Such as when you use the GHOST disk imaging product.  This is a revision of a post I wrote back in November 2009, and it’s about time to update it.

So here is the revised list I files I delete when I GHOST/image a system:

Directories to clean up:
%TEMP%
%PROGRAM FILES%\CA\eTrust\Debug

%PROGRAM FILES%\CA\SharedComponents\PPPPRealtime\Logs
%PROGRAM FILES%\CA\SharedComponents\PPPPRealtime\Logs
%PROGRAM FILES%\CA\SharedComponents\ScanEngine\Logs

%WINDIR%\CSC
%WINDIR%\PREFETCH
%WINDIR%\SYSTEM32\CCM\LOGS
%WINDIR%\SYSTEM32\DLLCACHE

Files to delete
386Spart.par
Amizvsus.pmf
Dos data.sf
Ghost.dta
Hiberfil.sys
Hibrn8.dat
Hybern8
Navsysl.dat
Navsysr.dat
Pagefile.sys
Pm_hiber.bin
Save2dsk.bin
Saveto.dsk
Spart.par
Swapper.dat
Toshiber.dat
Virtpart.dat
Win386.swp
%WINDIR%\dpinst.log
%WINDIR%\INF\SYSSETUP.PNF
%WINDIR%\SYSTEM32\CONFIG\*.EVT

Other
System Restore Points.
The best, and safest way I have found to clear the System Restore cache is to
a) Turn it off, click ok on the “System Restore is going to delete it’s restore points” and then
b) Turn it back on.