Jump to content

Winapp2.ini additions


Winapp2.ini

Recommended Posts

It just seems odd to me that there are wildcards for the file system but not for the registry.

Because wildcards for the registry could be incredibly dangerous, far moreso than regular wildcards.

Link to comment
Share on other sites

EDIT:

 

[uniblue Registry Booster 2(Backups)*]
LangSecRef=3024
Detect=HKCU\Software\Uniblue\Registry Booster
FileKey1=%AppData%\Uniblue\Registry Booster2|*.zip

[uniblue Registry Booster(Backups)*]
LangSecRef=3024
Detect=HKCU\Software\Uniblue\Registry Booster
FileKey1=%AppData%\Uniblue\Registry Booster|*.zip

 

Combine these 2 to make:

 

[uniblue Registry Booster(Backups)*]
LangSecRef=3024
Detect=HKCU\Software\Uniblue\Registry Booster
FileKey1=%AppData%\Uniblue\Registry Booster|*.zip

FileKey2=%AppData%\Uniblue\Registry Booster2|*.zip

 

Remove the following entries:

 

[Resource Hacker*]
LangSecRef=3024
DetectFile=%ProgramFiles%\Resource Hacker\ResHacker.exe
FileKey1=%ProgramFiles%\Resource Hacker|ResHacker.ini;reshacker.GID

 

Discontinued program since 2011.

 

[smart Explorer*]
LangSecRef=3021
Detect=HKCU\Software\Smartque\Smart Explorer
RegKey1=HKCU\Software\Smartque\Smart Explorer\Opened Pages
RegKey2=HKCU\Software\Smartque\Smart Explorer\Recent Pages

 

Discontinued since 2009.

 

[spyDefense*]
LangSecRef=3024
DetectFile=%ProgramFiles%\Everest Labs\Spydefense\sdc.exe
FileKey1=%AppData%\Everest Labs\Spydefense\Backups|BF7.tmp
FileKey2=%AppData%\Everest Labs\Spydefense|SpyDefense.log;History.ini;Backups.ini

 

Discontinued since 2006.

 

[spyware Doctor*]
LangSecRef=3024
Detect=HKCU\Software\PCTools\Spyware Doctor
FileKey1=%ProgramFiles%\Spyware Doctor\Log|*.*
FileKey2=%AppData%\pctsGui|bugreport.*

 

Discontinued and bought out by Norton's in 2013. No downloads exist for it anymore.

 

[star Downloader*]
LangSecRef=3021
Detect=HKCU\Software\Star Downloader
FileKey1=%ProgramFiles%\Star Downloader|serverstats.txt;LastURLs
FileKey2=%ProgramFiles%\Star Downloader\Partial Downloads|*.*|RECURSE

 

Discontinued since 2011.

 

[steed*]
LangSecRef=3022
DetectFile=%CommonAppData%\Steed
FileKey1=%CommonAppData%\Steed\Logs|*.*|REMOVESELF

 

Discontinued since 2012.

 

[Windows Live OneCare*]
LangSecRef=3022
Detect=HKLM\SOFTWARE\Microsoft\OneCare Protection
FileKey1=%LocalAppData%\Microsoft\Windows Live OneCare Saftey Scanner|*.sqm|RECURSE

 

Windows Live OneCare has been discontinued for many years now and no active downloads exist anymore.

 

I am quiet interested in why there are so many entires for discontinued apps that no longer exist for download anymore.

I am a maintainer for Winapp2. I also have a open-source group on Steam.

http://steamcommunity.com/groups/opencommunity

Link to comment
Share on other sites

prefer not to remove anything that being discontinued because there still people using it even without support/new version

or put those discontinued software entry into new file or simply list it on winapp2.com but i think people who use those software might come here and ask why winapp2.ini stop support for those software

 

just wanna ask 1 question

why winapp2 nvidia use LangSecRef=3023 and winapp use LangSecRef=3024?

Link to comment
Share on other sites

Why remove "old" programs? Many people might use them even though their development has stopped. I'm still using Resource Hacker, but it's on my USB stick.

 

+1.  Users of Winapp2.ini can use trim.bat to reduce size of file if desired.  ;)

Windows 10 x64 Pro on ASUS Maximus VIII Extreme motherboard, i7-6700k CPU,H220 X2 Liquid Cooler, 64 gbyte RipJaws DDR4 3200 RAM, Samsung 970 Pro NVMe M.2 500 gbyte SSD + Samsung 850 Pro 512 gbyte SSD, EVGA Nvidia GeForce 980 Titan card (Home Built System);  Windows 11x64 Pro on 512 gigabyte Dell XPS 15 2-in-1 Laptop/tablet.  ASUS RT-AC88U router, 14 tbyte WD My Cloud PR2100 NAS Server, 200 Mbps cable Internet, MS Edge Chromium, MS Office 2019 (Local), Casper 11, DisplayFusion (3 Flat Panel Displays per system):   Kaspersky Internet Security 2021, Malwarebytes 4, Quicken, Weather Watcher Live, ThumbsPlus 10, Sticky Password 8, WD Smartware, CyberLink PowerDVD20, MSI Burner, Rainmeter, Windows Sidebar, WD Smartware and many more.

Link to comment
Share on other sites

Spydefense, Spyware Doctor, and Windows live OneCare don't even have download links anymore. Thus no one can use them, even if they wanted to. The others I just threw in more as a notice. Was just another suggesstion to shrink Winapp2.

I am a maintainer for Winapp2. I also have a open-source group on Steam.

http://steamcommunity.com/groups/opencommunity

Link to comment
Share on other sites

Spydefense, Spyware Doctor, and Windows live OneCare don't even have download links anymore. Thus no one can use them, even if they wanted to. The others I just threw in more as a notice. Was just another suggesstion to shrink Winapp2.

http://www.softpedia.com/get/Internet/Popup-Ad-Spyware-Blockers/SpyDefense.shtml

http://www.softpedia.com/get/Internet/Popup-Ad-Spyware-Blockers/Spyware-Doctor-Starter-Edition.shtml

http://www.softpedia.com/get/Antivirus/Windows-Live-OneCare.shtml

No, no and no. At least offer a second file with all the entries. You can also use Trim.bat like already mentioned by siliconman01.

Many people use software even after it has been discontinued, like you can see it now happen with Windows XP. It's really not the best idea, especially with antivirus programs, but some of them can still remove older malware. Some people may also have uninstalled the discontinued software and then CCleaner can remove the files they have left behind.

Link to comment
Share on other sites

  • Moderators

By the point of the file -- to have a complete catalogue of ccleaner entries not integrated into the official program, for users to create their own file from based on what they have installed -- I too vote entries not be removed due to age (except the windows ME entry because if you're still using ME you probably would not even be thinking of using winapp2 or ccleaner)

 

 

ADVICE FOR USING CCleaner'S REGISTRY INTEGRITY SECTION

DON'T JUST CLEAN EVERYTHING THAT'S CHECKED OFF.

Do your Registry Cleaning in small bits (at the very least Check-mark by Check-mark)

ALWAYS BACKUP THE ENTRY, YOU NEVER KNOW WHAT YOU'LL BREAK IF YOU DON'T.

CCLEANER, RECUVA, DEFRAGGLER AND SPECCY DOCUMENTATION CAN BE FOUND AT  https://support.piriform.com/hc/en-us and  https://www.ccleaner.com/docs

Pro users file a PRIORITY SUPPORT request at https://support.piriform.com/hc/en-us/requests/new

link to WINAPP2.INI explanation

Link to comment
Share on other sites

Edited DetectFile and added FileKey8:

[ComboFix*]
LangSecRef=3024
DetectFile=%SystemDrive%\ComboFix.txt
Default=False
Warning=This will delete ComboFix History. Do not delete until you have reviewed these logs.
FileKey1=%SystemDrive%\Qoobox|*.txt
FileKey2=%SystemDrive%\Qoobox\Quarantine|*.log
FileKey3=%SystemDrive%\CE.tmp|*.*|REMOVESELF
FileKey4=%SystemDrive%\D6.tmp|*.*|REMOVESELF
FileKey5=%SystemDrive%\Qoobox\LastRun|*.*|REMOVESELF
FileKey6=%SystemDrive%\Qoobox\Test|*.*|REMOVESELF
FileKey7=%SystemDrive%\Qoobox\TestC|*.*|REMOVESELF
FileKey8=%SystemDrive%|ComboFix.txt
Combofix didn't create "ComboFix" for me. Instead it created ComboFix.txt, which is a log file. So an (better) alternative would be:

DetectFile=%SystemDrive%\Qoobox
Missed Iron and FileKey4 and 7? http://forum.piriform.com/index.php?showtopic=32310&view=findpost&p=247312

The Steam entries work wonders so far. One more:

%ProgramFiles%\Steam\SteamApps\common\Team Fortress 2\tf\download|*.*|RECURSE
Quote from readme.txt in that folder: "It is generally safe to delete this directory at any time." I have over 1GB in that folder. Maybe Warning=This will delete all downloaded custom server files.

One more:

%ProgramFiles%\Steam|*.cache|RECURSE
Link to comment
Share on other sites

  • Moderators

[Windows Live OneCare*]

LangSecRef=3022

Detect=HKLM\SOFTWARE\Microsoft\OneCare Protection

FileKey1=%LocalAppData%\Microsoft\Windows Live OneCare Saftey Scanner|*.sqm|RECURSE

 

Windows Live OneCare has been discontinued for many years now and no active downloads exist anymore.

 

Does anyone know if OneCare users are even getting new definition files anymore? That antivirus was payware/commercial rubbish with MSE being it's free replacement.

Link to comment
Share on other sites

  • Moderators

Soo I'm super behind on winapp2's and I'm combing the current one and found

[MS Word 2007/10/13 Document Building Blocks*]
LangSecRef=3021
DetectFile=%AppData%\Microsoft\Document Building Blocks
Default=False
FileKey1=%AppData%\Microsoft\Document Building Blocks|*.*|RECURSE

I don't think this is junk

See: http://office.microsoft.com/en-us/word-help/create-and-use-document-building-blocks-in-word-2007-HA010214071.aspx

 

Also

[MusicBee*]

LangSecRef=3023

Detect=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MusicBee

Default=False

FileKey1=%AppData%\MusicBee|*.dat

FileKey2=%AppData%\MusicBee\InternalCache|*.*|REMOVESELF

I don't think FileKey1 is a good idea, It removes Gecko (mozilla) based rules, LastFm Connect Rules, Hardware associations, (very important!) File Orginization rules and many more

see image of my musicbee folder

post-21882-0-06811700-1397608150_thumb.png

 

 

 

ADVICE FOR USING CCleaner'S REGISTRY INTEGRITY SECTION

DON'T JUST CLEAN EVERYTHING THAT'S CHECKED OFF.

Do your Registry Cleaning in small bits (at the very least Check-mark by Check-mark)

ALWAYS BACKUP THE ENTRY, YOU NEVER KNOW WHAT YOU'LL BREAK IF YOU DON'T.

CCLEANER, RECUVA, DEFRAGGLER AND SPECCY DOCUMENTATION CAN BE FOUND AT  https://support.piriform.com/hc/en-us and  https://www.ccleaner.com/docs

Pro users file a PRIORITY SUPPORT request at https://support.piriform.com/hc/en-us/requests/new

link to WINAPP2.INI explanation

Link to comment
Share on other sites

  • Moderators
Can you clarify on which if any .dat files are safe to remove from musicbee?

SPACE RESERVED

 

Once my PC is done updating I'll open some and check, but I'm unsure the original creator's intent. I think activity log may be safe and maybe error log, but my feelings on error log cleans are mixed.

 

 

ADVICE FOR USING CCleaner'S REGISTRY INTEGRITY SECTION

DON'T JUST CLEAN EVERYTHING THAT'S CHECKED OFF.

Do your Registry Cleaning in small bits (at the very least Check-mark by Check-mark)

ALWAYS BACKUP THE ENTRY, YOU NEVER KNOW WHAT YOU'LL BREAK IF YOU DON'T.

CCLEANER, RECUVA, DEFRAGGLER AND SPECCY DOCUMENTATION CAN BE FOUND AT  https://support.piriform.com/hc/en-us and  https://www.ccleaner.com/docs

Pro users file a PRIORITY SUPPORT request at https://support.piriform.com/hc/en-us/requests/new

link to WINAPP2.INI explanation

Link to comment
Share on other sites

For DivX:

%CommonAppData%\DivX\Setup|DivXSetup.log
For Skype:

%CommonAppData%\Skype|*.tmp
For Search Everything (includes names and locations of all files, will just be regenerated on next start):

%ProgramFiles%\Everything|Everything.db
New:

[PhrozenSoft Databases*]
LangSecRef=3024
DetectFile=%AppData%\PhrozenSoft
Default=False
FileKey1=%AppData%\PhrozenSoft|*.db|RECURSE
VTUploader creates history file \PVTUploader\phrzvtu.db and Keylogger (not necessarily malware) creates pkl.db which contains all recorded keystrokes and also the password used to open the logger which will be reseted if you delete that file (so I guess that's an issue with that file). So maybe do it like this:

FileKey1=%AppData%\PhrozenSoft\PVTUploader|phrzvtu.db
Question: Does CCleaner not clean all the stuff cleanmgr deletes? Like the Service-Pack-Backups? Could not find them in the Winapp.ini and Winapp2.
Link to comment
Share on other sites

I installed the winapp2.ini and the trim.bat but when running the trim.bat it asked me a few questions that I did not know which one to select in the cmd. I pasted part of the cmd below. In the ccleaner folder I now see another folder called #TRIMMER and the ccleaner takes a very long time to load.

 

I also add that the ccleaner is the portable version, but this time is installed on the desktop of the computer.

FILE CREATION 13:52 08/03/2012   Execution 16:48:11.32

This script creates a trimmed WinApp2.ini giving a faster launch for CCleaner.
It is safe to use in "normal installed" CCleaner folder - no settings change
                              TECHNIQUE :-
Run trim.bat. CCleaner appears. Click "Analyze" and when done close CCleaner
A temporary Winapp2.ini variant is created that asserts "Default=True".
"CCleaner /Debug" is launched to identify all "Detections"
and a trimmed Winapp2.ini is created which omits the NON-Detections.

 "Organize (alphabetic) WinApp2.ini - (O)rganize or (S)kip : (O or S) ? "o
Trimming trailing spaces, IP = #_DOS_WINAPP2.INI : OP = #_FIX.INI
16:48:21.45 - 16:48:16.45 = 5000 mSec   = Found 16304 lines, 0 needed Trim

Already Sorted - Quiting SORT

CREATING FALSE/TRUE VARIANTS #_ZAP_WINAPP2.INI + #_DEBUG_ZAP_WINAPP2.INI
16:48:33.21 - 16:48:23.79 = 9420 mSec   = Counted 2097 Configuration blocks

  YOU  MUST  NOT  "Run Cleaner"  -  ONLY  Click "Analyze"
  After Analysis please CLOSE CCleaner so script may continue.
Press any key to continue . . .
16:49:07.48 - 16:48:37.29 = 30190 mSec  = Using "CCLEANER.EXE /DEBUG"
16:49:07.76 - 16:49:07.48 = 280 mSec    = Built #_CCLEANER.LST
16:49:07.96 - 16:49:07.78 = 180 mSec    = 114 off TRIMMED Config Blocks

CREATING NEW WINAPP2.INI and #_DEBUG_WINAPP2.INI
Found 114 - (Anomalies 0) = 114 Configs
16:49:58.32 - 16:49:07.96 = 50360 mSec  = debug + Reduced WINAPP2 114 Configs

Reporting "BAD" Volatile Detections in file #_?_BAD_*_WINAPP2.INI
16:50:06.25 - 16:49:58.65 = 7600 mSec   = 26 BAD In 2427 Det. = #_7_BAD_FULL.LST

16:50:06.89 - 16:50:06.34 = 550 mSec    = 2 BAD In 131 Det. = #_8_BAD_MINI.LST
 "@_#_7_BAD_FULL.LST Volatile Detections - (P)reserve or (S)kip : (P or S) ? "

I also saw a few more questions below the above, but was not able to copy/paste or save.

thanks.

Link to comment
Share on other sites

This might be a dumb question, but how do you find registry keys for steam games? For instance:

 

[serious Sam 3: BFE Logs*]
Section=Games
Detect=HKCU\Software\Valve\Steam\Apps\41070
DetectFile=%ProgramFiles%\Steam\steamapps\common\Serious Sam 3
FileKey1=%ProgramFiles%\Steam\steamapps\common\Serious Sam 3\Log|*.*

 

How do you figure out that this game is Apps\41070? Where do I look to find that out?

I am a maintainer for Winapp2. I also have a open-source group on Steam.

http://steamcommunity.com/groups/opencommunity

Link to comment
Share on other sites

This might be a dumb question, but how do you find registry keys for steam games? For instance:

 

[serious Sam 3: BFE Logs*]

Section=Games

Detect=HKCU\Software\Valve\Steam\Apps\41070

DetectFile=%ProgramFiles%\Steam\steamapps\common\Serious Sam 3

FileKey1=%ProgramFiles%\Steam\steamapps\common\Serious Sam 3\Log|*.*

 

How do you figure out that this game is Apps\41070? Where do I look to find that out?

Don't know if this is how the entries makers did it (so feel free to correct me), but a quick search of my drive for the app numbers finds appmanifest files, numbered the same, in C:\Program Files (x86)\Steam\SteamApps. These can be opened with notepad and the game name is in those files :)

 

EDIT: Although far easier lol, just found in each games common folder is a text file titled steam_appid.txt :rolleyes:

Link to comment
Share on other sites

This might be a dumb question, but how do you find registry keys for steam games? For instance:

 

[serious Sam 3: BFE Logs*]

Section=Games

Detect=HKCU\Software\Valve\Steam\Apps\41070

DetectFile=%ProgramFiles%\Steam\steamapps\common\Serious Sam 3

FileKey1=%ProgramFiles%\Steam\steamapps\common\Serious Sam 3\Log|*.*

 

How do you figure out that this game is Apps\41070? Where do I look to find that out?

app_id.txt and the steam store lists the app id in the url

I've made the entry I think, but yeah from there and

http://steamdb.info/

https://developer.valvesoftware.com/wiki/Steam_Application_IDs

Link to comment
Share on other sites

New (I think this had already been included but was it removed?):

[Lazarus Saved Forms*]
LangSecRef=3026
SpecialDetect=DET_MOZILLA
Default=False
FileKey1=%AppData%\Mozilla\Firefox\Profiles\*|lazarus.sqlite;lazarus-backup.sqlite
What about cleanmgr.exe (e.g. Service-Pack-Backups)? Does CCleaner remove this or is there a reason why not?
Link to comment
Share on other sites

Revised Entry

http://forum.piriform.com/index.php?showtopic=32310&p=248408

 

[iTunes Logs*]
LangSecRef=3023
Detect=HKLM\SOFTWARE\Apple Computer, Inc.\iTunes
Default=False
FileKey1=%AppData%\Apple Computer\Logs|*.*|RECURSE
FileKey2=%WinDir%\System32\config\systemprofile\AppData\Roaming\Apple Computer\Logs|*.*|RECURSE
FileKey3=%WinDir%\SysWOW64\config\systemprofile\AppData\Roaming\Apple Computer\Logs|*.*|RECURSE

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.