Jump to content

APMichael

Experienced Members
  • Posts

    984
  • Joined

  • Last visited

Posts posted by APMichael

  1. [Apple Installer Cache*] needs to be modified. It removes the .msi files only and leaves the empty Installer folders there. I'm attaching a few snapshots to understand this better .

     

    Please do not modify this entry. If you delete the folders also, QuickTime (and probably iTunes) recognizes this and wants to start a repair installation.

  2. AdwCleaner seems to cause issues with Trim.bat due to the brackets embedded in it

     

    Thank you for your reply. Ok, I think the users of AdwCleaner can delete those text files manually. They are not hard to find. :)

  3. Thanks for the update!

     

    Entry with a typo:

    [sun Java Logs*]

    LangSecRef=3022

    DetectOS=6.0

    Detect=HKLM\SOFTWARE\JavaSoft\Java Runtime Environment

    Default=False

    FileKey1=%LocalLowAppData%\Sun\Java\Deployment\Log|*.*

  4. Modified entry: (Fixed wrong path.)

     

    [sun Java Cache*]

    LangSecRef=3022

    DetectOS=6.0

    Detect=HKLM\SOFTWARE\JavaSoft\Java Runtime Environment

    Default=False

    FileKey1=%LocalLowAppData%\Sun\Java\Deployment\cache|*.*|RECURSE

    FileKey2=%LocalLowAppData%\Sun\Java\Deployment\SystemCache|*.*|RECURSE

    FileKey3=%WinDir%\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Development\Cache|*.*|RECURSE

    FileKey4=%WinDir%\SysWOW64\config\systemprofile\AppData\LocalLow\Sun\Java\Development\Cache|*.*|RECURSE

  5. Found another typo:

     

    [internet Explorer More*]

    LangSecRef=3022

    Detect=HKCU\Software\Microsoft\Internet Explorer

    Default=False

    FileKey1=%LocalAppData%\Microsoft\Internet Explorer\Recovery\Last Active|*.*|RECURSE

    FileKey2=%LocalLowAppData%\Microsoft\CryptnetUrlCache\Content|*.*

    FileKey3=%LocalLowAppData%\Microsoft\CryptnetUrlCache\MetaData|*.*

    FileKey4=%AppData%\Microsoft\Internet Explorer\UserData|*.*|RECURSE

    FileKey5=%LocalAppData%\Microsoft\Internet Explorer|brndlog.txt

    FileKey6=%LocalAppData%\Microsoft\Internet Explorer|brndlog.bak

    FileKey7=%AppData%\Microsoft\Internet Explorer|brndlog.bak

    FileKey8=%AppData%\Microsoft\Internet Explorer|brndlog.txt

    FileKey9=%WinDir%\System32\config\SystemProfile\Application Data\Microsoft\CryptnetUrlCache\Content|*.*

    FileKey10=%WinDir%\System32\config\SystemProfile\Application Data\Microsoft\CryptnetUrlCache\MetaData|*.*

    FileKey11=%WinDir%\System32\config\SystemProfile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData|*.*

    FileKey12=%WinDir%\System32\config\SystemProfile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content|*.*

    FileKey13=%WinDir%\System32\config\SystemProfile\Application Data\Microsoft\Internet Explorer|brndlog.bak

    FileKey14=%WinDir%\System32\config\SystemProfile\Application Data\Microsoft\Internet Explorer|brndlog.txt

    FileKey15=%WinDir%\System32\config\SystemProfile\AppData\LocalLow\Microsoft\Internet Explorer|brndlog.bak

    FileKey16=%WinDir%\System32\config\SystemProfile\AppData\LocalLow\Microsoft\Internet Explorer|brndlog.txt

    RegKey1=HKCU\Software\Microsoft\Internet Explorer\International|CNum_CpCache

    RegKey2=HKCU\Software\Microsoft\Internet Explorer\International|CpCache

    RegKey3=HKCU\Software\Microsoft\Internet Explorer\International\CpMRU

    RegKey4=HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore

    RegKey5=HKCU\Software\Microsoft\Internet Explorer\PageSetup

    RegKey6=HKCU\Software\Microsoft\Internet Explorer\Recovery\PendingDelete

     

     

    And a thought: I think the new entries with "Documents and Settings" keys won't work on a non-English Windows XP, because the folder names depend on the installed language. Sadly there are no environment variables or links for some of the system folders. You have to rewrite those entries for your installed language.

  6. Thanks for the huge update!

     

    Only one post was missed: - #2090 (Modified entry [belarc*])

     

    Some entries with typos:

     

    [Chrome Installer*]

    LangSecRef=3029

    DetectFile=%LocalAppData%\Google\Chrome

    Default=False

    FileKey1=%LocalAppData%\Google\Chrome\Application\*\Installer|*.*|REMOVESELF

     

    [LocalService Cookies*]

    LangSecRef=3025

    Detect=HKCU\Software\Microsoft\Windows

    Default=False

    FileKey1=%SystemDrive%\Documents and Settings\LocalService\Cookies|*.*|RECURSE

    FileKey2=%WinDir%\ServiceProfiles\LocalService\AppData\Local\Temp\Cookies|*.*|REMOVESELF

    FileKey3=%WinDir%\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies|*.*|REMOVESELF

    FileKey4=%SystemDrive%\Documents and Settings\LocalService.NT*\Cookies|*.*|RECURSE

     

    [NetworkService Cookies*]

    LangSecRef=3025

    Detect=HKCU\Software\Microsoft\Windows

    Default=False

    FileKey1=%SystemDrive%\Documents and Settings\NetworkService\Cookies|*.*|REMOVESELF

    FileKey2=%SystemDrive%\Documents and Settings\NetworkService.NT*\Cookies|*.*|REMOVESELF

    FileKey3=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Temp\Cookies|*.*|REMOVESELF

    FileKey4=%WinDir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies|*.*|REMOVESELF

     

    [MS AntiMalware More*]

    LangSecRef=3025

    Detect=HKLM\SOFTWARE\Microsoft\Microsoft Antimalware

    Default=False

    FileKey1=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Temp|MpCmdRun.log

    FileKey2=%SystemDrive%\Documents and Settings\NetworkService\Temp|MpCmdRun.log

    FileKey3=%SystemDrive%\Documents and Settings\NetworkService.NT*\Temp|MpCmdRun.log

     

    [Windows Media Player (Album Art Cache)*]

    LangSecRef=3023

    Detect=HKCU\Software\Microsoft\MediaPlayer

    Default=False

    FileKey1=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Media Player\Art Cache\LocalMLS|*.*|RECURSE

    FileKey2=%SystemDrive%\Documents and Settings\NetworkService\Local Settings\Microsoft\Media Player\Art Cache\LocalMLS|*.*|RECURSE

    FileKey3=%SystemDrive%\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Media Player\Art Cache\LocalMLS|*.*|RECURSE

  7. another suggestion for the Firefox/Mozilla section is to remove the 'Firefox' from entries with it in their name. example 'Firefox webappsstore.sqlite'. i realize there are multiple webappsstore.sqlite for the different mozilla programs but it looks weird when only a couple of the entries say Firefox when they are all firefox entries.

     

    You can only use a name once. Two or more entries with the same name are not possible, even if they are in different sections. Adding Firefox or Thunderbird to the name is the best solution.

     

    Adblock Plus Backups, Adblock Lite Backups and FlashGot are detected by DET_MOZILLA so they show even if you dont have them installed.

     

    Because you can't use wildcards (*) in a DetectFile line, there is no other way to detect those add-ons.

  8. I'm getting better at not missing things :rolleyes: I'll definitely make sure I nab those for next time. Sorry 'bout that :)

     

    :) No need to apologize. You are working on the winapp2.ini in your valuable free time and missing something can just happen.

  9. @saad2011: Thanks for your reply.

     

    New entry:

    [APC PowerChute Personal Edition*]

    LangSecRef=3024

    Detect=HKCU\Software\APC\PowerChute Personal Edition

    Default=False

    FileKey1=%ProgramFiles%\APC\PowerChute Personal Edition|PCPELog.txt

    FileKey2=%WinDir%\System32|PCPELog.txt

    FileKey3=%WinDir%\SysWOW64|PCPELog.txt

  10. Thanks for the update. But you accidentally missed following posts/entries again. Is it possible that you release a "hotfix" update, please?

     

    Missed posts:

    - #1824 (2 new entries: [Xmarks Sync Log*], [HTC Sync*])

    - #1875 (2 modified entries: [Apple Installer Cache*], [DivX Player*])

    - #1879 (new entry: [NetworkService Temps*])

    - #1926 (modified "JDownloader" entries)

    - #1942 (modified entry: [Freemake Video Downloader More*])

    - #1959 (modified entry: [Config.msi Folder*])

    - #1960 (3 new entries: [Emsisoft HiJackFree*], [ultraDefrag Portable (Log)*], [Windows ESENT Process (MRU)*])

     

    Modified entry:

    [FlashGot*]

    LangSecRef=3026

    SpecialDetect=DET_MOZILLA

    Default=False

    FileKey1=%AppData%\Mozilla\Firefox\Profiles\*|FlashGot.log

    FileKey2=%AppData%\Mozilla\Firefox\Profiles\*|FlashGot.log.bak*

     

    Modified entry:

    [spybot Search and Destroy History*]

    LangSecRef=3024

    Detect=HKLM\Software\Safer Networking Limited\SpybotSnD

    Default=False

    FileKey1=%CommonAppData%\Spybot – Search & Destroy\Backups|*.*|RECURSE

    FileKey2=%CommonAppData%\Spybot – Search & Destroy\Recovery|*.*|RECURSE

    FileKey3=%CommonAppData%\Spybot – Search & Destroy\Snapshots|*.*|RECURSE

    FileKey4=%CommonAppData%\Spybot – Search & Destroy\Snapshots2|*.*|RECURSE

     

    Rename suggestion:

    - Please rename [TuneUp XP*] to [TuneXP*].

     

    Missing blank lines:

    - Above the entry [Windows Audio/Video (Stats)*] is a blank line missing.

    - Above the entry [WinHasher*] is a blank line missing.

  11. Thank you very much for the update.

     

    Missed posts:

    #1824 (2 new entries)

    #1875 (2 modified entries)

    #1877 (modified entry)

    #1879 (new entry "NetworkService Temps")

    #1926 (modified "JDownloader" entries)

    #1942 (modified entry)

     

    Modified entry:

    [FlashGot*]

    LangSecRef=3026

    SpecialDetect=DET_MOZILLA

    Default=False

    FileKey1=%AppData%\Mozilla\Firefox\Profiles\*|FlashGot.log

    FileKey2=%AppData%\Mozilla\Firefox\Profiles\*|FlashGot.log.bak*

     

    Modified entry:

    [spybot Search and Destroy History*]

    LangSecRef=3024

    Detect=HKLM\Software\Safer Networking Limited\SpybotSnD

    Default=False

    FileKey1=%CommonAppData%\Spybot – Search & Destroy\Backups|*.*|RECURSE

    FileKey2=%CommonAppData%\Spybot – Search & Destroy\Recovery|*.*|RECURSE

    FileKey3=%CommonAppData%\Spybot – Search & Destroy\Snapshots|*.*|RECURSE

    FileKey4=%CommonAppData%\Spybot – Search & Destroy\Snapshots2|*.*|RECURSE

     

    Please rename [TuneUp XP*] to [TuneXP*].

     

    And above the entry [Windows Audio/Video (Stats)*] is a blank line missing.

  12. Thanks for the big update!

     

    Missed entries: #1824

     

    Modified entry:

    [Apple Installer Cache*]

    LangSecRef=3023

    Detect=HKCU\Software\Apple Computer, Inc.

    Warning=You have to reinstall iTunes after adding a new windows user account.

    Default=False

    FileKey1=%CommonAppData%\Apple Computer\Installer Cache\*|*.*

    FileKey2=%CommonAppData%\Apple\Installer Cache\*|*.*

     

    Entry with typo:

    [DivX Player*]

    LangSecRef=3023

    Detect1=HKCU\Software\DivX\Settings

    Detect2=HKCU\Software\DivXNetworks\DivX Player

    Default=False

    RegKey1=HKCU\Software\DivX\Settings\Player\PlayerState|LastOpenFileLocation

    RegKey2=HKCU\Software\DivX\Settings\TransferWizard|LastBrwosedDir

    RegKey3=HKCU\Software\DivX\Settings\Converter|lastBrowseDir

    RegKey4=HKCU\Software\DivX\Settings\Converter|outputDir

    RegKey5=HKCU\Software\DivXNetworks\DivX Player|file

     

    I think you can remove the entry ;[Macromedia Flashplayer*], because it seems that the RegKey doesn't exist anymore.

  13. I have a Windows 7 system with 2 user accounts. I added another account. I was not able to open iTunes from the newely created user account, It was asking me that the installer is not present. I have to uninstall the iTunes and re-install it.

     

    Strange, iTunes showed this behaviour only after I removed the empty subfolders from the cache folder. That's why the entry doesn't remove the subfolders and deletes the files only. Anyway I think it's better to add a warning line for this special case, instead of removing the entry. I never had problems with QuickTime and iTunes until now.

     

    Warning=You have to reinstall iTunes after adding a new windows user account.
    

     

    As for the [Registry Transaction Logs*] entry can you tell why there is a need to remove the .regtrans-ms files from the system? Most of these files are locked and even you try to remove them they will come back after rebooting the system. ...

     

    Thanks for your information. I don't use this entry. So the creator of the entry should comment this please.

     

    'Warning' in the entry explains it why.

     

    My suggestion is that entries for deleting setup files should be separate entries always. So everybody will be happy. :)

     

    [Windows Live Messenger Setup Files*]
    LangSecRef=3022
    Detect=HKLM\SOFTWARE\Microsoft\Windows Live\Messenger
    Warning=After running this, you will not be able to uninstall Windows Live Essentials components without downloading the installer again.
    Default=False
    FileKey1=%LocalLowAppData%\Microsoft\Windows Live\Setup|*.*|REMOVESELF
    

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.