SMalik

Could you please replace the Internet Explorer More entry with the one listed here and try it. I don't have a XP system to try it. [internet Explorer More*] LangSecRef=3022 DetectFile=%ProgramFiles%\Internet Explorer\iexplore.exe Default=False FileKey1=%LocalAppData%\Microsoft\Internet Explorer\Recovery\Last Active|*.*|RECURSE FileKey2=%LocalLowAppData%\Microsoft\CryptnetUrlCache\Content|*.* FileKey3=%LocalLowAppData%\Microsoft\CryptnetUrlCache\MetaData|*.* FileKey4=%AppData%\Microsoft\Internet Explorer\UserData|*.*|RECURSE RegKey1=HKCU\Software\Microsoft\Internet Explorer\International|CNum_CpCache RegKey2=HKCU\Software\Microsoft\Internet Explorer\International|CpCache RegKey3=HKCU\Software\Microsoft\Internet Explorer\International\CpMRU RegKey4=HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore RegKey5=HKCU\Software\Microsoft\Internet Explorer\PageSetup RegKey6=HKCU\Software\Microsoft\Internet Explorer\Recovery\PendingDelete Basically I have provided this entry but, someone added the lines listed below into this entry. FileKey1=%LocalAppData%\Microsoft\Internet Explorer|brndlog.* FileKey2=%LocalAppData%\Microsoft\Internet Explorer|*iconcache.dat FileKey3=%LocalAppData%\Microsoft\Internet Explorer\iconcache|*.*|REMOVESELF

It is related to the FileKey4. Last Active directory files traces in registry. FileKey4=%LocalAppData%\Microsoft\Internet Explorer\Recovery\Last Active|*.*|RECURSE

I think we should move "FileKey" before the "RegKey" in entries. I have tried some other privacy eraser programs and that is how they have their entries. For example: [internet Explorer More*] LangSecRef=3022 DetectFile=%ProgramFiles%\Internet Explorer\iexplore.exe Default=False FileKey1=%LocalAppData%\Microsoft\Internet Explorer|brndlog.* FileKey2=%LocalAppData%\Microsoft\Internet Explorer|*iconcache.dat FileKey3=%LocalAppData%\Microsoft\Internet Explorer\iconcache|*.*|REMOVESELF FileKey4=%LocalAppData%\Microsoft\Internet Explorer\Recovery\Last Active|*.*|RECURSE FileKey5=%LocalLowAppData%\Microsoft\CryptnetUrlCache\Content|*.* FileKey6=%LocalLowAppData%\Microsoft\CryptnetUrlCache\MetaData|*.* FileKey7=%AppData%\Microsoft\Internet Explorer\UserData|*.*|RECURSE RegKey1=HKCU\Software\Microsoft\Internet Explorer\International|CNum_CpCache RegKey2=HKCU\Software\Microsoft\Internet Explorer\International|CpCache RegKey3=HKCU\Software\Microsoft\Internet Explorer\International\CpMRU RegKey4=HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore RegKey5=HKCU\Software\Microsoft\Internet Explorer\PageSetup RegKey6=HKCU\Software\Microsoft\Internet Explorer\Recovery\PendingDelete

That issue has nothing to do with Internet Explorer More entry. I think that issue is with Adobe FlashPlayer or Shockwave Player. I think he should uninstall both the programs and re-install. http://forum.pirifor...ndpost&p=208487 What exactly Internet Explorer More entry removes. http://forum.pirifor...ndpost&p=192469 Some of them are included into CCleaner now.

MODIFIED ENTRY http://forum.piriform.com/index.php?showtopic=32310&view=findpost&p=207593 [internet Explorer More*] LangSecRef=3022 DetectFile=%ProgramFiles%\Internet Explorer\iexplore.exe Default=False RegKey1=HKCU\Software\Microsoft\Internet Explorer\International|CNum_CpCache RegKey2=HKCU\Software\Microsoft\Internet Explorer\International|CpCache RegKey3=HKCU\Software\Microsoft\Internet Explorer\International\CpMRU RegKey4=HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore RegKey5=HKCU\Software\Microsoft\Internet Explorer\PageSetup RegKey6=HKCU\Software\Microsoft\Internet Explorer\Recovery\PendingDelete FileKey1=%LocalAppData%\Microsoft\Internet Explorer|brndlog.* FileKey2=%LocalAppData%\Microsoft\Internet Explorer|*iconcache.dat FileKey3=%LocalAppData%\Microsoft\Internet Explorer\iconcache|*.*|REMOVESELF FileKey4=%LocalAppData%\Microsoft\Internet Explorer\Recovery\Last Active|*.*|RECURSE FileKey5=%LocalLowAppData%\Microsoft\CryptnetUrlCache\Content|*.* FileKey6=%LocalLowAppData%\Microsoft\CryptnetUrlCache\MetaData|*.* FileKey7=%AppData%\Microsoft\Internet Explorer\UserData|*.*|RECURSE Added: RegKey6=HKCU\Software\Microsoft\Internet Explorer\Recovery\PendingDelete Moved into alphabet order: RegKey4=HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore

Try this. http://www.mydigital...-google-chrome/ I was wondering if you also have Firefox installed on the system. Firefox has a feature called 'caret browsing'. The main reason that Firefox has this feature is that you can select text with your keyboard. This feature could cause the curser blink. You can disable this feature. Type in "about:config" in the address bar and then type in "caret" in the filter box and simply double click to change the option from "true" to "false".

I use this on Windows 7, no problem at all. Details about this entry. http://forum.pirifor...ndpost&p=192469

You're welcome Winapp2 MODIFIED ENTRY http://forum.piriform.com/index.php?showtopic=32310&view=findpost&p=207593 [Cached File Extensions*] LangSecRef=3025 Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer Default=False RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts

MODIFIED ENTRIES [Freemake Video Downloader*] LangSecRef=3023 Detect=HKCU\Software\Freemake\FreemakeVideoDownloader Default=False FileKey1=%ProgramFiles%\Freemake\Freemake Video Downloader|trace.log FileKey2=%CommonAppData%\Freemake\FreemakeVideoDownloader|*.txt FileKey3=%Documents%\Freemake\FreemakeVideoDownloader|fvd.bin FileKey4=%Documents%\Freemake\FreemakeVideoDownloader\History\Thumbnails|*.* FileKey5=%Documents%\Freemake\FreemakeVideoDownloader\History|*.xml [Freemake Audio Converter*] LangSecRef=3023 Detect=HKCU\Software\Freemake\FreemakeAudioConverter Default=False FileKey1=%CommonAppData%\Freemake\FreemakeAudioConverter|*.txt [Freemake Video Converter*] LangSecRef=3023 Detect=HKCU\Software\Freemake\FreemakeVideoConverter Default=False FileKey1=%CommonAppData%\Freemake\FreemakeVideoConverter|*.txt

Your point is very valid and genuine. I feel and believe that IE9 browser history is not being securely deleted by CCleaner. CCleaner uses IE9's built-in module to 'delete' the browser's history. I have tried East-Tec Eraser and R-Wipe & Clean programs. They both use their own modules to wipe IE9's browser history.

Thank you. At least someone here appreciates. I put a lot of effort into doing that. Creating a system image. Installing and testing the programs. Making the entries and then rolling the system back.

I think we should exclude only STARTUP folder and listgal.dat file. This location can store shortcuts of the Word templates separately and sometimes in a folder (diff. name each time). [MS Office Word More*] LangSecRef=3021 Detect=HKCU\Software\Microsoft\Office\Word Default=False FileKey1=%AppData%\Microsoft\Word|*.*|RECURSE FileKey2=%Documents%|~*.doc|RECURSE Excludekey1=FILE|%AppData%\Microsoft\Word\STARTUP\|*.* Excludekey2=FILE|%AppData%\Microsoft\Word\|listgal.dat

I have tried this on a Windows 7 32-bit system. Whenever I ran CCleaner with 'MS Search' entry enabled, Index (Search engine) got corrupted. Most of the Index files are locked. The safe way to remove the Index files is to wipe at system reboot and CCleaner doesn't have that option. I am listing the Application log below. The application cannot be initialized. Details: The registry value cannot be read because the configuration is invalid. Recreate the content index configuration by removing the content index. (HRESULT : 0x80040d03) (0x80040d03)

You have removed the highlighted line from the entry listed below. This was a valid path, iPhone creates crash logs (Diagnostics & Usage Data) and after syncing iPhone with iTunes, it transfers all the crash logs to computer. [iTunes Logs*] LangSecRef=3023 DetectFile=%ProgramFiles%\iTunes\iTunes.exe Default=False FileKey1=%AppData%\Apple Computer\Logs|*.crash|RECURSE FileKey2=%AppData%\Apple Computer\Logs|*.log|RECURSE FileKey3=%WinDir%\system32\config\systemprofile\AppData\Roaming\Apple Computer\Logs|*.log|RECURSE You also ignored all other entries that I posted few days before. I am listing all those entries here again. MODIFIED ENTRIES I have removed the RegKey6 line from the InternetExplorer More entry as it is not part of InternetExplorer. RegKey6=HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached I have made a new entry for this and that is listed below. [internet Explorer More*] LangSecRef=3022 DetectFile=%ProgramFiles%\Internet Explorer\iexplore.exe Default=False RegKey1=HKCU\Software\Microsoft\Internet Explorer\International|CNum_CpCache RegKey2=HKCU\Software\Microsoft\Internet Explorer\International|CpCache RegKey3=HKCU\Software\Microsoft\Internet Explorer\International\CpMRU RegKey4=HKCU\Software\Microsoft\Internet Explorer\PageSetup RegKey5=HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore FileKey1=%LocalAppData%\Microsoft\Internet Explorer|brndlog.* FileKey2=%LocalAppData%\Microsoft\Internet Explorer|*iconcache.dat FileKey3=%LocalAppData%\Microsoft\Internet Explorer\iconcache|*.*|REMOVESELF FileKey4=%LocalAppData%\Microsoft\Internet Explorer\Recovery\Last Active|*.*|RECURSE FileKey5=%LocalLowAppData%\Microsoft\CryptnetUrlCache\Content|*.* FileKey6=%LocalLowAppData%\Microsoft\CryptnetUrlCache\MetaData|*.* FileKey7=%AppData%\Microsoft\Internet Explorer\UserData|*.*|RECURSE [MS Office Temp Files*] LangSecRef=3021 DetectFile=%AppData%\Microsoft\Office Default=False RegKey1=HKCU\Software\Microsoft\Office\Common|FontBmpCache FileKey1=%AppData%\Microsoft\Office|*.tmp|RECURSE [Roxio Temp Files*] LangSecRef=3021 DetectFile=%AppData%\Roxio Default=False FileKey1=%LocalAppData%|rx_audio.Cache FileKey2=%LocalAppData%|rx_image32.Cache FileKey3=%AppData%\Roxio\Dragon\3.x\DiscInfoCache|*.tmp FileKey4=%AppData%\Roxio Burn\Temp|*.*|RECURSE NEW ENTRIES [Cached File Extensions*] LangSecRef=3025 Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts Default=False RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\ [Cached Shell Extensions*] LangSecRef=3025 Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions Default=False RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached [DivX Plus Player*] LangSecRef=3023 DetectFile=%ProgramFiles%\DivX\DivX Plus Player\DivX Plus Player.exe Default=False RegKey1=HKCU\Software\DivX\Settings\Player\PlayerState|LastOpenFileLocation RegKey2=HKCU\Software\DivX\Settings\TransferWizard|LastBrwosedDir RegKey3=HKCU\Software\DivX\Settings\Converter|lastBrowseDir RegKey4=HKCU\Software\DivX\Settings\Converter|outputDir [Windows Error Reporting More*] LangSecRef=3025 DetectFile=%Windir% Default=False RegKey1=HKU\S-1-5-18\Software\Microsoft\Windows\Windows Error Reporting\Debug|StoreLocation FileKey1=%WinDir%\System32\config\systemprofile\AppData\Local\CrashDumps|*.dmp [WMP MediaGuide*] LangSecRef=3023 DetectFile=%ProgramFiles%\Windows Media Player\wmplayer.exe Default=False RegKey1=HKCU\Software\Microsoft\MediaPlayer\Preferences|CurrentBackgroundScanFolder RegKey2=HKCU\Software\Microsoft\MediaPlayer\Services\MediaGuide|CachedIconPath RegKey3=HKCU\Software\Microsoft\MediaPlayer\Services\MediaGuide|CachedLargeLogoPath

Please replace [Paint.NET*] entry with the one listed below. [Paint.NET More*] LangSecRef=3021 Detect=HKCU\Software\Paint.NET Default=False FileKey1=%LocalAppData%\Paint.NET|*.*|RECURSE

I have edited the post listed below. http://forum.pirifor...ndpost&p=207373

Option 1: Ontrack EasyRecovery Professional v6.22 Option 2: Install a trial version of Active@ Boot Disk (http://www.ntfs.com/boot-disk.htm) and burn a bootable disc. Boot your system using that bootable disc. Run Active@ KillDisk from the file menu and scan the SD card. If you find the files on the SD card, then you can use Active@ File Recovery option from the file menu to recover the files.

This entry has nothing to do with that issue. This entry is completely safe.

MODIFIED ENTRY [internet Explorer More*] LangSecRef=3022 DetectFile=%ProgramFiles%\Internet Explorer\iexplore.exe Default=False RegKey1=HKCU\Software\Microsoft\Internet Explorer\International|CNum_CpCache RegKey2=HKCU\Software\Microsoft\Internet Explorer\International|CpCache RegKey3=HKCU\Software\Microsoft\Internet Explorer\International\CpMRU RegKey4=HKCU\Software\Microsoft\Internet Explorer\PageSetup RegKey5=HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore FileKey1=%LocalAppData%\Microsoft\Internet Explorer|brndlog.* FileKey2=%LocalAppData%\Microsoft\Internet Explorer|*iconcache.dat FileKey3=%LocalAppData%\Microsoft\Internet Explorer\iconcache|*.*|REMOVESELF FileKey4=%LocalAppData%\Microsoft\Internet Explorer\Recovery\Last Active|*.*|RECURSE FileKey5=%LocalLowAppData%\Microsoft\CryptnetUrlCache\Content|*.* FileKey6=%LocalLowAppData%\Microsoft\CryptnetUrlCache\MetaData|*.* FileKey7=%AppData%\Microsoft\Internet Explorer\UserData|*.*|RECURSE Removed: RegKey6=HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached NEW ENTRIES [Cached File Extensions*] LangSecRef=3025 Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts Default=False RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\ [Cached Shell Extensions*] LangSecRef=3025 Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions Default=False RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached

MODIFIED ENTRY [Roxio Temp Files*] LangSecRef=3021 DetectFile=%AppData%\Roxio Default=False FileKey1=%LocalAppData%|rx_audio.Cache FileKey2=%LocalAppData%|rx_image32.Cache FileKey3=%AppData%\Roxio\Dragon\3.x\DiscInfoCache|*.tmp FileKey4=%AppData%\Roxio Burn\Temp|*.*|RECURSE

I have problem after removing files from that location on Windows 7 32-bit and 64-bit systems. I was not able to turn On or Off some of the Windows features. For example: I was not able to turn Off Internet Explorer 9, Windows Media Center and Windows Media Player.

All the DivX entries into one entry. [DivX Cache*] [DivX Movies Cache*] [DivX Plus*] LangSecRef=3023 DetectFile=%ProgramFiles%\DivX\DivX Plus Player\DivX Plus Player.exe Default=False RegKey1=HKCU\Software\DivX\Settings\Player\PlayerState|LastOpenFileLocation RegKey2=HKCU\Software\DivX\Settings\TransferWizard|LastBrwosedDir RegKey3=HKCU\Software\DivX\Settings\Converter|lastBrowseDir RegKey4=HKCU\Software\DivX\Settings\Converter|outputDir RegKey5=HKCU\Software\DivXNetworks\DivXBrowserPlugin|cacheEntry1 RegKey6=HKCU\Software\DivXNetworks\DivXBrowserPlugin|cacheEntry2 RegKey7=HKCU\Software\DivXNetworks\DivXBrowserPlugin|cacheEntry3 RegKey8=HKCU\Software\DivXNetworks\DivXBrowserPlugin|cacheEntry4 RegKey9=HKCU\Software\DivXNetworks\DivXBrowserPlugin|cacheEntry5 RegKey10=HKCU\Software\DivXNetworks\DivXBrowserPlugin|cacheEntry6 FileKey1=%AppData%\DivX|Font Cache.|RECURSE If this is not possible then here is a new entry for DivX Plus Player: [DivX Plus Player*] LangSecRef=3023 DetectFile=%ProgramFiles%\DivX\DivX Plus Player\DivX Plus Player.exe Default=False RegKey1=HKCU\Software\DivX\Settings\Player\PlayerState|LastOpenFileLocation RegKey2=HKCU\Software\DivX\Settings\TransferWizard|LastBrwosedDir RegKey3=HKCU\Software\DivX\Settings\Converter|lastBrowseDir RegKey4=HKCU\Software\DivX\Settings\Converter|outputDir All the iTunes entries into one entry. [iTunes Album Artwork Cache*] [iTunes Logs*] [iTunes Previous Libraries*] [iTunes Temp Files*] [iTunes*] LangSecRef=3023 DetectFile=%ProgramFiles%\iTunes\iTunes.exe Default=False FileKey1=%Music%\iTunes\Album Artwork\Cache|*.*|RECURSE FileKey2=%Music%\iTunes\Previous iTunes Libraries|*.*|RECURSE FileKey3=%Music%\iTunes|*.tmp|RECURSE FileKey4=%AppData%\Apple Computer\Logs|*.crash|RECURSE FileKey5=%AppData%\Apple Computer\Logs|*.log|RECURSE FileKey6=%WinDir%\system32\config\systemprofile\AppData\Roaming\Apple Computer\Logs|*.log|RECURSE All the RealPlayer entries into one entry. [RealPlayer Converter*] [RealPlayer Database Files*] [RealPlayer Trimmer*] [RealPlayer 15 More*] LangSecRef=3023 DetectFile=%ProgramFiles%\Real\RealPlayer\realplay.exe Default=False FileKey1=%AppData%\Real\RealPlayer\db|*.*|RECURSE RegKey1=HKCU\Software\RealNetworks\RealConverter\15.0\Preferences\BrowsePath RegKey2=HKCU\Software\RealNetworks\RealConverter\15.0\Preferences\DestinationPath RegKey3=HKCU\Software\RealNetworks\RealTrimmer\15.0\Preferences\BrowsePath All the WMP entries into one entry. The highlighted lines are new. [WMP Album Art Cache*] [WMP Databases*] [WMP Last Played*] [WMP Transcoded Files Cache*] [Windows Media Player More*] LangSecRef=3023 DetectFile=%ProgramFiles%\Windows Media Player\wmplayer.exe Default=False FileKey1=%LocalAppData%\Microsoft\Media Player\Art Cache\LocalMLS|*.*|RECURSE FileKey2=%LocalAppData%\Microsoft\Media Player\Transcoded Files Cache|*.*|RECURSE FileKey3=%LocalAppData%\Microsoft\Media Player|lastplayed.wpl FileKey4=%LocalAppData%\Microsoft\Media Player|*.wmdb FileKey5=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Media Player|*.*|REMOVESELF RegKey1=HKCU\Software\Microsoft\MediaPlayer\Preferences|CurrentBackgroundScanFolder RegKey2=HKCU\Software\Microsoft\MediaPlayer\Services\MediaGuide|CachedIconPath RegKey3=HKCU\Software\Microsoft\MediaPlayer\Services\MediaGuide|CachedLargeLogoPath

It looks like the Restore points got corrupted. I have tried R-Wipe&Clean program. It deletes Restore points without any warning. There is another program East-Tec Eraser and it warns before deleting the Restore points. I am not sure about CCleaner.

It looks like there is a problem with Regitry permissions. Create a new User account with Administrator rights and try it. There is a way to fix Windows Registry permissions. Please look at the link listed below. http://www.windowsreference.com/security/reset-the-entire-registry-permissions-to-defaults/

I always create a system image before I test a new program or atleast creates a backup of registry hives. I wish you good luck travelingjg.