Jump to content

Return to Piriform.com

Photo

Macromedia Flash Player settings.sol


  • Please log in to reply
3 replies to this topic

#1 OFFLINE jimmy5457

jimmy5457

    Newbie

  • Members
  • Pip
  • 2 posts
  • Gender:Male
  • Location:US

Posted 23 November 2009 - 06:53 AM

While conducting some testing of this great applicaiton, I came across an item that may need addressed.

As we know, Adobe Flash Player(AFP) is a well used method for streaming video to users.
Mtv, News, etc etc all use it.
CCleaner addresses the AFP application artifacts created in;
<drive>:\Documents and Settings\<userprofile>\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys and
<drive>:\Documents and Settings\<userprofile>\Application Data\Macromedia\Flash Player\#SharedObjects

But what I found recently is that AFP appends web site url hosts(domains) that were visited, ether typed/clicked or via popups, to the settings.sol file in <drive>:\Documents and Settings\<userprofile>\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys.
This file is not deleted by CCleaner. The decision may be intentional because this file may hold user defined setting from the Setting Manager(http://www.macromedi..._manager05.html).
But forensically or on the premise that this applicatoin cleans trace information, these url hosts should be removed.

If you would like to verify this artifact, just open your Adobe Flash Settings Manager, http://www.macromedi..._manager05.html, now or after a CClean.
Go to the "Website Storage Settings" or "Website Privacy Settings" tab, last two tabs.
If you see anything listed here, then sorry... GotYa.
You can also just open <drive>:\Documents and Settings\<userprofile>\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol file with a text editor and get an idea of what is going on.

Myself, if you could add this file for deletion to the default CCleaner analyser I would be happy, the file is recreated by AFP with default settings so no worries.
Or open the file and remove the 'domains' section, save and then cleanup cluster slack for that file, but I would imagine this would be much more coding.

Thanks
JimG

#2 OFFLINE JDPower

JDPower

    May contain traces of sarcasm

  • Members
  • PipPipPipPipPip
  • 3,128 posts
  • Gender:Male
  • Location:England

Posted 28 November 2009 - 08:29 PM

IIRC this particular file was removed from the Flash Player cleaning due to complaints of Flash settings being reset (I have it as a custom file to be deleted)

#3 OFFLINE jimmy5457

jimmy5457

    Newbie

  • Members
  • Pip
  • 2 posts
  • Gender:Male
  • Location:US

Posted 29 November 2009 - 08:41 AM

IIRC this particular file was removed from the Flash Player cleaning due to complaints of Flash settings being reset (I have it as a custom file to be deleted)


Thanks for the tip JDPower! Am doing the same now.

Not sure why this file would be removed from standard cleaning, baring the user Flash settings, for it is a source of great forensic information regarding what sites a user has visited.

I mainly wanted folks to be aware of this artifact for I, and I bet others, are under the impression that CCleaner cleaned internet browsing activity(privacy claim). I have to say I was shocked to find this information lurking.

#4 OFFLINE Cloud Strife

Cloud Strife

    Member

  • Members
  • PipPip
  • 36 posts

Posted 30 November 2009 - 10:04 PM

@ jimmy5457 ya no kidding. i first found out that this file was being left behind when adobe flash player managed to sneak through my avg firewall and try to update its self i went through the settings tab on the window that popped up and was shocked to find that it remembered most of the websites i had visited so i did some looking into it and i added the whole macromedia folder to my winapps2.ini so i would have the ability to chose wither it was deleted or not. i also sent a suggestion to twisted metal of stuff to add to winapps2.ini including this file but i was ignored.