Your may clear system traces such as registry traces, temp files, system history, caches , and various log files. You may see the contents of any particular item on its respective panel.

You may also include system's own traces cleaning into a large wipe and clean task. Go to the Setting a Large Wipe and Clean Task section for details.

The list of items visible on the System panel can be edited on the Customize panel.

To clean traces of system activity,

• Select the System's Own Traces item.

The System panel will appear.

System's Own Traces

• Go to the required section(s) and select the required items.

The section may contain some critical items that may affect system performance. R-Wipe & Clean will throw a warning about these items if you select the entire section.

Critical Item warning

Select these items only if you completely understand what you are doing.

• Tap the Clean Now button.

R-Wipe & Clean will start cleaning the computer, and the Deleting and wiping dialog box will appear showing the cleaning progress.

System traces are divided into nine parts:

You may read more about these items in the R-Wipe & Clean Classic help.

Logs: More Information...

This part allows you to inspect and clean various logs created by various system components. Quite often you may gain some free drive space upon removing these logs.
BLB Service Events Log	Event logs of the BLB (Block Level Backup) Engine Service.
Boot File Repair Log	Event log the Boot File Servicing Utility for Boot File Repair.
Component-Based Servicing Log	A log file of the Windows Component-Based Servicing activity that may help in troubleshooting.
Delivery Optimization Service Events Logs	Delivery Optimization Service Events Log created by the delivery optimization service for troubleshooting.
Deployment Image Service and Management Log	Deployment Image Service and Management Log Microsoft (DISM) tools can reate a log to assist in tourbleshooting.
Diagnostics Logs	Your system creates several log files that assist in troubleshootng. Double-click a file to view its. content.
Disk Recovery Logs	Your system creates some diagnostics and event logs for disk recovery events.
Event Logging Diagnostic Logs	Your system creates diagnostic log files of the Event Logging component.
LSA Events Logs	Log files from the LSA (Local Security Authority) service that validates local and remote sign-ins to enforce local security polices. Those files are used to assist in troubleshooting.
Measured Boot Logs	Your system creates a log file that assist in Measured Boot troubleshootng. The Measured Boot feature that provides antimalware software with a trusted log of all boot components to determine whether the component is clear or infected with malware.
.NET Framework Logs	Microsoft .Net tools and services may create logs to assist in tourbleshooting. Double-click a file to view its content.
Network Setup Service Events Logs	Network Setup Service Events Logs created by the network setup service to assist in troubleshooting of network driver installation.
Program Install Logs	Logs of program installation used to check compatibility.
SAM Events Logs	Logs of the SAM (Security Account Manager) events. SAM is used to authenticate local and remote users.
Server-initiated Healing Events Logs	Server-initiated Healing Events Logs created by the Windows Update service to assist in troubleshooting.
Services Logs	Services may create log files that assist in troubleshooting.
MS DTC Service Trace Logs	Your system creates trace logs of the Microsoft Distributed Transaction Coordinator (DTC) service that coordinates transactions between databases, message queues, file systems, and other resources.
NDF Logs	Logs of Network Diagnostics Framework (NDF) that provides a way for users to diagnose and repair network problems using a single troubleshooting tool.
Sleep Study Events Log	The log of events created by Sleep Study tool that identifies sources of battery drain during computer's sleep time.
Startup File Renaming Log	A log containing a list of files that Windows renames during its startup. May help in troubleshooting.
Storage Group Policy Log	A log of Storage management performed using Group Policy.
System Restore Event Log	An event log of the System Restore service that can assist in troubleshooting.
Tracing Logs	Your system can create various tracing logs that may assist in troubleshooting.
WDI Diagnostic Log	Log of Windows Diagnostic Infrastructure (WDI) that help to detect, diagnose and solve common problems with a minimum user interactions.
WDI Events Log	Event log of Windows Diagnostic Infrastructure (WDI) that help to detect, diagnose and solve common problems with a minimum user interactions.
WDI Startup Logs	Logs of Windows Diagnostic Infrastructure (WDI) that store information about applications launched during system startup to assist in troubleshooting.
Windows Events Log	Your system keeps a log of Windows events (System, Security, and Applications). You may edit the list of items you want to view. Right-click the header and change the list of items to show.
Windows Firewall Log	Your system keeps a log of the Windows built-in firewall. You need to restart your system to start wiping this log. You will be prompted to restart your system or to delay wiping until the next restart.
WinRE Logs	Your system keeps a log of the Windows Recovery Environment (WinRE) that can repair common causes of unbootable operating systems.
WIP Logs (Windows 10+)	Your system keeps a log of the Windows Information Protection (WIP) that can protect against enterprise data leakage through apps and services like email, social media, and public clouds that are outside of the enterprise control.
WMI Logs	Windows Management Instrumentation (WMI) and WMI providers create several log files that assist in troubleshooting.
AAD Events Log (Windows 10+)	Your system keeps an event log of Azure Active Director (AAD) that provides common identity and access capabilities to all web services.
AAD User Device Registration Log (Windows 10+)	The Azure Active Directory (AAD) is a Microsoft cloud-based identity and access management service which helps a company's employees sign in and access both the external and internal resources of the company.
AppID Events Log	An event log of actions with AppIDs.
Application Experience Events Log	Application Experience Service creates an event log of software updates to programs to ensure they run on newly released Windows versions.
Application Server Events Log	An event log of Application Server, an integrated environment for deploying and running custom, sever-based business applications.
AppLocker Executable Events Log	An event log of AppLocker that allows or denies application execution.
AppLocker Script Events Log	An event log of AppLocker that allows or denies script execution.
AppModel Runtime Events Log	The AppModel Runtime Events Log stores the events of Universal Windows Platform applications.
App Readiness Diagnostics Log	The log of the App Readiness Diagnostics, the service that makes apps ready for use them the first time when the user signs in to PC or when adding a new app
APP Readiness Service Log	The log of the App Readiness Service that makes apps ready for use them the first time when the user signs in to PC or when adding a new app.
AppX Deployment Server Events Log	The AppX Deployment Server Events Log stores the events of AppX Deployment Server during updating Store applications.
AppX Deployment Service Events Log	The AppX Deployment Service Events Log stores the events of AppX Deployment Service during deploying Store applications.
AppX Packaging Events Log	Your system can create a log of events that occurred with Microsoft Store application packages
AppX Restricted Deployment Log	Your system can create a log of restricted operations events that occurred with Microsoft Store application packages
AppX Undocked DEH Events Log (Windows 10+)	The event log of the Deployment Extension Handler (DEH) allowing apps to access extensibility points in the system. An undocked DEH ships outside of an OS release.
Audio Devices Events Log	Your system can create a log of events that occurred in various audio devices in the system.
Authentication UI Events Log	Your system can create a log of events that occurred during user authentication via user interface (UI).
Audio Glitch Detection Log	The Audio Glitch Detection Log stores events of audio glitches made by Windows Audio Service.
Audio Playback Log	The Audio Playback Log stores a list of audio playbacks by the Windows Audio service.
Azure Setting Sync Events Log (Windows 10+)	The Azure Setting Sync Events Log stores information about this cloud service used for managing applications and services through Microsoft-managed data centers.
Backup and Restore Debug Log (Windows 10+)	The Backup and Restore Debug Log stores debug information that can be used to assist in troubleshooting.
BDP Tool Events Log	The log of the BitLocker Drive Preparation (BDP) Tool is used to prepare the computer for BitLocker Drive Encryption.
BitLocker Events Log	The event log of BitLocker, a data protection feature that encrypts system and data volumes.
BITS Events Log	The Background Intelligent Transfer Service (BITS) creates a log of background file transfers.
BranchCache Service Events Log	The BranchCache Service Events Log stores information about cached network content from peers on the local subnet.
BTIS Events Log	The Background Tasks Infrastructure Service (BTIS) controls the background tasks to run in the the system.
CHAP Events Log	The log of events of the Challenge Handshake Authentication Protocol (CHAP) used to authenticate the user in PPTP-based networks.
Client License Service Events Log	The Log of Client License service that provides infrastructure support for Microsoft Store.
Cloud Recovery Events Log (Windows 10+)	The Log of Cloud Recovery that enables you to reset your computer with files downloaded from Microsoft rather than the installation files stored on your local computers.
CloudStore Events Log (Windows 10+)	The Log of CloudStore component used by OpenDrive.
Code Integrity Events Log	The Log of Code Integrity, a Windows mechanism that authenticates the integrity and source of executable images (applications, DLL, drivers, etc.) by validating a digital certificate contained within the image resources.
Core Application Events Log	The System Core Application system component creates a log of Universal Windows Platform application events.
Data Integrity Recovery Events Log	An event log of recovering fault-tolerant volumes.
Data Integrity Scan Events Log	An event log of scanning fault-tolerant volumes for latent corruptions.
Date and Time Control Panel Events Log	An event log of the Date and Time Control Panel.
Default Programs Events Log (Windows 10+)	The event log of default program assignments for certain file types and protocols.
Device Install Service Events Log	The event log of the Device Install service that allows the computer to recognize hardware changes and adapt the system to them with little or no interactions with the user.
Device Setup Events Log	The Device Setup Manager (DSM) service used for detection, download and installation of device-related software creates a log of events during device setup.
Device Watchdog Events Log (Windows 10+)	The Watchdog service used to control device hangs creates a log of events.
DHCP Client Service Events Log	The DHCP Client service creates a log of events during obtaining and updating IP addresses and DNS records.
DHCPv6 Events Log	The event log of working on IPv6 networks.
Diagnostic Policy Service Events Log	The Diagnostic Policy Service that helps detecting, troubleshooting, and resolving problems, creates a log of events.
Disk Cleanup Diagnostic Log (Windows 10+)	The Disk Cleanup frees up space on computer's hard drive. It creates a log of its diagnostics.
DPAPI Events	Log of the DPAPI (Data Protection Application Programming Interface) component of the system data encryption.
DSM Service Events Log	The Device Setup Manager (DSM) service used for detection, download and installation of device-related software creates a log of events.
EAP Host Events Log	The Extensible Authentication Protocol (EAP) Host service provides an authentication in various networks and creates a log of events.
FTH Service Events Log	Log of the Fault Tolerance Heap that monitoring application crashes and makes necessary mitigation to prevent future crashes.
Group Policy Events Log	The Group Policy Client service used to apply settings configured through the Group Policy component creates a log of events.
Hardware Thermal Events Log	The event log of overheated hardware components and system actions.
Hyper-V Activity Log	The activity log of Hyper-V system that runs virtual machines.
Hyper-V Events Log	The event log of the Hyper-V system that runs virtual machines.
Hyper-V Virtual Switch Log	The event log of Hyper-V Virtual Switch that provides connection for virtual machines to external networks.
Kernel Boot Events Log	The log of kernel events during startup time.
Kernel Cache Events Log (Windows 11+)	The cached data for kernel-mode functions.
Kernel Dump Events Log (Windows 11+)	The event log for kernel dumps created when your system can't run correctly.
Kernel Event Tracing Log	The log of events occurred in the system or application at the kernel level.
Kernel I/O Events Log (Windows 10+)	The Kernel I/O Events Log stores events of communications between applications and interfaces provided by device drivers.
Kernel Live Dump Capture Log	The Kernel Live Dump Capture Log stores events of abnormal situation when the OS can continue operation.
Kernel Shim Engine Events Log	The Kernel Shim Engine that provides device and driver shims creates a log of its events. A device shim is a hardware-specific "workaround". A drive shim is a custom routine for chaning the behavior of the driver.
Known Folders Error Log	The log of errors occurred in "Known Folders" (Documents, Downloads, Pictures, Videos, etc.).
Language Pack Setup Error Log	Log of errors occurred during Language Pack setups.
Local Session Manager Events Log	The log of events created by Local Session Manager managing local user sessions.
LPAC Security Events Log (Windows 10+)	The log of attempts of unauthorized access to system resources by applications running in a less privileged app container (LPAC).
MDM Diagnostics Events Log	The log of events created during the diagnostics of Mobile Device Management (MDM) services.
MDM Security Events Log (Windows 10+)	The log of events created during the security of Mobile Device Management (MDM) services
Microsoft Account Events Log	The event log of Microsoft account.
MUI Events Log	The event log of Multilingual User Interface (MUI) that can help in troubleshooting.
NCrypt Key Management Log (Windows 11+)	The event log of NCrypt system component that is used for data encryption.
NCrypt Events Log	The event log of the NCrypt system component that provides data encryption.
NCD Auto-Setup Service Log	The service log of the NCD (Network Connected Device) Auto-Setup service that monitors and installs qualified devices that connect to qualified networks.
NCSI Events Log	The event log of Network Connection Status Indicator (NCSI), a service detecting Internet connectivity status.
Network Diagnostics Events Log	The event log of network diagnostics.
NLA Network Profiles Events Log	The event log of Network Location Awareness (NLA) service creating a Network Profile for every network it connects to.
NLA Service Events Log	The event log of Network Location Awareness (NLA) service that stores configuration information for the network and notifies programs when this information is modified.
Network Location Wizard Events Log	The event log of Network Location Wizard Events that identifies the type of network (private or public) that PC is connected to with a network adapters.
NTFS Disk Events Log	The NTFS disk event log.
NTFS Disk Monitoring Log	The event log of Activity Center that monitors the NTFS disk status.
Offline Files Events Log	The event log of offline local copies of files stored on the network.
Partition Diagnostics Events Log (Windows 10+)	The log of events that occurred during the diagnostics of data storage devices connected to this PC.
PCI Events Log (Windows 11+)	The event log of the PCI (Peripherial Computer Interconnect) bus for attached hardware devices.
PCW Diagnostics Events Log	The log of diagnostic events for the PCW (Performance Counters for Windows) that collects various system data (statistics for CPU, memory, and disk usage).
Performance Diagnostics Events Log	The event log of Performance Diagnostics that monitors system problems.
PnP Device Configuration Log	The log of device configuration for the Plug and Play (PnP) service enabling a computer to recognize and automatically adapt itself to hardware changes.
PnP Service Events Log	The event log of the Plug and Play (PnP) service enabling a computer to recognize and automatically adapt itself to hardware changes.
PowerShell Diagnostics Log	The diagnostics log of the PowerShell framework that manages task automation and configuration..
PowerShell Events Log	The event log of the PowerShell, a task automation and configuration management framework .
Print Service Events Log	The event log of printing of various documents .
Privacy Auditing Events Log (Windows 10+)	The event log of the changes in the access rights of applications o various system components.
PCA Events Log	The event log of the Program Compatibility Assistant that helps end users run desktop applications designed for earlier Windows versions.
Provisioning Diagnostics Events Log (Windows 10+)	The diagnostics event log of the Windows Provisioning that configures end-user devices
RDP Client Events Log	The event log of the RDP (Remote Desktop Protocol) clients.
RDP Core Events Log	The event log of the RDP (Remote Desktop Protocol) core.
ReadyBoost Events Log	The event log of ReadyBoost that makes NAND memory (CompactFlash, SD cards, and USB memory sticks, etc) be used as a write cache between RAM and a hard drive to increase throughout performance.
Remote Assistance Events Log	The event log of Windows Remote Assistance, a service that allows a trusted entity to remotely fix issues.
Remote Connection Manager Log	The event log of Remote Connection Manager, a service that is used to establish a connection with remote PCs.
Resource Exhaustion Detector Log	The event log of Windows Resource Exhaustion Detector that notifiers the user of system resource exhaustion (free disk space, free RAM, etc.).
Resource Exhaustion Resolver Log	The event log of the Resource Exhaustion Resolver that provides details about corrective actions you can take to recover system resources when the system has a critical amount of memory committed to applications.
Scheduled Diagnostics Events Log	The event log of scheduled diagnostics the system performs.
Scripted Diagnostics Events Log	The event log of scripted diagnostics performing periodical system maintenance by automatic fixing problems or reporting them through Action Center.
Scripted Diagnostics History	The history log of scripted diagnostics performing periodical system maintenance by automatic fixing problems or reporting them through Action Center.
Scripted Diagnostics Provider Log	The event log of scripted diagnostics provider performing periodical system maintenance by automatic fixing problems or reporting them through Action Center.
Security Mitigations Events Log (Windows 10+)	The event log of exploit mitigation techniques used to protect your system and system processes.
Setting Synchronization Debug Log	The debug log of Setting Synchronization service that synchronizes your system settings with your other devices.
Setting Synchronization Events Log	The event log of the Setting Synchronization service that synchronizes your system settings with your other devices.
Shell Core Action Center Log	The event log of the Action Core Action Center events that occur in the system's shell core.
Shell Core Events Log	The event log of Windows Shell Core.
Shell Start Events Log (Windows 10+)	The event log of Shell startup.
SMB Client Connectivity Log	The connectivity event log of the client-side SMB events. SMB (Server Message Block) is a protocol for shared access to files and printers in a network.
SMB Client Events Log	The event log of the client-side SMB events. SMB (Server Message Block) is a protocol for shared access to files and printers in a network.
SMB Client Security Events Log	The event log of the client-side SMB security events. SMB (Server Message Block) is a protocol for shared access to files and printers in a network.
SMB Server Connectivity Log	The event log of the server-side SMB connectivity events. SMB (Server Message Block) is a protocol for shared access to files and printers in a network.
SMB Server Events Log	The event log of the server-side SMB events. SMB (Server Message Block) is a protocol for shared access to files and printers in a network.
SMS Router Service Events Log (Windows 10+)	The event log of the SMS Router Service that routes messages basing on rules to appropriate clients.
SPP UX Events Log	The event log of the SPP UX component (Software Protection Platform User Experience), the system component that handles the user experience for Windows licensing.
State Repository Service Events Log (Windows 10+)	The event log of the State Repository Service that provides required infrastructure support for applications.
Storage Management Events Log (Windows 10	The event log of the Windows Storage Management component that is used to manage various storage configurations.
Storage PnP Events Log	The event log of the PnP operations on storage devices.
Storage Service Diagnostics Log (Windows 10+)	The event log of the Storage Service provides enabling services for storage settings and external storage expansion.
Storage Settings Diagnostics Log (Windows 10+)	The diagnostic log of the Storage Settings Diagnostics system.
Storage Spaces Agent Log	The event log of the Storage Spaces Agent system.
Storage Spaces Events Log (Windows 8 and later)	The event log of the Storage Space service.
Storage Volume Events Log (Windows 11+)	The event log of Storage Volumes.
Store Client Events Log	The event log of Windows Store Client application.
Store Licensing Events Log	The event log of Windows Store Licensing model that allows to run any purchased application any device from one account.
StorPort Dagnostics Events Log (Windows 10+)	The event log of the StorPort (storage port) driver diagnostics.
StorPort Events Log	The event log of the StorPort (storage port) driver.
Task Scheduler Maintenance Log	The maintenance log of Task Scheduler.
TimeZone Synchronization Task Log	The event log of TimeZone Synchronization service updating time zone informaiton.
TWinUI Events Log	The event log of TWinUI (Tablet Windows User Interface) launching UWP (Universal Windows Platform) applications.
UAC Events Log	The event log of UAC (User Account Control) that can assist in troubleshooting.
UAC File Virtualization Log	The event log of UAC (User Account Control) that visualizes files in system folders for security reasons.
User Profile Service Events Log	The event log of User Profile Service that loads and unloads user profiles.
UTC Service Events Log (Windows 10+)	The event log of Universal Telemetry Client (UTC) service that collects telemetry data in Windows 10.
VHDMP Events Log	The event log of VHDMP (Virtual Hard Disk MiniPort) service that simulates disk devices when, for example, you mount an ISO image.
Volume Snapshot Driver Events Log (Windows 10+)	The event log of Volume Snapshot Driver that ensures backup consistency.
WCM Service Events Log	The event log of Windows Connection Manager (WCM) service that makes automatic connect/disconnect decisions by looking at Ethernet Wi-Fi, and mobile broadband interfaces.
Web Authentication Events Log (Windows 10+)	The event log of Web Authentication Events, a solution for hardware-bound credentials that can replace less secure the login/password authentication method.
WER Diagnostics Events Log	The diagnostic event log of Windows Error Reporting (WER) service that notifies Microsoft about application faults, kernel faults, unresponsive applications, and other applications.
WER Kernel Events Log (Windows 11+)	The kernel live dump event log of Windows Error Reporting (WER) service that collects data to troubleshoot abnormal situations while Windows continues its operation.
WER Upload Events Log (Windows 10+)	The event log of Windows Error Reporting (WER) service that notifies Microsoft about application faults, kernel faults, unresponsive applications, and other applications.
WFP Events Log	The event logs of Windows Filtering Platform (WFP), that allows Windows software to process and filter network traffic.
WFP IKE Events Log	The event logs of the Internet Key Exchange service of the Windows Filtering Platform (WFP), that allows Windows to exchange secret keys safely.
WHEA Events Log	The event log of Windows Hardware Error Architecture (WHEA) that provides a hardware error handling mechanism.
Win32 Driver Events Log (Windows 10+)	The event log of Win32 Driver, the kernel-mode side of the Win32 Windows subsystem that is loaded when the boot process is complete and the system moves into the User mode.
Windows Biometric Service Events Log	The event log of Windows Biometric Service that captures, compares, manipulates, and stores biometric data without access to any biometric hardware.
Windows Container Isolation Service Log (Windows 10+)	Containers provide a lightweight, isolated environment that makes apps easier to develop, deploy, and manage.
Windows Container Bind Filter Log (Windows 10+)	The event log for the Windows Bind Filter service that binds filesystem namespaces to different locations and hides this remapping from the user
Windows Defender Events Log	The event log of Windows Defender Service that protects the users from malware and other potentially harmful software.
Windows Defender Monitoring Log	The monitoring log of Activity Center that monitors the state of Windows Defender.
Windows Firewall Diagnostics Log (Windows 10+)	The diagnostics log of Windows Firewall that protects the computer by preventing unauthorized access through the Internet of local network.
Windows Firewall Events Log	The event log of Windows Firewall that protects the computer by preventing unauthorized access through the Internet of local network.
Windows Hello Events Log	(Windows 10 only) The event log of Windows Hello, the service that allows Windows 10 devices to use your face, fingerprint, or companion device to sign in.
Windows Setup Events Log	The log of events occurred during Windows setup or updates.
Windows Time Service Events Log (Windows 10+)	(Windows 10 only) The event log of Windows Time Service Events Log, the service that allows maintains date and time synchronization on all network clients and servers.
Windows Update Events Log	The event log of Windows Update service that detects, downloads, and installs updates for Windows and other programs.
WinINet Events Log	The event log of WinINet client platform for interactive desktop applications.
Winlogon Events Log	The event log of Windows Logon component that performs some operations when a user signs in.
WinRM Service Events Log	The event log of Windows Remote Management (WinRM) service that performs the WS-management (Web services management) protocol used for remote software and hardware management.
WinSAT Events Log	The event lof of the Windows System Assessment Tool (WinSAT) that measures various performance characteristics and capabilities of the hardware.
WLAN AutoConfig Service Events Log	The event log of WLAN AutoConfig service that discovers, connects to, configures, and disconnects from, a wireless local area network (WLAN).
WMI Events Log	The event log of Windows Management Instrumentation (WMI) service that provides a common interface and object model to access management information about operating system, devices, applications, and services.
WNS Events Log	The event log of Windows Push Notification (WNS) service that provides sending push data ("toast" and "tile" updates) to Universal Windows Platform applications.
Work Folders Events Log	The events log of Work Folders that store files on a personal computer (bring-your-own device - BYOD).
Work Folders Management Log	The management log of Work Folders that store files on a personal computer (bring-your-own device - BYOD)
WPD MTP Events Log	The event log of the Media Transfer Protocol (MTP) used by Windows Portable Devices (WPD) to communicate with attached media and storage devices.

Storing Traces: More Information...

This part allows you to inspect and clean various traces (mostly insignificant) left by some system applications and services, some already removed from your system. Most of these traces are stored in the Registry.
Stored Application Compatibility Settings	Your system can keep various compatibility settings for already removed applications.
Stored System Environment Variables	Your system can keep the environment variables created by already removed applications.
Stored Browser Plugins Information	Your system can keep some information about web browser plugins already removed from your system.
Stored Locations of Shared Modules	Your system stores list of modules that applications share.
Stored Locations of System Type Libraries	Your system stores locations of type libraries that store information about COM objects from already removed applications.
Stored Network Information	Your system stores some information about networks your device was connected to.
Stored Scheduled Tasks	Your system stores some information about tasks scheduled by already removed applications.
Stored Services Information	Your system stores information about services of already removed applications.
Stored Legacy Services Information	Your system stores information about already removed legacy services.
Stored USB Storage Information	Your system stores information about already removed legacy services
Stored Wireless Networks Profiles	Your system can keep some information (like secret key) about wireless networks your computer ever has been connected to. You may select those profiles to remove their data.

Associativity Traces: More Information...

This part allows you to inspect and clean various traces connected with associativity of file types, protocols, etc., with already removed applications.
Stored AutoPlay Handlers Paths	Your system can keep autoplay information (what Windows is to do when detects a certain media files on a removable media device) for already removed applications.
Stored COM Class Identifiers	Your system can keep the Class Identifiers of COM objects in already removed applications.
Stored COM Interface Identifiers	Your system can keep the COM interface Identifiers contained in already removed applications.
Stored e-Mail Programs Information	You system can store some information about already removed e-mail applications.
Stored Event Logging Applications Information	Some applications can save info about various events to the Application log of your system. Also, your system can keep some information about those applications, even if they have already been removed.
Stored System File Types	Your system can keep the file name extensions associated with already removed applications.
Stored Firewall Rules	Your system can keep the built-in firewall rules for already removed applications.
Stored Info of Connection IA Apps	Your system stores locations of image acquisition applications - programs that start when an image-capturing device like a scanner, digital photo or movie camera.
Stored Info of Proxy IA Apps	Your system stores information of a proxy image acquisition application - a program that start when an image-capturing device like a scanner, digital photo or movie camera, if no other application is assigned to those actions.
Stored Info of Scan Button IA Apps	Your system can keep some information about Image Acquisition applications, programs to launch when you press the Scan button on a connected scanner.
Stored Media Players Information	Your system can keep some information about media players that have been removed from the system.
Stored MIME Types	Your system stores MIME types registered by already removed applications.
Stored News Readers Information	Your system stores some information about news readers already removed from the system.
Stored Perceived Types Applications	Your system stores names of already removed applications and perceived types associates with them.
Stored System Program Identifiers	Your system stores program identifiers from already removed applications.
Stored Recording Software Information	Your system stores information about audio, screen, and video recording software already removed from the system.
Stored Web Browsers Information	Your system stores information about web browsers already removed from your system.

Installer Traces: More Information...

This part allows you to inspect and clean various data left by installers of already removed applications. Most of these traces are stored in the Registry. Sometimes you may significantly clean the Registry by removing these traces.
Installer's Temporary Files and Folders	The list of temporary files and folders created during the installation and updates of programs and system components
Stored System Installation Information	Your system can store information about distribution kits of already removed applications.
Stored Installer Components Paths	Windows Installer stores paths used during the installation of some programs or services.
Stored Installer Folders	Windows Installer stores paths used during the installation of some programs or services.
Stored Installer Packages	You system can store Windows Installer package files (with patches) of already removed applications.
Stored Installer Registry Keys	Windows Installer stores the Registry key names used during the installation of some programs or services.
Stored Programs and Features Info	Your system stores information about already removed applications.
Stored Programs and Features Paths	Your system stores information about already removed legacy services.
Stored Programs and Features Paths	Your system stores information about already removed legacy services.
Stored Programs and Features Sources	Your system stores paths to folders from which applications or system components were installed.
Stored Store Install Information	Your system stores information some information about installation and updates of the UWP (Universal Windows Platform) programs and games already removed from your system.

Setup and Update Traces: More Information...

This part allows you to inspect and clean various data left by system setups and updates.
Microsoft Update Health Tools Log (Windows 10+)	The event log of Microsoft Update Health Tools that improves reliability of Windows Update Service.
Provisioning Temporary Folders (Windows 10	Folders to store configurations and settings to enroll devices and apply those configurations fast.
Setup Logs	Log files created when your system has installed its components. Double tap a file to view its content.
System Windows Update Logs	Your system stores log files created during installing updated (security and other critical updates that protect your computer).
WinSetupMon Old Logs (Windows 11+)	The WinSetupMon Old Logs filter driver monitors move or deletion of a file or a folder for data safety during feature updates.
Windows Update Medic Service Events Logs	Your system stores event logs created by Windows Update Medic Service that remediates and protects Windows Update components.
Windows Update Trace Logs	List of trace files created by the Windows Update service for error detection and diagnostics.
WSUS Data Store Traces	WSUS (Windows Software Update Services or Windows Server Update Services) create some temporary and log files that assist in troubleshooting.
WSUS Events Log	WSUS (Windows Software Update Services or Windows Server Update Services) creates a log file that assist in troubleshooting.

Program Data Traces: More Information...

This part allows you to inspect and clean various traces left by system services and installed application and which are common to all users of this computer.
Windows Defender Activity Log	Windows Defender can log some details of its activity.
Windows Defender Delayed Reports	Windows Defender can log some postponed reporting about detecting threats.
Windows Defender Detection Log	Windows Defender can log a brief information about detected viruses.
Windows Defender Network Inspection Service Log	The Network Inspection Service of Windows Defender can log its activity to assist in troubleshooting.
Windows Defender Scan Logs	Windows Defender creates various logs during disk scan to assist in troubleshooting.
Windows Defender Scan Results	Windows Defender stores some details about each disk scan.
Windows Defender Quick Scan Results	Windows Defender stores some details about each quick disk scan.
Windows Defender WPP Files	Windows Defender can use the Windows software trace pre-processor to trace its operations for troubleshooting.
Common Windows Search Databases	Your system stores a cache of files with the detailed information about files used by Windows to perform very fast search among most frequently used files on the computer. Attention! When deleting and wiping the cache, you do not remove the files, only their cached copies.
Windows Search Indexing Files	Your system stores detailed information about files which Windows uses to perform very fast search for most frequently used files on the computer .
Windows Search Stream Log Files	Your system stores detailed information about files which Windows uses to perform very fast search for most frequently used files on the computer . Double tap a file to view its content.
Indexing Traces	Your system stores detailed information about files which Windows uses to perform very fast search for most frequently used files on the computer . Double tap a file to view its content.
CSP Diagnostic Event Logs (Windows 10 and later)	Your system stores the event log of Configuration Service Provider (CSP), an interface to read, set, modify, or delete configuration settings of the devices.
Digital Rights Management Traces	Traces of the Digital Rights Management protecting proprietary data from illegal usage. Double-tap a log to view its content.
Event Viewer History	History and some settings of the viewed Windows event logs.
Map Data	Data of the maps used by navigation applications.
Power Efficiency Diagnostics Reports	Energy reports that help users to improve common energy efficiency and solve battery life problems
Reliability Monitoring Traces	The activity traces for Reliability Monitor, and advanced tool that estimates hardware and software problems and other computer changes.
RUXIM Events Log	The events log of RUXIM (Reusable UX (User eXperience) Interaction Manager), a component used by Windows Update that all required updates are properly scheduled and delivered.
Software Quality Monitoring Traces	The activity traces for the Microsoft's Software Quality Monitoring program.
Update Orchestrator Events Logs	Update Orchestrator Events Logs created by the Windows Update service to assist in troubleshooting.
WFP Diagnostics Logs	WFP Diagnostics log created by the Windows Filtering Platform that allows software to process and filter network traffic. It is used by firewalls, intrusion detection systems, antivirus programs, network monitoring tools, and parental control.
Windows Security Service Logs	Logs of Windows Security Service that handles unified device protection and health information.
App Repository	App Repository is used when downloading and installing applications from the Store. Red items can contain important information. They are not selected by default and can be removed only manually on this panel.
Stored Start Menu Items	A list of links to removed applications stored in the All Programs section of Start Menu.
Stored Startup Applications Info	Stored information about removed applications launched during logon. Attention! When cleaning this list, you do not remove the files, only their links .
Windows Health and Optimized Experiences Service Performance Tracking Summaries (Windows 11)	The Windows Health and Optimized Experience (WHOE) service monitors the device for the better user experience and can generate Performance Tracking Summaries

Services Accounts Traces: More Information...

This part allows you to inspect and clean various traces left by 3 predefined system accounts : Local System, Local Service, and Network Service.
System Registry Traces	Registry records of items used by the system ()recent system applications, etc.)
Local Service's Temporary Files	Temporary files that the "Local Service" account creates.
Local System's Temporary Files	Temporary files that the "Local System's" account creates.
Network Service's Temporary Files	Temporary files that the "Network Service" account creates.
LSyss Direct3D Shader Cache	The Direct3D Shader Caching Library of the System creates a cache of its files.
Local Service's Cached Certification Files	A cache of documents used to authenticate web site certificates. Those include certificates, Certification Revocation Lists (CRL). Cleaning this cache removes cached copies, not the original files.
Local System's Cached Certification Files	A cache of documents used to authenticate web site certificates. Those include certificates, Certification Revocation Lists (CRL). Cleaning this cache removes cached copies, not the original files.
Network Service's Cached Certification Files	A cache of documents used to authenticate web site certificates. Those include certificates, Certification Revocation Lists (CRL). Cleaning this cache removes cached copies, not the original files.
Local System Cached File Extensions	Cached filename extensions of file types registered by applications, some of which may be already deleted.
Local System Cached Shell Extensions	Cached shell extensions (added shortcut menu items added by installed applications) . Attention! When cleaning the cache, the extensions aren't removed, only their cached copies.
Cached WPF Fonts	Your system stores a cache of Windows Presentation Foundation fonts installed in the system. Attention! When deleting and wiping this cache, you do not remove the fonts, only their cached copies.
Local System's Common Language Runtime Logs	Various logs created by the Common Language Runtime (CLR) component of the .Net Framework. You my view a log file by double-taping it.
Local System's Crash Dumps	Memory dumps of crashed applications.
Network Service's Crash Dumps	Crush dumps of a network service.
Delivery Optimization Service Cache Files	A file cache of the Delivery Optimization Service that performs content delivery optimization tasks.
Network Service's Diagnostics Logs	Logs created by various services and programs running under the "Network Service" account. You may view a log file by double-taping it.
Local System's Direct3D Shader Cache	A file cache of Direct3D Shader.
Peer Networking Traces	Various traces created during peer-to-peer network connections with other computers.
qWAVE Cached Data	Cached data of the Quality Windows Audio/Video Experience (qWAVE) service that provides features focused on streaming multimedia and real-time content over variable bandwidth networks.
Local System Stored Application Descriptions	A list of application descriptions and their pats for applications that have started in the system at least once.
Local System Stored AutoPlay Handlers Paths	A list of applications assigned to perform some acotions automatically upon detected media files on removable storage. Some information on them may remain even when they have been removed from the system.
Local System Stored AutoPlay Handling Events	Events assigned by autoplay applications, which can be already removed.
Local System Stored Internet Explorer Shortcut Menu Extensions	A list of Internet Explorer shortcut menu commands installed by applications already removed from the system.
Store Install Service Database	Some data about installed UWP (Universal Windows Platform) programs and games.
UWP' PRI Files Scan Cache	When scanning PRI (Package Resource Indexing) files of the UWP (Universal Windows Platform) applications, the MRT (Malware Removal Tool) can cache some information about these files.
LSys's Web Content	Databases of the web content used by system components.
Local Service's Windows Search Databases	Databases created by Windows Search service to perform very fast searches
Local System's Windows Search Databases	Databases created by Windows Search service to perform very fast searches.

Aggregate Traces: More Information...

This part allows you to inspect and clean various multiple-part traces. Any part of these traces can be removed separately.
System Registry Traces	Registry records of items used by system (recent system applications, etc.). Empty system registry trace lists are dimmed.
Auxiliary Disk Traces	A tree of temporary files and logs created by various system services and programs.
Cryptographic Services Traces	Catalog Database Service, Key Service, and Protected Root Service create temporary and log files for troubleshooting.
Security Management Traces	Security Management Tools create temporary, database, and log files for troubleshooting.
SRU Monitoring Traces	SRU (System Resource Usage) Monitoring Service tracks the use of hardware (CPU, memory, disk, and network) and software (file handlers and modules) resources.
WinSAT Traces	Logs and Reports of Windows System Assessment Tool (WinSAT) that measures various performance characteristics and capabilities of hardware it's running on and reports them as a Windows Experience Index (WEI) score .

Miscellaneous Traces: More Information...

This part allows you to inspect and clean various miscellaneous traces.
System Temporary Files and Folders	List of temporary files and folders created by your system.
Cached Fonts	Your system stores a cache of fonts installed in the system. Attention! When deleting and wiping this cache, you do not remove the fonts, only their cached copies.
Code Integrity Aggregation (Windows 10+)	Log of the Code Integrity Aggregation, a system that validates the integrity of drivers and system files every times they are loaded into the system's memory.
Kernel Live Dump Files	Kernel Live Dump gathers data to troubleshoot an abnormal situation but allows Windows to continue operation.
System Problem Reports	List of programs and services that caused problems to Windows.
RADAR Memory Leaks History	List of programs that may have memory leaks created by the Memory Leak Diagnoser component of Windows Resource Exhaustion Detection and Resolution (RADAR).
Registry Transactions History	History of Registry transactions performed by your system and applications.
Cached Applications Compatibility Info	Your system can create a cache of some information about compatibility of applications that run on your system, including those already removed from the system.
Swap Files	Areas of hard disks that Windows uses as it were physical memory. Data from any running program or system process may be written to these files. To start wiping swap files, you must restart your system. You will be prompted either to restart your system to start wiping the swap files, or to delay wiping until the next restart.
Defragmentation List	Your system stores this list of files and folders in order to enhance the defragmentation process. Attention! When deleting and wiping the list, you do not remove the files, only the list.
Prefetch Traces	Your system creates these files in order to minimize system and application startup and stores them in a cache. If you delete a prefetch file for an application, the system will create it again next time the system starts the application.
Background Activity Moderator Data (Windows 10+)	Your system keeps track of Background Activity Moderator, a Windows service that controls activity of background applications.

Data Recovery Articles

PC Privacy Articles

Home > Touch Interface: Main Panel > Wiping and Cleaning > Cleaning a Computer > Cleaning System's Own Traces

Cleaning System's Own Traces