vBender
-
Posts
19 -
Joined
-
Last visited
Posts posted by vBender
-
-
Well you Winapp2.ini (person) I'm sure have better things to do than painstakingly sifting through someones whole winapp2.ini (file) to find changes. Uploading the whole thing and expecting you to do that is completely unacceptable!
For Windows XP, the entries are stored in the following registry key:
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Search Assistant \ ACMru \ 5603
For Windows Classic Search, the entries are stored in the following registry key:
HKEY_CURRENT_USER \ Software \ Microsoft \ Internet Explorer \ Explorer Bars \ {C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1} \ FilesNamedMRU
and please add Windows Remote Desktop logs, cache etc remover AND Microsoft Security Essentials logs, caches entries! I've noticed almost no entries for this! please search for these locations
[Windows XP MUICache*]
DetectOS=|5.1
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Windows\ShellNoRoam
Detect1=HKCU\Software\Microsoft\Windows\Shell
Default=False
RegKey1=HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache
RegKey2=HKCU\Software\Microsoft\Windows\ShellNoRoam\DUIBags
RegKey3=HKCU\Software\Microsoft\Windows\Shell\MUICache
[Windows Compatibility Assistant*]
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant
Default=False
RegKey1=HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted
RegKey2=HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store
RegKey3=HKU\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store
RegKey4=HKU\S-1-5-18\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store
[Windows XP ShellBags*]
DetectOS=|5.1
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Windows\ShellNoRoam
Detect1=HKCU\Software\Microsoft\Windows\Shell
Default=False
Warning=This will delete window size, window position and view setting of all folders.
RegKey1=HKCU\Software\Microsoft\Windows\ShellNoRoam\BagMRU
RegKey2=HKCU\Software\Microsoft\Windows\ShellNoRoam\Bags
RegKey3=HKCU\Software\Microsoft\Windows\Shell\BagMRU
RegKey4=HKCU\Software\Microsoft\Windows\Shell\Bags
[Windows XP System Profile*]
DetectOS=|5.1
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Windows
Default=False
FileKey1=%WinDir%\system32\config\systemprofile\Cookies|*.*|RECURSE
FileKey2=%WinDir%\system32\config\systemprofile\IETldCache|*.*|RECURSE
FileKey3=%WinDir%\system32\config\systemprofile\Local Settings\History|*.*|RECURSE
FileKey4=%WinDir%\system32\config\systemprofile\Local Settings\Temp|*.*|RECURSE
FileKey5=%WinDir%\system32\config\systemprofile\Local Settings\Temporary Internet Files|*.*|RECURSE
FileKey6=%WinDir%\System32\config\SystemProfile\Application Data\Microsoft\CryptnetUrlCache\Content|*.*
FileKey7=%WinDir%\System32\config\SystemProfile\Application Data\Microsoft\CryptnetUrlCache\MetaData|*.*
[Windows Search Cache*]
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Windows
Default=False
FileKey1=%LocalAppData%\Microsoft\Windows\Caches|*.*|RECURSE
FileKey2=%CommonAppData%\Microsoft\Windows\Caches|*.*|RECURSE
[Windows Session Manager*]
LangSecRef=3025
Detect=HKLM\Software\Microsoft\Windows
Default=False
RegKey1=HKLM\SYSTEM\CurrentControlSet\Control\Session Manager|PendingFileRenameOperations
RegKey2=HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCompatCache|AppCompatCache
FileKey1=%WinDir%\AppCompat\Programs|*.xml
FileKey2=%WinDir%\AppCompat\Programs\Install|*.xml
[Windows XP MUICache*]
DetectOS=|5.1
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Windows\ShellNoRoam
Detect1=HKCU\Software\Microsoft\Windows\Shell
Default=False
RegKey1=HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache
RegKey2=HKCU\Software\Microsoft\Windows\ShellNoRoam\DUIBags
RegKey3=HKCU\Software\Microsoft\Windows\Shell\MUICache
[Windows Log Files More*]
LangSecRef=3025
DetectFile=%WinDir%\Panther
Default=False
FileKey1=%WinDir%\Panther|cbs.log;DDACLSys.log
FileKey2=%WinDir%\inf|setupapi.offline.log
[Misc Metadata/Search/Filexts*]
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer
Detect1=HKCU\Software\Microsoft\Search Assistant
Default=False
RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2
RegKey2=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Map Network Drive MRU
RegKey3=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel
RegKey4=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
RegKey5=HKCU\Software\Microsoft\Search Assistant\ACMru
Exclude1=FILE|C:\Program Files\Fortres Grand\|cls_current_settings.txt
Include1=PATH|%CommonAppData%\Symantec\SEP\Logs\|*.log;*.tmp|RECURSE
Include2=PATH|%CommonAppData%\Symantec\SMA\Logs\|*.log;*.tmp|RECURSE
Include3=PATH|%CommonAppData%\Symantec\SMP\Logs\|*.log;*.tmp|RECURSE
Include4=PATH|%CommonAppData%\Symantec\Symantec Agent\Logs\|*.log;*.tmp|RECURSE
Include5=PATH|%UserProfile%\AppData\Local\VirtualStore\Program Files\Altiris\Altiris Agent\|*.log;*.tmp;*.txt|RECURSE
Include6=FILE|C:\Program Files\Altiris\Altiris Agent\Client Task Server\logs\|taskmanagement.log
Include7=PATH|C:\Program Files\Altiris\Altiris Agent\Logs\|*.log;*.tmp|RECURSE
Include8=PATH|C:\Program Files\Altiris\Altiris Agent\TaskManagement\statusXml\History\|*.log;*.tmp|RECURSE
Include9=PATH|C:\Program Files\Altiris\Notification Server\Logs\|*.log;*.tmp;*.txt|RECURSE
Include10=PATH|C:\Program Files\Fortres Grand\|*.txt;*.log;*.tmp|RECURSE
Include11=FILE|C:\Program Files\Fortres Grand\Clean Slate 5.0\|CSFileDiag.log
Include12=FILE|C:\Program Files\Fortres Grand\Clean Slate 5.0\|CSRegDiag.log
Include13=FILE|C:\Program Files\Fortres Grand\Clean Slate 6.5\|CSFileDiag.log
Include14=FILE|C:\Program Files\Fortres Grand\Clean Slate 6.5\|CSRegDiag.log
Include15=PATH|C:\Program Files\Fortres Grand\Clean Slate*\|CSFileDiag.log
Include16=PATH|C:\Program Files\Fortres Grand\Clean Slate*\|CSRegDiag.log
Include17=PATH|C:\WINDOWS\inf\|setupapi*log
Include18=FILE|C:\Windows\inf\|setupapi.app.log
Include19=FILE|C:\WINDOWS\inf\|setupapi.dev.log
Include20=FILE|C:\Windows\inf\|setupapi.log
sorry only ones I can remember
-
Sorry guys, I forgot some of the locations/entries I added and modified but from memory search acmru, all shellbags, fortres, muicache, windows related entries. there is a great tool called http://www.diffchecker.com/
paste my winapp2 into the original text box and the newest version of winapp2 into the modified text. it should highlight all of what i have added and modified (+ some removed/modified by winapp themselves in the past months)
also maybe not already included are these 2 locations :
For Windows XP, the entries are stored in the following registry key:
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Search Assistant \ ACMru \ 5603
For Windows Classic Search, the entries are stored in the following registry key:
HKEY_CURRENT_USER \ Software \ Microsoft \ Internet Explorer \ Explorer Bars \ {C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1} \ FilesNamedMRU
and do not remove [MS Search More*] and [Windows Search Cache*] these entries are very useful.
and please add Windows Remote Desktop logs, cache etc remover AND Microsoft Security Essentials logs, caches entries! I've noticed almost no entries for this! please search for these locations masters!
peace!
-
Great work Winapp2.ini and everyone else involved. this is a great project. I've uploaded my Winapp2.ini file which has about 10 new and modified entries, like F0rtr3z software and WinXP/Win 7 muicache, shellbags etc because I added new locations not included in the original file. Hoping this will be helpful for you guys
keep up the good work!
-
Does anyone know where these locations are on Win 2003 Enterprise i.e. recently searched + recently opened folders (they are still visible in the address bar of a folder), how can I locate this? I've tried finding their locations but cannot and it seems to me they aren't the same as the XP and Win7 locations?
-
Does anyone know where these locations are on Win 2003 Enterprise i.e. recently searched + recently opened folders (they are still visible in the address bar of a folder), how can I locate this? I've tried finding their locations but cannot and it seems to me they aren't the same as the XP and Win7 locations?
-
Does anyone know where these locations are on Win 2003 Enterprise i.e. recently searched + recently opened folders (they are still visible in the address bar of a folder), how can I locate this? I've tried both winapp.ini and winapp2.ini but both of them are quite unable to get rid of both.
Thanks for the help
-
Thank you guys, great work all around!
How useful is the winsxs folder? Can it be cleaned/deleted?
-
Cool update Winapp2, thank you! Thanks to everyone who helps + Piriform of course...thank you guys so much!
-
I assume all those "ntuser.dat" references are for HKEY_CURRENT_USER ("HKCU") ?
Correct.
-
Found some really good artifacts to delete. Some already in winapp2/ccleaner default, but others winapp2 doesn't do. please add
Open -> Run Dialog
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedPidlMRU
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedPidlMRULegacy
UserAssist Key
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist
ProgramsCache Key
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\ProgramsCache
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2\ProgramsCache
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2\ProgramsCacheTBP
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2\ProgramsCacheSMP
MUICache Key
- ntuser.dat\Software\Microsoft\Windows\ShellNoRoam\MUICache
- usrclass.dat\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
Run Key and Miscellaneous Applications
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Run
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Run\?*\
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\RunOnce\
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU
- ntuser.dat\Software\Sysinternals\?*\EulaAccepted
Recent Documents and Associated Keys
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Applets\?*\Recent [File List]
- ntuser.dat\Software\Adobe\?*\?*\AVGeneral\cRecentFiles\?*\tDIText
- and others ...
For the standard ‘Explorer\RecentDocs’ item, this key contains the recent documents as identified in the Windows "My Recent Documents" menu. Within the key is a "MRUListEx" value that identifies the most recently viewed items. If one parses the MRUListEx, one can display the items in the order that they were accessed relative to each other.
StreamMRU Key
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU
Open -> Save Dialog
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU/?*/
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU/?*/
Keys Associated with Office Documents
- ntuser.dat\Software\Microsoft\Office\?*\?*\Recent Files
- ntuser.dat\Software\Microsoft\Office\Office\?*\?*\File MRU
- ntuser.dat\Software\Microsoft\Office\Office\?*\?*\Place MRU
- and others ...
OpenWithList Key
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\?*\OpenWithList
Search History
- ntuser.dat\Software\Microsoft\Search Assistant\ACMru
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\WordWheelQuery
Favorites key
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\Favorites
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2\Favorites
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband\Favorites
Miscellaneous Metadata
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\Map Network Drive MRU
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
- and others ...
Credits to tzworks for these locations!
- ntuser.dat\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU
-
Also a "Remove skin" option inside ccleaner would help those who want to load and make ccleaner just a tad bit faster! And like another user suggested, remove temp files from [editable time]. Also, add more Windows Log files to the options
I swear CCleaner + Winapp2.ini = HEAVEN!
-
Great suggestion, this will be very useful. And also add this mod to other types of files/folders not jut temp files and it will be awesome!
-
Please add Symantec Endpoint Protection and all other Symantec products logs especially Norton [Antivirus] logs!
Norton keeps the most useless logs >.<
Also accesschk (sysinternals tool) keeps log of folders accessed. please clean these!
WInapp2.ini, i know you are smarter than me at finding logs, so please also delete logs from:
ShareWatch
System Tray Share Monitor
Net Share Monitor
WhoIsConnected
Thanks!~
-
I think adding Norton + Symantec LOGS will be very useful. Norton itself is very bad but its logs areuseless and need to be deleted asap. too bad i dont know where they are located
-
Add these logs please!
*.TMP
*CACHE*.DB
%SYSTEMROOT%\SYSTEM32\WINEVT\LOGS\
%SYSTEMROOT%\TEMP\
%APPDATA%\TEMP\
%SYSTEMROOT%\WINSXS\
%SYSTEMROOT%\PREFETCH\
%SYSTEMROOT%\SYSTEM32\LOGFILES\
%SYSTEMROOT%\SYSTEM32\SMI\
-
Great additions guys, thank you so much! Maybe you add other monitoring software to winapp2 such as faronic's deepfreeze, stoneware's lanschool and fortres' grand clean slate? Alot of people would be looking for these cleaners since none around. Thank you so much for these great works!
-
Great addition, thank you so much! Maybe you add other monitoring software to winapp2 such as faronic's deepfreeze, stoneware's lanschool, fortres' clean slate etc etc.? Thank you so much for these great works!
-
Hi, i'm kinda new to using ccleaner but I was just wondering what logs does ccleaner exactly clean? And these logs are not even logs am i right? Because I looked at my Event Viewer logs after using CCleaner to delete "Windows Logs" and there were still entries.
Thanks.
P.S. If it doesn't clear Event Viewer Logs, could you guys maybe possibly add this in?
Winapp2.ini additions
in CCleaner
Posted
you didn't add the changes i suggested!