APMichael Posted December 9, 2021 Share Posted December 9, 2021 2 hours ago, siliconman01 said: Modified Key: [Windows Client WebExperience *] ... ... FileKey2=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_*\LocalState\EBWebView\Default|*.log|RECURSE Just to be sure: The files and folders below "EBWebView" correspond to a user profile of Edge Chromium. Therefore "*.log" files are not usual log files but important databases. Log files are named "LOG" and "LOG.old". (You can use the entries for Edge Chromium as a guide.) Link to comment Share on other sites More sharing options...
Winapp2.ini Posted December 9, 2021 Author Share Posted December 9, 2021 a large update for winapp2.ini is now available ╔══════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════╗ ║ Changes between version 210920 and version 211208 ║ ╠ ╣ ║ ║ ║ Crash Reports * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey25=%LocalAppData%\Epic Privacy Browser\CrashReports|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Edge Logs * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey4=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\Edge\*\*|Log.Old|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Brave Logs * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 RegKeys ║ ║ ║ ║ RegKey1=HKCU\Software\BraveSoftware\Promo|StubInstallerPath ║ ║ ║ ╠ ╣ ║ ║ ║ Opera Logs * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey2=%LocalAppData%\Programs\Opera*|*.log|REMOVESELF ║ ║ ║ ╠ ╣ ║ Removed 1 FileKeys ║ ║ ║ ║ FileKey2=%LocalAppData%\Programs\Opera*|*.log|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Internet Explorer * has been modified ║ ║ ║ ╠ ╣ ║ Removed 3 FileKeys ║ ║ ║ ║ FileKey32=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History|*.*|RECURSE ║ ║ FileKey33=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\INetCache|*.*|RECURSE ║ ║ FileKey34=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\INetCookies|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ Modified 3 FileKeys ║ ║ ║ ║ Old: FileKey29=%WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History|*.*|RECURSE ║ ║ New: FileKey29=%WinDir%\ServiceProfiles\*\AppData\Local\Microsoft\Windows\History|*.*|RECURSE ║ ║ Old: FileKey30=%WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\INetCache|*.*|RECURSE ║ ║ New: FileKey30=%WinDir%\ServiceProfiles\*\AppData\Local\Microsoft\Windows\INetCache|*.*|RECURSE ║ ║ Old: FileKey31=%WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\INetCookies|*.*|RECURSE ║ ║ New: FileKey31=%WinDir%\ServiceProfiles\*\AppData\Local\Microsoft\Windows\INetCookies|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ ABBYY FineReader * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey14=%SystemDrive%\temp\FR15|*.*|REMOVESELF ║ ║ New: FileKey14=%SystemDrive%\temp\FR*|*.*|REMOVESELF ║ ║ ║ ╠ ╣ ║ ║ ║ Actual Window Guard * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 RegKeys ║ ║ ║ ║ RegKey1=HKCU\Software\Actual Tools\Actual Window Guard|LastNagScreenDate ║ ║ ║ ╠ ╣ ║ ║ ║ Adobe Acrobat DC * has been modified ║ ║ ║ ╠ ╣ ║ Added 4 RegKeys ║ ║ ║ ║ RegKey4=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral|iNumAcrobatLaunches ║ ║ RegKey5=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral|iNumOfAVDocsOpened ║ ║ RegKey6=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral|uLastAppLaunchTimeStamp ║ ║ RegKey14=HKCU\Software\Adobe\Adobe Acrobat\DC\SessionManagement|uLastAppExitTimeStamp ║ ║ ║ ╠ ╣ ║ ║ ║ Adobe Acrobat Distiller DC * has been removed ║ ║ ║ ╠ ╣ ║ ║ ║ Adobe Acrobat Distiller XI * has been removed ║ ║ ║ ╠ ╣ ║ ║ ║ Adobe CC * has been modified ║ ║ ║ ╠ ╣ ║ Added 5 FileKeys ║ ║ ║ ║ FileKey6=%AppData%\Adobe\Adobe Photoshop*\FontFeatureCache|*.*|RECURSE ║ ║ FileKey7=%AppData%\Adobe\Adobe Photoshop*\Logs|*.*|RECURSE ║ ║ FileKey8=%AppData%\Adobe\CameraRaw\Logs|*.* ║ ║ FileKey9=%AppData%\Adobe\Color|*.lst ║ ║ FileKey26=%LocalAppData%\Adobe\CameraRaw\Cache*|*.* ║ ║ ║ ╠ ╣ ║ Modified 4 FileKeys ║ ║ ║ ║ Old: FileKey2=%AppData%\Adobe\Adobe Photoshop CC*\Adobe Photoshop CC*Settings|PSErrorLog.txt;sniffer-*.txt ║ ║ New: FileKey2=%AppData%\Adobe\Adobe Photoshop*\Adobe Photoshop*Settings|PSErrorLog.txt;sniffer-*.txt ║ ║ Old: FileKey3=%AppData%\Adobe\Adobe Photoshop CC*\Adobe Photoshop CC*Settings\CrashLogs|*.*|RECURSE ║ ║ New: FileKey3=%AppData%\Adobe\Adobe Photoshop*\Adobe Photoshop*Settings\CrashLogs|*.*|RECURSE ║ ║ Old: FileKey4=%AppData%\Adobe\Adobe Photoshop CC*\Adobe Photoshop CC*Settings\web-cache-temp|*.*|RECURSE ║ ║ New: FileKey4=%AppData%\Adobe\Adobe Photoshop*\Adobe Photoshop*Settings\web-cache-temp|*.*|RECURSE ║ ║ Old: FileKey5=%AppData%\Adobe\Adobe Photoshop CC*\Logs|*.*|RECURSE ║ ║ New: FileKey5=%AppData%\Adobe\Adobe Photoshop*\CT Font Cache|*.lst ║ ║ ║ ╠ ╣ ║ ║ ║ Adobe Reader DC * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey2=%LocalAppData%\Adobe\Acrobat\DC|IconCacheRdr*.dat;UserCache.bin;SharedDataEvents ║ ║ New: FileKey2=%LocalAppData%\Adobe\Acrobat\DC|DCAPIDiscoveryCacheReader;IconCacheRdr*.dat;UserCache.bin;SharedDataEvents ║ ║ ║ ╠ ╣ ║ ║ ║ Age of Empires * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey4=%ProgramFiles%\Microsoft Games\Age of Mythology|*log.txt ║ ║ ║ ╠ ╣ ║ ║ ║ AIMP * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 DetectFiles ║ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: DetectFile=%ProgramFiles%\AIMP* ║ ║ New: DetectFile=%AppData%\AIMP* ║ ║ Old: FileKey1=%AppData%\AIMP|*.bak ║ ║ New: FileKey1=%AppData%\AIMP*|*.bak ║ ║ ║ ╠ ╣ ║ ║ ║ AMD/ATI * has been modified ║ ║ ║ ╠ ╣ ║ Added 17 FileKeys ║ ║ ║ ║ FileKey6=%LocalAppData%\AMD\cn|*.log ║ ║ FileKey9=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default|*-journal;*.old;LOG|RECURSE ║ ║ FileKey10=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default|QuotaManager;Visited Links ║ ║ FileKey11=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default\blob_storage|*.*|RECURSE ║ ║ FileKey13=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default\Service Worker\*Cache*|*.*|RECURSE ║ ║ FileKey15=%LocalAppData%\AMD\RadeonSoftware\vkcache|*.* ║ ║ FileKey16=%LocalAppData%\AMD\Ryzen Master\cache\qmlcache|*.* ║ ║ FileKey17=%LocalAppData%\AMD\StoreMI\cache\qmlcache|*.* ║ ║ FileKey21=%LocalAppData%\RadeonInstaller\Cache\qmlcache|*.* ║ ║ FileKey23=%LocalAppData%\RadeonSettings\Cache\QtWebEngine\Default\Cache|*.* ║ ║ FileKey24=%LocalAppData%\RadeonSettings\QtWebEngine\Default|*-journal;*.old;LOG|RECURSE ║ ║ FileKey25=%LocalAppData%\RadeonSettings\QtWebEngine\Default|Visited Links ║ ║ FileKey26=%LocalAppData%\RadeonSettings\QtWebEngine\Default\blob_storage|*.*|RECURSE ║ ║ FileKey27=%LocalAppData%\Setup\cache\qmlcache|*.* ║ ║ FileKey29=%ProgramFiles%\AMD|*.log ║ ║ FileKey42=%UserProfile%|AMD_*.log;AMDRM_Install.log;ChipsetExtraction.log;Device_ID.log ║ ║ FileKey44=%WinDir%\System32\config\systemprofile\AppData\Local\AMD\DxCache|*.* ║ ║ ║ ╠ ╣ ║ Removed 2 FileKeys ║ ║ ║ ║ FileKey7=%LocalAppData%\AMD\Ryzen Master\cache\qmlcache|*.qmlc ║ ║ FileKey28=%UserProfile%|AMD_Chipset_Drivers.log;ChipsetExtraction.log;Device_ID.log ║ ║ ║ ╠ ╣ ║ Modified 4 FileKeys ║ ║ ║ ║ Old: FileKey4=%LocalAppData%\AMD Ryzen Master\cache\qmlcache|*.qmlc ║ ║ New: FileKey4=%LocalAppData%\AMD Ryzen Master\cache\qmlcache|*.* ║ ║ Old: FileKey8=%LocalAppData%\AMD\StoreMI\cache\qmlcache|*.qmlc ║ ║ New: FileKey8=%LocalAppData%\AMD\RadeonSoftware\Cache|*.* ║ ║ Old: FileKey12=%LocalAppData%\RadeonInstaller\Cache\qmlcache|*.jsc;*.qmlc ║ ║ New: FileKey12=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default\GPUCache|*.* ║ ║ Old: FileKey14=%LocalAppData%\Setup\cache\qmlcache|*.qmlc ║ ║ New: FileKey14=%LocalAppData%\AMD\RadeonSoftware\QtWebEngine\Default\VideoDecodeStats|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ AnyDesk * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey1=%AppData%\AnyDesk|ad.trace ║ ║ New: FileKey1=%AppData%\AnyDesk|ad.trace;connection_trace.txt ║ ║ ║ ╠ ╣ ║ ║ ║ AVG PC TuneUp * has been modified ║ ║ ║ ╠ ╣ ║ Removed 2 FileKeys ║ ║ ║ ║ FileKey37=%WinDir%\ServiceProfiles\NetworkService|NTUSER.DAT_tureg_new.LOG*;NTUSER.DAT_tureg_old ║ FileKey38=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows|USRCLASS.DAT_tureg_old;USRCLASS.DAT_tureg_new.LOG* ║ ║ ╠ ╣ ║ Modified 2 FileKeys ║ ║ ║ ║ Old: FileKey35=%WinDir%\ServiceProfiles\LocalService|NTUSER.DAT_tureg_new.LOG*;NTUSER.DAT_tureg_old ║ ║ New: FileKey35=%WinDir%\ServiceProfiles\*|NTUSER.DAT_tureg_new.LOG*;NTUSER.DAT_tureg_old ║ Old: FileKey36=%WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows|USRCLASS.DAT_tureg_old;USRCLASS.DAT_tureg_new.LOG* ║ New: FileKey36=%WinDir%\ServiceProfiles\*\AppData\Local\Microsoft\Windows|USRCLASS.DAT_tureg_old;USRCLASS.DAT_tureg_new.LOG*║ ║ ║ ╠ ╣ ║ ║ ║ AVS Audio Converter 6 * has been removed ║ ║ ║ ╠ ╣ ║ ║ ║ Battle.net * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey1=%AppData%\Battle.net\Telemetry|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ BDtoAVCHD * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey1=%ProgramFiles%\BDtoAVCHD\ac3to|log.txt ║ ║ New: FileKey1=%ProgramFiles%\BDtoAVCHD\*ac3to|log.txt ║ ║ ║ ╠ ╣ ║ ║ ║ Behringer Neutron * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey3=%LocalAppData%\Behringer\Synthtribe\Cache\qmlcache|*.qmlc ║ ║ New: FileKey3=%LocalAppData%\Behringer\Synthtribe\Cache\qmlcache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ BitTorrent * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey2=%AppData%\BitTorrent\Updates|*.exe|REMOVESELF ║ ║ ║ ╠ ╣ ║ Removed 1 FileKeys ║ ║ ║ ║ FileKey2=%AppData%\BitTorrent\Updates|*.exe ║ ║ ║ ╠ ╣ ║ ║ ║ Cached Certification Files * has been modified ║ ║ ║ ╠ ╣ ║ Removed 2 FileKeys ║ ║ ║ ║ FileKey5=%WinDir%\ServiceProfiles\NetworkService\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content|*.*|RECURSE ║ ║ FileKey6=%WinDir%\ServiceProfiles\NetworkService\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ Modified 2 FileKeys ║ ║ ║ ║ Old: FileKey3=%WinDir%\ServiceProfiles\LocalService\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content|*.*|RECURSE ║ ║ New: FileKey3=%WinDir%\ServiceProfiles\*\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content|*.*|RECURSE ║ ║ Old: FileKey4=%WinDir%\ServiceProfiles\LocalService\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData|*.*|RECURSE ║ ║ New: FileKey4=%WinDir%\ServiceProfiles\*\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Calibre * has been modified ║ ║ ║ ╠ ╣ ║ Added 6 FileKeys ║ ║ ║ ║ FileKey2=%LocalAppData%\calibre-ebook.com\calibre\QtWebEngine\OffTheRecord\GPUCache|*.*|RECURSE ║ ║ FileKey3=%LocalAppData%\calibre-ebook.com\calibre\QtWebEngine\viewer-lookup|Network Persistent State;Visited Links ║ ║ FileKey4=%LocalAppData%\calibre-ebook.com\calibre\QtWebEngine\viewer-lookup\blob_storage|*.*|RECURSE ║ ║ FileKey5=%LocalAppData%\calibre-ebook.com\calibre\QtWebEngine\viewer-lookup\GPUCache|*.*|RECURSE ║ ║ FileKey6=%LocalAppData%\calibre-ebook.com\calibre\QtWebEngine\viewer-lookup\Platform Notifications|*.*|RECURSE ║ ║ FileKey7=%LocalAppData%\calibre-ebook.com\calibre\QtWebEngine\viewer-lookup\Session Storage|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ Modified 1 DetectFiles ║ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: DetectFile=%LocalAppData%\calibre-cache\jsbrowser ║ ║ New: DetectFile=%LocalAppData%\calibre-cache ║ ║ Old: FileKey1=%LocalAppData%\calibre-cache\jsbrowser\data*|*.*|RECURSE ║ ║ New: FileKey1=%LocalAppData%\calibre-cache|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ CCleaner * has been modified ║ ║ ║ ╠ ╣ ║ Added 13 RegKeys ║ ║ ║ ║ RegKey1=HKLM\Software\Piriform\CCleaner|(Cfg)ABTestingNames ║ ║ RegKey2=HKLM\Software\Piriform\CCleaner|(Cfg)DTNP ║ ║ RegKey3=HKLM\Software\Piriform\CCleaner|(Cfg)DUNP ║ ║ RegKey4=HKLM\Software\Piriform\CCleaner|(Cfg)LastUpdate ║ ║ RegKey5=HKLM\Software\Piriform\CCleaner|BCD ║ ║ RegKey6=HKLM\Software\Piriform\CCleaner|FTU ║ ║ RegKey7=HKLM\Software\Piriform\CCleaner|GD ║ ║ RegKey8=HKLM\Software\Piriform\CCleaner|LatestICS ║ ║ RegKey9=HKLM\Software\Piriform\CCleaner|LLSR ║ ║ RegKey10=HKLM\Software\Piriform\CCleaner|PPC ║ ║ RegKey11=HKLM\Software\Piriform\CCleaner|StateSig ║ ║ RegKey12=HKLM\Software\Piriform\CCleaner|STS ║ ║ RegKey13=HKLM\Software\Piriform\CCleaner|UpdateKey ║ ║ ║ ╠ ╣ ║ ║ ║ CCleaner Network * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey2=%ProgramFiles%\CCleaner Network\Management Server\Logs|*.log ║ ║ New: FileKey2=%ProgramFiles%\CCleaner Network\Management Server\Logs|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Civilization Cache * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 DetectFiles ║ ║ ║ ║ DetectFile=%AppData%\My Games\Civilizaton 4 ║ ║ ║ ╠ ╣ ║ Removed 2 Detects ║ ║ Removed 6 FileKeys ║ ║ ║ ║ Detect1=HKCU\Software\Firaxis\Civilization5 ║ ║ Detect2=HKLM\Software\Firaxis Games ║ ║ FileKey2=%AppData%\My Games\Sid Meier's Civilization *\cache|*.dat ║ ║ FileKey3=%AppData%\My Games\Warlords\cache|*.dat ║ ║ FileKey4=%Documents%\My Games\Sid Meier's Civilization *\cache|*.db ║ ║ FileKey5=%LocalAppData%\My Games\Beyond the Sword\cache|*.dat ║ ║ FileKey6=%LocalAppData%\My Games\Sid Meier's Civilization *\cache|*.dat ║ ║ FileKey7=%LocalAppData%\My Games\Warlords\cache|*.dat ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey1=%AppData%\My Games\Beyond the Sword\cache|*.dat ║ ║ New: FileKey1=%AppData%\My Games\Civilizaton 4\Cache|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Discord * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey6=%AppData%\discord*\module_data\discord_hook|*.log ║ ║ ║ ╠ ╣ ║ ║ ║ DU Meter * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey1=%CommonAppData%\Hagel Technologies\DU Meter|*.csv ║ ║ New: FileKey1=%CommonAppData%\Hagel Technologies\DU Meter|*.csv;error.elf ║ ║ ║ ╠ ╣ ║ ║ ║ eMule * has been modified ║ ║ ║ ╠ ╣ ║ Added 5 FileKeys ║ ║ ║ ║ FileKey1=%CommonAppData%\eMule\config|*.bak;*.old ║ ║ FileKey2=%CommonAppData%\eMule\logs|*.* ║ ║ FileKey4=%LocalAppData%\eMule\logs|*.* ║ ║ FileKey5=%ProgramFiles%\eMule\config|*.bak;*.old ║ ║ FileKey6=%ProgramFiles%\eMule\logs|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ GetFLV * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ Added 1 RegKeys ║ ║ ║ ║ FileKey5=%ProgramFiles%\GetFLV\site_files|*.tmp ║ ║ RegKey1=HKCU\Software\GetFLV|AutoCaptureURL ║ ║ ║ ╠ ╣ ║ ║ ║ Getting Over It with Bennett Foddy * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 Detects ║ ║ ║ ║ Old: Detect=HKCU\Software\steam\apps\266490 ║ ║ New: Detect=HKCU\Software\Valve\Steam\Apps\266490 ║ ║ ║ ╠ ╣ ║ ║ ║ Google Update * has been modified ║ ║ ║ ╠ ╣ ║ Added 2 RegKeys ║ ║ ║ ║ RegKey1=HKLM\Software\Google\Update|LastCodeRedCheck ║ ║ RegKey2=HKLM\Software\Google\Update|LastStartedAU ║ ║ ║ ╠ ╣ ║ ║ ║ Hearthstone * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey2=%ProgramFiles%\Hearthstone|*.log;*.log.txt;*.dmp|RECURSE ║ ║ New: FileKey2=%ProgramFiles%\Hearthstone|*.log;*_log.txt;*.log.txt;*.dmp|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ HP Logs * has been modified ║ ║ ║ ╠ ╣ ║ Added 7 FileKeys ║ ║ ║ ║ FileKey8=%CommonAppData%\HP\HP Touchpoint Analytics Client\Logs|*.* ║ ║ FileKey9=%CommonAppData%\HP\HP Touchpoint Analytics Client\Monitor-History|*.* ║ ║ FileKey10=%CommonAppData%\HP\HP Touchpoint Analytics Client\MRU|*.* ║ ║ FileKey11=%CommonAppData%\HP\logs|*.*|RECURSE ║ ║ FileKey12=%CommonAppData%\HP\StreamLog|*.*|RECURSE ║ ║ FileKey16=%SystemDrive%|dism.log ║ ║ FileKey18=%WinDir%\HP|Installer.log ║ ║ ║ ╠ ╣ ║ ║ ║ IMVU * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 DetectFiles ║ ║ Added 8 FileKeys ║ ║ ║ ║ DetectFile=%AppData%\IMVU* ║ ║ FileKey3=%AppData%\IMVU Desktop*|cookies*;network persistent state ║ ║ FileKey4=%AppData%\IMVU Desktop*\blob_storage|*.*|RECURSE ║ ║ FileKey5=%AppData%\IMVU Desktop*\cache|*.*|RECURSE ║ ║ FileKey6=%AppData%\IMVU Desktop*\code cache|*.*|RECURSE ║ ║ FileKey7=%AppData%\IMVU Desktop*\crashpad\reports|*.*|RECURSE ║ ║ FileKey8=%AppData%\IMVU Desktop*\gpucache|*.*|RECURSE ║ ║ FileKey10=%AppData%\IMVUApp|*.log ║ ║ FileKey15=%LocalAppData%\IMVU*|*.log ║ ║ ║ ╠ ╣ ║ ║ ║ Inpaint * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 RegKeys ║ ║ ║ ║ RegKey3=HKCU\Software\Teorex\Inpaint\Settings|Folder ║ ║ ║ ╠ ╣ ║ ║ ║ IObit Advanced SystemCare * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey2=%AppData%\IObit\Advanced SystemCare*\Backup|*.reg ║ ║ ║ ╠ ╣ ║ ║ ║ IObit Smart Defrag * has been modified ║ ║ ║ ╠ ╣ ║ Modified 4 FileKeys ║ ║ ║ ║ Old: FileKey1=%ProgramFiles%\IObit\Smart Defrag *|*.log ║ ║ New: FileKey1=%ProgramFiles%\IObit\Smart Defrag*|*.log ║ ║ Old: FileKey2=%ProgramFiles%\IObit\Smart Defrag *\Log|*.* ║ ║ New: FileKey2=%ProgramFiles%\IObit\Smart Defrag*\Log|*.* ║ ║ Old: FileKey3=%ProgramFiles%\IObit\Smart Defrag *\Temp|*.*|RECURSE ║ ║ New: FileKey3=%ProgramFiles%\IObit\Smart Defrag*\Temp|*.*|RECURSE ║ ║ Old: FileKey4=%ProgramFiles%\IObit\Smart Defrag *\Update|*.tmp ║ ║ New: FileKey4=%ProgramFiles%\IObit\Smart Defrag*\Update|*.tmp ║ ║ ║ ╠ ╣ ║ ║ ║ IObit Uninstaller * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey2=%AppData%\IObit\IObit Uninstaller\Installer|*.dbg ║ ║ ║ ╠ ╣ ║ ║ ║ Kamo * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 Detects ║ ║ Added 4 RegKeys ║ ║ ║ ║ Detect=HKCU\Software\Piriform\Kamo ║ ║ RegKey1=HKCU\Software\Piriform\Kamo|epochAtInstall ║ ║ RegKey2=HKCU\Software\Piriform\Kamo|epochAtLastIPM ║ ║ RegKey3=HKCU\Software\Piriform\Kamo|epochForNextIPM ║ ║ RegKey4=HKCU\Software\Piriform\Kamo|epochSinceUILastUsed ║ ║ ║ ╠ ╣ ║ Removed 1 DetectFiles ║ ║ ║ ║ DetectFile=%ProgramFiles%\Kamo ║ ║ ║ ╠ ╣ ║ ║ ║ KMS Emulator * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 DetectFiles ║ ║ Added 1 FileKeys ║ ║ ║ ║ DetectFile2=%CommonAppData%\Online_KMS_Activation ║ ║ FileKey2=%CommonAppData%\Online_KMS_Activation|Logs.txt ║ ║ ║ ╠ ╣ ║ Modified 1 DetectFiles ║ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: DetectFile1=%CommonAppData%\KMSAuto ║ ║ New: DetectFile1=%CommonAppData%\KMSAuto* ║ ║ Old: FileKey1=%CommonAppData%\KMSAuto\bin|*.log ║ ║ New: FileKey1=%CommonAppData%\KMSAuto*\bin|*.log ║ ║ ║ ╠ ╣ ║ ║ ║ Lock Screen * has been modified ║ ║ ║ ╠ ╣ ║ Added 2 FileKeys ║ ║ ║ ║ FileKey4=%LocalAppData%\Packages\Microsoft.LockApp_*\AC\NVIDIA Corporation\NV_Cache|*.* ║ ║ FileKey5=%LocalAppData%\Packages\Microsoft.LockApp_*\AC\NVIDIA\DXCache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Malwarebytes Anti-Malware * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey10=%LocalAppData%\MBAM*\Cache\qmlcache|*.jsc;*.qmlc ║ ║ New: FileKey10=%LocalAppData%\MBAM*\Cache\qmlcache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Melodics * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey1=%LocalAppData%\Melodics\Melodics\Cache\qmlcache|*jsc;*.qmlc ║ ║ New: FileKey1=%LocalAppData%\Melodics\Melodics\Cache\qmlcache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Microsoft Teams * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey9=%AppData%\Microsoft\Teams\Service Worker\CacheStorage|*.*|REMOVESELF ║ ║ New: FileKey9=%AppData%\Microsoft\Teams\Service Worker\*Cache*|*.*|REMOVESELF ║ ║ ║ ╠ ╣ ║ ║ ║ MS Office * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey16=%LocalAppData%\TempOffice*|*.*|REMOVESELF ║ ║ ║ ╠ ╣ ║ ║ ║ MS OneDrive * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey5=%ProgramFiles%\Microsoft OneDrive\Setup\Logs|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Nero * has been modified ║ ║ ║ ╠ ╣ ║ Modified 2 FileKeys ║ ║ ║ ║ Old: FileKey20=%LocalAppData%\Nero\Nero *\Nero Vision\Cache|*.* ║ ║ New: FileKey20=%LocalAppData%\Nero\Nero*\Nero Vision\Cache|*.* ║ ║ Old: FileKey21=%LocalAppData%\Nero\Nero *\Nero Vision\Cache\GraphicObjectCache|*.* ║ ║ New: FileKey21=%LocalAppData%\Nero\Nero*\Nero Vision\Cache\GraphicObjectCache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Norton Secure VPN * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey2=%LocalAppData%\Norton Secure VPN\Cache\qmlcache|*.qmlc ║ ║ New: FileKey2=%LocalAppData%\Norton Secure VPN\Cache\qmlcache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ NT Registry Optimizer * has been modified ║ ║ ║ ╠ ╣ ║ Removed 1 FileKeys ║ ║ ║ ║ FileKey3=%WinDir%\ServiceProfiles\NetworkService|NTUSER.bak ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey2=%WinDir%\ServiceProfiles\LocalService|NTUSER.bak ║ ║ New: FileKey2=%WinDir%\*\LocalService|NTUSER.bak ║ ║ ║ ╠ ╣ ║ ║ ║ NVIDIA * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey20=%ProgramFiles%\NVIDIA Corporation\NVIDIA GeForce Experience|*.log ║ ║ ║ ╠ ╣ ║ ║ ║ OBS * has been modified ║ ║ ║ ╠ ╣ ║ Added 4 FileKeys ║ ║ ║ ║ FileKey5=%AppData%\obs-studio\plugin_config|*-journal;*.old;LOG|RECURSE ║ ║ FileKey6=%AppData%\obs-studio\plugin_config|Network Persistent State;Visited Links ║ ║ FileKey7=%AppData%\obs-studio\plugin_config\*Cache|*.*|RECURSE ║ ║ FileKey8=%AppData%\obs-studio\plugin_config\blob_storage|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Origin * has been modified ║ ║ ║ ╠ ╣ ║ Added 3 FileKeys ║ ║ ║ ║ FileKey6=%CommonAppData%\Origin\SelfUpdate\Staged|*.log ║ ║ FileKey10=%LocalAppData%\Origin\Origin\QtWebEngine\Default\Application Cache|*.*|RECURSE ║ ║ FileKey11=%LocalAppData%\Origin\Origin\QtWebEngine\Default\Service Worker\*Cache*|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Paradox Interactive Launcher * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 DetectFiles ║ ║ Added 9 FileKeys ║ ║ ║ ║ DetectFile1=%AppData%\Launcher-main ║ ║ FileKey1=%AppData%\Launcher-main|*-journal;*.old;LOG|RECURSE ║ ║ FileKey3=%AppData%\Launcher-main\*Cache|*.* ║ ║ FileKey5=%AppData%\Paradox Launcher\Logs|*.* ║ ║ FileKey6=%Documents%\Paradox Interactive\CrashReporter\Logs|*.* ║ ║ FileKey7=%Documents%\Paradox Interactive\CrashReporter\ShaderCache\dx*|*.*|RECURSE ║ ║ FileKey9=%LocalAppData%\Paradox Interactive\Launcher*\Chromium-Data|*-journal;*.old;LOG|RECURSE ║ ║ FileKey10=%LocalAppData%\Paradox Interactive\Launcher*\Chromium-Data|Network Persistent State;QuotaManager ║ ║ FileKey12=%LocalAppData%\Paradox Interactive\Launcher*\Chromium-Data\blob_storage|*.*|RECURSE ║ ║ FileKey13=%LocalAppData%\Paradox Interactive\Launcher*\Logs|*.* ║ ║ ║ ╠ ╣ ║ Modified 2 FileKeys ║ ║ ║ ║ Old: FileKey2=%LocalAppData%\Paradox Interactive\Launcher*\chromium-data|*.old;LOG|RECURSE ║ ║ New: FileKey2=%AppData%\Launcher-main|Network Persistent State;QuotaManager ║ ║ Old: FileKey4=%LocalAppData%\Paradox Interactive\Launcher*\Logs|*.log ║ ║ New: FileKey4=%AppData%\Launcher-main\blob_storage|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Plantronics Spokes * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey1=%LocalAppData%\Plantronics\Logs|*.dmp;*.log ║ ║ New: FileKey1=%LocalAppData%\Plantronics\Logs|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Plex Media Server * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey5=%LocalAppData%\Plex\Cache\qmlcache|*.jsc;*.qmlc ║ ║ New: FileKey5=%LocalAppData%\Plex\Cache\qmlcache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Prince of Persia * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 DetectFiles ║ ║ Modified 2 FileKeys ║ ║ ║ ║ Old: DetectFile=%ProgramFiles%\Ubisoft\Prince of Persia T2T ║ ║ New: DetectFile=%ProgramFiles%\Ubisoft\Prince of Persia* ║ ║ Old: FileKey1=%LocalAppData%\Ubisoft\Prince of Persia *|*.log ║ ║ New: FileKey1=%LocalAppData%\Ubisoft\Prince of Persia*|*.log ║ ║ Old: FileKey2=%ProgramFiles%\Ubisoft\Prince of Persia *|*.log;POPError.DAT ║ ║ New: FileKey2=%ProgramFiles%\Ubisoft\Prince of Persia*|*.log;POPError.DAT ║ ║ ║ ╠ ╣ ║ ║ ║ ProcessLasso * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey2=%LocalAppData%\ProcessLasso\Logs|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Quicken * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey11=%CommonAppData%\Quicken\Inet\QWWebData\Session Storage|Log.old ║ ║ ║ ╠ ╣ ║ ║ ║ RealPlayer * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey15=%LocalAppData%\Real\RealPlayer|*.db-shm;*.db-wal ║ ║ ║ ╠ ╣ ║ ║ ║ Realtek * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey1=%CommonAppData%\Realtek|*.log ║ ║ ║ ╠ ╣ ║ ║ ║ RegEditX * has been removed ║ ║ ║ ╠ ╣ ║ ║ ║ Roland Cloud Manager * has been modified ║ ║ ║ ╠ ╣ ║ Added 6 FileKeys ║ ║ ║ ║ FileKey6=%LocalAppData%\Roland Cloud\Cloud Manager*\Cache\QtWebEngine\Default\Cache|*.* ║ ║ FileKey7=%LocalAppData%\Roland Cloud\Cloud Manager*\QtWebEngine\Default|*-journal;*.old;LOG|RECURSE ║ ║ FileKey8=%LocalAppData%\Roland Cloud\Cloud Manager*\QtWebEngine\Default|QuotaManager;Visited Links ║ ║ FileKey9=%LocalAppData%\Roland Cloud\Cloud Manager*\QtWebEngine\Default\*Cache|*.*|RECURSE ║ ║ FileKey10=%LocalAppData%\Roland Cloud\Cloud Manager*\QtWebEngine\Default\blob_storage|*.*|RECURSE ║ ║ FileKey11=%LocalAppData%\Roland Cloud\Cloud Manager*\QtWebEngine\Default\VideoDecodeStats|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Samsung Magician * has been modified ║ ║ ║ ╠ ╣ ║ Added 2 FileKeys ║ ║ ║ ║ FileKey1=%AppData%\Samsung Magician\Local Storage\leveldb|*.old ║ ║ FileKey2=%AppData%\Samsung Magician\Session Storage|*.old ║ ║ ║ ╠ ╣ ║ ║ ║ Skype * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 RegKeys ║ ║ ║ ║ RegKey1=HKLM\Software\Skype\Installer|DonwloadLastModified ║ ║ ║ ╠ ╣ ║ ║ ║ Skype App * has been modified ║ ║ ║ ╠ ╣ ║ Added 6 FileKeys ║ ║ ║ ║ FileKey1=%LocalAppData%\Packages\Microsoft.SkypeApp_*\AC\amd\dxcache|*.* ║ ║ FileKey7=%LocalAppData%\Packages\Microsoft.SkypeApp_*\AC\Temp|*.* ║ ║ FileKey9=%LocalAppData%\Packages\Microsoft.SkypeApp_*\LocalCache\Roaming\Microsoft\Skype for Store|Network Persistent State║ ║ FileKey12=%LocalAppData%\Packages\Microsoft.SkypeApp_*\LocalState|*-shm;*-wal ║ ║ FileKey13=%LocalAppData%\Packages\Microsoft.SkypeApp_*\LocalState\DiagOutputDir|*.* ║ ║ FileKey15=%LocalAppData%\Packages\Microsoft.SkypeApp_*\LocalState\tracing\wppmedia|*.bak;*.etl ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey8=%LocalAppData%\Packages\Microsoft.SkypeApp_*\LocalState\DiagOutputDir|*.txt ║ New: FileKey8=%LocalAppData%\Packages\Microsoft.SkypeApp_*\LocalCache\Roaming\Microsoft\Skype for Store|*-journal;*.old;LOG|RECURSE ║ ║ ╠ ╣ ║ ║ ║ Skype for Desktop * has been modified ║ ║ ║ ╠ ╣ ║ Added 4 FileKeys ║ ║ ║ ║ FileKey2=%AppData%\Microsoft\Skype for Desktop|Network Persistent State;QuotaManager;Skype-Setup.exe ║ ║ FileKey3=%AppData%\Microsoft\Skype for Desktop\blob_storage|*.*|RECURSE ║ ║ FileKey6=%AppData%\Microsoft\Skype for Desktop\Media-stack|*.bak;*.blog;*.etl ║ ║ FileKey7=%AppData%\Microsoft\Skype for Desktop\skylib|*.blog ║ ║ ║ ╠ ╣ ║ Removed 1 FileKeys ║ ║ ║ ║ FileKey4=%AppData%\Microsoft\Skype for Desktop\Media-stack|*.bak;*.etl ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey1=%AppData%\Microsoft\Skype for Desktop|Skype-Setup.exe ║ ║ New: FileKey1=%AppData%\Microsoft\Skype for Desktop|*-journal;*.old;LOG|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Snagit * has been modified ║ ║ ║ ╠ ╣ ║ Added 6 RegKeys ║ ║ ║ ║ RegKey49=HKCU\Software\TechSmith\Snagit\22|CaptureOpenCount ║ ║ RegKey50=HKCU\Software\TechSmith\Snagit\22|OutputDirLastUsed ║ ║ RegKey51=HKCU\Software\TechSmith\Snagit\22|VidOutputDirLastUsed ║ ║ RegKey52=HKCU\Software\TechSmith\Snagit\22\Recent Captures ║ ║ RegKey53=HKCU\Software\TechSmith\Snagit\22\SnagitEditor\Recent File List ║ ║ RegKey54=HKCU\Software\TechSmith\Snagit\22\SnagItEditor\Tray|Thumbnailsize ║ ║ ║ ╠ ╣ ║ Modified 1 RegKeys ║ ║ ║ ║ Old: RegKey48=HKCU\Software\TechSmith\Snagit\Stamps|StampCustomFolder ║ ║ New: RegKey48=HKCU\Software\TechSmith\Snagit\22|CaptureCount ║ ║ ║ ╠ ╣ ║ ║ ║ Spotify * has been modified ║ ║ ║ ╠ ╣ ║ Modified 1 LangSecRefs ║ ║ ║ ║ Old: LangSecRef=3023 ║ ║ New: LangSecRef=3036 ║ ║ ║ ╠ ╣ ║ ║ ║ StarCraft II * has been modified ║ ║ ║ ╠ ╣ ║ Added 3 FileKeys ║ ║ ║ ║ FileKey2=%LocalAppData%\Blizzard Entertainment\StarCraft II\BrowserCookies|*-journal;*.old;LOG|RECURSE ║ ║ FileKey3=%LocalAppData%\Blizzard Entertainment\StarCraft II\BrowserCookies|Visited Links ║ ║ FileKey4=%LocalAppData%\Blizzard Entertainment\StarCraft II\BrowserCookies\*Cache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Steam Cache * has been modified ║ ║ ║ ╠ ╣ ║ Added 6 FileKeys ║ ║ ║ ║ FileKey3=%ProgramFiles%\Steam\appcache\librarycache|*.*|RECURSE ║ ║ FileKey8=%ProgramFiles%\Steam\steam\cached|*.*|RECURSE ║ ║ FileKey11=%ProgramFiles%\Steam\userdata\*\*|remotecache.vdf ║ ║ FileKey12=%ProgramFiles%\Steam\userdata\*\*\local|socache.dt ║ ║ FileKey13=%ProgramFiles%\Steam\userdata\*\config\librarycache|*.*|RECURSE ║ ║ FileKey14=%ProgramFiles%\Steam\userdata\*\inventorymsgcache|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ Removed 1 FileKeys ║ ║ ║ ║ FileKey7=%ProgramFiles%\Steam\steamapps\shadercache|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Steam Games * has been modified ║ ║ ║ ╠ ╣ ║ Added 4 FileKeys ║ ║ ║ ║ FileKey6=%ProgramFiles%\Steam\steamapps\downloading|*.*|RECURSE ║ ║ FileKey7=%ProgramFiles%\Steam\steamapps\shadercache|*.*|RECURSE ║ ║ FileKey9=%ProgramFiles%\Steam\steamapps\workshop\downloads|*.*|RECURSE ║ ║ FileKey10=%ProgramFiles%\Steam\steamapps\workshop\temp|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Sticky Notes * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey3=%LocalAppData%\Packages\Microsoft.MicrosoftStickyNotes_*\AC\NVIDIA\DXCache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Temporary Files * has been modified ║ ║ ║ ╠ ╣ ║ Modified 2 FileKeys ║ ║ ║ ║ Old: FileKey3=%WinDir%\ServiceProfiles\LocalService\AppData\Local\Temp|*.*|RECURSE ║ ║ New: FileKey3=%WinDir%\ServiceProfiles\*\AppData\Local\Temp|*.*|RECURSE ║ ║ Old: FileKey4=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Temp|*.*|RECURSE ║ ║ New: FileKey4=%WinDir%\System32\config\systemprofile\AppData\Local\Temp|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ The Binding of Isaac * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 DetectFiles ║ ║ ║ ║ DetectFile=%Documents%\My Games\Binding of Isaac* ║ ║ ║ ╠ ╣ ║ Modified 1 FileKeys ║ ║ ║ ║ Old: FileKey1=%Documents%\My Games\Binding of Isaac *|*.dmp;isaacv*.txt;log.txt ║ ║ New: FileKey1=%Documents%\My Games\Binding of Isaac*|*.dmp;isaacv*.txt;log.txt ║ ║ ║ ╠ ╣ ║ ║ ║ The Binding of Isaac Rebirth * has been removed ║ ║ ║ ╠ ╣ ║ ║ ║ The Witcher * has been modified ║ ║ ║ ╠ ╣ ║ Modified 2 FileKeys ║ ║ ║ ║ Old: FileKey1=%LocalAppData%\The Witcher 2\temp|*.* ║ ║ New: FileKey1=%LocalAppData%\The Witcher*\logs|*.* ║ ║ Old: FileKey2=%LocalAppData%\The Witcher\logs|*.* ║ ║ New: FileKey2=%LocalAppData%\The Witcher*\Temp|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ VHD Attach * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey1=%ProgramFiles%\Josip Medved\VHD Attach|*.InstallLog ║ ║ ║ ╠ ╣ ║ ║ ║ VMware Personal Desktop Virtualization * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 FileKeys ║ ║ ║ ║ FileKey8=%LocalAppData%\VMware\wdm\Logs|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Warhammer * has been modified ║ ║ ║ ╠ ╣ ║ Removed 6 FileKeys ║ ║ ║ ║ FileKey1=%AppData%\The Creative Assembly\Launcher|*.log;*_logs.txt ║ ║ FileKey2=%AppData%\The Creative Assembly\Launcher\electron|*.old;LOG|RECURSE ║ ║ FileKey3=%AppData%\The Creative Assembly\Launcher\electron\Cache|*.* ║ ║ FileKey4=%AppData%\The Creative Assembly\Launcher\electron\Service Worker\CacheStorage|*.*|RECURSE ║ ║ FileKey5=%AppData%\The Creative Assembly\Launcher\electron\Service Worker\ScriptCache|*.*|RECURSE ║ ║ FileKey6=%AppData%\The Creative Assembly\Warhammer*\*_cache|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ WhatsApp * has been modified ║ ║ ║ ╠ ╣ ║ Added 2 FileKeys ║ ║ ║ ║ FileKey7=%AppData%\WhatsApp\Service Worker\*Cache*|*.*|RECURSE ║ ║ FileKey8=%AppData%\WhatsApp\VideoDecodeStats|*.* ║ ║ ║ ╠ ╣ ║ ║ ║ Windows Logs * has been modified ║ ║ ║ ╠ ╣ ║ Removed 4 FileKeys ║ ║ ║ ║ FileKey22=%WinDir%\Logs\dosvc|*.*|RECURSE ║ ║ FileKey23=%WinDir%\Logs\NetSetup|*.*|RECURSE ║ ║ FileKey24=%WinDir%\Logs\SIH|*.*|RECURSE ║ ║ FileKey25=%WinDir%\Logs\WindowsBackup|*.etl ║ ║ ║ ╠ ╣ ║ ║ ║ Windows Update * has been modified ║ ║ ║ ╠ ╣ ║ Removed 2 FileKeys ║ ║ ║ ║ FileKey1=%WinDir%\Logs\waasmedic*|*.*|RECURSE ║ ║ FileKey2=%WinDir%\Logs\WindowsUpdate|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ Wondershare UniConverter * has been modified ║ ║ ║ ╠ ╣ ║ Added 1 Detects ║ ║ ║ ║ Detect2=HKLM\Software\Wondershare\Wondershare UniConverter 13 ║ ║ ║ ╠ ╣ ║ Modified 3 FileKeys ║ ║ ║ ║ Old: FileKey2=%CommonAppData%\Wondershare\UniConverter\DataTrack|tmp;*.bak;*.log ║ ║ New: FileKey2=%CommonAppData%\Wondershare\UniConverter*\DataTrack|tmp;*.bak;*.log ║ ║ Old: FileKey3=%CommonAppData%\Wondershare\UniConverter\TempThumbDir|*.*|RECURSE ║ ║ New: FileKey3=%CommonAppData%\Wondershare\UniConverter*\TempThumbDir|*.*|RECURSE ║ ║ Old: FileKey5=%ProgramFiles%\Wondershare\UniConverter\Log|*.*|RECURSE ║ ║ New: FileKey5=%ProgramFiles%\Wondershare\*UniConverter*\Log|*.*|RECURSE ║ ║ ║ ╠ ╣ ║ ║ ║ World of Warcraft * has been modified ║ ║ ║ ╠ ╣ ║ Added 4 FileKeys ║ ║ ║ ║ FileKey1=%ProgramFiles%\World of Warcraft\_*_\Logs|*.* ║ ║ FileKey4=%ProgramFiles%\World of Warcraft\Logs|*.* ║ ║ FileKey7=%Public%\games\World of Warcraft\Logs|*.* ║ ║ FileKey10=%SystemDrive%\World of Warcraft\Logs|*.* ║ ║ ║ ╠ ╣ ║ Removed 3 FileKeys ║ ║ ║ ║ FileKey3=%ProgramFiles%\World of Warcraft\Logs|*.log ║ ║ FileKey6=%Public%\games\World of Warcraft\Logs|*.log ║ ║ FileKey9=%SystemDrive%\World of Warcraft\Logs|*.log ║ ║ ║ ╠ ╣ ║ ║ ║ Service Worker * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ 2K Launcher * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ 4t Tray Minimizer * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ 7-Zip ZS * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Adaware * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Adobe Acrobat Distiller * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Aero Glass * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ AnalogX PortMapper * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Ankama Dofus * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Ankama Wakfu * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Anno 1404 * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Apowersoft iPhone Recorder * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Applet Password Wizard * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Attila * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ aTube Catcher * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Audio Control * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Avast TuneUp * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ AVS Audio Converter * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ AxCrypt * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Bitwarden * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Bloodstained: Ritual of the Night * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Box for Office * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Bulk Image Downloader * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ CareUEyes * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Comfort Keys Pro * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ CopyQ * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Crusader Kings II * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Danger Scavenger * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Dawn of War * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Doremi * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Dragon Age Origins Ultimate * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Dream Aquarium * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Dungeon Siege * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Empire Earth * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Endless Space * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Everything Toolbar * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Foxit PDF Editor * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Hearts of Iron IV * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Heroes of Hammerwatch * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Icewind Dale * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Imo Messenger * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ IObit Screen Recorder * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ IObit Software Updater * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ iTop Screen Recorder * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ iTop Screenshot * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ iTop VPN * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Jade Empire * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Jubler Subtitle Editor * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ KeyMapper * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ LBRY * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Leica Cyclone * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ LINE Messenger * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Magic: The Gathering Arena * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Men of War - Assault Squad * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Microsoft Support and Recovery Assistant * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Microsoft Whiteboard * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Microsys Backgammon Classic * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Microsys Gammonet * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Mortal Kombat Arcade Kollection * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ MS PowerToys * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Napoleon * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Picasa 3 * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Plague Inc: Evolved * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Polyball * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Red Button * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ RimWorld * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Rise Of Legends * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ RivetNetworks * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ She and the Light Bearer * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Shogun2 * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Sid Meier's Civilization V * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Signal Desktop * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Sins of a Solar Empire Rebellion * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Slack * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Solway Disk Investigator * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Steam Games Skin Cache * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ SubiT * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ TeamLink * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Telerik Fiddler Everywhere * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Terminal Studio * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ The Creative Assembly Launcher * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ The Da Vinci Code * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Titan Quest Anniversary Edition * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Turnip Boy Commits Tax Evasion * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Unreal Tournament: Game of the Year * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ UPnP Wizard * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ VoiCenter * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Wacom Tablet * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ Windows Client WebExperience * has been added ║ ║ ║ ╠ ╣ ║ ║ ║ XYplorer * has been added ║ ║ ║ ╠ ╣ ║ ║ ╚══════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════╝ ╔══════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════╗ ║ Summary ║ ╠══════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════╣ ║ Added entries: 90 ║ ║ Removed entries: 5 ║ ║ Modified entries: 81 ║ ║ * 165 added keys (total between all entries) ║ ║ * 38 removed keys (total between all entries) ║ ║ * 122 updated keys (total between all entries) ║ ╚══════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════╝ winapp2.ini additions thread winapp2.ini github Link to comment Share on other sites More sharing options...
siliconman01 Posted December 17, 2021 Share Posted December 17, 2021 19 AV suites are flagging winapp2ool.exe as malware Windows 10 x64 Pro on ASUS Maximus VIII Extreme motherboard, i7-6700k CPU,H220 X2 Liquid Cooler, 64 gbyte RipJaws DDR4 3200 RAM, Samsung 970 Pro NVMe M.2 500 gbyte SSD + Samsung 850 Pro 512 gbyte SSD, EVGA RTX 3060 Titan graphics card (Home Built System); Windows 11x64 Pro on 512 gigabyte Dell XPS 15 2-in-1 Laptop/tablet and Dell XPS 8940 PC. ASUS RT-AC88U router, 14 tbyte WD My Cloud PR2100 NAS Server, 200 Mbps cable Internet, MS Edge Chromium, MS Office 2021 (Local), Casper 11, DisplayFusion (3 Flat Panel Displays per system): Latest Bitdefender Internet Security, Quicken, Weather Watcher Live, ThumbsPlus 10, Sticky Password 8, WD Smartware, CyberLink PowerDVD23, MSI AfterBurner, Rainmeter, 8GadgetPack, and many more. Link to comment Share on other sites More sharing options...
Winapp2.ini Posted December 17, 2021 Author Share Posted December 17, 2021 34 minutes ago, siliconman01 said: 19 AV suites are flagging winapp2ool.exe as malware unfortunately there is nothing I can do about this at this time. it was inevitable as soon as I started releasing updated builds that weren't signed. The process to get my photo ID updated with my new legal name is long and arduous and most aspects of it are completely out of my hands. I will get a new code signing cert as soon as i am able but it will likely be at least another month winapp2.ini additions thread winapp2.ini github Link to comment Share on other sites More sharing options...
Moderators Andavari Posted December 18, 2021 Moderators Share Posted December 18, 2021 Update: * FileKey2: Added loaderrors.txt * FileKey4: Added Recovery.txt [Macrium Reflect *] LangSecRef=3024 Detect=HKCU\Software\Macrium\Reflect FileKey1=%CommonAppData%\Macrium|*.log|RECURSE FileKey2=%CommonAppData%\Macrium\Reflect|*.html;*.tmp;*.vsslog;loaderrors.txt FileKey3=%CommonAppData%\Macrium\waik|waiklog.txt FileKey4=%SystemDrive%|ref~tmp~.txt;Recovery.txt;Reflect_Install.log;rescuepe.log Link to comment Share on other sites More sharing options...
Anony2000 Posted December 21, 2021 Share Posted December 21, 2021 Using cCleaner version 5.40.6411 & Winapp2.ini This setup has worked for a couple years now but just got broken. With Chrome 96, I've been unable to delete cookies/temp files, etc... Seems Chrome must've moved where it stored those. Any chance you could take a look? Link to comment Share on other sites More sharing options...
Moderators nukecad Posted December 21, 2021 Moderators Share Posted December 21, 2021 5.40 is a very old version now so will not be up to date with changes to any browser (and browsers do change a lot, Firefox has had 3 updates this week). You should update your CCleaner to the latest version which is v5.88. (Unless you have Windows Vista or XP, the latest they will support is CCleaner 5.64) However from other posts it does seem that something has recently changed in where Chrome stores cookies, and CCleaner will need to be updated again to keep up with those Chrome changes. But one more question - have you recently sycnced your Chrome? If your browser is synced then that syncing will put cookies etc. straight back from the cloud after CCleaner has removed them from your machine *** Out of Beer Error ->->-> Recovering Memory *** Worried about 'Tracking Files'? Worried about why some files come back after cleaning? See this link:https://community.ccleaner.com/topic/52668-tracking-files/?tab=comments#comment-300043 Link to comment Share on other sites More sharing options...
Winapp2.ini Posted December 21, 2021 Author Share Posted December 21, 2021 FWIW I downloaded cc5.40 and had no issues cleaning Chrome 99 canary winapp2.ini additions thread winapp2.ini github Link to comment Share on other sites More sharing options...
Moderators nukecad Posted December 21, 2021 Moderators Share Posted December 21, 2021 Yes, I suspect that Annony2000s issue is going to be syncing , browser preloading, or allow extensions to run in the background after the browser is closed. *** Out of Beer Error ->->-> Recovering Memory *** Worried about 'Tracking Files'? Worried about why some files come back after cleaning? See this link:https://community.ccleaner.com/topic/52668-tracking-files/?tab=comments#comment-300043 Link to comment Share on other sites More sharing options...
Admin Dave CCleaner Posted December 21, 2021 Admin Share Posted December 21, 2021 2 hours ago, Winapp2.ini said: FWIW I downloaded cc5.40 and had no issues cleaning Chrome 99 canary That's interesting. Which build of Windows 10 are you using? If memory serves me correctly, as of late 2019 Windows 10 was doing a runtime block of everything prior to CCleaner 5.46. Piriform Homepage - [CCleaner - CCleaner Mac - CCleaner Android - CCleaner Browser - Recuva - Speccy - Kamo] - Product Support Looking for your licence key, expiry date or download link? Check here first: https://www.ccleaner.com/support/license-lookup To find out how we protect your privacy - read CCleaner's Data Factsheet. What's new? Check the latest CCleaner for Windows release notes. Link to comment Share on other sites More sharing options...
Winapp2.ini Posted December 21, 2021 Author Share Posted December 21, 2021 29 minutes ago, Dave CCleaner said: That's interesting. Which build of Windows 10 are you using? If memory serves me correctly, as of late 2019 Windows 10 was doing a runtime block of everything prior to CCleaner 5.46. 21H2 19044.1415 winapp2.ini additions thread winapp2.ini github Link to comment Share on other sites More sharing options...
Anony2000 Posted December 22, 2021 Share Posted December 22, 2021 (edited) I'm using windows 7 OS 64 bit. All I know is that I didn't change anything other than updating to Chrome 96 & then immediately it stopped working. It will show the temp internet files size and amount, but it will not delete them. I did try 5.88 & that worked, but definitely not what I want. I strongly prefer the minimalist design of older cCleaner. I thought it would work with winappi2 script. I don't have Chrome Canary, no clue what that is. Googled it and it said it was mostly for developers. Edited December 22, 2021 by Anony2000 Link to comment Share on other sites More sharing options...
Anony2000 Posted December 22, 2021 Share Posted December 22, 2021 I think it's in here: C:\Users\*MY USERNAME*\AppData\Local\Google\Chrome\User Data Link to comment Share on other sites More sharing options...
Moderators nukecad Posted December 22, 2021 Moderators Share Posted December 22, 2021 6 hours ago, Anony2000 said: I strongly prefer the minimalist design of older cCleaner. I thought it would work with winappi2 script. I see that thinking, but winapp2 wouldn't normaly clean what CCleaner already cleans as standard, there wouldn't be much point in doing it twice. So you may be missing anything in CCleaner as standard that has changed since your old version. *** Out of Beer Error ->->-> Recovering Memory *** Worried about 'Tracking Files'? Worried about why some files come back after cleaning? See this link:https://community.ccleaner.com/topic/52668-tracking-files/?tab=comments#comment-300043 Link to comment Share on other sites More sharing options...
Anony2000 Posted December 22, 2021 Share Posted December 22, 2021 (edited) Turns out they did move cookies. I just updated ccleaner to 5.88.9346 portable & it does get rid of temp internet files for chrome now, but still not cookies. So, would I be able to create my own rule with winapp2.ini to delete the cookies? If so, could someone tell me the code? C:\Users\**my username**\AppData\Local\Google\Chrome\User Data\Profile 1\Network\cookies There's also a cookies=-journal file in there, but not sure if that matters with this. Edited December 22, 2021 by Anony2000 Link to comment Share on other sites More sharing options...
APMichael Posted December 22, 2021 Share Posted December 22, 2021 1 hour ago, Anony2000 said: ... So, would I be able to create my own rule with winapp2.ini to delete the cookies? If so, could someone tell me the code? ... Please check out the GitHub post: https://github.com/MoscaDotTo/Winapp2/issues/846#issuecomment-999707791 Link to comment Share on other sites More sharing options...
APMichael Posted December 24, 2021 Share Posted December 24, 2021 Had a little time to help out. Winapp2.ini update:https://github.com/MoscaDotTo/Winapp2/commit/153480e8e562444889970b728539200d09f82799 Winapp3.ini update:https://github.com/MoscaDotTo/Winapp2/commit/eb396c73221f0e601b5d3e535b69650b039adf88 Happy Holidays! Link to comment Share on other sites More sharing options...
SMalik Posted January 16, 2022 Share Posted January 16, 2022 Revised Entries Moved from [HP Support Assistant *] and added into [HP Logs *]: %SystemDrive%\system.sav\logs|*.*|RECURSE [HP Logs *] LangSecRef=3021 Detect=HKCU\Software\HP DetectFile1=%AppData%\hpqlog DetectFile2=%CommonAppData%\Hewlett-Packard DetectFile3=%CommonAppData%\HP DetectFile4=%LocalAppData%\Hewlett-Packard DetectFile5=%LocalAppData%\TouchSmartData DetectFile6=%ProgramFiles%\HPQ\Shared\Sierra Wireless FileKey1=%AppData%\hp active health\app analytics\*logs|*.*|RECURSE FileKey2=%AppData%\HP\*Logs|*Log.txt FileKey3=%AppData%\hpqlog|*.log FileKey4=%CommonAppData%|hpzinstall.log FileKey5=%CommonAppData%\Hewlett-Packard|*.log*.*;*Log.txt|RECURSE FileKey6=%CommonAppData%\Hewlett-Packard\HP*\Log*|*.*|RECURSE FileKey7=%CommonAppData%\hp audio switch|*.log* FileKey8=%CommonAppData%\HP\HP Touchpoint Analytics Client\Logs|*.* FileKey9=%CommonAppData%\HP\HP Touchpoint Analytics Client\Monitor-History|*.* FileKey10=%CommonAppData%\HP\HP Touchpoint Analytics Client\MRU|*.* FileKey11=%CommonAppData%\HP\logs|*.*|RECURSE FileKey12=%CommonAppData%\HP\StreamLog|*.*|RECURSE FileKey13=%LocalAppData%\Hewlett-Packard\HP Support Framework\Profile\Upload|*.log FileKey14=%LocalAppData%\TouchSmartData\Log|*.* FileKey15=%ProgramFiles%\HPQ\Shared\Sierra Wireless|*.log|RECURSE FileKey16=%SystemDrive%|dism.log FileKey17=%SystemDrive%\hp\bin\logs|*.log FileKey18=%SystemDrive%\system.sav\logs|*.*|RECURSE FileKey19=%WinDir%\HP|Installer.log Added: %LocalAppData%\Packages\*.HPPrinterControl_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE [HP Smart *] LangSecRef=3031 Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\AD2F1837.HPPrinterControl_v10z8vjag6ke6 FileKey1=%LocalAppData%\Packages\*.HPPrinterControl_*\AC\AppCache|*.*|RECURSE FileKey2=%LocalAppData%\Packages\*.HPPrinterControl_*\AC\INet*|*.*|RECURSE FileKey3=%LocalAppData%\Packages\*.HPPrinterControl_*\AC\Microsoft\CLR_v4.0*|*.log|RECURSE FileKey4=%LocalAppData%\Packages\*.HPPrinterControl_*\AC\Microsoft\CryptnetUrlCache\*|*.*|RECURSE FileKey5=%LocalAppData%\Packages\*.HPPrinterControl_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE FileKey6=%LocalAppData%\Packages\*.HPPrinterControl_*\AC\Temp|*.*|RECURSE FileKey7=%LocalAppData%\Packages\*.HPPrinterControl_*\LocalCache|*.*|RECURSE FileKey8=%LocalAppData%\Packages\*.HPPrinterControl_*\TempState|*.*|RECURSE [HP Support Assistant *] LangSecRef=3031 Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\AD2F1837.HPSupportAssistant_v10z8vjag6ke6 FileKey1=%LocalAppData%\Packages\AD2F1837.HPSupportAssistant_*\AC\INet*|*.*|RECURSE FileKey2=%LocalAppData%\Packages\AD2F1837.HPSupportAssistant_*\AC\Microsoft\CryptnetUrlCache\*|*.*|RECURSE FileKey3=%LocalAppData%\Packages\AD2F1837.HPSupportAssistant_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE FileKey4=%LocalAppData%\Packages\AD2F1837.HPSupportAssistant_*\AC\Temp|*.*|RECURSE FileKey5=%LocalAppData%\Packages\AD2F1837.HPSupportAssistant_*\LocalCache|*.*|RECURSE FileKey6=%LocalAppData%\Packages\AD2F1837.HPSupportAssistant_*\TempState|*.*|RECURSE I think [Intel Graphics Command Center *] entry name should be changed to [Intel Graphics Experience *] [Intel Graphics Command Center *] DetectOS=10.0| LangSecRef=3031 Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\AppUp.IntelGraphicsExperience_8j3eq9eme6ctt FileKey1=%LocalAppData%\Intel\GCC|gcc*_log_*.txt FileKey2=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_*\AC\BackgroundTransferApi|*.*|RECURSE FileKey3=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_*\AC\INet*|*.*|RECURSE FileKey4=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_*\AC\Microsoft\CryptnetUrlCache\*|*.*|RECURSE FileKey5=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_*\AC\Temp|*.*|RECURSE FileKey6=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_*\LocalCache|*.*|RECURSE FileKey7=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_*\LocalState|gcc*_log_*.txt FileKey8=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_*\LocalState\Games2\cache|*.*|RECURSE FileKey9=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_*\LocalState\Intel\GCC|gcc*_log_*.txt FileKey10=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_*\LocalState\MetroLogs|*.*|RECURSE FileKey11=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_*\LocalState\Promotions|*.*|RECURSE FileKey12=%LocalAppData%\Packages\AppUp.IntelGraphicsExperience_*\TempState|*.*|RECURSE [Windows Client WebExperience *] LangSecRef=3031 Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy FileKey1=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_*\AC\INet*|*.*|RECURSE FileKey2=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_*\AC\Microsoft\CryptnetUrlCache\*|*.*|RECURSE FileKey3=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_*\AC\Temp|*.*|RECURSE FileKey4=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_*\LocalCache|*.*|RECURSE FileKey5=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_*\LocalState\EBWebview\*|LOG;LOG.old FileKey6=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_*\TempState|*.*|RECURSE Link to comment Share on other sites More sharing options...
SMalik Posted January 16, 2022 Share Posted January 16, 2022 New Entry [Microsoft Teams *] LangSecRef=3031 Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\MicrosoftTeams_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\MicrosoftTeams_*\AC\INet*|*.*|RECURSE FileKey2=%LocalAppData%\Packages\MicrosoftTeams_*\AC\Temp|*.*|RECURSE FileKey3=%LocalAppData%\Packages\MicrosoftTeams_*\LocalCache|*.*|RECURSE FileKey4=%LocalAppData%\Packages\MicrosoftTeams_*\TempState|*.*|RECURSE Link to comment Share on other sites More sharing options...
siliconman01 Posted January 16, 2022 Share Posted January 16, 2022 I recommend that FileKey5 have a |RECURSE added in [Windows Client WebExperience *] FileKey5=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_*\LocalState\EBWebview\*|LOG;LOG.old|RECURSE Windows 10 x64 Pro on ASUS Maximus VIII Extreme motherboard, i7-6700k CPU,H220 X2 Liquid Cooler, 64 gbyte RipJaws DDR4 3200 RAM, Samsung 970 Pro NVMe M.2 500 gbyte SSD + Samsung 850 Pro 512 gbyte SSD, EVGA RTX 3060 Titan graphics card (Home Built System); Windows 11x64 Pro on 512 gigabyte Dell XPS 15 2-in-1 Laptop/tablet and Dell XPS 8940 PC. ASUS RT-AC88U router, 14 tbyte WD My Cloud PR2100 NAS Server, 200 Mbps cable Internet, MS Edge Chromium, MS Office 2021 (Local), Casper 11, DisplayFusion (3 Flat Panel Displays per system): Latest Bitdefender Internet Security, Quicken, Weather Watcher Live, ThumbsPlus 10, Sticky Password 8, WD Smartware, CyberLink PowerDVD23, MSI AfterBurner, Rainmeter, 8GadgetPack, and many more. Link to comment Share on other sites More sharing options...
APMichael Posted January 16, 2022 Share Posted January 16, 2022 4 hours ago, SMalik said: ... I think [Intel Graphics Command Center *] entry name should be changed to [Intel Graphics Experience *] ... "Intel Graphics Experience" is just the package name. The app itself has always been called "Intel Graphics Command Center", both on Windows and in the Microsoft Store. I would not be aware that this has been changed. 4 hours ago, SMalik said: ... [Microsoft Teams *] ... Duplicate entry names are not possible. The name should therefore be [Microsoft Teams App *], for example. Link to comment Share on other sites More sharing options...
Moderators Andavari Posted January 17, 2022 Moderators Share Posted January 17, 2022 19 hours ago, APMichael said: "Intel Graphics Experience" is just the package name. The app itself has always been called "Intel Graphics Command Center", both on Windows and in the Microsoft Store. I would not be aware that this has been changed. The name hasn't changed, I'm using the newest stable version (download ZIP package that is). It's shown in Services as: Intel(R) Graphics Command Center Service It has a "Program Files (x86)" install folder (with no files inside it): Intel(R) Processor Graphics What to call it? Another recommendation would be to just call it (it would shorten the name): Intel Graphics Link to comment Share on other sites More sharing options...
APMichael Posted January 17, 2022 Share Posted January 17, 2022 3 hours ago, Andavari said: The name hasn't changed, I'm using the newest stable version (download ZIP package that is). ... Thanks for the reply. If you downloaded a ZIP package, then it was the Intel graphics driver, right? However, the "Intel Graphics Command Center" is automatically installed afterwards via the Microsoft Store. The entry [Intel Graphics Command Center *] only refers to this app, not to the graphics driver. (The service is installed by the driver installation so that the driver can communicate with this app.) https://www.microsoft.com/en-us/p/intel-graphics-command-center/9plfnlnt3g5g Link to comment Share on other sites More sharing options...
siliconman01 Posted January 20, 2022 Share Posted January 20, 2022 In examining more thoroughly MicrosoftWindows.Client.WebExperience [Windows Client WebExperience *] I found that there is a large cache file that keeps growing at %LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_*\LocalState\EBWebview\Default\Service Worker\CacheStorage\a892b700b932fb8ff36350643b5733bd1496c80b on my two Windows 11x64 Pro systems on which I use only MSEdge browser. On one system, the cachestorage was 120 mbytes and on the other system it was 206 mbytes. Via Google, I found discussion on this at: https://superuser.com/questions/1608022/how-to-clear-chrome-chromium-edge-service-worker-cache My interpretation is that this cache can be safely removed and will regenerate as needed by MSEdge. Therefore, I suggest that [Windows Client WebExperience *] be modified. FileKey5=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_*\LocalState\EBWebview\*|LOG;LOG.old|RECURSE FileKey6=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_*\LocalState\EBWebview\Default\Service Worker\CacheStorage\a892b700b932fb8ff36350643b5733bd1496c80b|*.*|RECURSE [Windows Client WebExperience *] LangSecRef=3031 Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy FileKey1=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_*\AC\INet*|*.*|RECURSE FileKey2=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_*\AC\Microsoft\CryptnetUrlCache\*|*.*|RECURSE FileKey3=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_*\AC\Temp|*.*|RECURSE FileKey4=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_*\LocalCache|*.*|RECURSE FileKey5=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_*\LocalState\EBWebview\*|LOG;LOG.old|RECURSE FileKey6=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_*\LocalState\EBWebview\Default\Service Worker\CacheStorage\a892b700b932fb8ff36350643b5733bd1496c80b|*.*|RECURSE FileKey7=%LocalAppData%\Packages\MicrosoftWindows.Client.WebExperience_*\TempState|*.*|RECURSE One thing I cannot determine is whether the folder named a892b700b932fb8ff36350643b5733bd1496c80b will vary from user system to user system. It is the same on my two different systems under Windows 11x64 Pro. Windows 10 x64 Pro on ASUS Maximus VIII Extreme motherboard, i7-6700k CPU,H220 X2 Liquid Cooler, 64 gbyte RipJaws DDR4 3200 RAM, Samsung 970 Pro NVMe M.2 500 gbyte SSD + Samsung 850 Pro 512 gbyte SSD, EVGA RTX 3060 Titan graphics card (Home Built System); Windows 11x64 Pro on 512 gigabyte Dell XPS 15 2-in-1 Laptop/tablet and Dell XPS 8940 PC. ASUS RT-AC88U router, 14 tbyte WD My Cloud PR2100 NAS Server, 200 Mbps cable Internet, MS Edge Chromium, MS Office 2021 (Local), Casper 11, DisplayFusion (3 Flat Panel Displays per system): Latest Bitdefender Internet Security, Quicken, Weather Watcher Live, ThumbsPlus 10, Sticky Password 8, WD Smartware, CyberLink PowerDVD23, MSI AfterBurner, Rainmeter, 8GadgetPack, and many more. Link to comment Share on other sites More sharing options...
siliconman01 Posted January 31, 2022 Share Posted January 31, 2022 Modified entry: [Dell Logs *] Added |RECURSE to FileKey4 [Dell Logs *] LangSecRef=3024 Detect1=HKLM\Software\Dell\MUP Detect2=HKLM\Software\Dell\UpdateService Detect3=HKLM\Software\PC-Doctor DetectFile1=%AppData%\Creative\DELL Webcam Center DetectFile2=%CommonAppData%\Dell DetectFile3=%LocalAppData%\Dell DetectFile4=%LocalAppData%\SupportSoft\DellSupportCenter DetectFile5=%ProgramFiles%\Dell* FileKey1=%AppData%\Creative\DELL Webcam Center|MO_Log.txt FileKey2=%AppData%\PCDr\*\Logs|*.* FileKey3=%CommonAppData%\Dell\*\Log|*.*|RECURSE FileKey4=%CommonAppData%\Dell\*\Logs|*.*|RECURSE FileKey5=%CommonAppData%\Dell\BiosVerification|*.log FileKey6=%CommonAppData%\Dell\D3\pla\*\*|*.log;*.txt|REMOVESELF FileKey7=%CommonAppData%\Dell\D3\Resources\Logs\serilog|*.* FileKey8=%CommonAppData%\Dell\Drivers\*|*.log;*.tmp|RECURSE FileKey9=%CommonAppData%\Dell\TrustedDevice|*.log FileKey10=%CommonAppData%\Dell\Update|*.txt FileKey11=%CommonAppData%\Dell\UpdateService\Clients\Update|*.log FileKey12=%CommonAppData%\Dell\UpdateService\DataStore\*\*|*.log FileKey13=%CommonAppData%\Dell\UpdateService\UpdatePackage\Log|*.log;*.txt FileKey14=%CommonAppData%\PCDr\*\Cache|*.xml FileKey15=%CommonAppData%\PCDr\*\Cache\archives|*.*|RECURSE FileKey16=%CommonAppData%\PCDr\*\Cache\BUMA|*.* FileKey17=%CommonAppData%\PCDr\*\Cache\DriverScan|*.* FileKey18=%CommonAppData%\PCDr\*\Logs|*.* FileKey19=%LocalAppData%\Dell\*\Log|*.* FileKey20=%LocalAppData%\Dell\DellMobileConnect|*.log FileKey21=%LocalAppData%\SupportSoft\DellSupportCenter\*\state\logs|*.* FileKey22=%ProgramFiles%\Dell*|*.log|RECURSE Windows 10 x64 Pro on ASUS Maximus VIII Extreme motherboard, i7-6700k CPU,H220 X2 Liquid Cooler, 64 gbyte RipJaws DDR4 3200 RAM, Samsung 970 Pro NVMe M.2 500 gbyte SSD + Samsung 850 Pro 512 gbyte SSD, EVGA RTX 3060 Titan graphics card (Home Built System); Windows 11x64 Pro on 512 gigabyte Dell XPS 15 2-in-1 Laptop/tablet and Dell XPS 8940 PC. ASUS RT-AC88U router, 14 tbyte WD My Cloud PR2100 NAS Server, 200 Mbps cable Internet, MS Edge Chromium, MS Office 2021 (Local), Casper 11, DisplayFusion (3 Flat Panel Displays per system): Latest Bitdefender Internet Security, Quicken, Weather Watcher Live, ThumbsPlus 10, Sticky Password 8, WD Smartware, CyberLink PowerDVD23, MSI AfterBurner, Rainmeter, 8GadgetPack, and many more. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now