GamerOS Windows 10 & 11 DIY Preset

C

Clanger

Moderator
Staff member
Clanger said:
delete these 2 keys. check for syswow and controlset002 entries.
Code: 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WMI\Autologger
Click to expand...

Code: 
Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WMI\Autologger]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\WMI\Autologger] 
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger] 
 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Winevt]

[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\eventlog]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\eventlog]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog]

[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Wecsvc]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Wecsvc]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Wecsvc]

[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\NetDiagFx]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\NetDiagFx]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetDiagFx]

[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\WDI]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WDI]

heres the original 2 i posted and related entries and some news ones(edited down) from the original Win7-Remove-EventLog-Channels.reg by AeonX. windows 7 hasnt had conniptions yet.

edit - added Wecsvc.
 
Last edited:
D

Deleted member 8142

Guest
Clanger said:
what about it? havnt heard of that before so point me in the right direction, what where why what for and a registry key and i'll give it a try.
Click to expand...
Hahaha my dialogue to me. ok no issue having fun.
Pl look at WMI reg key & you will find another key with name GlobalAutologger i too remove it always.
One more thing this time you suggested to remove eventlog service which is dependency of Network icon on taskbar . some people mostly use not to auto connect there wifi ap to machine then what will they do pl think that scenario. that time they hate your suggestion & i dont want you be hated online via anybody .you can disable it at ControlSet001 & ofcourse w7 ControlSet002 too but if both are disabled then currentcontrol set which is always dependent upon either 001 or sometimes 002 will automatic set its reg key name value data as found in 001 or 002.

stay blessed n be happy always.
 
C

Clanger

Moderator
Staff member
i'll have a look later today. i know controlset001 is the master. my network icon is behaving itself, sofa sogood.
Windows Event Collector is still there so i'll take that out and see what goes.

AeonX's file was a lot of work, event viewer channels has got hundreds of entries so if you can get away with deleting the parent key instead you save yourself a lot of work.
Necrosaro said:
Holy mother of windows gods, you just saved me a ton of work with just those two keys. Thank you so much
Click to expand...

i report my findings is all, im not forcing people to use "as is" and i encourage users to test and cherry pick, ive said that till im blue in the face. Necrosaro seemed happy enough with the result.
i can get away with a lot more than everyone else because my needs are different, offline airgapped workstation. offline media player, DAW anyone?

edit - removed Windows Event Collector service, network icon is stil behaving itself.
if it can be disabled can it be removed? if it cant be removed can it be disabled?
 
Last edited:
D

Deleted member 8142

Guest
Clanger said:
i'll have a look later today. i know controlset001 is the master. my network icon is behaving itself, sofa sogood.
Windows Event Collector is still there so i'll take that out and see what goes.

AeonX's file was a lot of work, event viewer channels has got hundreds of entries so if you can get away with deleting the parent key instead you save yourself a lot of work.


i report my findings is all, im not forcing people to use "as is" and i encourage users to test and cherry pick, ive said that till im blue in the face. Necrosaro seemed happy enough with the result.
i can get away with a lot more than everyone else because my needs are different, offline airgapped workstation. offline media player, DAW anyone?

edit - removed Windows Event Collector service, network icon is stil behaving itself.
if it can be disabled can it be removed? if it cant be removed can it be disabled?
Click to expand...

yes i agree everybody needs are different.
yes removing the winevt & wmi autologger plus globalautologger key saved a lot of work cuz there are lots of entries inside it. thanks goes to you for it.
removing or disabling eventlog service from w10 1904x.xxxx in my scenario removed network icon from taskbar thatswhy i asked you to look into it.
if network icon is not removed from taskbar in your case then i am confused hehehehe :p . i use manual connect to wifi ap always not ethernet..
thank you.
 
D

Deleted member 8142

Guest
Clanger said:
im wired lan only. only wireless i will use is keyboard and rodent.
Click to expand...
for w7 i am not sure cuz am on 1904x build of w10 .hmm pl try to use wifi ap to connect to internet & cross check if you can use it direct from taskbar itself ;)
 
Necrosaro

Necrosaro

Active Member
Clanger said:
i'll have a look later today. i know controlset001 is the master. my network icon is behaving itself, sofa sogood.
Windows Event Collector is still there so i'll take that out and see what goes.

AeonX's file was a lot of work, event viewer channels has got hundreds of entries so if you can get away with deleting the parent key instead you save yourself a lot of work.


i report my findings is all, im not forcing people to use "as is" and i encourage users to test and cherry pick, ive said that till im blue in the face. Necrosaro seemed happy enough with the result.
i can get away with a lot more than everyone else because my needs are different, offline airgapped workstation. offline media player, DAW anyone?

edit - removed Windows Event Collector service, network icon is stil behaving itself.
if it can be disabled can it be removed? if it cant be removed can it be disabled?
Click to expand...
So everything is good now with the removal of event viewer? With the removal of the keys I don't have any small hard-drive thrashing files being processed. Right now it runs around 1.6megs of ram with those keys removed.

Asking for my rodent haha
 
C

Clanger

Moderator
Staff member
using the revised version with Wecsvc windows 7 is still behaving itself and the network icon is still working perfectly. it should be enough just to disable those 2 services, or just remove the entries but keep the services running.
got some investigating to do tonight with ccleaner and winapps 2 and 3 combined, see what i find and what else i can find.

i might have to update ultraform's topic.
 
Last edited:
M

MacVap

New Member
Deleting these keys in bulk is very harmful IMO. You lose the possibility of troubleshooting if something goes wrong. And with lited installs especially, many things can go wrong (and you can find hints in event logs).

Instead, I set all dword values EnableLevel=3 in WMI\Autologger\*\* subkeys (that's to show only errors+warnings, which quiets them down considerably), and of course start=0 to those loggers that are not needed (nearly all of them excluding event logs).

Loosely related, I set all ErrorControl dwords in services to 0 or 1 (silent or warning during the start of service if something goes wrong). In practice, I edit all values higher than 1 to 1, and leave 0s and 1s alone.

I delete (edit) some unwanted dependencies of a service to services that are non-existent (lited) or disabled/deleted by myself (always delete a service with sc delete - that's how I learnt in the old days :)). But with care, some services really can't start without their dependencies.

For network icon I use this - the windows' built-in icon is useless after Vista because it doesn't show the real traffic. And of course, because of the privacy concerns with probing.
 
Last edited:
G

garlin

Moderator
Staff member
AutoLogger records boot-time events, like (non-disk) device driver loading. Disabling it prolly doesn't improve performance after boot.
 
You must log in or register to reply here.
Top