v6.3.0 - audit release, one-line installer, startup manager, history

CHANGELOG.md

@@ -4,6 +4,96 @@ All notable changes to this project are documented here.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [6.3.0] - 2026-09-23
+
+A correctness and safety release: every engine was audited against Microsoft's
+documentation and the common ways cleaners and tweakers break Windows.
+
+### Fixed
+- **The desktop app ignored the tick-boxes.** It passed `-Include 'a,b,c'` through `-File`,
+  which arrives as one string, so every run used the engine defaults. All engines now split
+  comma-joined `-Include` / `-Exclude` (and `-Drives`, `-Area`).
+- **No restore point under PowerShell 7** (the app's preferred host): `Checkpoint-Computer`
+  does not exist there. Restore points now go through the `SystemRestore` WMI class on both
+  hosts, and the 24-hour throttle value is put back afterwards instead of being left at 0.
+- **Cleanup dry runs measured nothing for per-user paths**: `ForEach-Object <member>` is
+  itself subject to `-WhatIf`, so `<USER>` expanded to nothing in preview mode.
+- **Junctions / symlinks**: a link inside a cleaned folder is now removed as a link; its
+  target is never enumerated, counted or queued for delete-at-reboot.
+- **Age filter** works on files, not folders (a folder's timestamp does not change when a
+  file deep inside it does, so fresh files could be deleted with `-MaxAgeDays`).
+- Services stopped for a task also restart their **dependents** (`cryptsvc` → AppLocker's
+  `AppIDSvc` stayed off until reboot); a task is skipped if its service refuses to stop.
+- Native tools (DISM, sfc, powercfg, pnputil, wevtutil) are judged by **exit code**; failures
+  were logged as success. 3010 = success, reboot required.
+- The engine no longer deletes **its own log / report** or the desktop app's capture files
+  out of `%TEMP%` mid-run.
+- Browsers are closed **only in the current session**, and never by a silent scheduled run
+  (`-CloseApps` makes that explicit; otherwise running browsers' caches are skipped).
+- Recycle Bin is emptied for **every user on every disk** with byte accounting
+  (`Clear-RecycleBin` only emptied the caller's bin — nothing when running as SYSTEM).
+- Event-log archives go to `%ProgramData%\WinSenior\eventlogs` (the temp tasks deleted them)
+  and a log is only cleared after a successful export.
+- `shadow-old` only prunes system-drive restore-point shadows (it also deleted other
+  volumes' and backup software's shadows); `old-drivers` groups by provider + class + inf.
+- `gpu-leftovers` only targets installer extraction folders, not any `NVIDIA`/`AMD` folder
+  on a data disk; `disk-temp` only removes week-old files.
+- `cmd.exe` mis-resolved `call :label` in LF-only batch files (the `.bat` skipped Chrome and
+  ran its tail twice); the release build now forces CRLF on scripts.
+- Repair: `disk-dirty` flagged every volume (`fsutil dirty query` exits 0 either way),
+  `def-signatures` never saw threats, `time-sync` used an invalid `w32tm` switch, ICMP being
+  blocked triggered a full network reset, the hosts fix wiped the whole file, the BITS fix
+  cancelled healthy jobs, and fixes were reported as *Fixed* without checking — every fix is
+  now verified by re-scanning.
+- Optimize: `TaskbarDa` (blocked by UCPD on current Windows 11) aborted the whole taskbar
+  tweak; `SystemResponsiveness=0` is clamped to 20 by MMCSS; Teredo is disabled through its
+  own policy instead of killing every IPv6 tunnel; the Ultimate plan no longer piles up a new
+  copy per run; Appx debloat actually works under PowerShell 7; undo manifests are written
+  after every tweak (a cancelled run stays undoable) and marked when undone.
+
+### Changed (defaults, per Microsoft guidance)
+- Off by default: Prefetch (slows the next boots), standby-memory purge, full
+  SoftwareDistribution reset (wipes update history), BITS queue reset, Store reset,
+  background-app block, WAP Push service, GameDVR policy, network throttling.
+- `DISM /ResetBase` moved to the Dangerous tier (updates become permanently uninstallable);
+  `/SPSuperseded` (Windows 7-era) removed. `catroot2` and Defender folders are no longer
+  treated as cache. Recent items no longer wipes pinned jump lists / Quick Access pins
+  (separate opt-in `jumplists` task). Update caches are skipped while an update waits for a reboot.
+- Scheduled runs are installed into `%ProgramFiles%\WinSenior` (admins-only) instead of
+  running a user-writable clone as SYSTEM, and keep one report per run.
+
+### Added
+- **One-line install** — `irm https://github.com/denfry/WindowsCleaner/releases/latest/download/install.ps1 | iex`
+  downloads the latest release, verifies its SHA256, installs to `%LOCALAPPDATA%\WinSenior`,
+  adds Start menu / desktop shortcuts and starts the app. Re-run to update; `-Uninstall`,
+  `-NoLaunch`, `-Console`, `-NoShortcut` via the scriptblock form. Uses only .NET for
+  download / hash / unzip, so it works on any Windows PowerShell 5.1 or PowerShell 7.
+- **Cleanup 97 → 106:** Vivaldi, new Teams, WebView2 hosts (new Outlook, Widgets, Copilot),
+  Office Click-to-Run update payloads, `Windows\SystemTemp`, upgrade-assistant leftovers,
+  Chrome's 4 GB on-device AI model (opt-in), NuGet global packages (opt-in), jump lists
+  (opt-in); Chromium shader/component/crash caches, Steam libraries on every disk
+  (`libraryfolders.vdf`), nested LiveKernelReports dumps, legacy NVIDIA LocalLow caches;
+  Delivery Optimization is emptied through `Delete-DeliveryOptimizationCache`.
+- **Optimize 49 → 77:** Recall removal, Copilot app removal, Paint/Notepad AI, Bing search
+  suggestions and search highlights, widgets/feeds/Meet Now policies, Edge startup boost /
+  background mode / sidebar / shopping, Chrome on-device AI download block, language-list
+  and settings-page ads, suggested actions, Sticky Keys prompt, End task in taskbar,
+  Home/Gallery in Explorer, HAGS, power throttling, USB selective suspend, reserved storage
+  and more (debatable ones off by default). Visual effects keep font smoothing.
+- **Troubleshoot 25 → 43:** services disabled by tweak tools, Windows Update blocked by
+  policy, update-failure history with per-error-code routing, broken Start/taskbar shell
+  packages, WinRE disabled / recovery partition too small (0x80070643), Secure Boot 2023
+  certificate status, page file, Winsock LSP, disabled network adapters, BitLocker
+  suspended, UAC off, broken PATH/TEMP, Driver Verifier left on, activation, TRIM, root
+  certificate updates, Search index health, suspicious Defender exclusions.
+- **Desktop app:** Startup apps page (enable/disable exactly like Task Manager, fully
+  reversible), History page with all-time total and HTML export, progress bar, filter box
+  and sortable columns on every list, tooltips with paths / explanations, confirm dialogs
+  before Clean and Apply, drive and Conservative options, single-instance guard, no more
+  silent crashes (errors land in the log and `logs\gui-crash.log`), UTF-8 engine output
+  (no mojibake on non-English Windows), scrollable pages.
+- `WinSenior.cmd` works from folders containing spaces, `)`, `&`, `'` or Cyrillic.
+
 ## [6.2.0] - 2026-09-14
 
 ### Added

Cleanup-Windows-Senior.bat

@@ -3,7 +3,7 @@ setlocal enabledelayedexpansion
 
 :: ============================================================
 ::  Windows System Cleanup Script (Batch Version)
-::  Version: 6.0  - mirrors the PowerShell engine's defaults
+::  Version: 6.3.0  - mirrors the PowerShell engine's defaults
 ::  - per-profile helper (cleans every user profile)
 ::  - independent per-browser flags
 ::  - safe targets: dev / messenger / shader / font caches
@@ -12,7 +12,7 @@ setlocal enabledelayedexpansion
 ::  Author: denfry  -  https://github.com/denfry/WindowsCleaner
 :: ============================================================
 
-set "SCRIPT_VERSION=6.0"
+set "SCRIPT_VERSION=6.3.0"
 set "SCRIPT_NAME=Cleanup-Windows-Senior.bat"
 
 :: ---------- defaults (aggressive, matching the PS engine) ----------
@@ -31,7 +31,8 @@ set "CLEAN_BRAVE=1"
 
 set "CLEAN_TEMP=1"
 set "CLEAN_THUMBNAILS=1"
-set "CLEAN_PREFETCH=1"
+:: Prefetch is opt-in (/pf): Microsoft notes clearing it slows the next boots.
+set "CLEAN_PREFETCH=0"
 set "CLEAN_SHADERCACHE=1"
 set "CLEAN_FONTCACHE=1"
 set "CLEAN_DEVCACHE=1"
@@ -77,6 +78,7 @@ if /i "!A!"=="/nya"           ( set "CLEAN_YANDEX=0" & goto :NEXT )
 if /i "!A!"=="/nbr"           ( set "CLEAN_BRAVE=0" & goto :NEXT )
 if /i "!A!"=="/ntmp"          ( set "CLEAN_TEMP=0" & goto :NEXT )
 if /i "!A!"=="/npf"           ( set "CLEAN_PREFETCH=0" & goto :NEXT )
+if /i "!A!"=="/pf"            ( set "CLEAN_PREFETCH=1" & goto :NEXT )
 if /i "!A!"=="/nrb"           ( set "CLEAN_RECYCLE_BIN=0" & goto :NEXT )
 if /i "!A!"=="/nwu"           ( set "CLEAN_WU=0" & goto :NEXT )
 if /i "!A!"=="/ndev"          ( set "CLEAN_DEVCACHE=0" & goto :NEXT )
@@ -157,16 +159,20 @@ if "%CLEAN_IIS_LOGS%"=="1" if exist "%WINDIR%\System32\LogFiles" (
 if "%CLEAN_WU%"=="1" (
     call :LOG "Cleaning Windows Update cache..."
     if "%DRY_RUN%"=="1" (
-        call :LOG "[DRY] would stop wuauserv/bits/cryptsvc and wipe SoftwareDistribution + catroot2"
+        call :LOG "[DRY] would stop wuauserv/bits and wipe SoftwareDistribution\Download"
     ) else (
-        net stop wuauserv >nul 2>&1
-        net stop bits >nul 2>&1
-        net stop cryptsvc >nul 2>&1
-        call :WIPE "%WINDIR%\SoftwareDistribution"
-        call :WIPE "%WINDIR%\System32\catroot2"
-        net start cryptsvc >nul 2>&1
-        net start bits >nul 2>&1
-        net start wuauserv >nul 2>&1
+        rem Download cache only: DataStore is update history and catroot2 is a repair
+        rem step, not a cache. Skip while an update waits for a reboot.
+        reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired" >nul 2>&1
+        if !errorlevel! equ 0 (
+            call :LOG_WARN "Update waiting for a reboot - Windows Update cache skipped (restart first)"
+        ) else (
+            net stop wuauserv >nul 2>&1
+            net stop bits >nul 2>&1
+            call :WIPE "%WINDIR%\SoftwareDistribution\Download"
+            net start bits >nul 2>&1
+            net start wuauserv >nul 2>&1
+        )
     )
 )
 
@@ -175,12 +181,10 @@ if "%SKIP_OPTIMIZATION%"=="0" (
     if "%OPTIMIZE_COMPONENTS%"=="1" (
         call :LOG "DISM component cleanup..."
         if "%DRY_RUN%"=="1" (
-            call :LOG "[DRY] would run DISM /StartComponentCleanup and /SPSuperseded"
+            call :LOG "[DRY] would run DISM /StartComponentCleanup"
         ) else (
             Dism.exe /online /Cleanup-Image /StartComponentCleanup /Quiet >nul 2>&1
-            Dism.exe /online /Cleanup-Image /SPSuperseded >nul 2>&1
-            call :WIPE "%WINDIR%\Logs\DISM"
-            call :LOG_OK "Component store optimized"
+            if !errorlevel! equ 0 ( call :LOG_OK "Component store optimized" ) else if !errorlevel! equ 3010 ( call :LOG_OK "Component store optimized (reboot to finish)" ) else ( call :LOG_WARN "DISM component cleanup failed (exit !errorlevel!)" )
         )
     )
     if "%RUN_SFC%"=="1" (
@@ -368,6 +372,7 @@ echo.
 echo   Disable a target: /nch /ned /nff /nop /nya /nbr  (browsers)
 echo                     /ntmp /npf /nrb /nwu /ndev /nmsg /ndisks
 echo.
+echo   Enable an opt-in target: /pf  (Prefetch - slows the next boots while it rebuilds)
 echo   /ndisks disables drive-level cleanup of all local disks (C:, D:, ...)
 echo.
 echo NOTE: requires Administrator. The PowerShell version