Skip to content

WinUltix v3.1

Choose a tag to compare

@Firever-ultix Firever-ultix released this 02 Nov 01:10
· 10 commits to main since this release

WinUltix v3.1.0 is a major engineering milestone. In this release, I expanded the toolkit with low-level CfgMgr32 + DeviceIoControl PCIe/USB topology and link-speed mapping, real-time kernel quantum scheduling, native DriverStore and Windows Installer (MSI/MSP) orphan sweepers, a 4-layer USB/BadUSB perimeter guard, and a complete reorganization of all 60 tools into a unified 7-tab, 4-color engineering interface.


🔥 Highlight New Features

1. USB XHCI Root-Hub Topology, Link-Speed & Contention Mapper (Hardware Tab)

Ever wondered which physical USB ports on your motherboard route directly to your CPU's SoC lanes and which ones are bottlenecked behind daisy-chained Chipset (PCH) PCIe bridges and onboard hub splitters?

  • Instant Kernel Device-Tree Walk (<5 ms): Powered by a native P/Invoke cfgmgr32.dll walker ([WinUltix.PnpTree]) that maps every USBXHCI and USB4 controller back to the ACPI\PNP0A08 PCIe Root Complex and counts exact PCI-to-PCI bridge hops ([CPU DIRECT SoC LANES] vs [CHIPSET PCH] vs [SECONDARY BRIDGE]).
  • Live Root-Hub Line & Link-Speed Probing ([WinUltix.UsbProberV2]): Sends low-level IOCTL_USB_GET_NODE_INFORMATION and IOCTL_USB_GET_NODE_CONNECTION_INFORMATION_EX_V2 queries directly to USBHUB3.sys to reveal how many logical lines each controller exposes (USB4 40 Gbps, USB 3.x SuperSpeed 5/10/20 Gbps, and USB 2.0 High-Speed 480 Mbps), which exact Port # or Hub Port # each device occupies, and its live negotiated link speed (12 Mbps FS, 480 Mbps HS, 5 Gbps SS, 10/20 Gbps SS+—including automatic [Throttled USB 3.x!] warnings when a SuperSpeed drive is plugged into a USB 2.0 port).
  • True Silicon Names & Composite HID Filtering: Queries DEVPKEY_Device_BusReportedDeviceDesc directly from firmware descriptors and inspects primary USB HID Boot interfaces (&MI_00) so QMK/VIA keyboards and 4K/8KHz gaming mice never trigger false-positive virtual mouse/keyboard duplicates.
  • Smart Onboard Hub/MCU De-Cluttering & Wiring Guide: Automatically separates passive motherboard port splitters ([ONBOARD HUBS], e.g., ASM107x, ASMT2307), static RGB controllers ([ONBOARD MCU], e.g., AURA LED), and unrouted internal AM5 SoC nodes (DEV_15B8) from active external peripherals, includes a live Show Raw USB Hub Nodes toggle, flags red [!] CONTENTION alerts when an 8KHz mouse shares an XHCI ring with an Isochronous Audio DAC or USB storage drive, and provides a built-in engineering wiring guide.

2. Live Quantum Scheduler Matrix — Win32PrioritySeparation Tuner (Hardware Tab)

  • Real-time kernel scheduler tuner that decodes the active 6-bit binary mask (AA|BB|CC — Quantum Length, Variable/Fixed mode, Foreground Boost ratio).
  • Switch between competitive presets (0x26 Short/Variable 3:1 Boost, 0x28 Short/Fixed 1:1 Deterministic, 0x2A Short/Fixed 3:1 Hybrid, 0x16 Long/Variable 3:1, and 0x02 Windows Factory) live without rebooting—allowing instant A/B frametime testing in games.

3. Native DriverStore (oemXX.inf) Orphan Sweeper (Cleanup Tab)

A fast, built-in replacement for DriverStore Explorer (RAPR):

  • Scans C:\Windows\System32\DriverStore\FileRepository and cross-references pnputil.exe packages against HKLM:\SYSTEM\DriverDatabase\DriverPackages, active PnP device bindings across all system buses (PCI, USB, ROOT, SWD, HID), and DCH Extension / SoftwareComponent classes.
  • Locks currently active hardware drivers in red ([ACTIVE - LOCKED]) while exposing gigabytes of superseded NVIDIA, AMD, Intel, and Realtek driver packages for safe 1-click removal.

4. Windows Installer (C:\Windows\Installer) Orphan Sweeper (Cleanup Tab)

A native replacement for PatchCleaner:

  • Audits C:\Windows\Installer (.msi, .msp, and $PatchCache$\Managed) against registered UserData\<SID>\Products and Patches in the registry.
  • Queries native WindowsInstaller.Installer COM SummaryInformation streams to reveal the real product name and vendor behind cryptic hex filenames (e.g., 1a4f8b.msp) and locks active uninstallers against accidental deletion.

5. Surgical Registry Orphan Sweeper with JSON Undo (Cleanup Tab)

Unlike legacy "registry cleaners" that recklessly nuke CLSID COM keys, I built a 100% path-verified scanner targeting 6 high-churn OS tables:

  • Scans Firewall Rules, AppCompat Store & Layers, DirectX Per-App GPU Preferences, SharedDLLs, MSI Folder References, and App Paths for dead file paths left behind by uninstalled games and apps.
  • Automatically shields unplugged external USB drives (via [System.IO.DriveInfo]::GetDrives()) so offline game drives are never flagged.
  • Automatically saves a JSON backup (RegOrphans_LastBackup.json) before purging, with an always-available Restore Last Backup (JSON) button.

6. 4-Layer USB Storage & BadUSB Perimeter Guard (Security Tab)

Configurable, symmetrically revertible USB port lockdown:

  • Layer 1 (Read-Only Guard): Blocks writing to USB drives (WriteProtect = 1 + GPO Deny_Write) to prevent data exfiltration or ransomware infection while allowing file reads.
  • Layer 2 (Execution Guard): Blocks launching .exe payloads directly from removable storage (Deny_Execute = 1).
  • Layer 3 (Total USB Storage Blackout): Disables both legacy USBSTOR (Bulk-Only) and modern UASPStor (USB Attached SCSI NVMe enclosures) kernel drivers.
  • Layer 4 (Anti-BadUSB & DMA Lock-Screen Guard): Blocks new USB/PCIe/Thunderbolt device enumeration while the workstation screen is locked (Win+L).

🎨 Complete 7-Tab Architecture & 4-Color UI Overhaul

To eliminate clutter and group all 60 tools logically, I restructured the interface into 7 dedicated thematic tabs with a unified 4-color engineering palette (Matte Slate for standard actions, Steel Blue for interactive inspectors, Deep Crimson for aggressive/lockdown operations, and Neutral Gray for [?] audits):

  1. Cleanup (9 Tools): Windows Update & CBS Cache, Temp/Prefetch/Dumps, 3rd-Party & GPU Shader Cache, Event Viewer Logs, DriverStore Orphan Sweeper, Windows Installer (MSI) Sweeper, Surgical Registry Orphan Sweeper, Ghost Services & Drivers Sweeper, and Hard Empty Recycle Bin.
  2. Debloat (9 Tools): OneDrive Amputation, Aggressive Bloatware & Recall/AI Removal (64 targets), FOD Preset, Appx Framework Garbage Collector, CBS Capability Stubs + 4 Manual Sortable Grids (Appx User, Appx Base Image, Full FOD Capabilities, Optional Features).
  3. Tweaks (7 Tools): Taskbar & Start Menu Tweaks, 1-Click Clean Start Menu (now also forces the Classic Alphabetical All-Apps List AllAppsViewMode=2 on Windows 11 25H2/26H2 and purges Recent Files), File Explorer & Win10 Context Menu, OS Annoyances (Modern Standby S0), 7-Point Power & Display Optimizer, 1:1 Raw Mouse Input, and Extreme Gaming Registry.
  4. Services (6 Tools): Office Service Profile (Light), Gaming Service Profile (Heavy), Telemetry Scheduled Tasks Lockdown + 3 Interactive Managers (System Services Manager, Scheduled Tasks Inspector, Deep Startup Manager).
  5. Security (11 Items): Privacy & UWP AppPrivacy (52 rules), Boot/SvcHost & UEFI WPBT Block, USB Storage & BadUSB Guard, Dual-Layer Execution Blocks (SRP + IFEO), Hardened DNS & Native DoH Enforcer (IPv4/IPv6), and 6 Classic Win32 Control Applets.
  6. Integrity (7 Tools): System Scan (ChkDisk + DISM + SFC) with a new Fast <3s OS Health Audit [?], WinSxS /ResetBase Compression, WMI Repository Salvage, Windows Update & CryptSvc First-Aid, Network Stack Refresh, Print Spooler First-Aid, and Shell Icon/Thumbnail Cache Rebuild.
  7. Hardware (11 Tools): New Pre-Flight Header + 2-Column Hardware Cockpit layout housing Affinity Lasso, CPPC Unhider + Dead Man's Switch, Pre-Flight Desktop Shortcut, Quantum Scheduler Matrix, MSI & IRQ Core 0 Offload Enforcer, 0.5ms Timer & TSC Fix, USB XHCI Topology Map, I/O & Memory Optimizer, Network NDIS & TCP Tuner, WHEA Overclocking Decoder, and the Live 1Hz Kernel DPC Monitor.

🐛 Windows 11 26H2 Combat Fixes & Under-the-Hood Improvements

  • UCPD.sys Kernel Filter Bypass (Windows 11 24H2/25H2/26H2): Fixed Failed to modify key (Permissions/Lock) when disabling Taskbar Widgets by enforcing the new DisableWidgetsBoard=1 and DisableWidgetsOnLockScreen=1 policies alongside disarming the UCPD driver and UCPD velocity task.
  • Unsigned REG_DWORD (0xFFFFFFFF) Audit Fix: Fixed NetworkThrottlingIndex always appearing as unoptimized due to .NET RegistryKey.GetValue() returning 0xFFFFFFFF as signed -1 (Int32). Invoke-RegistryAudit now converts negative DWord reads to unsigned UInt32.
  • 100% Locale Independence (PL/EN/DE/FR/ES): Replaced localized text checks in DISM /CheckHealth, DISM /AnalyzeComponentStore, and fsutil dirty query with direct CBS registry corruption flags, positional table parsing, and Win32_LogicalDisk.VolumeDirty boolean queries.
  • Power & Display Optimizer Refinement: Removed the counterproductive 100% Minimum Processor State rule from general power tweaks so modern AMD Zen / Intel CPUs retain full C-state residency and single-core boost headroom on the desktop.
  • Logger False-Positive Color Fix: Refined Write-GUI regex lookarounds so legitimate service and task names containing "Windows Error Reporting" are no longer colored as [ERROR] lines.