Jump to content

Winapp2.ini additions


Winapp2.ini

Recommended Posts

Revised:

[Mount & Blade (All)*]
Section=Games
Detect1=HKLM\SOFTWARE\Mount&Blade
Detect2=HKLM\SOFTWARE\Mount&Blade Warband
Detect3=HKLM\SOFTWARE\Mount&Blade With Fire and Sword
Detect4=HKLM\SOFTWARE\Mount&Blade: Warband - Napoleonic Wars
Detect5=HKCU\Software\Valve\Steam\Apps\22100
Detect6=HKCU\Software\Valve\Steam\Apps\48700
Detect7=HKCU\Software\Valve\Steam\Apps\48705
Detect8=HKCU\Software\Valve\Steam\Apps\48720
Default=False
FileKey1=%ProgramFiles%\Steam\steamapps|rgl_log.txt|RECURSE
FileKey2=%ProgramFiles%\Mount&Blade|rgl_log.txt|RECURSE
FileKey3=%ProgramFiles%\Mount&Blade Warband|rgl_log.txt|RECURSE
FileKey4=%ProgramFiles%\Napoleonic Wars|rgl_log.txt|RECURSE
FileKey5=%ProgramFiles%\Mount&Blade With Fire and Sword|rgl_log.txt|RECURSE

 

New entries:

[DVD-Ranger]
LangSecRef=3021
Detect=HKLM\SOFTWARE\DVD-Ranger
Default=False
FileKey1=%Documents%\DVDRanger\Temp|*.*|REMOVESELF
FileKey2=%Documents%\DVDRanger\Screenshots|*.*|RECURSE
FileKey3=%SystemDrive%\DVDRanger|*.*|REMOVESELF
FileKey4=%CommonAppData%\DVDRanger\Logs|*.*
FileKey5=%CommonAppData%\DVDRanger\DDF626ADdvdcss|*.*

[Pointstone Total Privacy*]
LangSecRef=3024
Detect=HKCU\Software\Pointstone\Total Privacy
Default=False
FileKey1=%ProgramFiles%\Pointstone\Total Privacy 5|*.txt
FileKey2=%ProgramFiles%\Pointstone\Total Privacy 6|*.txt

[Privacy Eraser*]
LangSecRef=3024
Detect=HKCU\Software\PrivacyEraser Computing, Inc.
Default=False
FileKey1=%ProgramFiles%\PrivacyEraser Computing\Privacy Eraser|*.txt;*.url
FileKey2=%ProgramFiles%\PrivacyEraser Computing\Privacy Eraser Pro|*.txt;*.url

 

Modified entry:

[WinRAR More*]
LangSecRef=3024
Detect=HKCU\Software\WinRAR
Default=False
FileKey1=%ProgramFiles%\WinRAR|*.tmp|RECURSE
FileKey2=%ProgramFiles%\WinRAR|*.diz;*.txt;*.htm
RegKey1=HKCU\Software\WinRAR SFX
RegKey2=HKCU\Software\WinRAR\DialogEditHistory
RegKey3=HKCU\Software\WinRAR\General\Info|CommentFile

 

- Added FileKey2

Link to comment
Share on other sites

New Entry:

 

[Norton Power Eraser*]

LangSecRef=3024

DetectFile=%CommonAppData%\Norton\NPE\NPEsettings.dat

Warning=This removes ALL files and traces of Norton's diagnostic and scan tool known as Norton Power Eraser. This tool should be downloaded fresh from Symantec each time it is run.

Default=False

FileKey1=%CommonAppData%\Norton\NPE\|*.*|REMOVESELF

FileKey2=%LocalAppData%\NPE\|*.*|REMOVESELF

FileKey3=%UserProfile%\Desktop|NPE.exe

Windows 10 x64 Pro on ASUS Maximus VIII Extreme motherboard, i7-6700k CPU,H220 X2 Liquid Cooler, 64 gbyte RipJaws DDR4 3200 RAM, Samsung 970 Pro NVMe M.2 500 gbyte SSD + Samsung 850 Pro 512 gbyte SSD, EVGA RTX 3060 Titan graphics card (Home Built System);  Windows 11x64 Pro on 512 gigabyte Dell XPS 15 2-in-1 Laptop/tablet and Dell XPS 8940 PC.  ASUS RT-AC88U router, 14 tbyte WD My Cloud PR2100 NAS Server, 200 Mbps cable Internet, MS Edge Chromium, MS Office 2021 (Local), Casper 11, DisplayFusion (3 Flat Panel Displays per system):   Latest Bitdefender Internet Security, Quicken, Weather Watcher Live, ThumbsPlus 10, Sticky Password 8, WD Smartware, CyberLink PowerDVD23, MSI AfterBurner, Rainmeter, 8GadgetPack, and many more.

Link to comment
Share on other sites

New entry:

[DVDFab Passkey*]
LangSecRef=3023
Detect=HKCU\Software\DVDFab Passkey
Default=False
FileKey1=%ProgramFiles%\DVDFab Passkey|License.txt;License_Italian.txt;Readme.txt;*.url
FileKey2=%Documents%\DVDFab Passkey\Log|*.*|REMOVESELF

Link to comment
Share on other sites

New Entry:

 

[NBC News*]

DetectOS=6.2|

Section=Windows 8 Apps

DetectFile=%LocalAppData%\Packages\msnbc.comDigitalNetwork.msnbc.com_amdjbdaxqsje6

Default=False

FileKey1=%LocalAppData%\Packages\msnbc.comDigitalNetwork.msnbc.com_*\AC\INetCache|*.*|RECURSE

FileKey2=%LocalAppData%\Packages\msnbc.comDigitalNetwork.msnbc.com_*\AC\INetCookies|*.*|RECURSE

FileKey3=%LocalAppData%\Packages\msnbc.comDigitalNetwork.msnbc.com_*\AC\INetHistory|*.*|RECURSE

FileKey4=%LocalAppData%\Packages\msnbc.comDigitalNetwork.msnbc.com_*\AC\Temp|*.*

FileKey5=%LocalAppData%\Packages\msnbc.comDigitalNetwork.msnbc.com_*\AC\PRICache|*.*

FileKey6=%LocalAppData%\Packages\msnbc.comDigitalNetwork.msnbc.com_*\AC\Microsoft\CLR_v4.0\UsageLogs|*.*|RECURSE

FileKey7=%LocalAppData%\Packages\msnbc.comDigitalNetwork.msnbc.com_*\TempState|*.*|RECURSE

Windows 10 x64 Pro on ASUS Maximus VIII Extreme motherboard, i7-6700k CPU,H220 X2 Liquid Cooler, 64 gbyte RipJaws DDR4 3200 RAM, Samsung 970 Pro NVMe M.2 500 gbyte SSD + Samsung 850 Pro 512 gbyte SSD, EVGA RTX 3060 Titan graphics card (Home Built System);  Windows 11x64 Pro on 512 gigabyte Dell XPS 15 2-in-1 Laptop/tablet and Dell XPS 8940 PC.  ASUS RT-AC88U router, 14 tbyte WD My Cloud PR2100 NAS Server, 200 Mbps cable Internet, MS Edge Chromium, MS Office 2021 (Local), Casper 11, DisplayFusion (3 Flat Panel Displays per system):   Latest Bitdefender Internet Security, Quicken, Weather Watcher Live, ThumbsPlus 10, Sticky Password 8, WD Smartware, CyberLink PowerDVD23, MSI AfterBurner, Rainmeter, 8GadgetPack, and many more.

Link to comment
Share on other sites

  • Moderators

I deleted my two previous posts for cleaning this program since I found more to clean, and this should be everything.

 

All New:

 

[Cook'n Recipe Organizer (Backups)*]
LangSecRef=3021
Detect=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Cook'n
DetectFile=%LocalAppData%\DVO\Cook'n10App\Cook'n.exe
Default=False
FileKey1=%Documents%\Cook'n Backups|*.ckn

 

[Cook'n Recipe Organizer (Cache)*]
LangSecRef=3021
Detect=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Cook'n
DetectFile=%LocalAppData%\DVO\Cook'n10App\Cook'n.exe
Default=False
FileKey1=%AppData%\Mozilla\eclipse\Cache|*.*

 

[Cook'n Recipe Organizer (Dups)*]
LangSecRef=3021
Detect=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Cook'n
DetectFile=%LocalAppData%\DVO\Cook'n10App\Cook'n.exe
Default=False
Warning=This removes identical duplicates of the huge Getting Started Guide.
FileKey1=%LocalAppData%\DVO\Cook'n10App\plugins|Getting Started Guide.rtf|RECURSE

 

[Cook'n Recipe Organizer (Logs)*]
LangSecRef=3021
Detect=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Cook'n
DetectFile=%LocalAppData%\DVO\Cook'n10App\Cook'n.exe
Default=False
FileKey1=%Documents%\Cook'n10\.metadata|*.log
FileKey2=%Documents%\Cook'n10\data|*.log

Link to comment
Share on other sites

Dropping this here as a mental note, cross post from a different thread:

[Google Earth More*]
LangSecRef=3021
Detect=HKLM\SOFTWARE\Google\Google Earth Plus
Detect2=HKLM\SOFTWARE\Google\Google Earth Pro
Detect3=HKCU\SOFTWARE\Google\Google Earth Plus
Detect4=HKCU\SOFTWARE\Google\Google Earth Pro
Default=False
FileKey1=%LocalLowAppData%\Google\GoogleEarth\unified_cache_leveldb_*|*.*|REMOVESELF

Link to comment
Share on other sites

New entry:

[Nero 12 Platinum HD Suite*]
LangSecRef=3021
Detect=HKLM\Software\Nero\Nero 12
Default=False
FileKey1=%ProgramFiles%\Nero\Update|*.txt|RECURSE
FileKey2=%ProgramFiles%\Nero\KM\Nero3D\Licenses|*.*|REMOVESELF
FileKey3=%AppData%\Nero|*.log|RECURSE
FileKey4=%AppData%\Nero\Nero 12\Nero Vision|*.txt;*.FAC|RECURSE
FileKey5=%CommonAppData%\Nero|*.log|RECURSE
FileKey6=%CommonAppData%\Nero\PeakFiles|*.tmp
FileKey7=%AppData%\Nero\Nero 12\Nero Recode\Thumbs|*.*
FileKey8=%AppData%\Nero\Nero 12\Nero Recode\AnalysisData|*.dat
FileKey9=%AppData%\Nero\Nero 12\Nero BackItUp\Cache|*.*|REMOVESELF
RegKey1=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Recent File List
RegKey2=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|WorkingDir
RegKey3=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|TrackSaveDir
RegKey4=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|EncodingLastDir
RegKey5=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|NeroCompilation
RegKey6=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Compilation|VolumeLabelUDFTemplate
RegKey7=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Compilation|VolumeLabelISOTemplate
RegKey8=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Compilation|VolumeLabelAutoTemplate
RegKey9=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Compilation|VolumelabelJolietTemplate
RegKey10=HKCU\Software\Nero\Nero 12\Nero Express\Compilation|VolumeLabelUDFTemplate
RegKey11=HKCU\Software\Nero\Nero 12\Nero Express\Compilation|VolumeLabelISOTemplate
RegKey12=HKCU\Software\Nero\Nero 12\Nero Express\Compilation|VolumeLabelAutoTemplate
RegKey13=HKCU\Software\Nero\Nero 12\Nero Express\Compilation|VolumelabelJolietTemplate
RegKey14=HKCU\Software\Nero\Nero 12\Nero Express\Recent File List
RegKey15=HKCU\Software\Nero\Nero 12\Nero Express\Settings|WorkingDir
RegKey16=HKCU\Software\Nero\Nero 12\Nero Express\Settings|BrowserDir
RegKey17=HKCU\Software\Nero\Nero 12\Nero Express\Settings|ImageDir
RegKey18=HKCU\Software\Nero\Nero 12\Nero Express\Settings|BootImageDir
RegKey19=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastISODir
RegKey20=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastAudioDir
RegKey21=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastVideoDVDKey
RegKey22=HKCU\Software\Nero\Nero 12\Nero Express\Settings|NeroCompilation
RegKey23=HKCU\Software\Nero\Nero 12\Nero Express\Settings|TrackSaveDir
RegKey24=HKCU\Software\Nero\Nero 12\Nero WaveEditor\Directories|Last
RegKey25=HKCU\Software\Nero\Nero 12\Nero WaveEditor\Recent File List
RegKey26=HKCU\Software\Nero\Nero 12\Nero CoverDesigner\Recent File List
RegKey27=HKCU\Software\Nero\Nero Blu-ray Player\Settings|DefFolder

Link to comment
Share on other sites

Add these logs please!

 

*.TMP

*CACHE*.DB

%SYSTEMROOT%\SYSTEM32\WINEVT\LOGS\

%SYSTEMROOT%\TEMP\

%APPDATA%\TEMP\

%SYSTEMROOT%\WINSXS\

%SYSTEMROOT%\PREFETCH\

%SYSTEMROOT%\SYSTEM32\LOGFILES\

%SYSTEMROOT%\SYSTEM32\SMI\

Link to comment
Share on other sites

  • Moderators

Add these logs please!

 

*.TMP

*CACHE*.DB

%SYSTEMROOT%\SYSTEM32\WINEVT\LOGS\

%SYSTEMROOT%\TEMP\

%APPDATA%\TEMP\

%SYSTEMROOT%\WINSXS\

%SYSTEMROOT%\PREFETCH\

%SYSTEMROOT%\SYSTEM32\LOGFILES\

%SYSTEMROOT%\SYSTEM32\SMI\

 

are those better done by an INCLUDE rather than by winapp2.ini?

especially Event Logs.

Backup now & backup often.
It's your digital life - protect it with a backup.
Three things are certain; Birth, Death and loss of data. You control the last.

Link to comment
Share on other sites

%SYSTEMROOT%\WINSXS\

 

Golly Gosh - That halves the burden that Windows 7 places on my SSD.

 

That is the removal of

6.19 GB (6,647,637,591 bytes) held by 42,214 Files, 10,684 Folders

 

I cannot tell you how much faster that make by SSD rotate - 'cause that will never happen :o

Link to comment
Share on other sites

My desktop wallpaper keeps resetting itself automatically upon restart and cold boot, why it keeps doing that? Is it because of CCleaner? It resets my wallpaper with dark grey one color wallpaper, if I remember right I didn't have this issue before I used CCleaner.

 

I go to personalize and change the desktop wallpaper, then I save it, but once rebooted it goes back to this dark grey one color wallpaper, but why? I checked that my wallpaper was there, it wasn't removed, but still it keeps resetting it.

 

Am I the only one who has this problem?

 

I have Windows 7 Ultimate x64 SP1 with February 2013 updates, tho this happened with Professional too.

Link to comment
Share on other sites

Golly Gosh - That halves the burden that Windows 7 places on my SSD.

 

That is the removal of

6.19 GB (6,647,637,591 bytes) held by 42,214 Files, 10,684 Folders

Except the folder does NOT contain anywhere near that size: The Windows shell will count each reference to a hard link as a single instance of the file for each directory in which the file resides. For example, if a file that is named advapi32.dll is 700 KB and is contained in the component store and in the \Windows\system32 directory, Windows Explorer would inaccurately report that the file consumes 1,400 KB of hard disk space.

 

http://support.microsoft.com/kb/2795190

Link to comment
Share on other sites

I am aware that Windows is a false name - it should be called "Smoke 'n Mirrors" due to its endless deception courtesy of reparse points / hard links.

 

I often find that Windows Explorer will ignore the contents of reparse points if it is not on-top of the reparse point, depending upon Access Control Levels.

e.g.

When I select and right click the folder

C:\Users\Alan\AppData\Local\Moonchild Productions\

then W.E. reports a size of 0 bytes 0 Files 0 Folders.

but when I select the reparse point that it contains which is

C:\Users\Alan\AppData\Local\Moonchild Productions\Pale Moon\

It shows 124 MB (130,570,435 bytes) 739 Files, 650 Folders

 

W.E. has limited "depth perception" when looking from a higher level,

BUT even so a standard installed on C:\ version of Palemoon browser still has full access to its cache which I relocated to an HDD partition D:\

and CCleaner has no problem cleaning the Palemoon cache via the normal (non-include) rules.

N.B. HDSentinel shows me that when I am busy on the Internet, a typical day results in up to 1 GB of writes to the HDD D:\ and only 100 MB of writes to my SSD C:\.

I expect my SSD to have a few more write/erase Lives than a proverbial cat - but I want every Life to count for something.

 

Is it possible that W.E. also has limited "depth perception" when looking down from a higher level onto a folder holding these Hard Links ?

 

Regardless of whether we are talking about 6.2 or 3.1 GB, if that is zapped there will be a big surprise ahead :-

Windows will have the intelligence to prohibit removal (I am always surprised when Windows does something intelligent); OR

Removal will happen but cannot be measured because Windows don't work no more; OR

After you shut-down it will never boot-up again.

Link to comment
Share on other sites

Regardless of whether we are talking about 6.2 or 3.1 GB, if that is zapped there will be a big surprise ahead :-

Windows will have the intelligence to prohibit removal (I am always surprised when Windows does something intelligent); OR

Removal will happen but cannot be measured because Windows don't work no more; OR

After you shut-down it will never boot-up again.

I read it that that folder only contained links, but that it would count that link as the actual file, as well as the file it links to. So the winsxs folder is actually just the size of the few bytes a folder of links takes up. I'll happily admit I may have misunderstood it though ^_^

 

But I agree, deleting that folder's contents is a bad idea. And given that it's in a list that also suggests the massively discussed (and dismissed) prefetch folder, folders that are already cleaned and wildcard *.tmp entries (that would massivley slow CCleaner) I think we can take most of those entry suggestions with a pinch of salt.

Link to comment
Share on other sites

Please note that depending upon Access Control Levels, when You delete a Reparse Point you may well delete the files at the destination,

so it would not surprise me if a "successful" deletion of %SYSTEMROOT%\WINSXS\ also destroyed the contents of %SYSTEMROOT%\SYSTEM32\

Link to comment
Share on other sites

  • Moderators

so it would not surprise me if a "successful" deletion of %SYSTEMROOT%\WINSXS\ also destroyed the contents of %SYSTEMROOT%\SYSTEM32\

 

Windows should just protect such folders like it does with the System Restore points if it already doesn't. One thing is for sure casually deleting stuff and not knowing the consequences could end up being a few un-fun days of restoring/re-installing everything.

Link to comment
Share on other sites

Please add Symantec Endpoint Protection and all other Symantec products logs especially Norton [Antivirus] logs!

 

Norton keeps the most useless logs >.<

 

 

Also accesschk (sysinternals tool) keeps log of folders accessed. please clean these!

 

WInapp2.ini, i know you are smarter than me at finding logs, so please also delete logs from:

 

ShareWatch

System Tray Share Monitor

Net Share Monitor

WhoIsConnected

 

Thanks!~

Link to comment
Share on other sites

NEW ENTRY

[AdwCleaner*]
LangSecRef=3024
Detect=HKLM\SOFTWARE\Wow6432Node\AdwCleaner
Default=False
FileKey1=%SystemDrive%|AdwCleaner[*].txt
RegKey1=HKLM\SOFTWARE\Wow6432Node\AdwCleaner|DeleteCount
RegKey2=HKLM\SOFTWARE\Wow6432Node\AdwCleaner|SearchCount

Link to comment
Share on other sites

CCleaner indeed removes TranscodedWallpaper.jpg from C:\Users\#Username#\AppData\Roaming\Microsoft\Windows\Themes, I checked that multiple times, that's why me desktop wallpaper keeps resetting itself.

 

Because of this: (Why there even is this option in Winapp2.ini, please remove this option in next update)

 

[Windows 7/8 Transcoded Wallpaper Cache*]

DetectOS=6.1|

LangSecRef=3025

Detect=HKCU\Software\Microsoft\Windows

Default=False

Warning=You will have to refresh your background after running this!

FileKey1=%AppData%\Microsoft\Windows\Themes|TranscodedWallpaper.jpg

Link to comment
Share on other sites

Please add Symantec Endpoint Protection and all other Symantec products logs especially Norton [Antivirus] logs!

 

Norton keeps the most useless logs >.<

 

 

Also accesschk (sysinternals tool) keeps log of folders accessed. please clean these!

 

WInapp2.ini, i know you are smarter than me at finding logs, so please also delete logs from:

 

ShareWatch

System Tray Share Monitor

Net Share Monitor

WhoIsConnected

 

Thanks!~

 

The purpose of this thread is for USERS to submit their own entries. Winapp2 is kept busy enough as it is, he can't be expected to install every program any user suggest just to create an entry for them. If you want to learn how to create the entries yourself (we are always happy to check they make sense) have a look at the docs: How to add your own program for CCleaner to clean :)

Link to comment
Share on other sites

  • Moderators

Please add Symantec Endpoint Protection and all other Symantec products logs especially Norton [Antivirus] logs!

 

Norton keeps the most useless logs >.<

 

It is advisable to let Anti-Malware products clean themselves. IIRC SEP doesn't like things messing with it. You can make the logs smaller via your SEP admin console or the logs setting (depending on your version). You may find them useless but when you have an infection you'll be pretty mad that you lost what it was via cleaning.

CCleaner indeed removes TranscodedWallpaper.jpg from C:\Users\#Username#\AppData\Roaming\Microsoft\Windows\Themes, I checked that multiple times, that's why me desktop wallpaper keeps resetting itself.

 

Because of this: (Why there even is this option in Winapp2.ini, please remove this option in next update)

 

[Windows 7/8 Transcoded Wallpaper Cache*]

DetectOS=6.1|

LangSecRef=3025

Detect=HKCU\Software\Microsoft\Windows

Default=False

Warning=You will have to refresh your background after running this!

FileKey1=%AppData%\Microsoft\Windows\Themes|TranscodedWallpaper.jpg

While I don't much understand the entry, I think the warning is clear enough.

 

ADVICE FOR USING CCleaner'S REGISTRY INTEGRITY SECTION

DON'T JUST CLEAN EVERYTHING THAT'S CHECKED OFF.

Do your Registry Cleaning in small bits (at the very least Check-mark by Check-mark)

ALWAYS BACKUP THE ENTRY, YOU NEVER KNOW WHAT YOU'LL BREAK IF YOU DON'T.

Support at https://support.ccleaner.com/s/?language=en_US

Pro users file a PRIORITY SUPPORT via email support@ccleaner.com

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.