SMalik

Can't repair/Modify the installations of iTunes and QuickTime when installer files are removed. The entry listed below should be removed. [Apple Installer Cache*] LangSecRef=3023 Detect=HKCU\Software\Apple Computer, Inc. Default=False Warning=You have to reinstall iTunes after adding a new windows user account. FileKey1=%CommonAppData%\Apple\Installer Cache|*.*|REMOVESELF FileKey2=%CommonAppData%\Apple Computer\Installer Cache|*.*|REMOVESELF

Revised Entries Can't repair/Modify the installations of Adobe Acrobat/Adobe Reader if the setup files are not there. [Adobe Acrobat DC*] LangSecRef=3021 Detect=HKLM\Software\Adobe\Adobe Acrobat\DC Default=False FileKey1=%LocalAppData%\Adobe\Acrobat\DC\Cache|*.lst FileKey2=%LocalAppData%\Adobe\Acrobat\DC\ToolsSearchCacheAcro|*.*|RECURSE FileKey3=%LocalAppData%\Adobe\Acrobat\DC|*.lst FileKey4=%LocalAppData%\Adobe\Acrobat\DC|UserCache.bin FileKey5=%LocalLowAppData%\Adobe\Acrobat\DC\Search|*.* RegKey1=HKCU\Software\Adobe\Adobe Acrobat\DC\AVConversionFromPDF\cSettings RegKey2=HKCU\Software\Adobe\Adobe Acrobat\DC\AVConversionToPDF\cSettings RegKey3=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral\cDockables RegKey4=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles RegKey5=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFolders RegKey6=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentToolsList RegKey7=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral\cToolbars RegKey8=HKCU\Software\Adobe\Adobe Acrobat\DC\RememberedViews\cNoCategoryFiles RegKey9=HKCU\Software\Adobe\Adobe Acrobat\DC\ShareIdentity RegKey10=HKCU\Software\Adobe\Adobe Synchronizer\DC Removed: FileKey6=%ProgramFiles%\Adobe\Acrobat DC\Setup Files|*.*|REMOVESELF [Adobe Reader DC More*] LangSecRef=3021 Detect=HKLM\Software\Adobe\Acrobat Reader\DC Default=False FileKey1=%LocalAppData%\Adobe\Acrobat\DC|UserCache.bin RegKey1=HKCU\Software\Adobe\Acrobat Reader\DC\AVConversionFromPDF RegKey2=HKCU\Software\Adobe\Acrobat Reader\DC\AVConversionToPDF RegKey3=HKCU\Software\Adobe\Acrobat Reader\DC\AVGeneral\cDockables RegKey4=HKCU\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentToolsList RegKey5=HKCU\Software\Adobe\Acrobat Reader\DC\AVGeneral\cToolbars RegKey6=HKCU\Software\Adobe\Acrobat Reader\DC\RememberedViews\cNoCategoryFiles RegKey7=HKCU\Software\Adobe\Acrobat Reader\DC\ShareIdentity RegKey8=HKCU\Software\Adobe\Adobe Synchronizer\DC Removed: FileKey1=%CommonAppData%\Adobe\Setup|*.*|REMOVESELF FileKey3=%ProgramFiles%\Adobe\Acrobat Reader DC\Setup Files|*.*|REMOVESELF [Adobe Reader XI More*] LangSecRef=3021 Detect=HKLM\SOFTWARE\Adobe\Acrobat Reader\11.0 Default=False RegKey1=HKCU\Software\Adobe\Acrobat Reader\11.0\AVConversionFromPDF RegKey2=HKCU\Software\Adobe\Acrobat Reader\11.0\AVConversionToPDF RegKey3=HKCU\Software\Adobe\Acrobat Reader\11.0\AVGeneral\cDockables RegKey4=HKCU\Software\Adobe\Acrobat Reader\11.0\AVGeneral\cToolbars RegKey5=HKCU\Software\Adobe\Acrobat Reader\11.0\RememberedViews\cNoCategoryFiles RegKey6=HKCU\Software\Adobe\Adobe Synchronizer\11.0 Removed: FileKey1=%ProgramFiles%\Adobe\Reader 11.0\Setup Files|*.*|REMOVESELF

Please update the version info of the file.

Revised Entries [AutoPlay Devices*] LangSecRef=3025 Detect=HKCU\Software\Microsoft\Windows Warning=This will clear out devices and drives from AutoPlay that you've connected to your computer. Default=False RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\KnownDevices Changed Warning from "This will clear out all default autoplay options for devices and drives you've connected to your computer!" to "This will clear out devices and drives from AutoPlay that you've connected to your computer." [CD/DVD Burn Cache*] LangSecRef=3025 Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CD Burning Default=False Warning=This will wipe all files that are waiting to be burned to a CD/DVD/BD drive. FileKey1=%LocalAppData%\Microsoft\CD Burning|*.* FileKey2=%LocalAppData%\Microsoft\Windows\Burn|*.*|RECURSE Changed Warning from "This option will wipe all files that are waiting to be burned to a CD/DVD/BRD" to "This will wipe all files that are waiting to be burned to a CD/DVD/BD drive."

What about the other corrections?

Have you noticed the warnings in these entries? Warning=This will break pinned configuration shortcuts (like control panel). Warning=This will remove all of your QuickLaunch icons. [QuickLaunch ImplicitAppShortcuts*] entry causing issues on Windows 10. It removes QuickLaunch custom shortcuts. As per your question about the [Windows 8 QuickLaunch*] entry, I made a mistake by providing that entry.

Revised Entry Merged [ASP.NET*] into [.NET Framework Temps*] entry. Also, changed the name from [.NET Framework Temp*] to [.NET Framework Temps*]. Please remove [ASP.NET*] entry. [.NET Framework Temps*] LangSecRef=3025 Detect=HKLM\Software\Microsoft\.NETFramework Default=False FileKey1=%WinDir%\Microsoft.net\Framework\*\Temporary ASP.NET Files|*.*|RECURSE FileKey2=%WinDir%\Microsoft.net\Framework64\*\Temporary ASP.NET Files|*.*|RECURSE FileKey3=%WinDir%\System32\URTTemp|*.*|RECURSE I think FileKey3=%WinDir%\System32\URTTemp|*.*|RECURSE belongs to Visual Studio 2010 Express. There should be a separate entry for this. [.NET Assembly Temps*] can be merged into [.NET Framework Temps*].

Duplicate Entries Please remove [Assembly*] [.NET Assembly Temps*] LangSecRef=3025 Detect=HKLM\Software\Microsoft\.NETFramework Default=False FileKey1=%WinDir%\assembly\NativeImages_*\Temp|*.*|RECURSE FileKey2=%WinDir%\assembly\temp|*.*|RECURSE FileKey3=%WinDir%\assembly\tmp|*.*|RECURSE [Assembly*] LangSecRef=3025 DetectFile=%WinDir%\assembly Default=False FileKey1=%WinDir%\assembly|*.tmp|Recurse

Revised Entry Changed the name from [Microsoft.NET Cache*] to [.NET Framework Cache*] [.NET Framework Cache*] LangSecRef=3025 Detect=HKLM\Software\Microsoft\.NETFramework Default=False FileKey1=%WinDir%\Microsoft.NET\Framework\v4.0.30319\SetupCache|*.*|RECURSE FileKey2=%WinDir%\Microsoft.NET\Framework64\v4.0.30319\SetupCache|*.*|RECURSE

The entries listed below should be removed. Why does someone need to remove the QuickLaunch shortcuts? [QuickLaunch ImplicitAppShortcuts*] DetectOS=6.1| LangSecRef=3025 DetectFile=%AppData%\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts Default=False Warning=This will break pinned configuration shortcuts (like control panel). FileKey1=%AppData%\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts|*.*|RECURSE [QuickLaunch*] DetectOS=6.1| LangSecRef=3025 Detect=HKCU\Software\Microsoft\Internet Explorer Default=False Warning=This will remove all of your QuickLaunch icons. FileKey1=%AppData%\Microsoft\Internet Explorer\Quick Launch|*.lnk

The entry listed below should be removed. It has nothing to do with QuickLaunch. https://channel9.msdn.com/Shows/Going+Deep/RADAR-Windows-Automatic-Memory-Leak-Detection [QuickLaunch DiagnosedApplications*] LangSecRef=3025 Detect=HKLM\Software\Microsoft\RADAR\HeapLeakDetection Default=False RegKey1=HKLM\Software\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications RegKey2=HKLM\Software\Wow6432Node\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications

Please fix the Detect path. [CyberLink PowerDVD 16*] LangSecRef=3023 Detect=HKCU\Software\CyberLink Default=False FileKey1=%LocalAppData%\Cyberlink\PowerDVD*\cache\|*.* FileKey2=%CommonAppData%\Cyberlink\Evoparser\|*.xml

Any idea on what Chrome's Setup Metrics are?

I think it is better to have separate entries for every Store app because apps are different from each other.

Sometimes, deleting everything from the Store app packages could break the apps and then it is not very easy for everyone to fix them. Please look at the attached snapshots. I do not recommend deleting those files.

In my opinion we should keep these separate.

New Entries [Network Setup Service Events Logs*] LangSecRef=3025 Detect=HKLM\Software\Microsoft\Windows Default=False FileKey1=%WinDir%\Logs\NetSetup|*.*|RECURSE [server-initiated Healing Events Logs*] LangSecRef=3025 Detect=HKLM\Software\Microsoft\Windows Default=False FileKey1=%WinDir%\Logs\SIH|*.*|RECURSE [update Orchestrator Events Logs*] LangSecRef=3025 Detect=HKLM\Software\Microsoft\Windows Default=False FileKey1=%CommonAppData%\USOShared\Logs|*.*|RECURSE [Windows Update Events Logs*] LangSecRef=3025 Detect=HKLM\Software\Microsoft\Windows Default=False FileKey1=%WinDir%\Logs\WindowsUpdate|*.*|RECURSE [Get Office*] DetectOS=10.0 Section=3031 Default=False Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe FileKey1=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\INetCache|*.*|RECURSE FileKey2=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\INetCookies|*.*|RECURSE FileKey3=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\INetHistory|*.*|RECURSE FileKey4=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\Microsoft\CryptnetUrlCache\Content|*.*|RECURSE FileKey5=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*|RECURSE FileKey6=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\Temp|*.*|RECURSE FileKey7=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\AC\TokenBroker\Cache|*.*|RECURSE FileKey8=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\LocalCache|*.*|RECURSE FileKey9=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\LocalState\AppData\Local\Office\16.0\WebServiceCache|*.*|RECURSE FileKey10=%LocalAppData%\Packages\Microsoft.MicrosoftOfficeHub_*\LocalState\Cache|*.*|RECURSE

Revised Entry Changed name from [Delivery Optimization Logs*] to [Delivery Optimization Service Events Logs*] [Delivery Optimization Service Events Logs*] LangSecRef=3025 Detect=HKLM\Software\Microsoft\Windows Default=False FileKey1=%WinDir%\Logs\dosvc|*.*|RECURSE

New Entry [Delivery Optimization Logs*] LangSecRef=3025 Detect=HKLM\Software\Microsoft\Windows Default=False FileKey1=%WinDir%\Logs\dosvc|*.*|RECURSE

This entry is not safe. It breaks Windows Update. I was watching the behavior of this entry for the last one month. Windows Update downloads update files into that location and waits to install them. If you remove the files from that location before updating Windows, the Windows Update fails.

The entry listed below should be removed. Windows Update downloads update files into that location and waits to install them. If you remove the files from that location before updating Windows, then Windows Update has to re-download the files. Unnecessary files from this location automatically remove after a successful update and some left overs can be removed using the Windows "Disk Cleanup" utility. Today, I had approx. 4.5 GB files in that directory before installing Windows updates. After the update, it has only 54.5 MB. [Delivery Optimization Files*] LangSecRef=3025 Detect=HKLM\Software\Microsoft\Windows Default=False FileKey1=%WinDir%\Logs\dosvc|*.*|RECURSE FileKey2=%WinDir%\SoftwareDistribution\DeliveryOptimization|*.*|RECURSE RegKey1=HKLM\Software\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Jobs

This entry covers both AVG AntiVirus and AVG Internet Security. I have AVG Internet Security and it shows AVG Protection in the Programs and Features.

How about if we change the name to [Outlook Appointment Location*]?

Revised Entry [MS Search More*] LangSecRef=3025 Detect=HKCU\Software\Microsoft\Windows Warning=It could stop Indexing for IE Default=False FileKey1=%CommonAppData%\Microsoft\Search\Data\Applications\Windows|Windows.edb FileKey2=%CommonAppData%\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex|*.*|RECURSE FileKey3=%CommonAppData%\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap|*.*|RECURSE FileKey4=%CommonAppData%\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore|*.*|RECURSE FileKey5=%LocalAppData%\VirtualStore\ProgramData\Microsoft\Search\Data\Applications\Windows|Windows.edb FileKey6=%LocalAppData%\VirtualStore\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex|*.*|RECURSE FileKey7=%LocalAppData%\VirtualStore\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap|*.*|RECURSE FileKey8=%LocalAppData%\VirtualStore\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore|*.*|RECURSE RegKey1=HKLM\SOFTWARE\Microsoft\Windows Search\VolumeInfoCache Removed DetectOS= Changed the Warning from "Can cause major issues with IE on Windows 10" to "It could stop Indexing for IE".

Revised Entries [MUICache*] DetectOS=6.1| LangSecRef=3025 Detect=HKCU\Software\Microsoft\Windows Default=False RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache Changed the Detect from HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell to HKCU\Software\Microsoft\Windows Corrected RegKey1 [Stored Explorer View Settings*] DetectOS=6.1| LangSecRef=3025 Detect=HKCU\Software\Microsoft\Windows Default=False Warning=This will delete window size, window position and view setting of all folders. RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU RegKey2=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags Changed entry name from [shellBags*] to [stored Explorer View Settings*] Changed the Detect from HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell to HKCU\Software\Microsoft\Windows Corrected RegKey1 and RegKey