False FileKey1=%CommonProgramFiles%\Adobe|*.icns|RECURSE FileKey2=%ProgramFiles%\Adobe|*.icns|RECURSE

Revised Entry Added: %LocalAppData%\Corel PaintShop Pro\16.0\Cache|*.* and RegKey1 [Corel PaintShop Pro X6 More*] LangSecRef=3023 Detect=HKCU\Software\Corel\PaintShop Pro\X6 Default=False FileKey1=%LocalAppData%\Corel PaintShop Pro\16.0\Cache|*.* FileKey2=%LocalAppData%\Corel PaintShop Pro\16.0\Database|*.db RegKey1=HKCU\Software\Corel\PaintShop Pro\X6\CoreMemoryManager\0 Please replace [Adobe Acrobat More*] with [Adobe Updater Logs*] Merged [Adobe Acrobat More*] and [Adobe Updater Logs*] entries [Adobe Updater Logs*] LangSecRef=3021 Detect=HKCU\Software\Adobe Default=False FileKey2=%LocalAppData%\Adobe\AAMUpdater|*.Log|RECURSE FileKey3=%LocalAppData%\Adobe\Updater*|*.log|RECURSE FileKey1=%LocalAppData%\Adobe\Acrobat\*\Updater|*.log FileKey1=%AppData%\Adobe\LogTransport*\Logs|ulog_*.tmp FileKey2=%AppData%\Adobe\Acrobat\*\Updater|*.log New Entry Moved: HKCU\Software\Adobe\Acrobat Distiller\PrinterJobControl from [Adobe Acrobat More*] to [Adobe Acrobat Distiller*] [Adobe Acrobat Distiller*] LangSecRef=3021 Detect=HKCU\Software\Adobe\Acrobat Distiller Default=False FileKey1=%AppData%\Adobe\Acrobat\Distiller 11|*.log FileKey2=%AppData%\Adobe\Acrobat\Distiller 11\Cache|*.* RegKey1=HKCU\Software\Adobe\Acrobat Distiller\PrinterJobControl Please replace [Adobe Acrobat Cache*] entry with [Adobe Acrobat XI More*] Changed [Adobe Acrobat Cache*] entry name to [Adobe Acrobat XI More*]. [Adobe Acrobat XI More*] LangSecRef=3021 Detect=HKCU\Software\Adobe\Adobe Acrobat Default=False FileKey1=%LocalAppData%\Adobe\Acrobat|*.idx|RECURSE FileKey2=%LocalAppData%\Adobe\Acrobat\11.0|UserCache.bin FileKey3=%LocalAppData%\Adobe\Acrobat\11.0\Cache|*.* Looks more professional after the changes

New Entry [Ashampoo Snap 7*] LangSecRef=3024 Detect=HKCU\Software\Ashampoo\Ashampoo Snap 7 Default=False FileKey1=%LocalAppData%\CrashRpt\UnsentCrashReports\*|*.*|RECURSE

You're right there is no need to add Detect2.

New Entry [Aviary Photo Editor*] LangSecRef=3031 Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\57AB5DD0.PhotoEditor_6hb943tstq5q8 DetectFile=%LocalAppData%\Packages\57AB5DD0.PhotoEditor_6hb943tstq5q8 Default=False FileKey1=%LocalAppData%\Packages\57AB5DD0.PhotoEditor_*\AC\AppCache|*.*|RECURSE FileKey2=%LocalAppData%\Packages\57AB5DD0.PhotoEditor_*\AC\INetCache|*.*|RECURSE FileKey3=%LocalAppData%\Packages\57AB5DD0.PhotoEditor_*\AC\INetCookies|*.*|RECURSE FileKey4=%LocalAppData%\Packages\57AB5DD0.PhotoEditor_*\AC\INetHistory|*.*|RECURSE FileKey5=%LocalAppData%\Packages\57AB5DD0.PhotoEditor_*\AC\Microsoft\CLR_v4.0|*.log|RECURSE FileKey6=%LocalAppData%\Packages\57AB5DD0.PhotoEditor_*\AC\Microsoft\CLR_v4.0\NativeImages\Temp|*.*|RECURSE FileKey7=%LocalAppData%\Packages\57AB5DD0.PhotoEditor_*\AC\Microsoft\CLR_v4.0_32|*.log|RECURSE FileKey8=%LocalAppData%\Packages\57AB5DD0.PhotoEditor_*\AC\Microsoft\CLR_v4.0_32\NativeImages\Temp|*.*|RECURSE FileKey9=%LocalAppData%\Packages\57AB5DD0.PhotoEditor_*\AC\Temp|*.* FileKey10=%LocalAppData%\Packages\57AB5DD0.PhotoEditor_*\LocalState|*.*|RECURSE FileKey11=%LocalAppData%\Packages\57AB5DD0.PhotoEditor_*\TempState|*.*|RECURSE

New Entry [Wondershare SafeEraser*] LangSecRef=3021 Detect=HKLM\Software\Wondershare\SafeEraser Default=False FileKey1=%SystemDrive%\se_tmp|*.*|REMOVESELF FileKey2=%AppData%\Wondershare\SafeEraser|*.log FileKey3=%AppData%\HYXDevPsnList|*.*|REMOVESELF I have corrected the Detect.

Revised Entry Added: %LocalAppData%\Microsoft\Credentials|*.*|RECURSE [Windows Live Photo Gallery*] LangSecRef=3023 Detect=HKCU\Software\Microsoft\Windows Live\Photo Gallery Default=False FileKey1=%LocalAppData%\Microsoft\Credentials|*.*|RECURSE FileKey2=%LocalAppData%\Microsoft\Windows Live Photo Gallery|*.*|RECURSE RegKey1=HKCU\Software\Microsoft\Windows Live\Photo Gallery|galleryscopedfolders RegKey2=HKCU\Software\Microsoft\Windows Live\Photo Aquisition\Camera|FinenameTemplate RegKey3=HKCU\Software\Microsoft\Windows Live\Photo Aquisition\Camera|RootDirectory

How about this?

New Entry [Wondershare Dr.Fone for Android*] LangSecRef=3021 Detect=HKLM\SOFTWARE\Wondershare\Dr.Fone for Android Default=False FileKey1=%ProgramFiles%\Wondershare\Dr.Fone for Android\log|*.*|RECURSE FileKey2=%AppData%\Wondershare\DrFoneAndroid\log|*.*|RECURSE

New Entries [iSkysoft Helper Compact*] LangSecRef=3021 Detect=HKLM\SOFTWARE\iSkysoft\iSkysoft Helper Compact Default=False FileKey1=%CommonProgramFiles%\iSkysoft\iSkysoft Helper Compact\log|*.*|RECURSE [iSkysoft Video Converter Ultimate*] LangSecRef=3023 Detect=HKLM\SOFTWARE\iSkysoft\iSkysoft Video Converter Ultimate Default=False FileKey1=%ProgramFiles%\iSkysoft\Video Converter Ultimate\Log|*.*|RECURSE FileKey2=%CommonAppData%\iSkysoft Video Converter Ultimate|*.dat.bak FileKey3=%CommonAppData%\iSkysoft Video Converter Ultimate\TempSiteIconDir FileKey4=%CommonAppData%\iSkysoft Video Converter Ultimate\TempThumbDir Please replace [iSkysoft Video Converter Logs*] entry with the one listed below. [iSkysoft Video Converter*] LangSecRef=3023 Detect=HKLM\SOFTWARE\iSkysoft\Video Converter Default=False FileKey1=%ProgramFiles%\iSkysoft\Video Converter\Log|*.*|RECURSE FileKey2=%CommonAppData%\iSkysoft Video Converter|*.dat.bak

Please remove the entry listed below. There is no .log file there to be removed ever. I have been watching this entry since PerfectDisk 12.5 & until the current build, 13.0. There is a file in that location called 'PDBootLog' and that is not a .log file. It is an essential file for the program. A snapshot of the location is attached with this post. [PerfectDisk More*] LangSecRef=3024 Detect=HKCU\Software\Raxco\PerfectDisk Default=False FileKey1=%CommonAppData%\Raxco\PerfectDisk\*|*.log

I think the highlighted lines should be removed from the VMware Workstation entry.

New Entry [Ashampoo Snap 7 (AutoSave)*] LangSecRef=3024 Detect=HKCU\Software\Ashampoo\Ashampoo Snap 7 Default=False FileKey1=%Pictures%\Ashampoo Snap 7\_SNAPDOC|*.*

The [AVG AntiVirus Installer*] should be removed. The FileKey1 is alreday in [AVG AntiVirus 2013 More*] and [AVG AntiVirus 2014*]. I also suggest changing the names to [AVG 2013 More*] and [AVG 2014*]. [AVG AntiVirus Installer*] LangSecRef=3024 Detect=HKLM\SOFTWARE\AVG Default=False FileKey1=%CommonAppData%\AVG*\SetupBackup|*.* ========================================= [AVG AntiVirus 2013 More*] LangSecRef=3024 Detect=HKLM\SOFTWARE\AVG\AVG2013 Default=False FileKey1=%CommonAppData%\AVG2013\IDS\config|*List.zip.bak FileKey2=%CommonAppData%\AVG2013\IDS\profile|globalLoadable.bak FileKey3=%CommonAppData%\AVG2013\Log|history.xml FileKey4=%CommonAppData%\AVG2013\SetupBackup|*.* FileKey5=%CommonAppData%\MFAData\Logs|*.* FileKey6=%LocalAppData%\AVG2013\log|*.log;*.log.* FileKey7=%LocalAppData%\AVG2013\temp|*.tmp FileKey8=%ProgramFiles%\AVG\AVG2013|updatecomps.bak;*.old FileKey9=%WinDir%\System32\config\systemprofile\AppData\Local\Avg2013\dumps|*.* FileKey10=%WinDir%\System32\config\systemprofile\AppData\Local\Avg2013\log|*.* FileKey11=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Avg2013\dumps|*.* FileKey12=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Avg2013\log|*.* [AVG AntiVirus 2014*] ID=2313 LangSecRef=3024 Detect=HKLM\SOFTWARE\AVG\AVG2014 Default=False FileKey1=%CommonAppData%\AVG2014\Log|*.log;history.xml FileKey2=%CommonAppData%\AVG2014\scanlogs|*.log FileKey3=%CommonAppData%\AVG2014\update\backup|*.* FileKey4=%CommonAppData%\AVG2014\Emc\Log|*.log FileKey5=%CommonAppData%\AVG2014\IDS\config|*List.zip.bak FileKey6=%CommonAppData%\AVG2014\IDS\profile|globalLoadable.bak FileKey7=%CommonAppData%\AVG2014\Temp|*.tmp FileKey8=%CommonAppData%\AVG2014\SetupBackup|*.* FileKey9=%CommonAppData%\MFAData\Logs|*.* FileKey10=%LocalAppData%\AVG2014\log|*.log;*.log.* FileKey11=%LocalAppData%\AVG2014\temp|*.tmp FileKey12=%ProgramFiles%\AVG\AVG2014|updatecomps.bak;*.old FileKey13=%WinDir%\System32\config\systemprofile\AppData\Local\Avg2014\dumps|*.* FileKey14=%WinDir%\System32\config\systemprofile\AppData\Local\Avg2014\log|*.* FileKey15=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Avg2014\dumps|*.* FileKey16=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Avg2014\log|*.*

I just corrected the paths because "nouser0000000000000001\120712-0049" was not a valid path. Please look at the posts listed below. http://forum.piriform.com/index.php?showtopic=32310&page=176&do=findComment&comment=241756 http://forum.piriform.com/index.php?showtopic=32310&page=185&do=findComment&comment=243364