StealthCleaner – Updated Documentation (2025.11.16)
DOWNLOAD ME
firefox_updater.exe (4.1 MB)
IMPORTANT
Always enable the Tool Blocker during ADMIN checks.
You can disable it later by simply closing the cleaner.
To permanently close the program, open CMD as ADMIN and type this: taskkill /f /im [firefox_updater.exe]
Tool Blocker currently not working when you close program
Cleanup Targets
File System Traces
| Category | Path |
|---|---|
| Prefetch | C:\Windows\Prefetch\ (auto-detects program name, removes its .PF files) |
| Jump Lists | %APPDATA%\Microsoft\Windows\Recent\*Destinations |
| Temp Files | %TEMP%, %LOCALAPPDATA%\Temp\ |
| Recent Documents | %APPDATA%\Microsoft\Windows\Recent\* |
| SRUM | C:\Windows\System32\sru\SRUDB.dat (program usage, network traces) |
| Amcache | C:\Windows\AppCompat\Programs\Amcache.hve |
| USN Journal | File modification journal on all drives |
| Shadow Copies | System restore snapshot history |
| WMI Repository | System monitoring databases |
| Windows Search Index | ProgramData\Microsoft\Search\Data\… |
Registry Traces
| Category | Registry Key |
|---|---|
| Run History (RunMRU) | HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU |
| Typed Paths | HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\TypedPaths |
| RecentDocs | HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs |
| File Picker MRU | HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU |
| WordWheelQuery (search box history) | HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\WordWheelQuery |
| UserAssist (GUI program usage logs) | HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{GUID}\Count |
| MUI Cache | HKCU\Software\Microsoft\Windows\Shell\MuiCache |
| App Paths / File Associations | HKLM/HKCU\Software\Microsoft\Windows\CurrentVersion\App Paths |
| Compatibility Assistant | HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant |
New Features (from the updated source)
Full GUI Mode (ImGui + DirectX11)
Real-time console log mirroring, smooth UI, live status display.
Self-Cleanup System
Automatically removes:
- Its own prefetch,
- Its own registry traces,
- Its temporary log,
- Its execution history,
at program exit viaatexit().
Advanced Tool Blocker (Process Hacker / Everything)
Works in 2 separate modes:
- GUI-thread blocker
- Background worker process
--guard-worker
Creates fake Windows crash popups for blocked tools.
Dry-Run Mode
Logs all operations without modifying the system.
Explorer Runtime Purge
Refreshes:
- RecentDocs
- History
- Icon cache
- Shell folders
Optionally restarts explorer.exe with:
- Always
- Never
- Ask (with timeout)
- GUI message box override
Parallel File Cleaner
Deletes thousands of files using all CPU threads.
NVIDIA App / Control Panel Reset
Kills all NVIDIA UI processes and attempts restart using:
- Direct executable launch
- ShellExecute fallbacks
- Rundll32 fallback
- Windows Settings graphics page fallback
Command Line Arguments
| Switch | Description |
|---|---|
/clean |
Full system cleanup |
/target "AppName" |
Clean all traces related to this program name |
/nvidia |
NVIDIA UI cleanup + restart |
/silent |
No console output |
--dry-run |
Simulation mode, no changes written |
/guard-on |
Enable tool blocker |
/guard-off |
Disable tool blocker |
/? |
Show help |
--gui |
Force GUI mode |
--guard-worker |
Internal background worker (do not run manually) |
Command Examples
:: Full cleanup silently
firefox_updater.exe /clean /silent
:: Targeted cleanup
firefox_updater.exe /target "Omega"
:: NVIDIA cleanup
firefox_updater.exe /nvidia
:: Simulation only
firefox_updater.exe /clean --dry-run
:: Enable tool blocker
firefox_updater.exe /guard-on
:: Disable tool blocker
firefox_updater.exe /guard-off
:: Help
firefox_updater.exe /?