Jump to content

Winapp2.ini additions


Winapp2.ini

Recommended Posts

Thanks!

 

I do not know whether this was already discussed but the entry FlashGot in the section Firefox/Mozilla shows up although it is not installed.

If Stylish is also a Firefox add-on, its entry has this bug, too. I would recommend to define the detection files of this two entries more precise.

If I recall add-ons can't be detected (not accurately anyways). Might be wrong though.

Link to comment
Share on other sites

  • Moderators

That's because when Mozilla released Firefox 15 they changed a registry key location which many cleaners used for detection and thus many cleaning entries wouldn't work anymore. By having DET_MOZILLA it "should work in any Firefox version.

this was only 3 pages (40 posts) ago

 

edit: :( ninja'd

 

ADVICE FOR USING CCleaner'S REGISTRY INTEGRITY SECTION

DON'T JUST CLEAN EVERYTHING THAT'S CHECKED OFF.

Do your Registry Cleaning in small bits (at the very least Check-mark by Check-mark)

ALWAYS BACKUP THE ENTRY, YOU NEVER KNOW WHAT YOU'LL BREAK IF YOU DON'T.

Support at https://support.ccleaner.com/s/?language=en_US

Pro users file a PRIORITY SUPPORT via email support@ccleaner.com

Link to comment
Share on other sites

NEW ENTRY

 

[Corel PaintShop Pro X5*]

LangSecRef=3023

Detect=HKCU\Software\Corel\PaintShop Pro\X5

Default=False

FileKey1=%LocalAppData%\Corel PaintShop Pro\15.0\Database|*.db

FileKey2=%LocalAppData%\Corel PaintShop Pro\15.0\Thumbs|*.*|RECURSE

Link to comment
Share on other sites

[Media Player Classic More*] entry was broken, it had wildcards in regkeys so it didn't work.

Here's a fixed entry with added RegKeys + added FileyKey1.

MODIFIED ENTRY

[Media Player Classic More*]
LangSecRef=3023
Detect=HKCU\Software\Gabest\Media Player Classic
Default=False
RegKey1=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 0
RegKey2=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 1
RegKey3=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 2
RegKey4=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 3
RegKey5=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 4
RegKey6=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 5
RegKey7=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 6
RegKey8=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 7
RegKey9=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 8
RegKey10=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 9
RegKey11=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 10
RegKey12=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 11
RegKey13=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 12
RegKey14=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 13
RegKey15=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 14
RegKey16=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 15
RegKey17=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 16
RegKey18=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 17
RegKey19=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 18
RegKey20=HKCU\Software\Gabest\Media Player Classic\Settings|File Name 19
RegKey21=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 0
RegKey22=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 1
RegKey23=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 2
RegKey24=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 3
RegKey25=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 4
RegKey26=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 5
RegKey27=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 6
RegKey28=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 7
RegKey29=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 8
RegKey30=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 9
RegKey31=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 10
RegKey32=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 11
RegKey33=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 12
RegKey34=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 13
RegKey35=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 14
RegKey36=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 15
RegKey37=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 16
RegKey38=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 17
RegKey39=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 18
RegKey40=HKCU\Software\Gabest\Media Player Classic\Settings|File Position 19
RegKey41=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 0
RegKey42=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 1
RegKey43=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 2
RegKey44=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 3
RegKey45=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 4
RegKey46=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 5
RegKey47=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 6
RegKey48=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 7
RegKey49=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 8
RegKey50=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 9
RegKey51=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 10
RegKey52=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 11
RegKey53=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 12
RegKey54=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 13
RegKey55=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 14
RegKey56=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 15
RegKey57=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 16
RegKey58=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 17
RegKey59=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 18
RegKey60=HKCU\Software\Gabest\Media Player Classic\Settings|DVD Position 19
RegKey61=HKCU\Software\Gabest\Media Player Classic\Settings|LastOpenDir
FileKey1=%AppData%\Media Player Classic|*.dmp

 

Edit. Edited the entry.

Edited by nodles
Link to comment
Share on other sites

NEW ENTRY

 

[Corel PaintShop Pro X5*]

LangSecRef=3023

Detect=HKCU\Software\Corel\PaintShop Pro\X5

Default=False

FileKey1=%LocalAppData%\Corel PaintShop Pro\15.0\Database|*.db

FileKey2=%LocalAppData%\Corel PaintShop Pro\15.0\Thumbs|*.*|RECURSE

 

I don't have PaintShop on my system. Should the existing [Corel PaintShop Pro X4 More*] be modified to include

 

 

FileKey2=%LocalAppData%\Corel PaintShop Pro\14.0\Thumbs|*.*|RECURSE

 

[Corel PaintShop Pro X4 More*]
LangSecRef=3023
Detect=HKCU\Software\Corel\PaintShop Pro\X4
Default=False
FileKey1=%LocalAppData%\Corel PaintShop Pro\14.0\Database|*.db

Windows 10 x64 Pro on ASUS Maximus VIII Extreme motherboard, i7-6700k CPU,H220 X2 Liquid Cooler, 64 gbyte RipJaws DDR4 3200 RAM, Samsung 970 Pro NVMe M.2 500 gbyte SSD + Samsung 850 Pro 512 gbyte SSD, EVGA RTX 3060 Titan graphics card (Home Built System);  Windows 11x64 Pro on 512 gigabyte Dell XPS 15 2-in-1 Laptop/tablet and Dell XPS 8940 PC.  ASUS RT-AC88U router, 14 tbyte WD My Cloud PR2100 NAS Server, 200 Mbps cable Internet, MS Edge Chromium, MS Office 2021 (Local), Casper 11, DisplayFusion (3 Flat Panel Displays per system):   Latest Bitdefender Internet Security, Quicken, Weather Watcher Live, ThumbsPlus 10, Sticky Password 8, WD Smartware, CyberLink PowerDVD23, MSI AfterBurner, Rainmeter, 8GadgetPack, and many more.

Link to comment
Share on other sites

Thanks for the huge update!

 

Only one post was missed: - #2090 (Modified entry [belarc*])

 

Some entries with typos:

 

[Chrome Installer*]

LangSecRef=3029

DetectFile=%LocalAppData%\Google\Chrome

Default=False

FileKey1=%LocalAppData%\Google\Chrome\Application\*\Installer|*.*|REMOVESELF

 

[LocalService Cookies*]

LangSecRef=3025

Detect=HKCU\Software\Microsoft\Windows

Default=False

FileKey1=%SystemDrive%\Documents and Settings\LocalService\Cookies|*.*|RECURSE

FileKey2=%WinDir%\ServiceProfiles\LocalService\AppData\Local\Temp\Cookies|*.*|REMOVESELF

FileKey3=%WinDir%\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies|*.*|REMOVESELF

FileKey4=%SystemDrive%\Documents and Settings\LocalService.NT*\Cookies|*.*|RECURSE

 

[NetworkService Cookies*]

LangSecRef=3025

Detect=HKCU\Software\Microsoft\Windows

Default=False

FileKey1=%SystemDrive%\Documents and Settings\NetworkService\Cookies|*.*|REMOVESELF

FileKey2=%SystemDrive%\Documents and Settings\NetworkService.NT*\Cookies|*.*|REMOVESELF

FileKey3=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Temp\Cookies|*.*|REMOVESELF

FileKey4=%WinDir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies|*.*|REMOVESELF

 

[MS AntiMalware More*]

LangSecRef=3025

Detect=HKLM\SOFTWARE\Microsoft\Microsoft Antimalware

Default=False

FileKey1=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Temp|MpCmdRun.log

FileKey2=%SystemDrive%\Documents and Settings\NetworkService\Temp|MpCmdRun.log

FileKey3=%SystemDrive%\Documents and Settings\NetworkService.NT*\Temp|MpCmdRun.log

 

[Windows Media Player (Album Art Cache)*]

LangSecRef=3023

Detect=HKCU\Software\Microsoft\MediaPlayer

Default=False

FileKey1=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Media Player\Art Cache\LocalMLS|*.*|RECURSE

FileKey2=%SystemDrive%\Documents and Settings\NetworkService\Local Settings\Microsoft\Media Player\Art Cache\LocalMLS|*.*|RECURSE

FileKey3=%SystemDrive%\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Media Player\Art Cache\LocalMLS|*.*|RECURSE

Link to comment
Share on other sites

NEW ENTRY:

[Tribes: Ascend*]
LangSecRef=Games
Detect=%Documents%\My Games\Tribes Ascend
Default=False
FileKey1=%ProgramFiles%\Steam\steamapps\common\tribes\Binaries\Logs|*.*
FileKey2=%Documents%\My Games\Tribes Ascend\TribesGame\Logs|*.*

 

MODIFIED ENTRIES:

[bugsplat*]
LangSecRef=Games
Detect=HKCU\Software\Bugsplat
Default=False
RegKey1=HKCU\Software\Bugsplat\lol_beta_riotgames_com\LOL_Public
RegKey2=HKCU\Software\Bugsplat\Pando_win\Pando

<-Moved to Games.

 

[Hi-Rez Studios*]
LangSecRef=Games
Detect=HKLM\SOFTWARE\Hi-Rez Studios
Default=False
FileKey1=%CommonAppData%\Hi-Rez Studios\HiPatchService\log|*.*
FileKey2=%CommonAppData%\Hi-Rez Studios\BrowserCacheTribes\Default|*.*|RECURSE
FileKey3=%ProgramFiles%\Hi-Rez Studios\hireztemp|*.*

<-Moved to Games and added FileKey2 + FileKey3.

 

[League of Legends*]
Section=Games
Detect=HKLM\Software\Riot Games\League of Legends
Default=False
FileKey1=%SystemDrive%\Riot Games\League of Legends|*.log*|RECURSE
FileKey2=%SystemDrive%\Riot Games\League of Legends|*.tmp|RECURSE
FileKey3=%SystemDrive%\Riot Games\League of Legends\Logs|*.*|RECURSE
FileKey4=%UserProfile%\riotsGamesLogs|*.*
FileKey5=%SystemDrive%\Riot Games\League of Legends|*.pandurl|RECURSE
FileKey6=%AppData%\LolClient*|*.*|RECURSE
FileKey7=%SystemDrive%\Riot Games\League of Legends|Localization_Errors.txt|RECURSE

<-Modified Detect, removed old FileKey2 + other modifications.

Link to comment
Share on other sites

Found another typo:

 

[internet Explorer More*]

LangSecRef=3022

Detect=HKCU\Software\Microsoft\Internet Explorer

Default=False

FileKey1=%LocalAppData%\Microsoft\Internet Explorer\Recovery\Last Active|*.*|RECURSE

FileKey2=%LocalLowAppData%\Microsoft\CryptnetUrlCache\Content|*.*

FileKey3=%LocalLowAppData%\Microsoft\CryptnetUrlCache\MetaData|*.*

FileKey4=%AppData%\Microsoft\Internet Explorer\UserData|*.*|RECURSE

FileKey5=%LocalAppData%\Microsoft\Internet Explorer|brndlog.txt

FileKey6=%LocalAppData%\Microsoft\Internet Explorer|brndlog.bak

FileKey7=%AppData%\Microsoft\Internet Explorer|brndlog.bak

FileKey8=%AppData%\Microsoft\Internet Explorer|brndlog.txt

FileKey9=%WinDir%\System32\config\SystemProfile\Application Data\Microsoft\CryptnetUrlCache\Content|*.*

FileKey10=%WinDir%\System32\config\SystemProfile\Application Data\Microsoft\CryptnetUrlCache\MetaData|*.*

FileKey11=%WinDir%\System32\config\SystemProfile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData|*.*

FileKey12=%WinDir%\System32\config\SystemProfile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content|*.*

FileKey13=%WinDir%\System32\config\SystemProfile\Application Data\Microsoft\Internet Explorer|brndlog.bak

FileKey14=%WinDir%\System32\config\SystemProfile\Application Data\Microsoft\Internet Explorer|brndlog.txt

FileKey15=%WinDir%\System32\config\SystemProfile\AppData\LocalLow\Microsoft\Internet Explorer|brndlog.bak

FileKey16=%WinDir%\System32\config\SystemProfile\AppData\LocalLow\Microsoft\Internet Explorer|brndlog.txt

RegKey1=HKCU\Software\Microsoft\Internet Explorer\International|CNum_CpCache

RegKey2=HKCU\Software\Microsoft\Internet Explorer\International|CpCache

RegKey3=HKCU\Software\Microsoft\Internet Explorer\International\CpMRU

RegKey4=HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore

RegKey5=HKCU\Software\Microsoft\Internet Explorer\PageSetup

RegKey6=HKCU\Software\Microsoft\Internet Explorer\Recovery\PendingDelete

 

 

And a thought: I think the new entries with "Documents and Settings" keys won't work on a non-English Windows XP, because the folder names depend on the installed language. Sadly there are no environment variables or links for some of the system folders. You have to rewrite those entries for your installed language.

Link to comment
Share on other sites

When upgrading versions of MS Office, some registry keys are left over that show previous versions of MS Office that have been installed on the user's computer. The code below cleans out these registry keys based on the highest MS Office version currently installed on the user computer. This helps prevent third party programs from misinterpreting which Office version is on a user's computer.

 

MS Office 2010

[MS Office 2010 Upgrade: MS Office XP/2003/2007 Registry Cleanup*]
LangSecRef=3021
Detect1=HKCU\Software\Microsoft\Office\14.0
Detect2=HKLM\Software\Microsoft\Office\14.0
Default=False
Warning=This cleans out registry entries/remnants of Microsoft Office XP/2003/2007 after Microsoft Office 2010 is installed.
RegKey1=HKCU\Software\Microsoft\Office\12.0
RegKey2=HKLM\Software\Microsoft\Office\12.0
RegKey3=HKCU\Software\Microsoft\Office\11.0
RegKey4=HKLM\Software\Microsoft\Office\11.0
RegKey5=HKCU\Software\Microsoft\Office\10.0
RegKey6=HKLM\Software\Microsoft\Office\10.0
RegKey7=HKLM\Software\Wow6432Node\Microsoft\Office\12.0
RegKey8=HKLM\Software\Wow6432Node\Microsoft\Office\11.0
RegKey9=HKLM\Software\Wow6432Node\Microsoft\Office\10.0

 

MS Office 2007

[MS Office 2007 Upgrade: MS Office XP/2003 Registry Cleanup*]
LangSecRef=3021
Detect1=HKCU\Software\Microsoft\Office\12.0
Detect2=HKLM\Software\Microsoft\Office\12.0
Default=False
Warning=This cleans out registry entries/remnants of Microsoft Office XP/2003 after Microsoft Office 2007 is installed.
RegKey1=HKCU\Software\Microsoft\Office\11.0
RegKey2=HKLM\Software\Microsoft\Office\11.0
RegKey3=HKCU\Software\Microsoft\Office\10.0
RegKey4=HKLM\Software\Microsoft\Office\10.0
RegKey5=HKLM\Software\Wow6432Node\Microsoft\Office\11.0
RegKey6=HKLM\Software\Wow6432Node\Microsoft\Office\10.0

 

MS Office 2003

[MS Office 2003 Upgrade: MS Office XP Registry Cleanup*]
LangSecRef=3021
Detect1=HKCU\Software\Microsoft\Office\11.0
Detect2=HKLM\Software\Microsoft\Office\11.0
Default=False
Warning=This cleans out registry entries/remnants of Microsoft Office XP after Microsoft Office 2003 is installed.
RegKey1=HKCU\Software\Microsoft\Office\10.0
RegKey2=HKLM\Software\Microsoft\Office\10.0
RegKey3=HKLM\Software\Wow6432Node\Microsoft\Office\10.0 

Windows 10 x64 Pro on ASUS Maximus VIII Extreme motherboard, i7-6700k CPU,H220 X2 Liquid Cooler, 64 gbyte RipJaws DDR4 3200 RAM, Samsung 970 Pro NVMe M.2 500 gbyte SSD + Samsung 850 Pro 512 gbyte SSD, EVGA RTX 3060 Titan graphics card (Home Built System);  Windows 11x64 Pro on 512 gigabyte Dell XPS 15 2-in-1 Laptop/tablet and Dell XPS 8940 PC.  ASUS RT-AC88U router, 14 tbyte WD My Cloud PR2100 NAS Server, 200 Mbps cable Internet, MS Edge Chromium, MS Office 2021 (Local), Casper 11, DisplayFusion (3 Flat Panel Displays per system):   Latest Bitdefender Internet Security, Quicken, Weather Watcher Live, ThumbsPlus 10, Sticky Password 8, WD Smartware, CyberLink PowerDVD23, MSI AfterBurner, Rainmeter, 8GadgetPack, and many more.

Link to comment
Share on other sites

Modified ctfmon.exe to include Detect1/2/3 which prevents this code from showing up on systems where ctfmon.exe has been properly deactivated already.

 

[ctfmon.exe (Disable Startup)*]
LangSecRef=3021
Detect1=HKLM\Software\Microsoft\Windows\CurrentVersion\Run|ctfmon.exe
Detect2=HKCU\Software\Microsoft\Windows\CurrentVersion\Run|ctfmon.exe
Detect3=HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run|ctfmon.exe
Default=False
Warning=This will only temporarily disable the Microsoft Office installed file ctfmon.exe from starting with Windows. ctfmon.exe is known to cause severe system slow downs and can be permanently disabled using the free CTFMON-Remover: http://www.gerhard-schlager.at/en/projects/ctfmonremover/
RegKey1=HKLM\Software\Microsoft\Windows\CurrentVersion\Run|ctfmon.exe
RegKey2=HKCU\Software\Microsoft\Windows\CurrentVersion\Run|ctfmon.exe
RegKey3=HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run|ctfmon.exe

Windows 10 x64 Pro on ASUS Maximus VIII Extreme motherboard, i7-6700k CPU,H220 X2 Liquid Cooler, 64 gbyte RipJaws DDR4 3200 RAM, Samsung 970 Pro NVMe M.2 500 gbyte SSD + Samsung 850 Pro 512 gbyte SSD, EVGA RTX 3060 Titan graphics card (Home Built System);  Windows 11x64 Pro on 512 gigabyte Dell XPS 15 2-in-1 Laptop/tablet and Dell XPS 8940 PC.  ASUS RT-AC88U router, 14 tbyte WD My Cloud PR2100 NAS Server, 200 Mbps cable Internet, MS Edge Chromium, MS Office 2021 (Local), Casper 11, DisplayFusion (3 Flat Panel Displays per system):   Latest Bitdefender Internet Security, Quicken, Weather Watcher Live, ThumbsPlus 10, Sticky Password 8, WD Smartware, CyberLink PowerDVD23, MSI AfterBurner, Rainmeter, 8GadgetPack, and many more.

Link to comment
Share on other sites

Does that work like that?

 

I assume you are referring to the ctfmon.exe code. And the answer is "No". I put in a test ctfmon.exe string in the registry and my modification did not detect it. Ugggh. Any suggestions as to how to make it detect if there is an active RUN string that needs to be deleted? But once deleted the code should no longer be visible.

Windows 10 x64 Pro on ASUS Maximus VIII Extreme motherboard, i7-6700k CPU,H220 X2 Liquid Cooler, 64 gbyte RipJaws DDR4 3200 RAM, Samsung 970 Pro NVMe M.2 500 gbyte SSD + Samsung 850 Pro 512 gbyte SSD, EVGA RTX 3060 Titan graphics card (Home Built System);  Windows 11x64 Pro on 512 gigabyte Dell XPS 15 2-in-1 Laptop/tablet and Dell XPS 8940 PC.  ASUS RT-AC88U router, 14 tbyte WD My Cloud PR2100 NAS Server, 200 Mbps cable Internet, MS Edge Chromium, MS Office 2021 (Local), Casper 11, DisplayFusion (3 Flat Panel Displays per system):   Latest Bitdefender Internet Security, Quicken, Weather Watcher Live, ThumbsPlus 10, Sticky Password 8, WD Smartware, CyberLink PowerDVD23, MSI AfterBurner, Rainmeter, 8GadgetPack, and many more.

Link to comment
Share on other sites

Why not replace the three detects with one detectFile

DetectFile=%Windir%

 

The original coder of ctfmon.exe is attempting to stop ctfmon.exe from starting up on system reboot. ctfmon.exe can be present on the system, but its the continuous running of the it that has caused many users problems. There are procedures to totally deactivate it, but the original coder just wants to stop it from starting up. A DetectFile will still show the code even if it is not in the RUN keys to start up.

Windows 10 x64 Pro on ASUS Maximus VIII Extreme motherboard, i7-6700k CPU,H220 X2 Liquid Cooler, 64 gbyte RipJaws DDR4 3200 RAM, Samsung 970 Pro NVMe M.2 500 gbyte SSD + Samsung 850 Pro 512 gbyte SSD, EVGA RTX 3060 Titan graphics card (Home Built System);  Windows 11x64 Pro on 512 gigabyte Dell XPS 15 2-in-1 Laptop/tablet and Dell XPS 8940 PC.  ASUS RT-AC88U router, 14 tbyte WD My Cloud PR2100 NAS Server, 200 Mbps cable Internet, MS Edge Chromium, MS Office 2021 (Local), Casper 11, DisplayFusion (3 Flat Panel Displays per system):   Latest Bitdefender Internet Security, Quicken, Weather Watcher Live, ThumbsPlus 10, Sticky Password 8, WD Smartware, CyberLink PowerDVD23, MSI AfterBurner, Rainmeter, 8GadgetPack, and many more.

Link to comment
Share on other sites

Agreed.

I am just proposing to remove the keys to be sure it cannot start even if the keys cannot be detected.

 

I actually think the problem is NOT what to detect in order to delete those keys at the time when CCleaner is run,

but how to cripple whatever it may be that re-creates these keys between the instant the CCleaner deletes them and before Windows shuts down.

 

i.e. It does no good removing the key if it is recreated again before Windows is restarted.

Link to comment
Share on other sites

Personally, I think the ctfmon.exe code should be removed from Winapp2.ini. If a person is having an issue with ctfmon running, then links such as the ones below will assist in correcting the problem.

 

http://www.howtogeek.com/howto/windows-vista/what-is-ctfmonexe-and-why-is-it-running/

 

http://support.microsoft.com/kb/823586

 

and many others that can be viewed by googling Office XP ctfmon.exe or Office 2003 ctfmon.exe, Office 2007 ctfmon.exe or Office 2010 ctfmon.exe

Windows 10 x64 Pro on ASUS Maximus VIII Extreme motherboard, i7-6700k CPU,H220 X2 Liquid Cooler, 64 gbyte RipJaws DDR4 3200 RAM, Samsung 970 Pro NVMe M.2 500 gbyte SSD + Samsung 850 Pro 512 gbyte SSD, EVGA RTX 3060 Titan graphics card (Home Built System);  Windows 11x64 Pro on 512 gigabyte Dell XPS 15 2-in-1 Laptop/tablet and Dell XPS 8940 PC.  ASUS RT-AC88U router, 14 tbyte WD My Cloud PR2100 NAS Server, 200 Mbps cable Internet, MS Edge Chromium, MS Office 2021 (Local), Casper 11, DisplayFusion (3 Flat Panel Displays per system):   Latest Bitdefender Internet Security, Quicken, Weather Watcher Live, ThumbsPlus 10, Sticky Password 8, WD Smartware, CyberLink PowerDVD23, MSI AfterBurner, Rainmeter, 8GadgetPack, and many more.

Link to comment
Share on other sites

  • Moderators

Even though I've used CCleaner for about 3 years, I've only very recently discovered its winapp2.ini capability (yeah yeah I know - never bother reading the doco) and I've just got along with the ccleaner.ini usage.

 

So am I right in saying that Piriform themselves don't issue an 'official' winapp2 file, but that this forum are the 'keepers' of the file and update/amend it based of member suggestions/feedback.

Backup now & backup often.
It's your digital life - protect it with a backup.
Three things are certain; Birth, Death and loss of data. You control the last.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.