Repository navigation
WinUltix v3.1
WinUltix v3.1.0 is a major engineering milestone. In this release, I expanded the toolkit with low-level CfgMgr32 + DeviceIoControl PCIe/USB topology and link-speed mapping, real-time kernel quantum scheduling, native DriverStore and Windows Installer (MSI/MSP) orphan sweepers, a 4-layer USB/BadUSB perimeter guard, and a complete reorganization of all 60 tools into a unified 7-tab, 4-color engineering interface.
🔥 Highlight New Features
1. USB XHCI Root-Hub Topology, Link-Speed & Contention Mapper (Hardware Tab)
Ever wondered which physical USB ports on your motherboard route directly to your CPU's SoC lanes and which ones are bottlenecked behind daisy-chained Chipset (PCH) PCIe bridges and onboard hub splitters?
- Instant Kernel Device-Tree Walk (
<5 ms): Powered by a native P/Invokecfgmgr32.dllwalker ([WinUltix.PnpTree]) that maps everyUSBXHCIandUSB4controller back to theACPI\PNP0A08PCIe Root Complex and counts exact PCI-to-PCI bridge hops ([CPU DIRECT SoC LANES]vs[CHIPSET PCH]vs[SECONDARY BRIDGE]). - Live Root-Hub Line & Link-Speed Probing (
[WinUltix.UsbProberV2]): Sends low-levelIOCTL_USB_GET_NODE_INFORMATIONandIOCTL_USB_GET_NODE_CONNECTION_INFORMATION_EX_V2queries directly toUSBHUB3.systo reveal how many logical lines each controller exposes (USB4 40 Gbps,USB 3.x SuperSpeed 5/10/20 Gbps, andUSB 2.0 High-Speed 480 Mbps), which exactPort #orHub Port #each device occupies, and its live negotiated link speed (12 Mbps FS,480 Mbps HS,5 Gbps SS,10/20 Gbps SS+—including automatic[Throttled USB 3.x!]warnings when a SuperSpeed drive is plugged into a USB 2.0 port). - True Silicon Names & Composite HID Filtering: Queries
DEVPKEY_Device_BusReportedDeviceDescdirectly from firmware descriptors and inspects primary USB HID Boot interfaces (&MI_00) so QMK/VIA keyboards and 4K/8KHz gaming mice never trigger false-positive virtual mouse/keyboard duplicates. - Smart Onboard Hub/MCU De-Cluttering & Wiring Guide: Automatically separates passive motherboard port splitters (
[ONBOARD HUBS], e.g.,ASM107x,ASMT2307), static RGB controllers ([ONBOARD MCU], e.g.,AURA LED), and unrouted internal AM5 SoC nodes (DEV_15B8) from active external peripherals, includes a liveShow Raw USB Hub Nodestoggle, flags red[!] CONTENTIONalerts when an 8KHz mouse shares an XHCI ring with an Isochronous Audio DAC or USB storage drive, and provides a built-in engineering wiring guide.
2. Live Quantum Scheduler Matrix — Win32PrioritySeparation Tuner (Hardware Tab)
- Real-time kernel scheduler tuner that decodes the active 6-bit binary mask (
AA|BB|CC— Quantum Length, Variable/Fixed mode, Foreground Boost ratio). - Switch between competitive presets (
0x26Short/Variable 3:1 Boost,0x28Short/Fixed 1:1 Deterministic,0x2AShort/Fixed 3:1 Hybrid,0x16Long/Variable 3:1, and0x02Windows Factory) live without rebooting—allowing instant A/B frametime testing in games.
3. Native DriverStore (oemXX.inf) Orphan Sweeper (Cleanup Tab)
A fast, built-in replacement for DriverStore Explorer (RAPR):
- Scans
C:\Windows\System32\DriverStore\FileRepositoryand cross-referencespnputil.exepackages againstHKLM:\SYSTEM\DriverDatabase\DriverPackages, active PnP device bindings across all system buses (PCI,USB,ROOT,SWD,HID), and DCHExtension/SoftwareComponentclasses. - Locks currently active hardware drivers in red (
[ACTIVE - LOCKED]) while exposing gigabytes of superseded NVIDIA, AMD, Intel, and Realtek driver packages for safe 1-click removal.
4. Windows Installer (C:\Windows\Installer) Orphan Sweeper (Cleanup Tab)
A native replacement for PatchCleaner:
- Audits
C:\Windows\Installer(.msi,.msp, and$PatchCache$\Managed) against registeredUserData\<SID>\ProductsandPatchesin the registry. - Queries native
WindowsInstaller.InstallerCOMSummaryInformationstreams to reveal the real product name and vendor behind cryptic hex filenames (e.g.,1a4f8b.msp) and locks active uninstallers against accidental deletion.
5. Surgical Registry Orphan Sweeper with JSON Undo (Cleanup Tab)
Unlike legacy "registry cleaners" that recklessly nuke CLSID COM keys, I built a 100% path-verified scanner targeting 6 high-churn OS tables:
- Scans Firewall Rules, AppCompat Store & Layers, DirectX Per-App GPU Preferences, SharedDLLs, MSI Folder References, and App Paths for dead file paths left behind by uninstalled games and apps.
- Automatically shields unplugged external USB drives (via
[System.IO.DriveInfo]::GetDrives()) so offline game drives are never flagged. - Automatically saves a JSON backup (
RegOrphans_LastBackup.json) before purging, with an always-availableRestore Last Backup (JSON)button.
6. 4-Layer USB Storage & BadUSB Perimeter Guard (Security Tab)
Configurable, symmetrically revertible USB port lockdown:
- Layer 1 (Read-Only Guard): Blocks writing to USB drives (
WriteProtect = 1+ GPODeny_Write) to prevent data exfiltration or ransomware infection while allowing file reads. - Layer 2 (Execution Guard): Blocks launching
.exepayloads directly from removable storage (Deny_Execute = 1). - Layer 3 (Total USB Storage Blackout): Disables both legacy
USBSTOR(Bulk-Only) and modernUASPStor(USB Attached SCSI NVMe enclosures) kernel drivers. - Layer 4 (Anti-BadUSB & DMA Lock-Screen Guard): Blocks new USB/PCIe/Thunderbolt device enumeration while the workstation screen is locked (
Win+L).
🎨 Complete 7-Tab Architecture & 4-Color UI Overhaul
To eliminate clutter and group all 60 tools logically, I restructured the interface into 7 dedicated thematic tabs with a unified 4-color engineering palette (Matte Slate for standard actions, Steel Blue for interactive inspectors, Deep Crimson for aggressive/lockdown operations, and Neutral Gray for [?] audits):
Cleanup(9 Tools): Windows Update & CBS Cache, Temp/Prefetch/Dumps, 3rd-Party & GPU Shader Cache, Event Viewer Logs, DriverStore Orphan Sweeper, Windows Installer (MSI) Sweeper, Surgical Registry Orphan Sweeper, Ghost Services & Drivers Sweeper, and Hard Empty Recycle Bin.Debloat(9 Tools): OneDrive Amputation, Aggressive Bloatware & Recall/AI Removal (64 targets), FOD Preset, Appx Framework Garbage Collector, CBS Capability Stubs + 4 Manual Sortable Grids (Appx User, Appx Base Image, Full FOD Capabilities, Optional Features).Tweaks(7 Tools): Taskbar & Start Menu Tweaks, 1-Click Clean Start Menu (now also forces the Classic Alphabetical All-Apps ListAllAppsViewMode=2on Windows 11 25H2/26H2 and purges Recent Files), File Explorer & Win10 Context Menu, OS Annoyances (Modern Standby S0), 7-Point Power & Display Optimizer, 1:1 Raw Mouse Input, and Extreme Gaming Registry.Services(6 Tools): Office Service Profile (Light), Gaming Service Profile (Heavy), Telemetry Scheduled Tasks Lockdown + 3 Interactive Managers (System Services Manager, Scheduled Tasks Inspector, Deep Startup Manager).Security(11 Items): Privacy & UWP AppPrivacy (52 rules), Boot/SvcHost & UEFI WPBT Block, USB Storage & BadUSB Guard, Dual-Layer Execution Blocks (SRP + IFEO), Hardened DNS & Native DoH Enforcer (IPv4/IPv6), and 6 Classic Win32 Control Applets.Integrity(7 Tools): System Scan (ChkDisk + DISM + SFC) with a new Fast<3sOS Health Audit[?], WinSxS/ResetBaseCompression, WMI Repository Salvage, Windows Update & CryptSvc First-Aid, Network Stack Refresh, Print Spooler First-Aid, and Shell Icon/Thumbnail Cache Rebuild.Hardware(11 Tools): New Pre-Flight Header + 2-Column Hardware Cockpit layout housing Affinity Lasso, CPPC Unhider + Dead Man's Switch, Pre-Flight Desktop Shortcut, Quantum Scheduler Matrix, MSI & IRQ Core 0 Offload Enforcer, 0.5ms Timer & TSC Fix, USB XHCI Topology Map, I/O & Memory Optimizer, Network NDIS & TCP Tuner, WHEA Overclocking Decoder, and the Live 1Hz Kernel DPC Monitor.
🐛 Windows 11 26H2 Combat Fixes & Under-the-Hood Improvements
UCPD.sysKernel Filter Bypass (Windows 11 24H2/25H2/26H2): FixedFailed to modify key (Permissions/Lock)when disabling Taskbar Widgets by enforcing the newDisableWidgetsBoard=1andDisableWidgetsOnLockScreen=1policies alongside disarming theUCPDdriver andUCPD velocitytask.- Unsigned
REG_DWORD(0xFFFFFFFF) Audit Fix: FixedNetworkThrottlingIndexalways appearing as unoptimized due to.NETRegistryKey.GetValue()returning0xFFFFFFFFas signed-1(Int32).Invoke-RegistryAuditnow converts negativeDWordreads to unsignedUInt32. - 100% Locale Independence (PL/EN/DE/FR/ES): Replaced localized text checks in
DISM /CheckHealth,DISM /AnalyzeComponentStore, andfsutil dirty querywith direct CBS registry corruption flags, positional table parsing, andWin32_LogicalDisk.VolumeDirtyboolean queries. - Power & Display Optimizer Refinement: Removed the counterproductive
100% Minimum Processor Staterule from general power tweaks so modern AMD Zen / Intel CPUs retain full C-state residency and single-core boost headroom on the desktop. - Logger False-Positive Color Fix: Refined
Write-GUIregex lookarounds so legitimate service and task names containing"Windows Error Reporting"are no longer colored as[ERROR]lines.