Coffee4Joe

August 16, 2015

Added FileKey2

[PowerShell Cache*]
LangSecRef=3024
Detect=HKLM\Software\Microsoft\PowerShell
Default=False
FileKey1=%LocalAppData%\Microsoft\Windows\PowerShell\CommandAnalysis|*.*|RECURSE
FileKey2=%AppData%\Microsoft\Windows\PowerShell\PSReadline|*.*|RECURSE

August 12, 2015

Anybody got any current VM software that they have tested with W10?

If you have Win10 Pro Hyper-v has been working for me. I gave up on orcale during the Tech previews because it was constantly breaking.

August 10, 2015

I did try. It said it couldn't do it at this time.

***Edit...you do have to be logged into an account...

http://www.windowscentral.com/use-windows-10-xbox-app-record-games-programs

I am on a local account and have the option, But I'm also logged into the xbox app so maybe that's the reason.

Also disapointed my desktop gpu is one model below the cutoff for directx 12 (have a AMD hd6670 )

August 6, 2015

I think it's FileKey2=%LocalAppData%\Microsoft\Vault\*|*.vcrd

Thanks that did the trick, I split it into two entries and added a warning:

[Internet Explorer 10/11*]
LangSecRef=3022
DetectFile=%LocalAppData%\Microsoft\Windows\WebCache
Default=False
FileKey1=%LocalAppData%\Microsoft\SmartScreen|*.tmp
FileKey2=%LocalAppData%\Microsoft\Windows\AppCache|*.*|RECURSE
FileKey3=%LocalAppData%\Microsoft\Windows\IECompatCache|*.*|RECURSE
FileKey4=%LocalAppData%\Microsoft\Windows\IECompatUACache|*.*|RECURSE
FileKey5=%LocalAppData%\Microsoft\Windows\INetCache|*.*|RECURSE
FileKey6=%LocalAppData%\Microsoft\Windows\WebCache|*.*|RECURSE
FileKey7=%LocalAppData%\Microsoft\Windows\WebCache.old|*.*|REMOVESELF
FileKey8=%LocalLowAppData%\Microsoft\Windows\AppCache|*.*|RECURSE
FileKey9=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache|*.*|RECURSE
RegKey1=HKCU\Software\Microsoft\Internet Explorer\TypedURLSTime

[Internet Explorer 10/11 Vault Cache*]
LangSecRef=3022
DetectFile=%LocalAppData%\Microsoft\Windows\WebCache
Default=False
Warning=This will clear the saved passwords in the Windows 10 Mail App
FileKey1=%LocalAppData%\Microsoft\Vault\*|*.vcrd

How should we seperate the Windows 8.1 and Windows 10 Metro Apps. Most of the Windows 10 App paths are different.

Just the detects? I haven't done a fresh install so I'm not sure what's different. If it's just the detects maybe add DetectFile1 & DetectFile2. The FileKeys seem to be the same for me.

August 5, 2015

Warning: If you have a lot of accounts in the new Mail app on Win10. [internet Explorer 10/11*] removes the saved password of the accounts. You will get a Fix Account notification.

Not sure exactly which Key is causing it at the moment


[Internet Explorer 10/11*]
LangSecRef=3022
DetectFile=%LocalAppData%\Microsoft\Windows\WebCache
Default=False
FileKey1=%LocalAppData%\Microsoft\SmartScreen|*.tmp
FileKey2=%LocalAppData%\Microsoft\Vault\*|*.vcrd
FileKey3=%LocalAppData%\Microsoft\Windows\AppCache|*.*|RECURSE
FileKey4=%LocalAppData%\Microsoft\Windows\IECompatCache|*.*|RECURSE
FileKey5=%LocalAppData%\Microsoft\Windows\IECompatUACache|*.*|RECURSE
FileKey6=%LocalAppData%\Microsoft\Windows\INetCache|*.*|RECURSE
FileKey7=%LocalAppData%\Microsoft\Windows\WebCache|*.*|RECURSE
FileKey8=%LocalAppData%\Microsoft\Windows\WebCache.old|*.*|REMOVESELF
FileKey9=%LocalLowAppData%\Microsoft\Windows\AppCache|*.*|RECURSE
FileKey10=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache|*.*|RECURSE
RegKey1=HKCU\Software\Microsoft\Internet Explorer\TypedURLSTime

August 1, 2015

they do have this optional package https://support.microsoft.com/en-us/kb/3073930

http://www.zdnet.com/article/microsoft-releases-tool-to-hide-or-block-unwanted-windows-10-updates/

Haven't tested it yet

July 31, 2015

im not convinced windows as a service will be a subscription based OS. there's little precedent for it. Instead I think they'll go the android route of integrating MS services so heavily into the OS that you're basically gimped if you dont use them.

Windows as a service was a poor name choice imo. They mentioned that name right around the time of all the subscription based rumors and people went full panic mode. Reality it's more like Linux rolling releases. Instead of a monthly patch tuesday it's updates pushed as needed.

April 9, 2015

New

[GnuCash*]
LangSecRef=3021
Detect=HKCU\SOFTWARE\GSettings\org\gnucash\
Default=False
Warning=This removes the last open history, auto saves and logs.
RegKey1=HKCU\SOFTWARE\GSettings\org\gnucash\history
FileKey1=%UserProfile%\*|*.gnucash.*.log|RECURSE
FileKey2=%UserProfile%\*|*.gnucash.*.gnucash|RECURSE
FileKey3=%UserProfile%\*|translog.*.log

Not sure if you want to include FileKey1 &2. they are from the autosaving. There's no default folder for them, they use whichever location the user decides to save in.

edit: added FileKey3 and accounts. should of been wildcard *.

April 5, 2015

Added FileKey13

[Skype Temporary Files*]
LangSecRef=3022
Detect=HKCU\Software\Skype
Default=False
FileKey1=%AppData%\Skype\DbTemp|*.*|RECURSE
FileKey2=%AppData%\Skype|*.tmp|RECURSE
FileKey3=%AppData%\Skype\|*.db-journal|RECURSE
FileKey4=%AppData%\Skype\*\simcache|*.*
FileKey5=%AppData%\Skype\*\httpfe|*.*
FileKey6=%AppData%\Skype\*\ecache|*.*
FileKey7=%AppData%\Skype\DataRv|*.*
FileKey8=%AppData%\Skype\*\media_messaging\media_cache|*.*
FileKey9=%AppData%\Skype\*\media_messaging\storage_db\asyncdb\tmp|*.*
FileKey10=%AppData%\Skype\*\media_messaging\media_cache\asyncdb\tmp|*.*
FileKey11=%AppData%\Skype\*\qikdb\tmp|*.*
FileKey12=%AppData%\Skype\*\logs|*.*
FileKey13=%UserProfile%\Tracing\WPPMedia\*.*|RECURSE

Latest skype 7.3.0.101 seems to have lync logs now (probably from them moving lync to skype for business).

http://tomtalks.uk/2013/08/lync-2013-and-lync-2010-client-log-file-paths/
http://blogs.technet.com/b/nexthop/archive/2013/01/14/lync-2013-the-new-lync-web-app.aspx

I've only noticed the %UserProfile%\Tracing path added, none of the others.

"If the user is experiencing issues with audio/video when using Lync web App, collect the Lync Web App MediaStack logs at %userprofile%\tracing\WPPMedia\."

February 17, 2015

Hello @ Coffee4Joe - I've found it slow to start. But once it's running it responds normally and has never caused a system crash. Exactly which Crucial SSD model and which version of Windows are you using it on?

Cut and pasted from their website: "The Crucial Storage Executive is compatible with Microsoft^® Windows^® 7 or newer, and works with the Crucial M500, M550, MX100, MX200, and BX100 SSDs".

Have the m500 running windows 8.1 64bit. It just hangs up while it's doing the Checking Firmware. After that it's fine. Guess I was impatient and trying to click things before it was finished thinking.

February 17, 2015

@Derek, does the Crucial Storage Executive lag at all for you? I gave it a try but it would make my whole system become unresponsive for a few mins. Then switching from sysinfo to s.m.a.r.t. tab would crash it.
Maybe it just doesn't like nightly.

February 6, 2015

rocknroll it may be a bug with the other program that uses winapp2. Chrome ART* being the only SpecialDetect=DET_CHROME not under LangSecRef=3029.

January 25, 2015

Added FileKey6=
Minecrafts new launcher has it's own java runtime.

[Minecraft*]
Section=Games
DetectFile=%AppData%\.minecraft
Default=False
FileKey1=%AppData%\.minecraft|*.log;*.log.*
FileKey2=%AppData%\.minecraft\crash-reports|*.*
FileKey3=%AppData%\.minecraft\server|server.log
FileKey4=%AppData%\.minecraft\stats|*.old
FileKey5=%AppData%\.minecraft\logs|*.*
FileKey6=%AppData%\java|*.*|REMOVESELF

January 24, 2015

Edited (from winapp.ini)
added FileKey3=

[InkScape*]
LangSecRef=3023
Detect=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\inkscape.exe
Default=False
FileKey1=%AppData%\InkScape|*.log|RECURSE
FileKey2=%UserProfile%|.recently-used.xbel
FileKey3=%LocalAppData%|recently-used.xbel

January 16, 2015

Popular chrome addon µBlock has a version out for firefox now. https://github.com/gorhill/uBlock/releases

January 15, 2015

I have:
HKCR\Local Settings\Software\Microsoft\Windows\Shell\MuiCache

HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache

and some in the HKU\S-1-5-21-silly-numbers.... keys

and
HKCR\Local Settings\Software\Microsoft\Windows\Shell\BagMRU

HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU

HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags

HKCU\Software\Microsoft\Windows\Shell\BagMRU

HKCU\Software\Microsoft\Windows\Shell\Bags

and some in more silly number keys

January 14, 2015

It used to a long while back, haven't been using AMD/ATI for ages though so no idea what it does now

Figured it out, windows was faster then I was at updating drivers so it was remnants of that.

@Winapp2

can WINAPP2.ini be changed to Winapp2.ini in trim.bat?

so merge.bat plays nicer :wub:

I tested it out by replacing all WinApp2/WINAPP2's to just Winapp2 with no error

(^most winapp2s in a post record?)

January 12, 2015

Did [AMD/ATI*] ever remove installers?

I have:

"ccc2_install.exe" in C:\Program Files\AMD\CCC2\Install

"MOM.InstallProxy.exe" in C:\Program Files (x86)\ATI Technologies\ATI.ACE\MOM-InstallProxy

"MOM.InstallProxy.exe" in C:\Program Files (x86)\AMD\ATI.ACE\MOM-InstallProxy

November 28, 2014

Edited
Added RegKey3

[SketchUp Make*]
LangSecRef=3021
Detect=HKCU\Software\SketchUp
Default=False
FileKey1=%AppData%\SketchUp\SketchUp *\SketchUp|~*.tmp
RegKey1=HKCU\Software\SketchUp\SketchUp 2013\Recent File List
RegKey2=HKCU\Software\SketchUp\SketchUp 2014\Recent File List
RegKey3=HKCU\Software\SketchUp\SketchUp 2015\Recent File List

November 19, 2014

Shouldn't it be One Drive now?

:lol: Oops, that was the whole point of editing the entry too

Edited that entry, and noticed MS has started replacing instances of SkyDrive with OneDrive

Edited

Changed name from SkyDrive App Logs* to OneDrive App Logs*

Added DetectFile2 and FileKeys 2 & 4

[OneDrive App Logs*]
LangSecRef=3031
DetectFile1=%LocalAppData%\Microsoft\Windows\SkyDrive
DetectFile2=%LocalAppData%\Microsoft\Windows\OneDrive
Default=False
FileKey1=%LocalAppData%\Microsoft\Windows\SkyDrive\logs|*.*|RECURSE
FileKey2=%LocalAppData%\Microsoft\Windows\OneDrive\logs|*.*|RECURSE
FileKey3=%LocalAppData%\Microsoft\SkyDrive\logs|*.*|RECURSE
FileKey4=%LocalAppData%\Microsoft\OneDrive\logs|*.*|RECURSE

November 19, 2014

Changed name from [MS Office 2013 SkyDrive Setup Logs*] to [OneDrive Setup Logs*]

[OneDrive Setup Logs*]
LangSecRef=3021
Detect1=HKCU\Software\Microsoft\SkyDrive
Detect2=HKCU\Software\Microsoft\OneDrive
Default=False
FileKey1=%LocalAppData%\Microsoft\SkyDrive\Setup\Logs|*.*
FileKey2=%LocalAppData%\Microsoft\OneDrive\Setup\Logs|*.*

Edited: added Detect2 and FileKey2

November 14, 2014

Microsoft rebranded all their Bing apps to MSN recently. All the Detects are the same but should they be ranamed to MSN Maps, MSN News, MSN Health etc. etc. Or just Maps, News, Health or or leave them as is?

Went through Winapp2 today. Found somethings for you guys.

They look good but are missing the "Default=False"

November 9, 2014

New one for testing. Not sure if it should be merged with [skype Temp*] or pick n' choose entries to put into Skype Temp*.

The .db-journals are just temps of the .db files, Most the time they self-destruct when you quit skype

media_messaging is cached group chat avatars and for whatever reason remakes the same image everytime skype opens.

DataRv contains offline storage.

Edited: Split up FileKey6 media_messaging into 3 seperate keys.

[Skype Temp More*]
LangSecRef=3022
Detect=HKCU\Software\Skype
Default=False
FileKey1=%AppData%\Skype\|*.db-journal|RECURSE
FileKey2=%AppData%\Skype\*\simcache|*.*
FileKey3=%AppData%\Skype\*\httpfe|*.*
FileKey4=%AppData%\Skype\*\ecache|*.*
FileKey5=%AppData%\Skype\DataRv|*.*
FileKey6=%AppData%\Skype\*\media_messaging\media_cache|*.*
FileKey7=%AppData%\Skype\*\media_messaging\storage_db\asyncdb\tmp|*.*
FileKey8=%AppData%\Skype\*\media_messaging\media_cache\asyncdb\tmp|*.*
FileKey9=%AppData%\Skype\*\qikdb\tmp|*.*
FileKey10=%AppData%\Skype\*\logs|*.*

November 9, 2014

the bottom of the blog article

Our lawyers want me to remind you that these desktop images contain the intellectual property of Microsoft. They are offered for download solely for your own personal use under the Microsoft Terms of Use and General Microsoft Trademark Guidelines. Any other use, including redistribution, alteration, or commercial use, of the desktop images is prohibited.

Is a van of Redmond knee crackers going to be at my house for taking the "We're Open" wallpaper and making it dark blue?

October 27, 2014

Added Default=

[Steam Logs*]
Section=Games
Detect=HKCU\Software\Valve\Steam
Default=False
FileKey1=%ProgramFiles%\Steam|*.log;*log.last;connection_log_*.txt;*_log.txt;remote_connections.txt;vr*_*.txt|RECURSE
FileKey2=%ProgramFiles%\Valve\Steam|Steam.log
FileKey3=%ProgramFiles%\Valve\Steam\SteamLogs|*.log
FileKey4=%ProgramFiles%\Steam\vr\runtime\logs|*.*|RECURSE
FileKey5=%AppData%\SteamVR\Logs|*.*|REMOVESELF
FileKey6=%LocalAppData%\VirtualStore\Program Files*\Steam|*.log;*log.last;connection_log_*.txt;*_log.txt;remote_connections.txt;vr*_*.txt|RECURSE
FileKey7=%LocalAppData%\VirtualStore\Program Files*\Valve\Steam|Steam.log
FileKey8=%LocalAppData%\VirtualStore\Program Files*\Valve\Steam\SteamLogs|*.log


[Store*]
DetectOS=6.2|
Section=3031
Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\WinStore_cw5n1h2txyewy
Default=False
FileKey1=%LocalAppData%\Packages\WinStore_*\AC\AppCache|*.*|RECURSE
FileKey2=%LocalAppData%\Packages\WinStore_*\AC\INetCache|*.*|RECURSE
FileKey3=%LocalAppData%\Packages\WinStore_*\AC\INetCookies|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\WinStore_*\AC\INetHistory|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\WinStore_*\AC\Microsoft\CLR_v4.0\UsageLogs|*.*|RECURSE
FileKey6=%LocalAppData%\Packages\WinStore_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey7=%LocalAppData%\Packages\WinStore_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
FileKey8=%LocalAppData%\Packages\WinStore_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE
FileKey9=%LocalAppData%\Packages\WinStore_*\AC\Microsoft\Windows Store\Cache|*.*|RECURSE
FileKey10=%LocalAppData%\Packages\WinStore_*\AC\Microsoft\Windows Store\Data|history.dat
FileKey11=%LocalAppData%\Packages\WinStore_*\AC\PRICache|*.*
FileKey12=%LocalAppData%\Packages\WinStore_*\AC\Temp|*.*
FileKey13=%LocalAppData%\Packages\WinStore_*\LocalState\Cache|*.*|RECURSE
FileKey14=%LocalAppData%\Packages\WinStore_*\LocalState\LiveTile|*.*|RECURSE
FileKey15=%LocalAppData%\Packages\WinStore_*\LocalState\navigationHistory|*.*|RECURSE
FileKey16=%LocalAppData%\Microsoft\Windows Store\Cache Medium IL|*.*|RECURSE
FileKey17=%LocalAppData%\Microsoft\Windows Store\Cache|*.*|RECURSE
RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\WinStore_cw5n1h2txyewy\SearchHistory

[StarCraft II Logs*]
Section=Games
Detect=HKCU\Software\Blizzard Entertainment\StarCraft II
Default=False
FileKey1=%ProgramFiles%\Starcraft II\Logs|*.*
FileKey2=%Public%\games\Starcraft II\Logs|*.*
FileKey3=%SystemDrive%\Starcraft II\Logs|*.*
FileKey4=%Documents%\StarCraft II\GameLogs|*.*|RECURSE
FileKey5=%LocalAppData%\VirtualStore\Program Files*\Starcraft II\Logs|*.*

Sign In

Coffee4Joe

Posts

Joined

Last visited

Content Type

Forums

Events

Posts posted by Coffee4Joe

Winapp2.ini additions

Windows 10 available on July 29th

Windows 10 available on July 29th

Winapp2.ini additions

Winapp2.ini additions

Windows 10 available on July 29th

Windows 10 available on July 29th

Winapp2.ini additions

Winapp2.ini additions

(some) SSD's may last longer than currently thought

(some) SSD's may last longer than currently thought

Winapp2.ini additions

Winapp2.ini additions

Winapp2.ini additions

Firefox Extensions REBOOTED

Winapp2.ini additions

Winapp2.ini additions

Winapp2.ini additions

Winapp2.ini additions

Winapp2.ini additions

Winapp2.ini additions

Winapp2.ini additions

Winapp2.ini additions

It's official.. it's called Windows 10

Winapp2.ini additions

Browse

Activity

Home

Mobile

Business

Important Information