KapnJackSparrow

@ Kroozer I was using a program called BatchPurifier lite which does a nice job for jpeg but nothing else, unless you buy it. (which I am always weary of since I don't know how it will react to a system reinstallation.) I like that I can integrate Stripper into explorer and that it is portable (so it will surive a reinstall without needing to be reconfigured.) so thank you anyone know of anything for office files ?

@ Nergal: Yes you're probably right, I knew it would be quite a task since the files store this kind of thing in diffrent places, and there are 1000's of different file formats. but imho privacy concerns are at an all time high after all the data Mr Snowden released. To me it makes sense that if you want to remove logs and metadata from your computer you’ll want to do the same with your files. Personally I just find applications placing unnecessary information places I didn’t tell them to annoying and I like knowing that when I send a file to my friend, my boss or even a date that it doesn't have any extra information that could tell them more then I felt like sharing. But I could also see this as being something celebrities and the online dating community would really appreciate as well. So maybe it's an idea for a new piriform application

This is probably a tall order but would it be possibly to add a Metadata Removal Tool into ccleaner ? it's nice that ccleaner will remove usage tracks from things like office and photoshop but often if a picture is taken from a cellphone or digital camera there is residual data metadate stored in the file itself. such as where it was taken, when, the f stop etc or in the case of office files, the auther, title date. etc. i am purposing a adding a file cleaner that will go through a folder and scrub the files of this extra and in many cases unwanted information. I have done some searching on the web but I haven't really found too many tools that do a good job of doing this.

@ Nergal you're one of the brighter ones around here and I can't help but respect your point of view. Although I feel that while it's probably true that a determined fool can poke their eye out with a donut, that doesn't mean there shouldn't be donuts for those who want them. I think options for that kind of thing and more information, such as reporting that files/folders were not removed and why is always useful. and just to be cheeky, in my case c:windows*.*|recurse wouldn't do any damage as windows is not on my c drive . thanks for the advice I will put something in suggestions.

So I take it there is no fix for this other than using an external scrpt ? I have always known that ccleaner was not... well quite agressive enough in my view, for countless versions. but never really quite thought it was this bad.. basically if the folder has any custiomisations it will not be cleaned by ccleaner which in my view is riduculus. I have long wished they would borrow from the collomb file unlocker (or something simular) and add an option to make ccleaner more agressive when it came to deleting locked, system hidden, and read only files. in most cases this shouldn't be a problem for an average user, but if I add an entry I feel ccleaner should remove it, or at least report an error "cannot remove file because" at the moment it silently leaves things behind.

@ Andavari : Of course, that's why I said in the spirit of the forms. but I have posted it as a text document. @ Nergal : Sorry but I do have you on this one. "This sets the read-only bit on the folder to indicate that the special behavior reserved for Desktop.ini should be enabled." from http://msdn.microsof...2(v=vs.85).aspx Keep in mind these folders are not locked, also you can check it yourself by setting an icon and then checking the folder attributes and or activate your own icon file from a custom desktop.ini as I do for portable icons that stick with the folder. I'll attach an example as well as a batch file that does it. To use simply copy the `~` folder, and the desktop.ini to any other folder than drag that folder over "Make unremovable.bat" and volia you'll have an icon magically appear. oh ps the desktop.ini is system hidden... so make sure that you can see those files if you want to play with moving them around. Icon folder.zip Make Unremovable.txt Removable.txt

I did some messing around, simply setting the Read only bit on a folder will make the folder unremovable in ccleaner. neither adding an include or adding the folder in winapp2,ini will cause the folder or any sub folders with the read only bit set to be removed, I would upload a batch script to allow you to test this for yourself do this however the form does not allow batch files so in the spirit of the rule I will not. I consider this a bug because in windows "read only" does not actually mean read only, it really means read the desktop.ini used for special folders and icons, tool tips, symbolic links etc... Is there any fix for this ? short of the clumsy solution of writing an external batch file to recursively remove the folder attributes before the folder is processed by ccleaner. any help would be appreciated thanks

even things like .Net leave broken stuff behind on a clean system installation. at least with the registry cleaner built into ccleaner you can find some of the stuff left behind.

Adding them as individual includes would be difficult and cumbersome to maintain, I would much rather have ccleaner delete the whole folder at once. thus I have the folder specified in winapp2.ini Ex: Application Data\Example|*.*|REMOVESELF so logically it should remove all files in that folder and the folder itself, ccleaner is removing all files inside the folder except for the system hidden ones, Which in turn is preventing the folder from being removed. and no that option is not checked, these files are also considerably older then 24 hours as well. Edit alright I did some messing around, simply setting the Read only bit will make the folder unremovable in ccleaner. I would upload a batch script to do this however the form doesn't let me so in the spirit of the rule I will not. This is a problem because in windows "read only" does not actually mean read only, it means read the desktop.ini used for special folders and icons. Is there any fix for this and should I report it as a bug ?

Is it possible to configure ccleaner to delete, system hidden, and read only files ? I am having trouble with logs having the system hidden attribute set and being ingored by ccleaner. These files are easily deleted using explorer so they are not locked or anything

Personally I would like to have the option perhaps under the tools section to remove no-present devices... I currently use a Devcon script to do this that I attach to my ccleaner startup script. but it would be a nice feature for those not up to using the comandline/batchfiles to do this.

thanks I do have some questions about the contents of those files, specifically what some of the switches do for example what does do 0) ID=2299 1) SpecialDetect=DET_THUNDERBIRD 2) SpecialKey1=N_THUNDERBIRD_DOWNLOAD I can't seem to find them documented anywhere. and the layout is a bit confusing. other than that I have been tweaking winapp2.ini as needed, it also seems there is no community maintained winsys2.ini ?

The Custom Location for chrome portable still doesn't seem to work but other than that looks nice

I know I was/and still am having issues with the CustomLocation1="CHROME|C:\Google Chrome\Data\profile\Default" entery in Ccleaner.ini the same path works if I change CHROME| to Firefox| so I am thinking it is a ccleaner bug. ditto with Iron.

Hahaha hmm I will look into that. I noticed it does leave some empty folders behind and registry keys around which would be indicative of its existence but nothing beyond that. Palemoon does the same with the empty folders at least. I haven't detected anything else though I will run recuva to see if it finds anything. I was already using Palemoon portable (Love it) (I just kept Firefox portable around for compatibility since it's closer to the "official" version.) At the moment I have Palemoon Portable, Firefox Portable, Iron portable, Opera Portable, Google chrome portable (never use it though), Maxthon Portable, SeaMonkey Portable, Thunderbird Portable, and Foxit, and others I have forgotten about. (yes except for Palemoon all from portableapps.com) Since I have many operating systems I try to separated the applications from the Operating system as much as possible. So the majority of the time I am pointing to something that either has never been installed or was installed under a different operating system. So is there any way of adding stuff to be monitored? It would be nice to have CCleaner run after palemoon closed. N.B I did test trying to run two different profiles of palemoon portable at the same time the second copy loads the profile of which ever was loaded first. To be fair though that is pretty good I remember way back I did have firefox portable make quite a mess if another firefox was loaded at the same time. It’s also unlikely strictly speaking that and unwanted entity, (some jerk, angry girlfriend..etc) would be able to recover the data since the drive is encrypted however since I have had issues with programs such as vlc (when trying to play an incomplete file) picking up pieces of deleted files and playing them I like to make sure when I delete something it is really gone. Edit : I did check the system partion with recuva and found no evidance of any deleted files created or left over by firefox portable so maybe they improved their methods ?

is it possible to add more applications to be monitored ? I am running portable everything... so I guess the first question is does the monitoring support things like firefox? how does it detect them (HKLM/Software/Mozilla) ? Ideally I would like to have ccleaner running in the background and detect when I close another program such as firefox, Iron etc.. and wipe the leftover usage tracks. is it possible to set the check computer every _ below 1 hour, and clean if it saves more than _ below 0.1 gb I normally only have 10mb or less since I try to prevent the logs from being created in the first place.

Oh I got it working like a charm. Thank you very much Winapp2.ini And not only that I have because of this developed a method for removing other locked files that CCleaner was unable to remove. (I had some old logs in the main system folder that were being stubborn) when I get around to it I will change the script to add a command line wiping utility since at the moment the deleted files are still recoverable. since when things are deleted they are just marked as empty space on the disk.

expanded LangSecRef (I used a batchfile to BFIthe syntax since the "complete" syntax doesn't seem to be listed anywhere and some of those are useful like the Registry Cleaner) ; LangSecRef ; ; 3001 = Internet Explorer ; 3002 = Windows Explorer ; 3003 = System ; 3004-3100 = Advanced (not including 3021-3029) ; 3021 = Applications ; 3022 = Internet ; 3023 = Multimedia ; 3024 = Utilities ; 3025 = Windows ; 3026 = Firefox ; 3027 = Opera ; 3028 = Safari ; 3029 = Google Crome ; 3101 = Temporary Internet Files ; 3102 = Cookies ; 3103 = History ; 3104 = Recently Typed URLs ; 3105 = Index.dat files ; 3106 = & 3107 Autocomplete Form History ; 3108 = Last Download Location ; 3109 = Saved Passwords ; 3110 = Cached Feeds ; 3111-3120 = Add-ons Statistics ; 3121 = Recent Documents ; 3122 = Run (In Start Menu) ; 3123 = Search Autocomplete ; 3124 = Other Explorer MRUs ; 3125 = Menu Order Cache ; 3126 = Tray Notifications Cache ; 3127 = Windows Size/Location Cache ; 3128 = User Assist History ; 3129 = custom Files and Folders ; 3130 = Hotfix uninstallers ; 3131 = Thumbnail Cache ; 3132 = Wipe Free Space ; 3133 = Taskbar Jump Lists ; 3134-3140 = Wipe MFT Free Space ; 3141 = Empty Recycle Bin ; 3142 = Temporary Files ; 3143 = Memory Dumps ; 3144 = Chdsk File Fragments ; 3501 = Registry Cleaner [* More Windows Crap] LangSecRef=3025 Detect=HKLM\SYSTEM Default=True RegKey1=HKCU\Software\Microsoft\PerfVis\Recent File List RegKey2=HKCU\Software\Microsoft\Office\12.0\Common\Open Find RegKey3=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU RegKey4=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU a Regestry to batchfile conversion tool, the regestry key's literally seem to do nothing. [* Reg to Bat] LangSecRef=3021 Detect=HKLM\SOFTWARE\BlueLife Default=True RegKey1=HKLM\SOFTWARE\BlueLife these don't normally seem to be cleaned ? [* User Assist] LangSecRef=3501 Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist Default=True RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist RegKey2=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32 part of where the system stores information for usb devices that have been mounted (viewed by Os Forensics.) [* USB Store] LangSecRef=3501 Detect=HKLM\SYSTEM\CurrentControlSet\Enum\USBSTOR Default=True RegKey1=HKLM\SYSTEM\CurrentControlSet\Enum\USBSTOR Snagit is running in portable mode so not sure if this is somewhere. [* Snagit] LangSecRef=3025 Detect=HKLM\SYSTEM Default=True RegKey1=HKCU\Software\TechSmith\SnagIt\8\Recent Captures RegKey2=HKCU\Software\TechSmith\SnagIt\8\Catalog\Recent Editor Files RegKey3=HKCU\Software\TechSmith\SnagIt\8\CatalogOpenFolder [* Windows Media Player (Databases)] LangSecRef=3023 Detect=HKCU\Software\Microsoft\MediaPlayer Default=True Warning=This will remove ratings, play counts, last played, etc. FileKey1=%SystemDrive%\Documents and Settings\NetworkService\Local Settings\Microsoft\Media Player|*.*|REMOVESELF FileKey2=%SystemDrive%\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Media Player|*.*|REMOVESELF FileKey3=%SystemDrive%\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player|*.*|REMOVESELF FileKey4=%windir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Media Player|*.*|REMOVESELF FileKey5=%UserProfile%\Local Settings\Application Data\Microsoft\Media Player|*.*|REMOVESELF

the service still won't stop using your script and the files are locked... So when in doubt get a bigger hammer I used the Collumb File unlocker to allow me to delete the files via command line, I then regenerated empty ones by clearing the even viewer manually, copied the empty event logs to a logs folder so that I could delete the new event logs, and copy the empty ones back to avoid errors. I had to add in the /Wait otherwise the newly copied empty logs would be deleted as well. The final script looks like this: @echo off echo y| rd /s %systemroot%\system32\winevt\logs >Nul Start /WAIT .\Unlocker\unlocker.exe %SystemRoot%\System32\Config\SecEvent.Evt /s /d Start /WAIT .\Unlocker\unlocker.exe %SystemRoot%\System32\Config\AppEvent.Evt /s /d Start /WAIT .\Unlocker\unlocker.exe %SystemRoot%\System32\Config\SysEvent.Evt /s /d xcopy .\logs %systemroot%\system32\config /R /H /K /Y /Q Exit

Yeah I have had this problem a few times too... I am not 100% sure what is messing with my WMI since I was never able to pin it down. anyway copying this into the comand prompt fixes the problem 99% of the time cd /d %SystemRoot%\system32\wbem for %i in (*.dll) do RegSvr32 -s %i for %i in (*.exe) do %i /RegServer I am not sure why it doesn't work if saved as a batchfile but hopefully this will help some people

@ Winapp2.ini I like that idea but it doesn't seem to work on my system ? The net stop eventlog isn't reconised, It replies back with "The requested pause or stop is not valid for this service" I looked for the thing in services and the stop buttion for it was grayed out. so I attacked it with the windows enabler which allowed me to click the stop buttion anyway but the service still refused to shut down. Also interestingly enough I don't seem to have a %WinDir%\System32\winevt folder. I don't know why or where the logs are actually being put. p.s if you don't mind I did modify your script a little bit, I changed "%WinDir%" to %systemroot% since %systemroot% is more direct (I.e %WinDir% points to %systemroot% which points to the actual location) . and added a echo y| to automatically say yes. but unfortunatly like it said neither verison works on my commputer I am running windows xp service pack 3.

@hazelnut I could imagine him wanting to use ccleaner to clean protected files which would normally be locked by windows after logon. @thoste to answer your question... not really.. at least not easily.. The only other way I could think of other than BartPE would be using the "SYSTEM" account. The system account loads before logon and runs the logon script it is not normally accessable but there are ways of *hacking your way in* if you add a regestry key to the HKCU / Run of the system account to start ccleaner and if you run the professonal version which can clean all user profiles it "might" work. I have never tried this and have no idea if it would work. I might play with this later as it could prove interesting. which brings up the interesting question of does ccleaner clear the system acount profile ?

hazelnut's post looks like a an exact copy of the comments I have already seen. and to be fair. I agree with both of you, since most people are not the most computer savvy having such a thing as a default option or even a checkable option in the main release would be problematic. Being decently computer savvy I am looking to add the option of clearing the event viewer for my own personal use. As usually I like to read the logs, then clear them and watch for new activity if I suspect a problem. also there is a lot of annoying and useless information in the event viewer such as office logs etc... so if someone knows how to add this to ccleaner it would be helpful.

I have read the suggestions for this and understand that it has been suggested before and Logic for why this isn't a good thing to add to ccleaner aside, Does anyone have a way of actually adding this to cleaner ? through winapp2.ini or something ? I do periodically check my event logs however I find it annoying to have to clear them manually one log at a time (system, application, security, office, powershell) when I run ccleaner I wish to clear everything with as few mouse clicks as possible or at least have the option to do so.

is it possible to add individual registry values to either CCleaner.ini or winapp2.ini instead of having it delete whole keys? Ex deleting RegKey1=HKCU\Software\EvolutionComputing\FastCAD7|WorkingDrawing where I would just delete the value Named WorkingDrawin instead of deleting the whole FastCAD7 key.