Jump to content

TheOdds

Experienced Members
  • Posts

    72
  • Joined

  • Last visited

Posts posted by TheOdds

  1. Confirmed on Windows XP! I have no idea what CCleaner is trying to do here...

     

    35 15:23:19 CCleaner.exe:876 OpenKey HKU SUCCESS Access: 0x2000000

    36 15:23:19 CCleaner.exe:876 OpenKey HKCU SUCCESS Access: 0x20019

    37 15:23:19 CCleaner.exe:876 CloseKey HKCU SUCCESS

    ...

    95 15:23:19 CCleaner.exe:876 OpenKey HKCU NOT FOUND

    96 15:23:19 CCleaner.exe:876 CloseKey HKCU SUCCESS

    97 15:23:19 CCleaner.exe:876 CreateKey HKLM\system\currentcontrolset\control\hivelist SUCCESS Access: 0x2001F

    98 15:23:19 CCleaner.exe:876 SetValue HKCU SUCCESS "\Device\HarddiskVolume1\ntuser.dat"

    99 15:23:19 CCleaner.exe:876 LoadKey ? ?Z??`?7?d SUCCESS \\??\C:\ntuser.dat

    100 15:23:19 CCleaner.exe:876 OpenKey HKLM\System\CurrentControlSet\Control\Session Manager\Environment SUCCESS Access: 0x20019

    101 15:23:19 CCleaner.exe:876 QueryKey HKLM\System\CurrentControlSet\Control\Session Manager\Environment SUCCESS Subkeys = 0

    ...

    149 15:23:19 CCleaner.exe:876 OpenKey HKCU NOT FOUND

    150 15:23:19 CCleaner.exe:876 LoadKey ? ?Z??`?7?d SHARING VIOLATION \\??\C:\ntuser.dat

    151 15:23:19 CCleaner.exe:876 OpenKey HKCU NOT FOUND

    152 15:23:19 CCleaner.exe:876 LoadKey ? ?Z??`?7?d SHARING VIOLATION \\??\C:\ntuser.dat

    ...

    157 15:23:19 CCleaner.exe:876 OpenKey HKCU NOT FOUND

    158 15:23:19 CCleaner.exe:876 LoadKey ? ?Z??`?7?d SHARING VIOLATION \\??\C:\ntuser.dat

    159 15:23:19 CCleaner.exe:876 OpenKey HKCU NOT FOUND

    160 15:23:19 CCleaner.exe:876 LoadKey ? ?Z??`?7?d SHARING VIOLATION \\??\C:\ntuser.dat

    ...

    193 15:23:19 CCleaner.exe:876 OpenKey HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg NOT FOUND

    194 15:23:19 CCleaner.exe:876 OpenKey HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder NOT FOUND

    195 15:23:19 CCleaner.exe:876 OpenKey HKLM\system\currentcontrolset\control\hivelist SUCCESS Access: 0x2001F

    196 15:23:19 CCleaner.exe:876 DeleteValueKey HKCU SUCCESS

    197 15:23:19 CCleaner.exe:876 UnloadKey ? SUCCESS

     

    But, I am pretty sure it is failing terribly.

  2. @Winapp2.ini

    I was wrong, Firefox Site Preferences doesn't delete the webappsstore.sqlite file, instead it deletes content-prefs.sqlite. That file doesn't contain the "super cookies" stuff, but it does contain the site specific zoom options and other site specific options user may have set. Websites can't use this file to track the user unlike with the webappsstore.sqlite file.

  3. What exactly is a "super cookie?" :huh:

    It's a generic term used for stuff like Flash cookies, Silverlight cookies, Site Preferences..., that can be used to track the user on the web in the same way as normal browser cookies.

  4. I'm just assuming without trying it that it has the same behaviour as Firefox's own Site Preferences cleaner which unfortunately also removes bookmarks?

    I think selecting Firefox's site preferences deletes the webappsstore.sqlite file. That file mainly contains site specific zoom options and "super cookies" set by websites.

  5. Wikipedia has a pretty good explanation of why this could happen. http://en.wikipedia.org/wiki/Temporary_Internet_Files

     

    On Windows XP, the cache is usually located at %USERPROFILE%\Local Settings\Temporary Internet Files (where %USERPROFILE% is an environment variable pointing to the root directory of the logged-in user's user profile). However, the cache may be moved by changing a value in the registry. Occasionally an additional (hidden) cache named "Temporary Internet Files" may appear in %USERPROFILE%\Local Settings\Temp\Temporary Internet Files or in %USERPROFILE%\Local Settings\Temporary Internet Files. This location can only be deleted by manually accessing the folder and removing it.

     

    One scenario that often (albeit not always) leads to the occurrence of this phenomenon proceeds as follows:

    1. User A runs Internet Explorer from his own account, but under the credentials of user B. This is achieved by using the runas command, e.g. runas /user:B iexplore.exe. The functionality of runas is provided and supported by Windows XP Secondary Logon service.
    2. User A quits Internet Explorer and logs out of his account. However, due to a bug in Windows XP, the svchost.exe process that hosts the Secondary Logon service retains the ownership of critical Internet Explorer data files belonging to user B and located in B's profile directories (for example, index.dat file located in %USERPROFILE%\Local Settings\Temp\Temporary Internet Files\Content.IE5 directory). For this reason these files remain inaccessible for writing.
    3. User B logs into his account and runs Internet Explorer. Internet Explorer is unable to obtain write access to the aforementioned files, which makes it quietly recreate the supporting directories under the current %TEMP% location as a fail-safe measure. The data from the original directories is not copied to the new ones. Internet Explorer will continue to use the directories under %TEMP% until the files at the original location become writable again.

    So it's "fail-safe measure" build in IE.

     

    Now I'm not quite sure why CCleaner causes the fail-safe folders to be created, but I think it happens because CCleaner blocks the access to index.dat files when it's wiping them, thus triggering the fail-safe when the system try to gain access to the index.dat files. IE doesn't need to be running for this to happen because the index.dat files are always on use by other components of the system.

  6. http://msdn.microsoft.com/en-us/library/0h88fahh%28VS.85%29.aspx

     

    1025 - Arabic

    1026 - Bulgarian

    1027 - Catalan

    1028 - Chinese - Taiwan

    1029 - Czech

    1030 - Danish

    1031 - German

    1032 - Greek

    1034 - Spanish

    1035 - Finnish

    1036 - French

    1037 - Hebrew

    1038 - Hungarian

    1040 - Italian

    1041 - Japanese

    1042 - Korean

    1043 - Dutch

    1044 - Norwegian

    1045 - Polish

    1046 - Portuguese - Brazilian

    1048 - Romanian

    1049 - Russian

    1050 - Croatian

    1051 - Slovak

    1052 - Albanian

    1053 - Swedish

    1055 - Turkish

    1058 - Ukrainian

    1059 - Belarusian

    1060 - Slovenian

    1061 - Estonian

    1063 - Lithuanian

    1065 - Persian

    1066 - Vietnamese

    1067 - Armenian

    1068 - Azeri (Latin)

    1071 - Macedonian (FYROM)

    1079 - Georgian

    1110 - Galician

    2052 - Chinese - Simplified

    2070 - Portuguese

    2074 - Serbian (Latin)

    3098 - Serbian (Cyrillic)

    5146 - Bosnian

    9999 - Kurdish *

     

    I think that's all of them.

     

    * Not a real Locale ID, but very much a real language.

  7. Right. Just checking the files not cleaning them. :)

     

    Don't think it installs, just runs, does try to phone home when you click on "How to Delete..." button, but link gone. Not sure, tho, about the installing part, just didn't find any remnants in a cursory search. :)

    Yeah it's portable executable. No install and it shouldn't leave anything behind.

  8. I got it wrong. It's 'History' that wipes the Index.dat files not 'Cookies'. I could have sworn that it was 'Cookies' though. :blink:

     

    I used IdatScan (Index.dat Scanner) to check the files before and after. The origin website of IdatScan is long gone so it may be hard to find working download links for it.

  9. I noticed that after you run CCleaner once it no longer detects Microsoft Management Console (Not until you run some MSC files).

     

    This happens because MS Management Console detect value is the same as the RegKey1 value:

    [MS Management Console]
    ID=2064
    LangSecRef=3025
    Detect=HKCU\Software\Microsoft\Microsoft Management Console\Recent File List
    Default=True
    RegKey1=HKCU\Software\Microsoft\Microsoft Management Console\Recent File List

     

    Correct detect value should be:

    [MS Management Console]
    ID=2064
    LangSecRef=3025
    Detect=HKCU\Software\Microsoft\Microsoft Management Console
    Default=True
    RegKey1=HKCU\Software\Microsoft\Microsoft Management Console\Recent File List

     

    This is a pretty minor bug, but it's a bug none the less.

  10. Is anyone else seeing a notable decreased in performance with Flash 10.1?

     

    I thought this new version was suppose so improve performance and add hardware acceleration for HD videos, but I'm actually getting worse performance on youtube than before.

  11. The system.dll and everything else in the $PLUGINSDIR is part of the Nullsoft Scriptable Install System that Piriform uses for it's installers. The system.dll is only used when you run the installer. It's extracted in the windows temp directory and deleted when the installer quits.

  12. I have most of the versions from v1.16.080 to v1.34.405 plus really old v1.09.056 and v1.12.063 both installers and extracted versions. If you still need them I can upload them somewhere.

  13. Try booting to Recovery Console. Most likely Recovery Console isn't installed on your disk so you need to boot it from the Windows XP CD, but if it is installed you can boot it from the same menu as safe mode. In Recovery Console you need to "login" to your windows installation with your administrator password.

     

    Once you get in to Recovery Console run "CHKDSK /p". If CHKDSK finds problems and fixes them, you're in luck. :)

     

    More on Recovery Console:

    http://support.microsoft.com/kb/314058

  14. Man the malware situation is starting to look really really bad.

     

    A huge amount of samples have been collected this year and our detections have doubled. At the end of 2006 we had roughly 250 thousand detections. That took 20 years to accumulate. We added the same volume of detections in just 2007. It will soon be 500 thousand in total.

     

     

  15. And for others this is the list of lang codes TwistedMetal made for 1.x lang files:

    1033 English

    1031 Deutsch

    1036 Fran?ais

    1034 Espa?ol

    1040 Italiano

    2070 Portugu?s

    1046 Portugu?s (do Brasil)

    1043 Nederlands

    1110 Galego

    1027 Catal?

    1053 Svenska

    1044 Norwegian

    1035 Suomi

    1030 Dansk

    1029 Cesky

    1032 Greek

    1055 T?rk?e

    1049 Russian

    1048 Romana

    1045 Polski

    1038 Magyar

    1063 Lietuviu

    1052 Albanian

    1025 Arabic

    1037 Hebrew

    1041 Japanese

    1028 Chinese (Traditional)

    2052 Chinese (Simplified)

    1042 Korean

    3098 Serbian Cyrillic

    2074 Serbian Latin

    1051 Slovensky

    1071 Macedonian

    5146 Bosanski

    1026 Bulgarian

  16. To registry by default, which isn't very convenient for portable applications. You should set the option "Save all settings to INI file" on, from CCleaner options. That way the setting are saved on your USB flash drive and not on the host machine. ;)

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.