Jump to content
CCleaner Community Forums
Winapp2.ini

Winapp2.ini additions

Recommended Posts

Modified Entry:  [Malwarebytes Anti-Exploit*]

 

Added ;mbae-default.log.bak;mbae-protector.xpe.bak  to FileKey1 and FileKey2 

[Malwarebytes Anti-Exploit*]
LangSecRef=3024
Detect=HKLM\SYSTEM\CurrentControlSet\Services\MbaeSvc
DetectFile=%CommonAppData%\Malwarebytes\Malwarebytes Anti-Exploit
Default=False
FileKey1=%CommonAppData%\Malwarebytes\Malwarebytes Anti-Exploit|*.log;mbae-default.log.bak;mbae-protector.xpe.bak
FileKey2=%LocalAppData%\VirtualStore\ProgramData\Malwarebytes\Malwarebytes Anti-Exploit|*.log;mbae-default.log.bak;mbae-protector.xpe.bak
FileKey3=%ProgramFiles%\Malwarebytes Anti-Exploit|mbae-uninstall.log;changelog.txt

Share this post


Link to post
Share on other sites

Modified Entry:  [Tweaking.com Windows Repair*]

 

1.  Changed DetectFile to DetectFile1

2.  Added DetectFile2

[Tweaking.com Windows Repair*]
LangSecRef=3024
Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Tweaking.com - Windows Repair (All in One)
DetectFile1=%SystemDrive%\Tweaking.com_Windows_Repair_Logs
DetectFile2=%ProgramFiles%\Tweaking.com
Default=False
FileKey1=%LocalAppData%\VirtualStore\Program Files*\Tweaking.com\Windows Repair (All in One)\Logs|*.*|REMOVESELF
FileKey2=%ProgramFiles%\Tweaking.com\Windows Repair (All in One)\Logs|*.*|REMOVESELF
FileKey3=%SystemDrive%\Tweaking.com_Windows_Repair_Logs|*.*|REMOVESELF

Share this post


Link to post
Share on other sites

Modified Entry:  [AVG PC TuneUp & TuneUp Utilities Logs*]

 

Added FileKey6,7,8,9,10

[AVG PC TuneUp & TuneUp Utilities Logs*]
LangSecRef=3024
Detect1=HKCU\Software\TuneUp
Detect2=HKCU\Software\AVG\AWL\RegistryCleaner
Default=False
FileKey1=%CommonAppData%\TuneUp Software\TuneUp Utilities *|*.log|RECURSE
FileKey2=%LocalAppData%\AvgSetupLog|*.*|REMOVESELF
FileKey3=%LocalAppData%\Avg\AWL*\Log|*.log
FileKey4=%LocalAppData%\Avg\Log|*.log;zappapi.log.1|RECURSE
FileKey5=%LocalAppData%\TuneUp Software|*.log|RECURSE
FileKey6=%LocalAppData%\Avg\log\tu16|*.log
FileKey7=%WinDir%\System32\config\systemprofile\AppData\Local\Avg\Log\fmw1|*.log
FileKey8=%WinDir%\System32\config\systemprofile\AppData\Local\Avg\Log\tu16|*.log
FileKey9=%SystemDrive%\Users\Default\AppData\Local\Avg\Log\tu16|*.log
FileKey10=%LocalAppData%\Avg\log\fmw1|*.log

Share this post


Link to post
Share on other sites

New Entry:  [user Benchmark*]

[User Benchmark*]
LangSecRef=3024
DetectFile=%ProgramFiles%\User Benchmark\UserBenchMark.exe
Default=False
FileKey1=%SystemDrive%\UserBenchmark|*.*|REMOVESELF

Share this post


Link to post
Share on other sites

New Entry:  [CyberLink PowerDVD 16*]

[CyberLink PowerDVD 16*]
LangSecRef=3023
Detect=HKCU\Software\CyberLink
Default=False
FileKey1=%LocalAppData%\Cyberlink\PowerDVD*\cache\|*.*
FileKey2=%CommonAppData%\Cyberlink\Evoparser\|*.xml

Share this post


Link to post
Share on other sites

New Entry

 

[Delivery Optimization Logs*]
LangSecRef=3025
Detect=HKLM\Software\Microsoft\Windows
Default=False
FileKey1=%WinDir%\Logs\dosvc|*.*|RECURSE

Share this post


Link to post
Share on other sites

Modified Entry:  [Malwarebytes Anti-Exploit*]

 

Changed DetectFile, FileKey1, FileKey2.   (File location was incorrectly specified as \Malwarebytes\Malwarebytes Anti-Exploit...which was used in much earlier versions of this program)

[Malwarebytes Anti-Exploit*]
LangSecRef=3024
Detect=HKLM\SYSTEM\CurrentControlSet\Services\MbaeSvc
DetectFile=%CommonAppData%\Malwarebytes Anti-Exploit
Default=False
FileKey1=%CommonAppData%\Malwarebytes Anti-Exploit|*.log;mbae-default.log.bak;mbae-protector.xpe.bak
FileKey2=%LocalAppData%\VirtualStore\ProgramData\Malwarebytes Anti-Exploit|*.log;mbae-default.log.bak;mbae-protector.xpe.bak
FileKey3=%ProgramFiles%\Malwarebytes Anti-Exploit|mbae-uninstall.log;changelog.txt

Share this post


Link to post
Share on other sites

Revised Entry

 

Changed name from [Delivery Optimization Logs*] to [Delivery Optimization Service Events Logs*]

 

[Delivery Optimization Service Events Logs*]
LangSecRef=3025
Detect=HKLM\Software\Microsoft\Windows
Default=False
FileKey1=%WinDir%\Logs\dosvc|*.*|RECURSE

Share this post


Link to post
Share on other sites

New Entries

 

[Network Setup Service Events Logs*]
LangSecRef=3025
Detect=HKLM\Software\Microsoft\Windows
Default=False
FileKey1=%WinDir%\Logs\NetSetup|*.*|RECURSE

[server-initiated Healing Events Logs*]
LangSecRef=3025
Detect=HKLM\Software\Microsoft\Windows
Default=False
FileKey1=%WinDir%\Logs\SIH|*.*|RECURSE

[update Orchestrator Events Logs*]
LangSecRef=3025
Detect=HKLM\Software\Microsoft\Windows
Default=False
FileKey1=%CommonAppData%\USOShared\Logs|*.*|RECURSE

[Windows Update Events Logs*]
LangSecRef=3025
Detect=HKLM\Software\Microsoft\Windows
Default=False
FileKey1=%WinDir%\Logs\WindowsUpdate|*.*|RECURSE

[Get Office*]
DetectOS=10.0
Section=3031
Default=False
Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe
FileKey1=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\INetCache|*.*|RECURSE
FileKey2=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\INetCookies|*.*|RECURSE
FileKey3=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\INetHistory|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\Microsoft\CryptnetUrlCache\Content|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\Temp|*.*|RECURSE
FileKey7=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\TokenBroker\Cache|*.*|RECURSE
FileKey8=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\LocalCache|*.*|RECURSE
FileKey9=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\LocalState\AppData\Local\Office\16.0\WebServiceCache|*.*|RECURSE
FileKey10=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\LocalState\Cache|*.*|RECURSE

Share this post


Link to post
Share on other sites

New Entries

 

[Network Setup Service Events Logs*]

LangSecRef=3025

Detect=HKLM\Software\Microsoft\Windows

Default=False

FileKey1=%WinDir%\Logs\NetSetup|*.*|RECURSE

 

[server-initiated Healing Events Logs*]

LangSecRef=3025

Detect=HKLM\Software\Microsoft\Windows

Default=False

FileKey1=%WinDir%\Logs\SIH|*.*|RECURSE

 

I think instead of making several different entries to clean out Windows/Logs, we could just make one entry and call it Advanced Windows Logs or something and then add a exclude key to ignore System Restore. I feel like we are just blowing up the file size when we separate them like that.

Share this post


Link to post
Share on other sites

New Entries

 

[Get Office*]

DetectOS=10.0

Section=3031

Default=False

Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe

FileKey1=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\INetCache|*.*|RECURSE

FileKey2=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\INetCookies|*.*|RECURSE

FileKey3=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\INetHistory|*.*|RECURSE

FileKey4=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\Microsoft\CryptnetUrlCache\Content|*.*|RECURSE

FileKey5=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*|RECURSE

FileKey6=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\Temp|*.*|RECURSE

FileKey7=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\TokenBroker\Cache|*.*|RECURSE

FileKey8=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\LocalCache|*.*|RECURSE

FileKey9=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\LocalState\AppData\Local\Office\16.0\WebServiceCache|*.*|RECURSE

FileKey10=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\LocalState\Cache|*.*|RECURSE

 

Samething here. On my system, appdata/packages is empty. Is there anything actually worth saving in this folder? Otherwise, I think we can just make one entry to clean out the whole folder.

Share this post


Link to post
Share on other sites

I think instead of making several different entries to clean out Windows/Logs, we could just make one entry and call it Advanced Windows Logs or something and then add a exclude key to ignore System Restore. I feel like we are just blowing up the file size when we separate them like that.

 

In my opinion we should keep these separate.

Share this post


Link to post
Share on other sites

Samething here. On my system, appdata/packages is empty. Is there anything actually worth saving in this folder? Otherwise, I think we can just make one entry to clean out the whole folder.

 

Sometimes, deleting everything from the Store app packages could break the apps and then it is not very easy for everyone to fix them. Please look at the attached snapshots. I do not recommend deleting those files.

 

 

 

 

 

 

 

 

Share this post


Link to post
Share on other sites

Samething here. On my system, appdata/packages is empty. Is there anything actually worth saving in this folder? Otherwise, I think we can just make one entry to clean out the whole folder.

 

I think it is better to have separate entries for every Store app because apps are different from each other.

Share this post


Link to post
Share on other sites

 

 In my opinion we should keep these separate.
I agree, there are some of these that a user would want postive consent to clean - achieved by select each as opposed to a random collection in a group entry.

Share this post


Link to post
Share on other sites

Added FileKey5 to delete the update .tmp file which is created when the program automatically updates to a new version.


Updated, with name change:

[sUPERAntiSpyware (More)*]
LangSecRef=3024
Detect=HKCU\Software\SUPERAntiSpyware.com\SUPERAntiSpyware
Default=False
FileKey1=%CommonAppData%\!SASCORE\AppLogs|*.dmp;*.SDB
FileKey2=%CommonAppData%\SUPERAntiSpyware.com\SUPERAntiSpyware\Applogs|*.dmp;*.SDB;*.ZIP
FileKey3=%LocalAppData%\VirtualStore\ProgramData\!SASCORE\AppLogs|*.dmp;*.SDB
FileKey4=%LocalAppData%\VirtualStore\ProgramData\SUPERAntiSpyware\Applogs|*.dmp;*.SDB;*.ZIP
FileKey5=%ProgramFiles%\SUPERAntiSpyware|*.tmp


---------------------


Old:

[sUPERAntiSpyware (Logs) More*]
LangSecRef=3024
Detect=HKCU\Software\SUPERAntiSpyware.com\SUPERAntiSpyware
Default=False
FileKey1=%CommonAppData%\!SASCORE\AppLogs|*.dmp;*.SDB
FileKey2=%CommonAppData%\SUPERAntiSpyware.com\SUPERAntiSpyware\Applogs|*.dmp;*.SDB;*.ZIP
FileKey3=%LocalAppData%\VirtualStore\ProgramData\!SASCORE\AppLogs|*.dmp;*.SDB
FileKey4=%LocalAppData%\VirtualStore\ProgramData\SUPERAntiSpyware\Applogs|*.dmp;*.SDB;*.ZIP

Share this post


Link to post
Share on other sites

Updated Superantispyware even more:  [sUPERAntiSpyware More*]

 

Changed Detect to Detect1

Added Detect2   (HKCU not found in Windows 10 x64 Pro Build 14933.321)

[SUPERAntiSpyware More*]
LangSecRef=3024
Detect1=HKCU\Software\SUPERAntiSpyware.com\SUPERAntiSpyware
Detect2=HKLM\Software\SUPERAntiSpyware.com\SUPERAntiSpyware
Default=False
FileKey1=%CommonAppData%\!SASCORE\AppLogs|*.dmp;*.SDB
FileKey2=%CommonAppData%\SUPERAntiSpyware.com\SUPERAntiSpyware\Applogs|*.dmp;*.SDB;*.ZIP
FileKey3=%LocalAppData%\VirtualStore\ProgramData\!SASCORE\AppLogs|*.dmp;*.SDB
FileKey4=%LocalAppData%\VirtualStore\ProgramData\SUPERAntiSpyware\Applogs|*.dmp;*.SDB;*.ZIP
FileKey5=%ProgramFiles%\SUPERAntiSpyware|*.tmp

Share this post


Link to post
Share on other sites

Please fix the Detect path.

 

[CyberLink PowerDVD 16*]
LangSecRef=3023
Detect=HKCU\Software\CyberLink
Default=False
FileKey1=%LocalAppData%\Cyberlink\PowerDVD*\cache\|*.*
FileKey2=%CommonAppData%\Cyberlink\Evoparser\|*.xml

Share this post


Link to post
Share on other sites

Modified Entry:  [CyberLink PowerDVD 16*]

 

Fixed Detect

[CyberLink PowerDVD 16*]
LangSecRef=3023
Detect=HKCU\Software\CyberLink\PowerDVD16
Default=False
FileKey1=%LocalAppData%\Cyberlink\PowerDVD*\cache\|*.*
FileKey2=%CommonAppData%\Cyberlink\Evoparser\|*.xml

Good catch, SMalik  ;)

Share this post


Link to post
Share on other sites

Entry  Office 2016 as seen here: xpmmivs9jtcp29ddnns_s.jpg

 

Changes the Office 2016 user's Options >Advanced related to the

No. of Recent Documents, Recent Folders, and Quick Access of Recent Documents

from what the user wants x6ivskjzq4tfl6li76k4_s.jpg

back to the Default options

(Recent Documents: 25 - Recent Folders: 20 - Quick Access of Recent Documents: 4)

x4hwaca3bdtjjabw6uv_s.jpg

 

When it comes to Privacy,  it is not a wise thing!!!

  :(   :wacko:  :o 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×