Jump to content

PICPro

Experienced Members
  • Posts

    87
  • Joined

  • Last visited

Posts posted by PICPro

  1. OpenOffice can use the same treatment for program_old* folders (added filekey7):

    [OpenOffice.org *]
    LangSecRef=3021
    Detect1=HKLM\Software\OpenOffice
    Detect2=HKLM\Software\OpenOffice.org
    Default=False
    FileKey1=%AppData%\OpenOffice*\*\user|*.log;*.log.txt;*.tmp;registrymodifications.xcu;registration.xml|RECURSE
    FileKey2=%AppData%\OpenOffice*\*\user\config\imagecache|*.*
    FileKey3=%AppData%\OpenOffice*\*\user\registry\cache|*.*
    FileKey4=%AppData%\OpenOffice*\*\user\registry\data\org\openoffice\Office|Views.xcu;Writer.xcu;Common.xcu;Histories.xcu
    FileKey5=%AppData%\OpenOffice*\*\user\registry\data\org\openoffice\ucb|Hierarchy.xcu;Store.xcu
    FileKey6=%ProgramFiles%\OpenOffice*\program|*.log|RECURSE
    FileKey7=%ProgramFiles%\OpenOffice*\program_old*|*.*|REMOVESELF
    FileKey8=%ProgramFiles%\OpenOffice*\share\uno_packages\cache\uno_packages|*.tmp;*.log;log.txt
    

  2. wow! does this build work? https://github.com/MoscaDotTo/Winapp2/blob/Branch1/winapp2ool/winapp2oolXP.exe


    Unfortunately, it does not: "not a valid Win32 application", same as trying to run regular Winapp2ool.exe. Comes up with "not a valid win32 applicaion" both in XP64 and regular XP.


  3. Just a report in case you want to add support for this:

    In "winapp2oolXP.exe", I have a computer here that comes up with unable to identify operating system version when trying to trim and says to report the following:
    out: 5.2

    This is a Windows XP Professional 64 bit service pack 2 computer. Trim.bat works but winapp2ool.exe would be a lot nicer. Regular winapp2ool.exe doesn't run on this computer.

  4. I see that in today's update that the new Chromium based Edge entries are now LangSecRef=3006 which looks good in the list and comes up in the Edge Chromium section.

    For consistency, should the following old non-chromium Edge entries be changed to LangSecRef=3005 rather than 3022? They would then go into the Microsoft Edge section that would appear underneath of the Windows section in the list.

    [Microsoft Edge *]
    [Microsoft Edge Favorites Backup *]
    [Microsoft Edge Favorites Icons *]

  5. Could we add Basilisk browser to Winapp2.ini?
    https://www.basilisk-browser.org/

    It has been out since 2017 and regularly updated.
    The Winapp2.ini entries would be the same entries as Pale Moon, but instead of the FileKey paths having \Moonchild Productions\Pale Moon\, they are \Moonchild Productions\Basilisk\

    The Detect would be:
    Detect1=HKLM\Software\ComodoGroup\IceDragon
    Detect2=HKLM\Software\FlashPeak\SlimBrowser
    Detect3=HKLM\Software\Mozilla\Basilisk
    Detect4=HKLM\Software\Mozilla\Pale Moon
    Detect5=HKLM\Software\Mozilla\SeaMonkey
    Detect6=HKLM\Software\Mozilla\Waterfox
    DetectFile=%AppData%\Mozilla\Firefox

    Thank you.

  6. I'd like to make a suggestion for Winapp3.ini:

    This removes the software reporter files from Google Chrome that occasionally appear and run, loading the CPU heavily.  Since it removes a function of the browser, Winapp2 may not be appropriate.  I don't think that the other Chrome based browsers have this functionality.

    [Google Chrome Software Reporter *]
    LangSecRef=3029
    Detect=HKCU\Software\Google\Chrome
    DetectFile=%LocalAppData%\Google\Chrome*
    Default=False
    Warning=Removes the Google Chrome software reporter
    FileKey1=%LocalAppData%\Google\Chrome*\User Data\SwReporter|*.*|RECURSE

     

  7. Here is an update for [Canon Digital Photo Professional 4 *]
     

    [Canon Digital Photo Professional 4 *]
    LangSecRef=3021
    Detect=HKLM\Software\Canon_Inc_IC\DPP4
    DetectFile=%ProgramFiles%\Canon\Digital Photo Professional 4
    Default=False
    FileKey1=%AppData%\Canon_Inc_IC\DPP4\Application\Temp|*.*|RECURSE
    FileKey2=%AppData%\Canon_Inc_IC\DPP4\DppMWare\Cache|*.*|RECURSE
    FileKey3=%AppData%\Canon_Inc_IC\ServiceLog\AutoUpdateService|*.txt
    FileKey4=%ProgramData%\Canon_Inc_IC\UniversalInstaller\ServiceLog|*.TXT

    FileKey1 added to make sure that the Temp subfolder gets cleared.

    FileKey3 and 4 are to clean out the log files that accumulate when using the updater or the lens module downloader.

  8. I've noticed that VLC Media Player makes backups of the vlc-qc-interface.ini file from time to time, adding an additional file extension.  I'm not sure what triggers the backup, but it seems like every couple weeks it happens.  Depending on your settings, there can be an MRU file name list near the end of each file which may have privacy implications, therefore I'm suggesting to add FileKey2 to remove the backups, but not the actual .ini file.  FileKey3 can be added to make sure that the crashdump and crashdump.mv folders are emptied.

    [VLC Media Player *]
    LangSecRef=3023
    Detect=HKLM\Software\VideoLAN\VLC
    Default=False
    FileKey1=%AppData%\vlc|*.cache-3;ml.xspf.tmp*
    FileKey2=%AppData%\vlc|vlc-qt-interface.ini.*
    FileKey3=%AppData%\vlc\crashdump*|*.*

     

  9. I'm suggesting to add FileKey21 to [Installer *] for the same reason as above:

    [Installer *]
    LangSecRef=3029
    Detect1=HKCU\Software\7Star\7Star
    Detect2=HKCU\Software\360Browser\Browser
    Detect3=HKCU\Software\Amigo
    Detect4=HKCU\Software\CentBrowser
    Detect5=HKCU\Software\ChromePlus
    Detect6=HKCU\Software\Chromium\PreferenceMACs
    Detect7=HKCU\Software\CocCoc\Browser
    Detect8=HKCU\Software\Comodo\Dragon
    Detect9=HKCU\Software\Coowon\Coowon
    Detect10=HKCU\Software\Epic Privacy Browser
    Detect11=HKCU\Software\Flock
    Detect12=HKCU\Software\RockMelt
    Detect13=HKCU\Software\Slimjet
    Detect14=HKCU\Software\Torch
    Detect15=HKCU\Software\Vivaldi
    Detect16=HKCU\Software\Yandex\YandexBrowser
    DetectFile1=%AppData%\brave
    DetectFile2=%LocalAppData%\Google\Chrome*
    Default=False
    FileKey1=%LocalAppData%\7Star\7Star\Application\*\Installer|*.7z
    FileKey2=%LocalAppData%\360Browser\Browser\Application\*\Installer|*.7z
    FileKey3=%LocalAppData%\Amigo\Application\*\Installer|*.7z
    FileKey4=%LocalAppData%\Brave\*\Installer|*.7z
    FileKey5=%LocalAppData%\CentBrowser\Application\*\Installer|*.7z
    FileKey6=%LocalAppData%\CocCoc\Browser\Application\*\Installer|*.7z
    FileKey7=%LocalAppData%\Coowon\Coowon\Application\*\Installer|*.7z
    FileKey8=%LocalAppData%\Epic Privacy Browser\Application\*\Installer|*.7z
    FileKey9=%LocalAppData%\Flock\Application\*\Installer|*.7z
    FileKey10=%LocalAppData%\Google\Chrome*\Application\*\Installer|*.7z
    FileKey11=%LocalAppData%\MapleStudio\ChromePlus\Application\*\Installer|*.7z
    FileKey12=%LocalAppData%\RockMelt\Application\*\Installer|*.7z
    FileKey13=%LocalAppData%\Torch\Application\*\Installer|*.7z
    FileKey14=%LocalAppData%\Vivaldi\Application\*\Installer|*.7z
    FileKey15=%LocalAppData%\Yandex\YandexBrowser\Application\*\Installer|*.7z
    FileKey16=%ProgramFiles%\Comodo\Dragon\*\Installer|*.7z
    FileKey17=%ProgramFiles%\Google\Chrome*\Application\*\Installer|*.7z
    FileKey18=%ProgramFiles%\Slimjet\*\Installer|*.7z
    FileKey19=%ProgramFiles%\SRWare Iron\*\Installer|*.7z
    FileKey20=%ProgramFiles%\SuperBird\*\Installer|*.7z
    FileKey21=%ProgramFiles%\Vivaldi\Application\*\Installer|*.7z

     

  10. After installing the current 64 bit Vivaldi in Windows 7, I noticed that an entry was missing in [SetupMetrics *].  I'm suggesting to add FileKey21 as this is where the files have been going:

    [SetupMetrics *]
    LangSecRef=3029
    Detect1=HKCU\Software\7Star\7Star
    Detect2=HKCU\Software\360Browser\Browser
    Detect3=HKCU\Software\Amigo
    Detect4=HKCU\Software\CentBrowser
    Detect5=HKCU\Software\ChromePlus
    Detect6=HKCU\Software\Chromium\PreferenceMACs
    Detect7=HKCU\Software\CocCoc\Browser
    Detect8=HKCU\Software\Comodo\Dragon
    Detect9=HKCU\Software\Coowon\Coowon
    Detect10=HKCU\Software\Epic Privacy Browser
    Detect11=HKCU\Software\Flock
    Detect12=HKCU\Software\RockMelt
    Detect13=HKCU\Software\Slimjet
    Detect14=HKCU\Software\Torch
    Detect15=HKCU\Software\Vivaldi
    Detect16=HKCU\Software\Yandex\YandexBrowser
    DetectFile1=%AppData%\brave
    DetectFile2=%LocalAppData%\Google\Chrome*
    Default=False
    FileKey1=%LocalAppData%\7Star\7Star\Application\SetupMetrics|*.*|REMOVESELF
    FileKey2=%LocalAppData%\360Browser\Browser\Application\SetupMetrics|*.*|REMOVESELF
    FileKey3=%LocalAppData%\Amigo\Application\SetupMetrics|*.*|REMOVESELF
    FileKey4=%LocalAppData%\Brave\SetupMetrics|*.*|REMOVESELF
    FileKey5=%LocalAppData%\CentBrowser\Application\SetupMetrics|*.*|REMOVESELF
    FileKey6=%LocalAppData%\CocCoc\Browser\Application\SetupMetrics|*.*|REMOVESELF
    FileKey7=%LocalAppData%\Coowon\Coowon\Application\SetupMetrics|*.*|REMOVESELF
    FileKey8=%LocalAppData%\Epic Privacy Browser\Application\SetupMetrics|*.*|REMOVESELF
    FileKey9=%LocalAppData%\Flock\Application\SetupMetrics|*.*|REMOVESELF
    FileKey10=%LocalAppData%\Google\Chrome*\Application\SetupMetrics|*.*|REMOVESELF
    FileKey11=%LocalAppData%\MapleStudio\ChromePlus\Application\SetupMetrics|*.*|REMOVESELF
    FileKey12=%LocalAppData%\RockMelt\Application\SetupMetrics|*.*|REMOVESELF
    FileKey13=%LocalAppData%\Torch\Application\SetupMetrics|*.*|REMOVESELF
    FileKey14=%LocalAppData%\Vivaldi\Application\SetupMetrics|*.*|REMOVESELF
    FileKey15=%LocalAppData%\Yandex\YandexBrowser\Application\SetupMetrics|*.*|REMOVESELF
    FileKey16=%ProgramFiles%\Comodo\Dragon\SetupMetrics|*.*|REMOVESELF
    FileKey17=%ProgramFiles%\Google\Chrome*\Application\SetupMetrics|*.*|REMOVESELF
    FileKey18=%ProgramFiles%\Slimjet\SetupMetrics|*.*|REMOVESELF
    FileKey19=%ProgramFiles%\SRWare Iron\SetupMetrics|*.*|REMOVESELF
    FileKey20=%ProgramFiles%\SuperBird\SetupMetrics|*.*|REMOVESELF
    FileKey21=%ProgramFiles%\Vivaldi\Application\SetupMetrics|*.*|REMOVESELF

     

  11. For the new README.md file with the Winapp2 instructions, it appears that most of the backslashes have been "escaped" like in a c string.  So most of the backslashes in the path names are doubled up, also some of the asterisks are escaped, showing up as *\ instead of just *

    For the LangSecRef list, here are a few more:

    LangSecRef=3029 = Google Chrome

    LangSecRef=3030 = Thunderbird

    LangSecRef=3031 = Windows Store

     

  12. After updating to Google Earth Pro 7.3.1 x64, I noticed that its cache has moved to a Cache subfolder so the existing Google Earth entries in Winapp.ini and Winapp2.ini weren't cleaning it anymore.  

    [Google Earth *]
    LangSecRef=3021
    Detect1=HKCU\Software\Google\Google Earth Plus
    Detect2=HKCU\Software\Google\Google Earth Pro
    Detect3=HKLM\Software\Google\Google Earth Plus
    Detect4=HKLM\Software\Google\Google Earth Pro
    Default=False
    FileKey1=%LocalAppData%\VirtualStore\Program Files*\Google\GoogleEarth\client|*.log
    FileKey2=%LocalLowAppData%\Google\GoogleEarth|*.tmp;*.log|RECURSE
    FileKey3=%LocalLowAppData%\Google\GoogleEarth\Cache|*.*|RECURSE
    FileKey4=%LocalLowAppData%\Google\GoogleEarth\unified_cache_leveldb_*|*.*|REMOVESELF
    FileKey5=%ProgramFiles%\Google\GoogleEarth\client|*.log

    I'm suggesting to add FileKey3 to [Google Earth *] to clean this.

  13. Safari for Windows is supported natively in ccleaner however there isn't a Winapp2.ini entry for additional files to be removed so I'm suggesting adding:

    [Safari *]
    LangSecRef=3028
    Default=False
    DetectFile=%ProgramFiles%\Safari\Safari.exe
    FileKey1=%AppData%\Apple Computer\Logs|*.*
    FileKey2=%LocalAppData%\Apple Computer\com.apple.Safari.PrivateBrowsing|Cache.db
    FileKey3=%LocalAppData%\Apple Computer\Safari|WebpageIcons.db

    FileKey2 only appears after using the private browsing function so removing it seems prudent.  FileKey3 is regenerated after restarting Safari but other popular cleaners do remove this file although ccleaner doesn't.

  14. On 2018-04-17 at 01:38, APMichael said:

    And I think we should remove the entry [Flash SOL Files *], because it deletes nothing but those GhostScript files.

    Edit: Or should we remove both entries, because Flash is a "dying" software anyway?

    This is a good question.  Winapp3 isn't meant to be safe or used blindly.  Presumably people would use it by copying sections of interest to their custom.ini files, editing to their taste, run analysis only on that entry in ccleaner, open the relevant folder in explorer, look at the files to be deleted, make the decision etc.

    However more specifically to this one, I haven't seen flash related .sol files appear outside their normal location, so I would think this entry would only get used as a double check.  I don't know anything about Solidity (which uses .sol files for scripts) but apparently it is a thing across multiple platforms including Windows and this entry would cause problems for those people.

  15. I'd like to suggest an update for Winapp3.ini: [Flash Local Shared Object Files *].  This entry is very broad and assumes that all .sol files are Flash related.  As such it needs a list of ExcludeKey entries.  On my own systems I have the GhostScript PostScript converter which has an .sol file that clearly isn't Flash related so I've added ExcludeKey1:

    [Flash Local Shared Object Files *]
    Section=Dangerous
    Default=False
    FileKey1=%SystemDrive%|*.SOL|RECURSE
    ExcludeKey1=FILE|%ProgramFiles%\GPLGS\|Fontmap.Sol

    There probably are other uses of .sol for other programs, "Solidity Scripts" for example.  It is certainly a "Dangerous" entry as its section implies.

  16. After a clean install of the new Stellarium 0.18.0 64bit, I see that the cache folder path has been changed and not capitalized anymore so I'm suggesting adding FileKey3 below and leaving FileKey2 for older versions.

    [Stellarium *]
    LangSecRef=3021
    DetectFile=%AppData%\Stellarium
    Default=False
    FileKey1=%AppData%\Stellarium|log.txt
    FileKey2=%LocalAppData%\Stellarium\Cache|*.*|RECURSE
    FileKey3=%LocalAppData%\stellarium\stellarium\cache|*.*|RECURSE

     

  17. For Winapp2.ini, [Microsoft Security Essentials *] some Windows XP systems don't have the HKCU entry resulting in non-detection so I am suggesting adding the Detect2 below for reliable detection:

    [Microsoft Security Essentials *]
    LangSecRef=3021
    Detect1=HKCU\Software\Microsoft\Microsoft Antimalware
    Detect2=HKLM\Software\Microsoft\Microsoft Antimalware
    Default=False
    FileKey1=%CommonAppData%\Microsoft\Microsoft Antimalware\LocalCopy|*.*|RECURSE
    FileKey2=%CommonAppData%\Microsoft\Microsoft Antimalware\Network Inspection System\Support|NisLog.txt.bak
    FileKey3=%CommonAppData%\Microsoft\Microsoft Antimalware\Scans\History\Service|*.log|RECURSE
    FileKey4=%CommonAppData%\Microsoft\Microsoft Security Client\Support|MSSecurityClient*.log
    FileKey5=%LocalAppData%\VirtualStore\ProgramData\Microsoft\Microsoft Antimalware\LocalCopy|*.*|RECURSE
    FileKey6=%LocalAppData%\VirtualStore\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Service|*.log|RECURSE
    FileKey7=%LocalAppData%\VirtualStore\ProgramData\Microsoft\Microsoft Security Client\Support|MSSecurityClient*.log

    As an aside, Microsoft Security Essentials is still useful in Windows XP as long as MSE is version 4.4 or below.  Offline definition updater installers can be downloaded directly from Microsoft.  Changing a registry entry can make def updates automatic again if desired.  The only issue is that systems with non-SSE processors cannot update definitions past about mid January 2018 or an error will result.

  18. I'd like to suggest an addition to [VLC Media Player *].  There are sometimes leftover zero byte .tmp???? files (???? being some number) here so i've added the removal of ml.xspf.tmp* to FileKey1.

    [VLC Media Player *]
    LangSecRef=3023
    Detect=HKLM\Software\VideoLAN\VLC
    Default=False
    FileKey1=%AppData%\vlc|*.cache-3;ml.xspf.tmp*

     

  19. for [CutePDF Writer*] in Winapp2.ini, there was an typo in the Detect preventing it from detecting which I have corrected below.  Also I added FileKey1.  CutePDF makes tmp files in that folder and normally deletes them when the PDF has been saved, but occasionally the files can be left behind.

    [CutePDF Writer *]
    LangSecRef=3023
    Detect=HKCU\Software\Acro Software Inc\CPW
    Default=False
    RegKey1=HKCU\Software\Acro Software Inc\CPW|Filename
    RegKey2=HKCU\Software\Acro Software Inc\CPW|Title
    FileKey1=%LocalAppData%\CutePDF Writer|*.tmp

     

  20. Quote

    The LangSecRefs of winsys.ini unfortunately don't work with winapp2.ini.

    Actually they do work in 5.40 but the entries appear as an additional section with the correct name and icon at the bottom of the applications tab.  I don't know if they work in all previous versions.  There are many people stuck at 5.26 since later versions of ccleaner don't work without an SSE2 processor.

  21. I was just curious why in Winapp2.ini that LangSecRef=3001 or 3005 isn't used by Winapp2.ini for [Internet Explorer *] or [Microsoft Edge *] respectively.  I'm not suggesting a change as 3022 is also a good choice.

  22. On 13/02/2018 at 06:02, SMalik said:

    Please remove the entries listed below. Some of them are dangerous.

    [Adobe CC *], [Adobe CS *], [Adobe Dreamweaver *], [Adobe My Digital Editions *], [Adobe Photoshop *] and [Adobe Premiere Pro *].

    [Adobe Photoshop *] was an amalgamation of several older Photoshop entries: CS1,CS2, CS3, etc. during the last refactor.  I use this one with Photoshop CS2 and haven't had any issues.  Could you please explain the "dangerous" a little?  I can't comment on the other entries as I don't have any of the other programs.  If it is something that causes problems for others, then I'll add this entry to my custom.ini.

  23. I'd like to be able to use WinApp2ool.exe however it crashes on startup when used on a Windows 7 computer that has no internet connection.  Hopefully Robert can make a note to adjust this behavior the next time he is able to work on this program.

  24. By renaming .dlls that are loaded near the end of the loading process, I managed to get all of the versions of the DxO Photosuite applications to crash and found some additional crash log folders.  I've inserted FileKey3 and 5 to the existing entries to clean these:

    [DxO Photo Suite *]
    LangSecRef=3021
    Detect1=HKCU\Software\DxO
    Detect2=HKCU\Software\DxO Labs
    Detect3=HKCU\Software\DxOLabs
    Detect4=HKLM\Software\DxO
    Detect5=HKLM\Software\DxO Labs
    Detect6=HKLM\Software\DxOLabs
    Default=False
    FileKey1=%Documents%\DxO Optics*Pro * crash*s|*.*
    FileKey2=%Documents%\DxO Optics*Pro * logs|*.*
    FileKey3=%Documents%\DxO PhotoLab crashes|*.*
    FileKey4=%Documents%\DxO PhotoLab logs|*.*
    FileKey5=%Documents%\DxO*\CrashReports|*.*|RECURSE
    FileKey6=%Documents%\DxO*\log|*.*
    FileKey7=%LocalAppData%\DxO\DxO PhotoLab *\Cache|*.*|RECURSE
    FileKey8=%LocalAppData%\DxO_Labs\DataCache|*.*|RECURSE
    FileKey9=%LocalAppData%\DxO_Labs\DxO*\Cache|*.*|RECURSE
    FileKey10=%LocalAppData%\DxO_Labs\DxO*\CrashReports|*.*
    FileKey11=%LocalAppData%\DxO_Labs\DxO*\DiskCache|*.*
    FileKey12=%LocalAppData%\DxO_Labs\DxO*\Logs|*.*
    FileKey13=%LocalAppData%\DxO_Labs\Logs|*.*

     

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.