Jump to content
CCleaner Community Forums
Winapp2.ini

Winapp2.ini additions

Recommended Posts

I have provided this entry before Windows 8 was released. It doesn't work with Windows 8 or 8.1 properly, it only wipes RegKey2. It doesn't work properly when in Safe Mode either. I think we should limit this entry for Windows 7 with a warning like you suggested. And if they limit this entry for Windows 7, they should remove RegKey2 as it is good on Win 8 & 8.1. I don't have a Win 7 system anymore. Someone can check it.

 

 

Works good in WinXP too, I find it beneficial! I've used it since you first posted it awhile ago. The only cosmetic thing (not a problem) when using it in XP is it will cause the cursor to blink between busy and cursor however the computer is perfectly usable while that's happening.

Share this post


Link to post
Share on other sites

Revised Entry

Changed RECURSE to REMOVESELF

I also think that we should change the Detect to %CommonAppData%\install_clap

 

[CyberLink Install Temps*]
LangSecRef=3023
Detect=HKCU\Software\CyberLink
Default=False
FileKey1=%CommonAppData%\install_clap|*.*|REMOVESELF

Share this post


Link to post
Share on other sites

Agreed, it does seem to be (a slightly more specific) duplicate

 

[MS Search]
ID=2266
LangSecRef=3025
DetectFile=%CommonAppData%\Microsoft\Search
Default=True
FileKey1=%CommonAppData%\Microsoft\Search|*.log|RECURSE

[Windows Search Logs*]
LangSecRef=3025
Detect=HKLM\SOFTWARE\Microsoft\
Default=False
FileKey1=%CommonAppData%\Microsoft\Search\Data\Applications\Windows|*.log|RECURSE

Share this post


Link to post
Share on other sites

The [saved Search Folders*] entry should be removed. It is causing issues on Windows 8.1. After removing search-ms files from that location Windows Search Indexer (WSearch) won't start.

 

If someone having this issue please let me know, I have a solution.

Share this post


Link to post
Share on other sites

If someone having this issue please let me know, I have a solution.

 

Or you could just post it <_<

Share this post


Link to post
Share on other sites

Or you could just post it <_<

 

Applies on Windows 8.1 32-bit & 64-bit systems with a Microsoft Account (Skydrive enabled account).

 

First of all, uncheck [saved Search Folders*] entry from CCleaner.

 

Then, make sure “Camera Roll” folder is present in:

 

C:\Users\[user Account]\Pictures

 

Open Registry Editor. First, backup the following key and then delete it:

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Search\FileChangeClientConfigs

 

Restart the system. The Search Indexer should start working now.

 

 

 

 

 

Windows 8.1 32-bit & 64-bit systems with a Microsoft Account (Skydrive enabled account) refuses to Sleep.  You can take a look at the link listed below if you guys are having the same issue with your system.

 

http://www.eightforums.com/general-support/28226-windows-8-1-refuses-sleep-49.html#post312742

Share this post


Link to post
Share on other sites

sounds like disabling the entry for 8.1 (6.3) should work?

I'm not sure. I think we should limit this entry up to Windows 7.

Share this post


Link to post
Share on other sites

Applies on Windows 8.1 32-bit & 64-bit systems with a Microsoft Account (Skydrive enabled account).

Is this what it's breaking?  With a local account it doesn't break anything right away but after a reboot Event viewers shows

"The Windows Search Service is starting up and attempting to remove the old search index {Reason: Index Corruption}."

Share this post


Link to post
Share on other sites

Is this what it's breaking?  With a local account it doesn't break anything right away but after a reboot Event viewers shows

"The Windows Search Service is starting up and attempting to remove the old search index {Reason: Index Corruption}."

 

If you're getting that error, then it is also affecting Windows 8.1 with Local Account. I was not able to test it on a Windows 8.1 with a Local Account yet.

Share this post


Link to post
Share on other sites

un-checking [saved Search Folders*] [MS Search] & [MS Search More*] definitely solves it. I agree that 8/8.1 doesn't need [MS Search] & [MS Search More*] They spit event viewer errors before they regenerate. The files it removes don't seem to increase in size anyways. For me they stay at 64kb and 1024kb

Share this post


Link to post
Share on other sites

Revised Entry

Added FileKey1

 

[VSO Media Player 1*]
LangSecRef=3023
Detect=HKCU\Software\VSO\VSO Media Player\1
Default=False
FileKey1=%CommonAppData%\VSO\VSO Media Player\1\log|*.log
RegKey1=HKCU\Software\VSO\VSO Media Player\1\RecentlyOpenedFiles

Share this post


Link to post
Share on other sites

New Entry

 

[.NET Assembly Temps*]
LangSecRef=3025
Detect=HKLM\SOFTWARE\Microsoft\.NETFramework
Default=False
FileKey1=%WinDir%\assembly\NativeImages_*\Temp|*.*|RECURSE
FileKey2=%WinDir%\assembly\temp|*.*|RECURSE
FileKey3=%WinDir%\assembly\tmp|*.*|RECURSE

Share this post


Link to post
Share on other sites
Updated: Added version 11 support, and changed name from Cook'n Recipe Organizer (Backups)* to Cook'n (Backups)*



[Cook'n (Backups)*]
LangSecRef=3021
Detect=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Cook'n
DetectFile=%LocalAppData%\DVO\Cook'n10App\Cook'n.exe
DetectFile2=%LocalAppData%\DVO\Cook'n11App\Cook'n.exe
Default=False
FileKey1=%Documents%\Cook'n10\Workspace\data|download
FileKey2=%Documents%\Cook'n10\Workspace\data|dvodb.backup
FileKey3=%Documents%\Cook'n10\Workspace\update|update.zip
FileKey4=%Documents%\Cook'n11\Download|*.*
FileKey5=%Documents%\Cook'n Backups|*.ckn


 

Updated: Added version 11 support, and changed name from Cook'n Recipe Organizer (Cache)* to Cook'n (Cache)*


[Cook'n (Cache)*]
LangSecRef=3021
Detect=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Cook'n
DetectFile=%LocalAppData%\DVO\Cook'n10App\Cook'n.exe
DetectFile2=%LocalAppData%\DVO\Cook'n11App\Cook'n.exe
Default=False
FileKey1=%AppData%\Mozilla\eclipse\Cache|*.*

 

Updated: Added version 11 support, and changed name from Cook'n Recipe Organizer (Logs)* to Cook'n (Logs)*



[Cook'n (Logs)*]
LangSecRef=3021
Detect=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Cook'n
DetectFile=%LocalAppData%\DVO\Cook'n10App\Cook'n.exe
DetectFile2=%LocalAppData%\DVO\Cook'n11App\Cook'n.exe
Default=False
FileKey1=%Documents%\Cook'n10|*.log|RECURSE
FileKey2=%Documents%\Cook'n11|*.log|RECURSE
FileKey3=%LocalAppData%\DVO\Cook'n10App|*.log|RECURSE
FileKey4=%LocalAppData%\DVO\Cook'n11App|*.log|RECURSE


 

Changed name from Cook'n Recipe Organizer (Dups)* to Cook'n (Dups)*



[Cook'n (Dups)*]
LangSecRef=3021
Detect=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Cook'n
DetectFile=%LocalAppData%\DVO\Cook'n10App\Cook'n.exe
Default=False
Warning=This removes identical duplicates of the huge Getting Started Guide.
FileKey1=%LocalAppData%\DVO\Cook'n10App\plugins|Getting Started Guide.rtf|RECURSE

Edited by Andavari
Fixed a mistake

Share this post


Link to post
Share on other sites

New entries:

[Abelssoft GoogleClean*]
LangSecRef=3024
Detect=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4281435C-AD1D-4C8A-B9C0-3961C08EF142}_is1
Default=False
FileKey1=%LocalAppData%\Abelssoft\GoogleClean\log|*.*|REMOVESELF

[Big Fish Games Installers*]
Section=Games
Detect=HKCU\Software\Big Fish Games
Default=False
FileKey1=%CommonAppData%\BigFishCache|*.exe|RECURSE

[Burger Shop*]
Section=Games
Detect=HKCU\Software\GoBit\BurgerShop
Detect2=HKCU\Software\GoBit\BurgerShop2
Default=False
FileKey1=%CommonAppData%\GoBit Games\BurgerShop2\BigFishGames\cached|*.*|REMOVESELF
FileKey2=%CommonAppData%\GoBit Games\BurgerShop2\GoBit\cached|*.*|REMOVESELF
FileKey3=%ProgramFiles%\Burger Shop\cached|*.*|REMOVESELF
FileKey4=%ProgramFiles%\Burger Shop|*.db;*.txt|RECURSE
FileKey5=%ProgramFiles%\GoBit Games\Burger Shop 2|*.db;*.txt|RECURSE

Modified:

[Big Fish Games*]
Section=Games
Detect=HKCU\Software\Big Fish Games
Default=False
FileKey1=%CommonAppData%\Big Fish\Game Manager\Addons\BFGameLauncher|*.log|RECURSE
FileKey2=%CommonAppData%\BigFishCache\GameManager\log|*.txt|RECURSE
FileKey3=%CommonAppData%\BigFishGamesCache\GameManager\log|*.*
FileKey4=%CommonAppData%\Big Fish Games\Game Manager\resources-old|*.*|RECURSE

- Added new FileKey1 & 2

 

Share this post


Link to post
Share on other sites

New entries:

[Mozilla Maintenance Service*]
LangSecRef=3026
SpecialDetect=DET_MOZILLA
Default=False
FileKey1=%CommonAppData%\Mozilla*\logs|*.*|REMOVESELF

[Thunderbird Maintenance Service*]
LangSecRef=3030
SpecialDetect=DET_THUNDERBIRD
Default=False
FileKey1=%CommonAppData%\Mozilla*\logs|*.*|REMOVESELF

[VideoMach Log*]
LangSecRef=3023
Detect=HKCU\Software\Gromada\VideoMach
Default=False
FileKey1=%Documents%|VideoMach_Log.txt

[WinTK Log*]
LangSecRef=3024
DetectFile=%Documents%\WinTK
Default=False
FileKey1=%Documents%\WinTK|ExLog.txt

Modified:

[Crash Reports*]
LangSecRef=3026
SpecialDetect=DET_MOZILLA
Default=False
FileKey1=%AppData%\Mozilla\Firefox\Crash Reports|*.*|REMOVESELF

[Thunderbird Crash Reports*]
LangSecRef=3030
SpecialDetect=DET_THUNDERBIRD
Default=False
FileKey1=%AppData%\Thunderbird\Crash Reports|*.*|REMOVESELF

- Replaced RECURSE with REMOVESELF as these folders regenerate upon application restart.
 

Share this post


Link to post
Share on other sites

Also looks like in 8.1 what used to be in [Windows Photos*] are now in %AppData%Local\Packages\FileManager_cw5n1h2txyewy

 

 

Added Detect2 & DetectFile2


[WinJS*]
LangSecRef=3031
Detect1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.WinJS.1.0_8wekyb3d8bbwe
Detect2=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.WinJS.2.0_8wekyb3d8bbwe
DetectFile1=%LocalAppData%\Packages\Microsoft.WinJS.1.0_8wekyb3d8bbwe
DetectFile2=%LocalAppData%\Packages\Microsoft.WinJS.2.0_8wekyb3d8bbwe
Default=False
FileKey1=%LocalAppData%\Packages\Microsoft.WinJS.*.*_*\AC\AppCache|*.*|RECURSE
FileKey2=%LocalAppData%\Packages\Microsoft.WinJS.*.*_*\AC\INetCache|*.*|RECURSE
FileKey3=%LocalAppData%\Packages\Microsoft.WinJS.*.*_*\AC\INetCookies|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.WinJS.*.*_*\AC\INetHistory|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.WinJS.*.*_*\AC\Microsoft\CLR_v4.0\UsageLogs|*.*|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.WinJS.*.*_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey7=%LocalAppData%\Packages\Microsoft.WinJS.*.*_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
FileKey8=%LocalAppData%\Packages\Microsoft.WinJS.*.*_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE
FileKey9=%LocalAppData%\Packages\Microsoft.WinJS.*.*_*\AC\PRICache|*.*
FileKey10=%LocalAppData%\Packages\Microsoft.WinJS.*.*_*\AC\Temp|*.*
FileKey11=%LocalAppData%\Packages\Microsoft.WinJS.*.*_*\LocalState\Cache|*.*|RECURSE
FileKey12=%LocalAppData%\Packages\Microsoft.WinJS.*.*_*\LocalState\navigationHistory|*.*|RECURSE
FileKey13=%LocalAppData%\Packages\Microsoft.WinJS.*.*_*\TempState|*.*|RECURSE

Added Detect2 & DetectFile2

[Microsoft.VCLibs*]
LangSecRef=3031
Detect1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.VCLibs.110.00_8wekyb3d8bbwe
Detect2=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.VCLibs.120.00_8wekyb3d8bbwe
DetectFile1=%LocalAppData%\Packages\Microsoft.VCLibs.110.00_8wekyb3d8bbwe
DetectFile2=%LocalAppData%\Packages\Microsoft.VCLibs.120.00_8wekyb3d8bbwe
Default=False
FileKey1=%LocalAppData%\Packages\Microsoft.VCLibs.*_*\AC\AppCache|*.*|RECURSE
FileKey2=%LocalAppData%\Packages\Microsoft.VCLibs.*_*\AC\INetCache|*.*|RECURSE
FileKey3=%LocalAppData%\Packages\Microsoft.VCLibs.*_*\AC\INetCookies|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.VCLibs.*_*\AC\INetHistory|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.VCLibs.*_*\AC\Microsoft\CLR_v4.0\UsageLogs|*.*|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.VCLibs.*_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey7=%LocalAppData%\Packages\Microsoft.VCLibs.*_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
FileKey8=%LocalAppData%\Packages\Microsoft.VCLibs.*_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE
FileKey9=%LocalAppData%\Packages\Microsoft.VCLibs.*_*\AC\PRICache|*.*
FileKey10=%LocalAppData%\Packages\Microsoft.VCLibs.*_*\AC\Temp|*.*
FileKey11=%LocalAppData%\Packages\Microsoft.VCLibs.*_*\LocalState\Cache|*.*|RECURSE
FileKey12=%LocalAppData%\Packages\Microsoft.VCLibs.*_*\LocalState\navigationHistory|*.*|RECURSE
FileKey13=%LocalAppData%\Packages\Microsoft.VCLibs.*_*\TempState|*.*|RECURSE

Share this post


Link to post
Share on other sites

I have files in "C:\ProgramData\Temp" I am not sure if they are safe to delete and if yes, why CCleaner isn't cleaning them...

 

2013-06-22 14:26:57.599          36,864 C:\ProgramData\Temp\{40BF1E83-20EB-11D8-97C5-0009C5020658}\PostBuild.exe
2012-10-29 13:50:20.000         320,000 C:\ProgramData\Temp\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe
2013-06-22 14:28:35.243         804,864 C:\ProgramData\Temp\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.ilg
2012-02-29 19:17:48.034          36,864 C:\ProgramData\Temp\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}\PostBuild.exe
2010-03-24 16:12:42.000          42,280 C:\ProgramData\Temp\{57D68FAE-CB5E-4fd6-AE3B-A0B43375AF18}\PostBuild.exe
2013-10-04 17:13:02.263         320,464 C:\ProgramData\Temp\{57D68FAE-CB5E-4fd6-AE3B-A0B43375AF18}\Setup.exe
2010-03-24 16:12:42.000          42,280 C:\ProgramData\Temp\{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}\PostBuild.exe
2013-08-12 15:16:19.331         320,464 C:\ProgramData\Temp\{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}\Setup.exe
2013-10-14 14:36:21.887          42,280 C:\ProgramData\Temp\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\PostBuild.exe
2013-07-30 18:07:20.076         320,464 C:\ProgramData\Temp\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\Setup.exe
2013-10-14 14:36:42.756         183,808 C:\ProgramData\Temp\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\Setup.ilg
 

 

Share this post


Link to post
Share on other sites
I have files in "C: ProgramDataTemp" I am not sure if they are safe to delete and if yes, why CCleaner isn't cleaning them...

 

1. Not a winapp2.ini question ;)

 

2. Because that's, afaict, a bad programing job on some installer; placing things in a non-standard temp location (%commondata%temp ? )

 

Share this post


Link to post
Share on other sites

I have files in "C:\ProgramData\Temp" I am not sure if they are safe to delete and if yes, why CCleaner isn't cleaning them...

 

2013-06-22 14:26:57.599          36,864 C:\ProgramData\Temp\{40BF1E83-20EB-11D8-97C5-0009C5020658}\PostBuild.exe

2012-10-29 13:50:20.000         320,000 C:\ProgramData\Temp\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe

2013-06-22 14:28:35.243         804,864 C:\ProgramData\Temp\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.ilg

2012-02-29 19:17:48.034          36,864 C:\ProgramData\Temp\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}\PostBuild.exe

2010-03-24 16:12:42.000          42,280 C:\ProgramData\Temp\{57D68FAE-CB5E-4fd6-AE3B-A0B43375AF18}\PostBuild.exe

2013-10-04 17:13:02.263         320,464 C:\ProgramData\Temp\{57D68FAE-CB5E-4fd6-AE3B-A0B43375AF18}\Setup.exe

2010-03-24 16:12:42.000          42,280 C:\ProgramData\Temp\{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}\PostBuild.exe

2013-08-12 15:16:19.331         320,464 C:\ProgramData\Temp\{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}\Setup.exe

2013-10-14 14:36:21.887          42,280 C:\ProgramData\Temp\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\PostBuild.exe

2013-07-30 18:07:20.076         320,464 C:\ProgramData\Temp\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\Setup.exe

2013-10-14 14:36:42.756         183,808 C:\ProgramData\Temp\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\Setup.ilg

 

CyberLink programs leave some temporary installation files there.

http://forum.piriform.com/index.php?showtopic=32310&page=56&do=findComment&comment=208959

Share this post


Link to post
Share on other sites

New entry:

[Christmas Adventure - Candy Storm*]
Section=Games
Detect1=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Christmas Adventure - Candy Storm1.1
Detect2=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Christmas Adventure - Candy Stormv1.3
DetectFile=%ProgramFiles%\Christmas Adventure - Candy Storm
Default=False
FileKey1=%AppData%\Argali|*.log|RECURSE
FileKey2=%ProgramFiles%\Christmas Adventure - Candy Storm|*.nfo;*.txt
FileKey3=%ProgramFiles%\Foxy Games\Christmas Adventure - Candy Storm|*.html;*.msi;*.nfo;*.txt;*.url

Share this post


Link to post
Share on other sites

 


Hi Robert Ward,
I attached some new entries for Winapp2.ini.
I hope you will add them to the original file.
Thank you.

Sincerely,
REDACT

new entries to Winapp2(second file).txt
New Entries for Winapp2.ini

Modified:
[Windows Media Center Thumbnail Cache*]
LangSecRef=3023
Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Media Center
Default=False
FileKey1=%LocalAppData%\Microsoft\Ehome|Image.db;Video.db;musicThumbs.db
FileKey2=%CommonAppData%\Microsoft\eHome\thmb|TVThumb.db

Note: Added the Thumbnail Cache file "musicThumbs.db" to FileKey1.

Modified:
[Windows Media Player (Databases)*]
LangSecRef=3023
Detect1=HKCR\Windows.Movie.Maker
Detect2=HKCU\Software\Microsoft\MediaPlayer
Default=False
Warning=This will remove ratings, play counts, last played, etc.
FileKey1=%SystemDrive%\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Media Player|*.*|REMOVESELF
FileKey2=%SystemDrive%\Documents and Settings\NetworkService\Local Settings\Microsoft\Media Player|*.*|REMOVESELF
FileKey3=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Media Player|*.*|RECURSE
FileKey4=%LocalAppData%\Microsoft\Media Player|*.wmdb;wmdbexport.xml
FileKey5=%Windir%\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Media Player|*.wmdb
FileKey6=%SystemDrive%\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player|*.wmdb
FileKey7=%SystemDrive%\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Media Player|*.wmdb

Note: Added FileKey4, FileKey5, FileKey6, and FileKey7 - working on Windows XP.
*.wmdb stands for CurrentDatabase_219.wmdb, CurrentDatabase_360.wmdb, CurrentDatabase_372.wmdb, CurrentDatabase_400.wmdb, CurrentDatabase_59R.wmdb, LocalMLS_*.wmdb, wmpfolders.wmdb, E- _0.wmdb
Added to FileKey4, a log file - wmdbexport.xml.
Added Detect1 to recognize Windows XP Movie Maker, because FileKey1, FileKey2, FileKey5, FileKey6, and FileKey7 will not work without it.

Modified:
[Windows Movie Maker*]
LangSecRef=3023
Detect=HKCU\Software\Microsoft\MovieMaker
Default=False
FileKey1=%LocalAppData%\Microsoft\Movie Maker|MEDIATAB*.DAT

Note: Modified FileKey1 by adding more support, besides old file (MEDIATAB0.DAT), for the new file developed by Microsoft (MEDIATAB1.DAT).

Modified:
[Windows Media Player (Album Art Cache)*]
LangSecRef=3023
Detect1=HKCR\Windows.Movie.Maker
Detect2=HKCU\Software\Microsoft\MediaPlayer
Default=False
FileKey1=%SystemDrive%\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Media Player\Art Cache\LocalMLS|*.*|RECURSE
FileKey2=%SystemDrive%\Documents and Settings\NetworkService\Local Settings\Microsoft\Media Player\Art Cache\LocalMLS|*.*|RECURSE
FileKey3=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Media Player\Art Cache\LocalMLS|*.*|RECURSE

Note: Added Detect1 to recognize Windows XP Movie Maker, because FileKey1 and FileKey2 will not work without it.

New:
[4K YouTube to MP3*]
LangSecRef=3023
Detect=HKCU\Software\4kdownload.com\4K YouTube to MP3
Default=False
RegKey1=HKCU\Software\4kdownload.com\4K YouTube to MP3\Settings|outputPath
RegKey2=HKCU\Software\4kdownload.com\4K YouTube to MP3\Download|downloadedItems

New:
[4K Video Downloader*]
LangSecRef=3023
Detect=HKCU\Software\4kdownload.com\4K Video Downloader
Default=False
FileKey1=%AppData%\4kdownload.com\4K YouTube to MP3\4K YouTube to MP3|*.xml
RegKey1=HKCU\Software\4kdownload.com\4K Video Downloader\Download|downloadedItems
RegKey2=HKCU\Software\4kdownload.com\4K Video Downloader\Settings|outputPath

New:
[Exif Tag Remover*]
LangSecRef=3024
Detect=HKCU\Software\VB and VBA Program Settings\RL Vision\Exif Tag Remover
Default=False
RegKey1=HKCU\Software\VB and VBA Program Settings\RL Vision\Exif Tag Remover|sLastDir
RegKey2=HKCU\Software\VB and VBA Program Settings\RL Vision\Exif Tag Remover|sLastAddDir

New:
[AbsoluteFTP*]
LangSecRef=3022
Detect=HKCU\Software\Van Dyke Technologies\AbsoluteFTP
Default=False
RegKey1=HKCU\Software\Van Dyke Technologies\AbsoluteFTP\Recent File List

New:
[sqlite Expert Personal 3*]
LangSecRef=3024
Detect=HKCU\Software\SQLite Expert\Personal\3.x
Default=False
RegKey1=HKCU\Software\SQLite Expert\Personal\3.x\DB

New:
[sqlite Expert Professional 3*]
LangSecRef=3024
Detect=HKCU\Software\SQLite Expert\Professional\3.x
Default=False
RegKey1=HKCU\Software\SQLite Expert\Professional\3.x\DB

New:
[Metadata Analyzer*]
LangSecRef=3024
Detect=HKCU\Software\Smart PC Solutions\Metadata Analyzer
Default=False
RegKey1=HKCU\Software\Smart PC Solutions\Metadata Analyzer|LastFile
RegKey2=HKCU\Software\Smart PC Solutions\Metadata Analyzer|LastFolder

New:
[Document Trace Remover*]
LangSecRef=3024
Detect=HKCU\Software\Smart PC Solutions\Document Trace Remover
Default=False
RegKey1=HKCU\Software\Smart PC Solutions\Document Trace Remover|LastFile
RegKey2=HKCU\Software\Smart PC Solutions\Document Trace Remover|LastFolder
FileKey1=%AppData%\Smart PC Solutions\Smart Fast PC\Log|*.*

New:
[LinkAlyzer*]
LangSecRef=3024
Detect=HKCU\Software\Sanderson Forensics\LinkAlyzer
Default=False
RegKey1=HKCU\Software\Sanderson Forensics\LinkAlyzer|LastSaveFolder
RegKey2=HKCU\Software\Sanderson Forensics\LinkAlyzer|LastOpenFolder

New:
[Registrar Registry Manager*]
LangSecRef=3024
Detect=HKCU\Software\Resplendence Sp\Registrar Registry Manager
Default=False
RegKey1=HKCU\Software\Resplendence Sp\Registrar Registry Manager\Settings|LastOpenedKey
RegKey2=HKCU\Software\Resplendence Sp\Registrar Registry Manager\Settings|ExportForm.saveDialogExportFilename
RegKey3=HKCU\Software\Resplendence Sp\Registrar Registry Manager\Settings|ExportForm.saveDialogExportInitialDir

New:
[skypeAlyzer*]
LangSecRef=3024
Detect=HKCU\Software\Raize\CodeSite
Default=False
FileKey1=%AppData%\Raize\CodeSite\5.0|CSDispatcherLog.txt

New:
[Revo Uninstaller Pro*]
LangSecRef=3024
Detect=HKCU\Software\Mirage\LicenceProtector
Default=False
FileKey1=%AppData%\ruplp\log|*.log

Modified:
[Revo Uninstaller Logs*]
LangSecRef=3024
DetectFile=%LocalAppData%\VS Revo group
Default=False
FileKey1=%LocalAppData%\VS Revo Group\Revo Uninstaller*\Logs|*.*|RECURSE

Note: Added RECURSE to FileKey1.

New:
[Optimizer Pro*]
LangSecRef=3024
Detect=HKCU\Software\Optimizer Pro
Default=False
FileKey1=%AppData%\Optimizer Pro\Log|*.*

Modified:
[Machete*]
LangSecRef=3023
DetectFile=%ProgramFiles%\MacheteSoft\Machete\Machete.exe
Detect=HKCU\Software\MacheteSoft\Machete
Default=False
RegKey1=HKCU\Software\MacheteSoft\Machete\Recent File List
RegKey2=HKCU\Software\Local AppWizard-Generated Applications\Machete\Recent File List
FileKey1=%AppData%\Machete|MacheteSettings.xml.bak

Note: Added RegKey2 & FileKey1.

New:
[Office Password Recovery*]
LangSecRef=3024
Detect=HKCU\Software\Intelore\Office Password Recovery
Default=False
FileKey1=%AppData%\Intelore\Password Recovery\logs|*.*

Modified:
[GetFLV*]
LangSecRef=3023
Detect=HKCU\Software\getflv
Default=False
RegKey1=HKCU\Software\getflv|FLVTitle
RegKey2=HKCU\Software\GetFLV|DownloadDir
RegKey3=HKCU\Software\GetFLV|FLVURL

Note: Added RegKey2 & RegKey3.

New:
[Privacy Suite*]
LangSecRef=3024
Detect=HKCU\Software\CyberScrub\Privacy Suite
Default=False
FileKey1=%AppData%\CyberScrub\Privacy Suite\cybscrub.log

New:
[AccessData Registry Viewer*]
LangSecRef=3024
Detect=HKCU\Software\AccessData\Registry Viewer
Default=False
RegKey1=HKCU\Software\AccessData\Registry Viewer\Recent File List

New:
[sigParser*]
LangSecRef=3024
DetectFile=%ProgramFiles%\UpdateStar\SigParser\SigParser.exe
Default=False
FileKey1=%AppData%\UpdateStar GmbH\SigParser\3.0.4898.22300|*.log

Modified:
[VLC Media Player More*]
LangSecRef=3023
Detect=HKLM\SOFTWARE\VideoLAN\VLC
Default=False
FileKey1=%AppData%\vlc|*.cache-3
FileKey2=%ProgramFiles%\VideoLAN\VLC|*.txt

Note: Added FileKey2 to remove log files made in Program Files.
 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×