Jump to content

vBender

Experienced Members
  • Posts

    19
  • Joined

  • Last visited

Posts posted by vBender

  1. Well you Winapp2.ini (person) I'm sure have better things to do than painstakingly sifting through someones whole winapp2.ini (file) to find changes. Uploading the whole thing and expecting you to do that is completely unacceptable!

     

     

    For Windows XP, the entries are stored in the following registry key:

    HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Search Assistant \ ACMru \ 5603

    For Windows Classic Search, the entries are stored in the following registry key:

    HKEY_CURRENT_USER \ Software \ Microsoft \ Internet Explorer \ Explorer Bars \ {C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1} \ FilesNamedMRU

     

    and please add Windows Remote Desktop logs, cache etc remover AND Microsoft Security Essentials logs, caches entries! I've noticed almost no entries for this! please search for these locations

     

    [Windows XP MUICache*]

    DetectOS=|5.1

    LangSecRef=3025

    Detect=HKCU\Software\Microsoft\Windows\ShellNoRoam

    Detect1=HKCU\Software\Microsoft\Windows\Shell

    Default=False

    RegKey1=HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache

    RegKey2=HKCU\Software\Microsoft\Windows\ShellNoRoam\DUIBags

    RegKey3=HKCU\Software\Microsoft\Windows\Shell\MUICache

     

    [Windows Compatibility Assistant*]

    LangSecRef=3025

    Detect=HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant

    Default=False

    RegKey1=HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted

    RegKey2=HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store

    RegKey3=HKU\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store

    RegKey4=HKU\S-1-5-18\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store

     

    [Windows XP ShellBags*]

    DetectOS=|5.1

    LangSecRef=3025

    Detect=HKCU\Software\Microsoft\Windows\ShellNoRoam

    Detect1=HKCU\Software\Microsoft\Windows\Shell

    Default=False

    Warning=This will delete window size, window position and view setting of all folders.

    RegKey1=HKCU\Software\Microsoft\Windows\ShellNoRoam\BagMRU

    RegKey2=HKCU\Software\Microsoft\Windows\ShellNoRoam\Bags

    RegKey3=HKCU\Software\Microsoft\Windows\Shell\BagMRU

    RegKey4=HKCU\Software\Microsoft\Windows\Shell\Bags

     

     

    [Windows XP System Profile*]

    DetectOS=|5.1

    LangSecRef=3025

    Detect=HKCU\Software\Microsoft\Windows

    Default=False

    FileKey1=%WinDir%\system32\config\systemprofile\Cookies|*.*|RECURSE

    FileKey2=%WinDir%\system32\config\systemprofile\IETldCache|*.*|RECURSE

    FileKey3=%WinDir%\system32\config\systemprofile\Local Settings\History|*.*|RECURSE

    FileKey4=%WinDir%\system32\config\systemprofile\Local Settings\Temp|*.*|RECURSE

    FileKey5=%WinDir%\system32\config\systemprofile\Local Settings\Temporary Internet Files|*.*|RECURSE

    FileKey6=%WinDir%\System32\config\SystemProfile\Application Data\Microsoft\CryptnetUrlCache\Content|*.*

    FileKey7=%WinDir%\System32\config\SystemProfile\Application Data\Microsoft\CryptnetUrlCache\MetaData|*.*

     

    [Windows Search Cache*]

    LangSecRef=3025

    Detect=HKCU\Software\Microsoft\Windows

    Default=False

    FileKey1=%LocalAppData%\Microsoft\Windows\Caches|*.*|RECURSE

    FileKey2=%CommonAppData%\Microsoft\Windows\Caches|*.*|RECURSE

    [Windows Session Manager*]

    LangSecRef=3025

    Detect=HKLM\Software\Microsoft\Windows

    Default=False

    RegKey1=HKLM\SYSTEM\CurrentControlSet\Control\Session Manager|PendingFileRenameOperations

    RegKey2=HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCompatCache|AppCompatCache

    FileKey1=%WinDir%\AppCompat\Programs|*.xml

    FileKey2=%WinDir%\AppCompat\Programs\Install|*.xml

     

    [Windows XP MUICache*]

    DetectOS=|5.1

    LangSecRef=3025

    Detect=HKCU\Software\Microsoft\Windows\ShellNoRoam

    Detect1=HKCU\Software\Microsoft\Windows\Shell

    Default=False

    RegKey1=HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache

    RegKey2=HKCU\Software\Microsoft\Windows\ShellNoRoam\DUIBags

    RegKey3=HKCU\Software\Microsoft\Windows\Shell\MUICache

     

    [Windows Log Files More*]

    LangSecRef=3025

    DetectFile=%WinDir%\Panther

    Default=False

    FileKey1=%WinDir%\Panther|cbs.log;DDACLSys.log

    FileKey2=%WinDir%\inf|setupapi.offline.log

     

    [Misc Metadata/Search/Filexts*]

    LangSecRef=3025

    Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer

    Detect1=HKCU\Software\Microsoft\Search Assistant

    Default=False

    RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2

    RegKey2=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Map Network Drive MRU

    RegKey3=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel

    RegKey4=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

    RegKey5=HKCU\Software\Microsoft\Search Assistant\ACMru

     

     

    Exclude1=FILE|C:\Program Files\Fortres Grand\|cls_current_settings.txt

    Include1=PATH|%CommonAppData%\Symantec\SEP\Logs\|*.log;*.tmp|RECURSE

    Include2=PATH|%CommonAppData%\Symantec\SMA\Logs\|*.log;*.tmp|RECURSE

    Include3=PATH|%CommonAppData%\Symantec\SMP\Logs\|*.log;*.tmp|RECURSE

    Include4=PATH|%CommonAppData%\Symantec\Symantec Agent\Logs\|*.log;*.tmp|RECURSE

    Include5=PATH|%UserProfile%\AppData\Local\VirtualStore\Program Files\Altiris\Altiris Agent\|*.log;*.tmp;*.txt|RECURSE

    Include6=FILE|C:\Program Files\Altiris\Altiris Agent\Client Task Server\logs\|taskmanagement.log

    Include7=PATH|C:\Program Files\Altiris\Altiris Agent\Logs\|*.log;*.tmp|RECURSE

    Include8=PATH|C:\Program Files\Altiris\Altiris Agent\TaskManagement\statusXml\History\|*.log;*.tmp|RECURSE

    Include9=PATH|C:\Program Files\Altiris\Notification Server\Logs\|*.log;*.tmp;*.txt|RECURSE

    Include10=PATH|C:\Program Files\Fortres Grand\|*.txt;*.log;*.tmp|RECURSE

    Include11=FILE|C:\Program Files\Fortres Grand\Clean Slate 5.0\|CSFileDiag.log

    Include12=FILE|C:\Program Files\Fortres Grand\Clean Slate 5.0\|CSRegDiag.log

    Include13=FILE|C:\Program Files\Fortres Grand\Clean Slate 6.5\|CSFileDiag.log

    Include14=FILE|C:\Program Files\Fortres Grand\Clean Slate 6.5\|CSRegDiag.log

    Include15=PATH|C:\Program Files\Fortres Grand\Clean Slate*\|CSFileDiag.log

    Include16=PATH|C:\Program Files\Fortres Grand\Clean Slate*\|CSRegDiag.log

    Include17=PATH|C:\WINDOWS\inf\|setupapi*log

    Include18=FILE|C:\Windows\inf\|setupapi.app.log

    Include19=FILE|C:\WINDOWS\inf\|setupapi.dev.log

    Include20=FILE|C:\Windows\inf\|setupapi.log

     

    sorry only ones I can remember

  2. Sorry guys, I forgot some of the locations/entries I added and modified but from memory search acmru, all shellbags, fortres, muicache, windows related entries. there is a great tool called http://www.diffchecker.com/

     

    paste my winapp2 into the original text box and the newest version of winapp2 into the modified text. it should highlight all of what i have added and modified (+ some removed/modified by winapp themselves in the past months)

     

    also maybe not already included are these 2 locations :

     

    For Windows XP, the entries are stored in the following registry key:

    HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Search Assistant \ ACMru \ 5603

    For Windows Classic Search, the entries are stored in the following registry key:

    HKEY_CURRENT_USER \ Software \ Microsoft \ Internet Explorer \ Explorer Bars \ {C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1} \ FilesNamedMRU

     

    and do not remove [MS Search More*] and [Windows Search Cache*] these entries are very useful.

    and please add Windows Remote Desktop logs, cache etc remover AND Microsoft Security Essentials logs, caches entries! I've noticed almost no entries for this! please search for these locations masters!

     

     

    peace!

  3. Great work Winapp2.ini and everyone else involved. this is a great project. I've uploaded my Winapp2.ini file which has about 10 new and modified entries, like F0rtr3z software and WinXP/Win 7 muicache, shellbags etc because I added new locations not included in the original file. Hoping this will be helpful for you guys :)

     

    keep up the good work!

  4. Does anyone know where these locations are on Win 2003 Enterprise i.e. recently searched + recently opened folders (they are still visible in the address bar of a folder), how can I locate this? I've tried finding their locations but cannot and it seems to me they aren't the same as the XP and Win7 locations?

  5. Does anyone know where these locations are on Win 2003 Enterprise i.e. recently searched + recently opened folders (they are still visible in the address bar of a folder), how can I locate this? I've tried finding their locations but cannot and it seems to me they aren't the same as the XP and Win7 locations?

  6. Does anyone know where these locations are on Win 2003 Enterprise i.e. recently searched + recently opened folders (they are still visible in the address bar of a folder), how can I locate this? I've tried both winapp.ini and winapp2.ini but both of them are quite unable to get rid of both.

     

    Thanks for the help

  7. Found some really good artifacts to delete. Some already in winapp2/ccleaner default, but others winapp2 doesn't do. please add :)

    Open -> Run Dialog

    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU
    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedPidlMRU
    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedPidlMRULegacy

    UserAssist Key

    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist

    ProgramsCache Key

    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\ProgramsCache
    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2\ProgramsCache
    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2\ProgramsCacheTBP
    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2\ProgramsCacheSMP

    MUICache Key

    • ntuser.dat\Software\Microsoft\Windows\ShellNoRoam\MUICache
    • usrclass.dat\Local Settings\Software\Microsoft\Windows\Shell\MuiCache

    Run Key and Miscellaneous Applications

    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Run
    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Run\?*\
    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\RunOnce\
    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU
    • ntuser.dat\Software\Sysinternals\?*\EulaAccepted

    Recent Documents and Associated Keys

    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs
    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Applets\?*\Recent [File List]
    • ntuser.dat\Software\Adobe\?*\?*\AVGeneral\cRecentFiles\?*\tDIText
    • and others ...

    For the standard ‘Explorer\RecentDocs’ item, this key contains the recent documents as identified in the Windows "My Recent Documents" menu. Within the key is a "MRUListEx" value that identifies the most recently viewed items. If one parses the MRUListEx, one can display the items in the order that they were accessed relative to each other.

    StreamMRU Key

    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU

    Open -> Save Dialog

    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU/?*/
    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU/?*/

    Keys Associated with Office Documents

    • ntuser.dat\Software\Microsoft\Office\?*\?*\Recent Files
    • ntuser.dat\Software\Microsoft\Office\Office\?*\?*\File MRU
    • ntuser.dat\Software\Microsoft\Office\Office\?*\?*\Place MRU
    • and others ...

    OpenWithList Key

    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\?*\OpenWithList

    Search History

    • ntuser.dat\Software\Microsoft\Search Assistant\ACMru
    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\WordWheelQuery

    Favorites key

    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\Favorites
    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2\Favorites
    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband\Favorites

    Miscellaneous Metadata

    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2
    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\Map Network Drive MRU
    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel
    • ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
    • and others ...

    Credits to tzworks for these locations!

  8. Also a "Remove skin" option inside ccleaner would help those who want to load and make ccleaner just a tad bit faster! And like another user suggested, remove temp files from [editable time]. Also, add more Windows Log files to the options

     

    I swear CCleaner + Winapp2.ini = HEAVEN!

  9. Please add Symantec Endpoint Protection and all other Symantec products logs especially Norton [Antivirus] logs!

     

    Norton keeps the most useless logs >.<

     

     

    Also accesschk (sysinternals tool) keeps log of folders accessed. please clean these!

     

    WInapp2.ini, i know you are smarter than me at finding logs, so please also delete logs from:

     

    ShareWatch

    System Tray Share Monitor

    Net Share Monitor

    WhoIsConnected

     

    Thanks!~

  10. Add these logs please!

     

    *.TMP

    *CACHE*.DB

    %SYSTEMROOT%\SYSTEM32\WINEVT\LOGS\

    %SYSTEMROOT%\TEMP\

    %APPDATA%\TEMP\

    %SYSTEMROOT%\WINSXS\

    %SYSTEMROOT%\PREFETCH\

    %SYSTEMROOT%\SYSTEM32\LOGFILES\

    %SYSTEMROOT%\SYSTEM32\SMI\

  11. Great additions guys, thank you so much! Maybe you add other monitoring software to winapp2 such as faronic's deepfreeze, stoneware's lanschool and fortres' grand clean slate? Alot of people would be looking for these cleaners since none around. Thank you so much for these great works!

  12. Great addition, thank you so much! Maybe you add other monitoring software to winapp2 such as faronic's deepfreeze, stoneware's lanschool, fortres' clean slate etc etc.? Thank you so much for these great works!

  13. Hi, i'm kinda new to using ccleaner but I was just wondering what logs does ccleaner exactly clean? And these logs are not even logs am i right? Because I looked at my Event Viewer logs after using CCleaner to delete "Windows Logs" and there were still entries.

     

    Thanks.

     

    P.S. If it doesn't clear Event Viewer Logs, could you guys maybe possibly add this in?

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.