Jump to content
CCleaner Community Forums
Winapp2.ini

Winapp2.ini additions

Recommended Posts

It just seems odd to me that there are wildcards for the file system but not for the registry.

Because wildcards for the registry could be incredibly dangerous, far moreso than regular wildcards.

Share this post


Link to post
Share on other sites

EDIT:

 

[uniblue Registry Booster 2(Backups)*]
LangSecRef=3024
Detect=HKCU\Software\Uniblue\Registry Booster
FileKey1=%AppData%\Uniblue\Registry Booster2|*.zip

[uniblue Registry Booster(Backups)*]
LangSecRef=3024
Detect=HKCU\Software\Uniblue\Registry Booster
FileKey1=%AppData%\Uniblue\Registry Booster|*.zip

 

Combine these 2 to make:

 

[uniblue Registry Booster(Backups)*]
LangSecRef=3024
Detect=HKCU\Software\Uniblue\Registry Booster
FileKey1=%AppData%\Uniblue\Registry Booster|*.zip

FileKey2=%AppData%\Uniblue\Registry Booster2|*.zip

 

Remove the following entries:

 

[Resource Hacker*]
LangSecRef=3024
DetectFile=%ProgramFiles%\Resource Hacker\ResHacker.exe
FileKey1=%ProgramFiles%\Resource Hacker|ResHacker.ini;reshacker.GID

 

Discontinued program since 2011.

 

[smart Explorer*]
LangSecRef=3021
Detect=HKCU\Software\Smartque\Smart Explorer
RegKey1=HKCU\Software\Smartque\Smart Explorer\Opened Pages
RegKey2=HKCU\Software\Smartque\Smart Explorer\Recent Pages

 

Discontinued since 2009.

 

[spyDefense*]
LangSecRef=3024
DetectFile=%ProgramFiles%\Everest Labs\Spydefense\sdc.exe
FileKey1=%AppData%\Everest Labs\Spydefense\Backups|BF7.tmp
FileKey2=%AppData%\Everest Labs\Spydefense|SpyDefense.log;History.ini;Backups.ini

 

Discontinued since 2006.

 

[spyware Doctor*]
LangSecRef=3024
Detect=HKCU\Software\PCTools\Spyware Doctor
FileKey1=%ProgramFiles%\Spyware Doctor\Log|*.*
FileKey2=%AppData%\pctsGui|bugreport.*

 

Discontinued and bought out by Norton's in 2013. No downloads exist for it anymore.

 

[star Downloader*]
LangSecRef=3021
Detect=HKCU\Software\Star Downloader
FileKey1=%ProgramFiles%\Star Downloader|serverstats.txt;LastURLs
FileKey2=%ProgramFiles%\Star Downloader\Partial Downloads|*.*|RECURSE

 

Discontinued since 2011.

 

[steed*]
LangSecRef=3022
DetectFile=%CommonAppData%\Steed
FileKey1=%CommonAppData%\Steed\Logs|*.*|REMOVESELF

 

Discontinued since 2012.

 

[Windows Live OneCare*]
LangSecRef=3022
Detect=HKLM\SOFTWARE\Microsoft\OneCare Protection
FileKey1=%LocalAppData%\Microsoft\Windows Live OneCare Saftey Scanner|*.sqm|RECURSE

 

Windows Live OneCare has been discontinued for many years now and no active downloads exist anymore.

 

I am quiet interested in why there are so many entires for discontinued apps that no longer exist for download anymore.

Share this post


Link to post
Share on other sites

prefer not to remove anything that being discontinued because there still people using it even without support/new version

or put those discontinued software entry into new file or simply list it on winapp2.com but i think people who use those software might come here and ask why winapp2.ini stop support for those software

 

just wanna ask 1 question

why winapp2 nvidia use LangSecRef=3023 and winapp use LangSecRef=3024?

Share this post


Link to post
Share on other sites

Why remove "old" programs? Many people might use them even though their development has stopped. I'm still using Resource Hacker, but it's on my USB stick.

Share this post


Link to post
Share on other sites

Why remove "old" programs? Many people might use them even though their development has stopped. I'm still using Resource Hacker, but it's on my USB stick.

 

+1.  Users of Winapp2.ini can use trim.bat to reduce size of file if desired.  ;)

Share this post


Link to post
Share on other sites

Spydefense, Spyware Doctor, and Windows live OneCare don't even have download links anymore. Thus no one can use them, even if they wanted to. The others I just threw in more as a notice. Was just another suggesstion to shrink Winapp2.

Share this post


Link to post
Share on other sites

Spydefense, Spyware Doctor, and Windows live OneCare don't even have download links anymore. Thus no one can use them, even if they wanted to. The others I just threw in more as a notice. Was just another suggesstion to shrink Winapp2.

http://www.softpedia.com/get/Internet/Popup-Ad-Spyware-Blockers/SpyDefense.shtml

http://www.softpedia.com/get/Internet/Popup-Ad-Spyware-Blockers/Spyware-Doctor-Starter-Edition.shtml

http://www.softpedia.com/get/Antivirus/Windows-Live-OneCare.shtml

No, no and no. At least offer a second file with all the entries. You can also use Trim.bat like already mentioned by siliconman01.

Many people use software even after it has been discontinued, like you can see it now happen with Windows XP. It's really not the best idea, especially with antivirus programs, but some of them can still remove older malware. Some people may also have uninstalled the discontinued software and then CCleaner can remove the files they have left behind.

Share this post


Link to post
Share on other sites

By the point of the file -- to have a complete catalogue of ccleaner entries not integrated into the official program, for users to create their own file from based on what they have installed -- I too vote entries not be removed due to age (except the windows ME entry because if you're still using ME you probably would not even be thinking of using winapp2 or ccleaner)

 

Share this post


Link to post
Share on other sites

Edited DetectFile and added FileKey8:

[ComboFix*]
LangSecRef=3024
DetectFile=%SystemDrive%\ComboFix.txt
Default=False
Warning=This will delete ComboFix History. Do not delete until you have reviewed these logs.
FileKey1=%SystemDrive%\Qoobox|*.txt
FileKey2=%SystemDrive%\Qoobox\Quarantine|*.log
FileKey3=%SystemDrive%\CE.tmp|*.*|REMOVESELF
FileKey4=%SystemDrive%\D6.tmp|*.*|REMOVESELF
FileKey5=%SystemDrive%\Qoobox\LastRun|*.*|REMOVESELF
FileKey6=%SystemDrive%\Qoobox\Test|*.*|REMOVESELF
FileKey7=%SystemDrive%\Qoobox\TestC|*.*|REMOVESELF
FileKey8=%SystemDrive%|ComboFix.txt
Combofix didn't create "ComboFix" for me. Instead it created ComboFix.txt, which is a log file. So an (better) alternative would be:

DetectFile=%SystemDrive%\Qoobox
Missed Iron and FileKey4 and 7? http://forum.piriform.com/index.php?showtopic=32310&view=findpost&p=247312

The Steam entries work wonders so far. One more:

%ProgramFiles%\Steam\SteamApps\common\Team Fortress 2\tf\download|*.*|RECURSE
Quote from readme.txt in that folder: "It is generally safe to delete this directory at any time." I have over 1GB in that folder. Maybe Warning=This will delete all downloaded custom server files.

One more:

%ProgramFiles%\Steam|*.cache|RECURSE

Share this post


Link to post
Share on other sites

[Windows Live OneCare*]

LangSecRef=3022

Detect=HKLM\SOFTWARE\Microsoft\OneCare Protection

FileKey1=%LocalAppData%\Microsoft\Windows Live OneCare Saftey Scanner|*.sqm|RECURSE

 

Windows Live OneCare has been discontinued for many years now and no active downloads exist anymore.

 

Does anyone know if OneCare users are even getting new definition files anymore? That antivirus was payware/commercial rubbish with MSE being it's free replacement.

Share this post


Link to post
Share on other sites

Soo I'm super behind on winapp2's and I'm combing the current one and found

[MS Word 2007/10/13 Document Building Blocks*]
LangSecRef=3021
DetectFile=%AppData%\Microsoft\Document Building Blocks
Default=False
FileKey1=%AppData%\Microsoft\Document Building Blocks|*.*|RECURSE

I don't think this is junk

See: http://office.microsoft.com/en-us/word-help/create-and-use-document-building-blocks-in-word-2007-HA010214071.aspx

 

Also

[MusicBee*]

LangSecRef=3023

Detect=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MusicBee

Default=False

FileKey1=%AppData%\MusicBee|*.dat

FileKey2=%AppData%\MusicBee\InternalCache|*.*|REMOVESELF

I don't think FileKey1 is a good idea, It removes Gecko (mozilla) based rules, LastFm Connect Rules, Hardware associations, (very important!) File Orginization rules and many more

see image of my musicbee folder

post-21882-0-06811700-1397608150_thumb.png

 

 

Share this post


Link to post
Share on other sites
Can you clarify on which if any .dat files are safe to remove from musicbee?

SPACE RESERVED

 

Once my PC is done updating I'll open some and check, but I'm unsure the original creator's intent. I think activity log may be safe and maybe error log, but my feelings on error log cleans are mixed.

 

Share this post


Link to post
Share on other sites

A lot of error logs dump /everything/ into the error log, on the off chance there are errors

Share this post


Link to post
Share on other sites

For DivX:

%CommonAppData%\DivX\Setup|DivXSetup.log
For Skype:

%CommonAppData%\Skype|*.tmp
For Search Everything (includes names and locations of all files, will just be regenerated on next start):

%ProgramFiles%\Everything|Everything.db
New:

[PhrozenSoft Databases*]
LangSecRef=3024
DetectFile=%AppData%\PhrozenSoft
Default=False
FileKey1=%AppData%\PhrozenSoft|*.db|RECURSE
VTUploader creates history file \PVTUploader\phrzvtu.db and Keylogger (not necessarily malware) creates pkl.db which contains all recorded keystrokes and also the password used to open the logger which will be reseted if you delete that file (so I guess that's an issue with that file). So maybe do it like this:

FileKey1=%AppData%\PhrozenSoft\PVTUploader|phrzvtu.db
Question: Does CCleaner not clean all the stuff cleanmgr deletes? Like the Service-Pack-Backups? Could not find them in the Winapp.ini and Winapp2.

Share this post


Link to post
Share on other sites

I installed the winapp2.ini and the trim.bat but when running the trim.bat it asked me a few questions that I did not know which one to select in the cmd. I pasted part of the cmd below. In the ccleaner folder I now see another folder called #TRIMMER and the ccleaner takes a very long time to load.

 

I also add that the ccleaner is the portable version, but this time is installed on the desktop of the computer.

FILE CREATION 13:52 08/03/2012   Execution 16:48:11.32

This script creates a trimmed WinApp2.ini giving a faster launch for CCleaner.
It is safe to use in "normal installed" CCleaner folder - no settings change
                              TECHNIQUE :-
Run trim.bat. CCleaner appears. Click "Analyze" and when done close CCleaner
A temporary Winapp2.ini variant is created that asserts "Default=True".
"CCleaner /Debug" is launched to identify all "Detections"
and a trimmed Winapp2.ini is created which omits the NON-Detections.

 "Organize (alphabetic) WinApp2.ini - (O)rganize or (S)kip : (O or S) ? "o
Trimming trailing spaces, IP = #_DOS_WINAPP2.INI : OP = #_FIX.INI
16:48:21.45 - 16:48:16.45 = 5000 mSec   = Found 16304 lines, 0 needed Trim

Already Sorted - Quiting SORT

CREATING FALSE/TRUE VARIANTS #_ZAP_WINAPP2.INI + #_DEBUG_ZAP_WINAPP2.INI
16:48:33.21 - 16:48:23.79 = 9420 mSec   = Counted 2097 Configuration blocks

  YOU  MUST  NOT  "Run Cleaner"  -  ONLY  Click "Analyze"
  After Analysis please CLOSE CCleaner so script may continue.
Press any key to continue . . .
16:49:07.48 - 16:48:37.29 = 30190 mSec  = Using "CCLEANER.EXE /DEBUG"
16:49:07.76 - 16:49:07.48 = 280 mSec    = Built #_CCLEANER.LST
16:49:07.96 - 16:49:07.78 = 180 mSec    = 114 off TRIMMED Config Blocks

CREATING NEW WINAPP2.INI and #_DEBUG_WINAPP2.INI
Found 114 - (Anomalies 0) = 114 Configs
16:49:58.32 - 16:49:07.96 = 50360 mSec  = debug + Reduced WINAPP2 114 Configs

Reporting "BAD" Volatile Detections in file #_?_BAD_*_WINAPP2.INI
16:50:06.25 - 16:49:58.65 = 7600 mSec   = 26 BAD In 2427 Det. = #_7_BAD_FULL.LST

16:50:06.89 - 16:50:06.34 = 550 mSec    = 2 BAD In 131 Det. = #_8_BAD_MINI.LST
 "@_#_7_BAD_FULL.LST Volatile Detections - (P)reserve or (S)kip : (P or S) ? "

I also saw a few more questions below the above, but was not able to copy/paste or save.

thanks.

Share this post


Link to post
Share on other sites

This might be a dumb question, but how do you find registry keys for steam games? For instance:

 

[serious Sam 3: BFE Logs*]
Section=Games
Detect=HKCU\Software\Valve\Steam\Apps\41070
DetectFile=%ProgramFiles%\Steam\steamapps\common\Serious Sam 3
FileKey1=%ProgramFiles%\Steam\steamapps\common\Serious Sam 3\Log|*.*

 

How do you figure out that this game is Apps\41070? Where do I look to find that out?

Share this post


Link to post
Share on other sites

This might be a dumb question, but how do you find registry keys for steam games? For instance:

 

[serious Sam 3: BFE Logs*]

Section=Games

Detect=HKCU\Software\Valve\Steam\Apps\41070

DetectFile=%ProgramFiles%\Steam\steamapps\common\Serious Sam 3

FileKey1=%ProgramFiles%\Steam\steamapps\common\Serious Sam 3\Log|*.*

 

How do you figure out that this game is Apps\41070? Where do I look to find that out?

Don't know if this is how the entries makers did it (so feel free to correct me), but a quick search of my drive for the app numbers finds appmanifest files, numbered the same, in C:\Program Files (x86)\Steam\SteamApps. These can be opened with notepad and the game name is in those files :)

 

EDIT: Although far easier lol, just found in each games common folder is a text file titled steam_appid.txt :rolleyes:

Share this post


Link to post
Share on other sites

This might be a dumb question, but how do you find registry keys for steam games? For instance:

 

[serious Sam 3: BFE Logs*]

Section=Games

Detect=HKCU\Software\Valve\Steam\Apps\41070

DetectFile=%ProgramFiles%\Steam\steamapps\common\Serious Sam 3

FileKey1=%ProgramFiles%\Steam\steamapps\common\Serious Sam 3\Log|*.*

 

How do you figure out that this game is Apps\41070? Where do I look to find that out?

app_id.txt and the steam store lists the app id in the url

I've made the entry I think, but yeah from there and

http://steamdb.info/

https://developer.valvesoftware.com/wiki/Steam_Application_IDs

Share this post


Link to post
Share on other sites

New (I think this had already been included but was it removed?):

[Lazarus Saved Forms*]
LangSecRef=3026
SpecialDetect=DET_MOZILLA
Default=False
FileKey1=%AppData%\Mozilla\Firefox\Profiles\*|lazarus.sqlite;lazarus-backup.sqlite
What about cleanmgr.exe (e.g. Service-Pack-Backups)? Does CCleaner remove this or is there a reason why not?

Share this post


Link to post
Share on other sites

Revised Entry

http://forum.piriform.com/index.php?showtopic=32310&p=248408

 

[iTunes Logs*]
LangSecRef=3023
Detect=HKLM\SOFTWARE\Apple Computer, Inc.\iTunes
Default=False
FileKey1=%AppData%\Apple Computer\Logs|*.*|RECURSE
FileKey2=%WinDir%\System32\config\systemprofile\AppData\Roaming\Apple Computer\Logs|*.*|RECURSE
FileKey3=%WinDir%\SysWOW64\config\systemprofile\AppData\Roaming\Apple Computer\Logs|*.*|RECURSE

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...

×
×
  • Create New...