Jump to content
Piriform Community Forums
Winapp2.ini

Winapp2.ini additions

Recommended Posts

Great project! :D

 

but, there's a problem with the "FastStone Capture*" entry:

It somehow deletes your software registration, I had to register again. :(

If there is no fix for the moment, maybe you should atleast add:

 

Warning=This may deleted your software Registration!

 

-joedf

 

You're right. I have modified the entry. It should work fine now.

 

[FastStone Capture*]

LangSecRef=3024

DetectFile=%ProgramFiles%\FastStone Capture\FSCapture.exe

Default=False

FileKey1=%LocalAppData%\FastStone\FSC\EditWith|*.*

FileKey2=%AppData%\FastStone\FSC|*.bak

 

Removed the lines listed below. I have tried this program on 2 diff. systems and it doesn't create any reg paths.

 

%LocalAppData%\FastStone\FSC|*.db

%AppData%\FastStone\FSC|*.db

HKCU\Software\FastStone\APP.FSRecorder\Global|_GrbId

HKCU\Software\FastStone\APP.FSRecorder\Global|_LastClipPlayed

HKCU\Software\FastStone\APP.FSRecorder\Global|_LastRecordingFileName

Share this post


Link to post
Share on other sites

Oh really? That sounds dangerous. I'll probably drop that file key if that's the case, don't want people having to constantly register for it :c

Share this post


Link to post
Share on other sites

Oh really? That sounds dangerous. I'll probably drop that file key if that's the case, don't want people having to constantly register for it :c

 

Yes, it was deleting the registration. I have edited the entry again.

Share this post


Link to post
Share on other sites

I think older versions created the registry path when you used the screen recorder

Share this post


Link to post
Share on other sites

MODIFIED ENTRY

 

[Auslogics BoostSpeed*]

LangSecRef=3024

DetectFile=%ProgramFiles%\Auslogics\Auslogics BoostSpeed\boostspeed.exe

Default=False

FileKey1=%AppData%\Auslogics|*.htm|RECURSE

FileKey2=%AppData%\Auslogics|*.logl|RECURSE

FileKey3=%AppData%\Auslogics|*.rsc|RECURSE

FileKey4=%AppData%\Auslogics|*.xml|RECURSE

Share this post


Link to post
Share on other sites

Here is a couple of new ones, tested:

 

Scan logs for Kaspersky's TDSSKiller from http://support.kaspersky.com/faq/?qid=208283363

 



[Kaspersky TDSSKiller Logs*]
LangSecRef=3024
Default=False
FileKey1=%SystemDrive%|TDSSKiller*.txt

 

 

Latest version 3 of Far Manager from farmanager.com, stores the logs in a new location:

 


[FAR Manager 3*]
LangSecRef=3021
DetectFile=%LocalAppData%\Far Manager\Profile
Warning=Also clears the plugin name cache
Default=False
FileKey1=%LocalAppData%\Far Manager\Profile|*.*|RECURSE

 

Temporary files for the Gadugadu IM tool, http://en.wikipedia.org/wiki/Gadu-Gadu (the program doesn't clean its temp files after itself, but they can't be deleted until it is shut down)

 



[Gadu-Gadu Temporary Files*]
LangSecRef=3022
Detect=HKCU\Software\Gadu-Gadu\
Default=False
FileKey1=%WinDir%\|TEMP*.htm*

Share this post


Link to post
Share on other sites

Here is a couple of new ones, tested:

 

Scan logs for Kaspersky's TDSSKiller

 

I'm a little weary about having a broad clean up like that for an antimalware program, which stores in the systemdrive, added to the public list. Especially weary of a first time poster, no offence, can a long time member test and sign off of this entry.

 

also why is far manager deleting its own detect…or for that matter why does it delete the entire profile folder.

Share this post


Link to post
Share on other sites

TDSSKiller is not a something that most folk would have on their system anyway as it's a specialist rootkit removal tool.

Share this post


Link to post
Share on other sites

NEW ENTRY

 

[OpenOffice.org 3*]

LangSecRef=3021

Detect=HKCU\Software\OpenOffice.org\OpenOffice.org 3.3

Default=False

FileKey1=%AppData%\OpenOffice.org\3\user\config\imagecache|*.*

FileKey2=%AppData%\OpenOffice.org\3\user\registry\cache|*.*

FileKey3=%AppData%\OpenOffice.org\3\user\registry\data\org\openoffice\Office|Common.xcu

FileKey4=%AppData%\OpenOffice.org\3\user\registry\data\org\openoffice\Office|Views.xcu

FileKey5=%AppData%\OpenOffice.org\3\user\registry\data\org\openoffice\Office|Writer.xcu

FileKey6=%AppData%\OpenOffice.org\3\user\registry\data\org\openoffice\Office|Histories.xcu

FileKey7=%AppData%\OpenOffice.org\3\user\registry\data\org\openoffice\ucb|Hierarchy.xcu

FileKey8=%AppData%\OpenOffice.org\3\user\registry\data\org\openoffice\ucb|Store.xcu

FileKey9=%AppData%\OpenOffice.org\3\user\store|.templdir.cache

FileKey10=%AppData%\OpenOffice.org\3\user\template|*.*

Share this post


Link to post
Share on other sites

MODIFIED ENTRIES

 

[Corel PaintShop Pro X4 More*]

LangSecRef=3023

DetectFile=%ProgramFiles%\Corel\Corel PaintShop Pro X4\Corel PaintShop Pro.exe

Default=False

FileKey1=%LocalAppData%\Corel PaintShop Pro\14.0\Database|*.db

 

Removed the lines listed below:

 

FileKey2=%AppData%\Corel\Messages|*.*|RECURSE

ExcludeKey1=FILE|%AppData%\Corel\Messages|*.policy

 

[Corel VideoStudio Pro X4 More*]

LangSecRef=3023

DetectFile=%ProgramFiles%\Corel\Corel VideoStudio Pro X4\vstudio.exe

Default=False

FileKey1=%AppData%\Ulead Systems\Corel VideoStudio Pro\14.0\en-US|VS_Pro.log

FileKey2=%Documents%\Corel VideoStudio Pro\14.0\AudioTmp|*.*

FileKey3=%Documents%\Corel VideoStudio Pro\14.0\SmartProxy|*.*

RegKey1=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0\HerRFL

RegKey2=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0\Library Manager|Latest Export Folder

RegKey3=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0\Preference|Working Folder

RegKey4=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0\VIO\Recent Dir

 

Removed the lines listed below:

 

FileKey1=%AppData%\Corel\Messages|*.*|RECURSE

ExcludeKey1=FILE|%AppData%\Corel\Messages|*.policy

 

 

NEW ENTRY

 

[Corel VideoStudio Pro X5*]

LangSecRef=3023

DetectFile=%ProgramFiles%\Corel\Corel VideoStudio Pro X5\vstudio.exe

Default=False

FileKey1=%Documents%\Corel VideoStudio Pro\15.0\AudioTmp|*.*

FileKey2=%Documents%\Corel VideoStudio Pro\15.0\SmartProxy|*.*

RegKey1=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0\HerRFL

RegKey2=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0\Library Manager|Latest Export Folder

RegKey3=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0\Preference|Working Folder

RegKey4=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0\VIO\Recent Dir

Share this post


Link to post
Share on other sites

Thanks for removing the entire page of spam posts!

 

And thanks for the new entries and revised ones :)

Share this post


Link to post
Share on other sites

NEW ENTRY

[OpenOffice.org 3*]
LangSecRef=3021
Detect=HKCU\Software\OpenOffice.org\OpenOffice.org 3.3
Default=False
FileKey1=%AppData%\OpenOffice.org\3\user\config\imagecache|*.*
FileKey2=%AppData%\OpenOffice.org\3\user\registry\cache|*.*
FileKey3=%AppData%\OpenOffice.org\3\user\registry\data\org\openoffice\Office|Common.xcu
FileKey4=%AppData%\OpenOffice.org\3\user\registry\data\org\openoffice\Office|Views.xcu
FileKey5=%AppData%\OpenOffice.org\3\user\registry\data\org\openoffice\Office|Writer.xcu
FileKey6=%AppData%\OpenOffice.org\3\user\registry\data\org\openoffice\Office|Histories.xcu
FileKey7=%AppData%\OpenOffice.org\3\user\registry\data\org\openoffice\ucb|Hierarchy.xcu
FileKey8=%AppData%\OpenOffice.org\3\user\registry\data\org\openoffice\ucb|Store.xcu
FileKey9=%AppData%\OpenOffice.org\3\user\store|.templdir.cache
FileKey10=%AppData%\OpenOffice.org\3\user\template|*.*

How about changing the "3" with wildcard "*" and maybe the detect like this?:

[OpenOffice.org 3*]
LangSecRef=3021
Detect=HKCU\Software\OpenOffice.org
Default=False
FileKey1=%AppData%\OpenOffice.org\*\user\config\imagecache|*.*
FileKey2=%AppData%\OpenOffice.org\*\user\registry\cache|*.*
FileKey3=%AppData%\OpenOffice.org\*\user\registry\data\org\openoffice\Office|Common.xcu
FileKey4=%AppData%\OpenOffice.org\*\user\registry\data\org\openoffice\Office|Views.xcu
FileKey5=%AppData%\OpenOffice.org\*\user\registry\data\org\openoffice\Office|Writer.xcu
FileKey6=%AppData%\OpenOffice.org\*\user\registry\data\org\openoffice\Office|Histories.xcu
FileKey7=%AppData%\OpenOffice.org\*\user\registry\data\org\openoffice\ucb|Hierarchy.xcu
FileKey8=%AppData%\OpenOffice.org\*\user\registry\data\org\openoffice\ucb|Store.xcu
FileKey9=%AppData%\OpenOffice.org\*\user\store|.templdir.cache
FileKey10=%AppData%\OpenOffice.org\*\user\template|*.*

Share this post


Link to post
Share on other sites

Change name of Weather Watcher Live* to Weather Watcher Live (Temp files)*

 

[Weather Watcher Live (Temp Files)*]
LangSecRef=3021
Detect=HKCU\Software\VB and VBA Program Settings\Weather Watcher Live
Default=False
FileKey1=%AppData%\WeatherWatcherLive\Temp|*.*

 

New entry

 

[Weather Watcher Live (Data Log)*]
LangSecRef=3021
Detect=HKCU\Software\VB and VBA Program Settings\Weather Watcher Live
Default=False
FileKey1=%AppData%\WeatherWatcherLive\|WeatherWatcherLive.log

Share this post


Link to post
Share on other sites

How about changing the "3" with wildcard "*" and maybe the detect like this?:

[OpenOffice.org 3*]
LangSecRef=3021
Detect=HKCU\Software\OpenOffice.org
Default=False
FileKey1=%AppData%\OpenOffice.org\*\user\config\imagecache|*.*
FileKey2=%AppData%\OpenOffice.org\*\user\registry\cache|*.*
FileKey3=%AppData%\OpenOffice.org\*\user\registry\data\org\openoffice\Office|Common.xcu
FileKey4=%AppData%\OpenOffice.org\*\user\registry\data\org\openoffice\Office|Views.xcu
FileKey5=%AppData%\OpenOffice.org\*\user\registry\data\org\openoffice\Office|Writer.xcu
FileKey6=%AppData%\OpenOffice.org\*\user\registry\data\org\openoffice\Office|Histories.xcu
FileKey7=%AppData%\OpenOffice.org\*\user\registry\data\org\openoffice\ucb|Hierarchy.xcu
FileKey8=%AppData%\OpenOffice.org\*\user\registry\data\org\openoffice\ucb|Store.xcu
FileKey9=%AppData%\OpenOffice.org\*\user\store|.templdir.cache
FileKey10=%AppData%\OpenOffice.org\*\user\template|*.*

 

I think Detect should be changed to HKCU\Software\OpenOffice.org. They have 3.4 beta and that has changed the reg path from HKCU\Software\OpenOffice.org\OpenOffice.org 3.3 to HKCU\Software\OpenOffice.org\OpenOffice.org 3.4

 

I don't know about changing the wildcards.

Share this post


Link to post
Share on other sites

Update for CCleaner v3.17 on its way in a bit, as I am a bit busy at the moment. Fear not :)

Share this post


Link to post
Share on other sites

The highlighted line should be removed from the entry listed below. These are locked and hidden files. When CCleaner tries to remove the regtrans-ms files from that location it only unhides the files, it does not remove the files.

 

[Registry Transaction Logs*]

LangSecRef=3025

Detect=HKCU\Software\Microsoft\Windows

Default=False

FileKey1=%SystemDrive%\Users\Default|*.regtrans-ms

FileKey2=%LocalAppData%\Microsoft\Windows|*.regtrans-ms

FileKey3=%UserProfile%|*.regtrans-ms

Share this post


Link to post
Share on other sites

I changed those two things, I updated the file hosted on the server.

 

I always forget to modify the first post correctly!

Share this post


Link to post
Share on other sites

SnagIt 11 was added in Winapp.ini of CCleaner V3.17. SnagIt 11* should be changed to:

 

[snagit 11*]
LangSecRef=3024
Detect=HKCU\Software\TechSmith\SnagIt\11
Default=False
Warning=This will delete the backups of the captures that you have performed with SnagIt 11.
FileKey1=%LocalAppData%\TechSmith\Snagit|*.bin
FileKey2=%LocalAppData%\TechSmith\Snagit\DataStore|*.sdf
FileKey3=%LocalAppData%\TechSmith\Snagit\DataStore|*.SNAG
FileKey4=%LocalAppData%\TechSmith\Snagit\DataStore|*.SNAGundo
RegKey1=HKCU\Software\TechSmith\Snagit\11|CaptureCount

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×