- 0
- 0
If you go into task scheduler, Microsoft, windows, application experience, do you have a PcaPatchDbTask task name aside from the other regular three? I also disable this task and it always resets to ready on it’s own after each restart. I just reset the computer and have it on the latest 20H2 version. My 1909 didn’t have it. It looks like a new file put into windows 10 at some point because another system of mine has it from fresh install as well. Many people claimed it was a virus or Proxy virus. I want to know if you all have it as well in the task scheduler from the latest feature update 20H2. There’s no detected malware or virus in my system from multiple scans.
Windows 10: PCapatchdbtask file in application experience folder keeps coming back after deleted…
Discus and support PCapatchdbtask file in application experience folder keeps coming back after deleted… in Windows 10 Ask Insider to solve the problem; I’m at my wits end here. I have tried isolating the problem as much as I can. Im using CCleaner to delete this stubborn file named PCapatchdbtask but…
Discussion in ‘Windows 10 Ask Insider’ started by /u/DannyS091, Apr 10, 2021.
-
PCapatchdbtask file in application experience folder keeps coming back after deleted…
I’m at my wits end here. I have tried isolating the problem as much as I can. Im using CCleaner to delete this stubborn file named PCapatchdbtask but it keeps reappearing. I made sure all cloud and sync settings are turned off. I dont understand why this file keeps coming back. Would appreciate any help on this.
submitted by /u/DannyS091
[link] [comments]
-
Trouble deleting a folder
Thanks for the suggestion but it says «delete folder failed for E:\…..» for each folder I try.
*Confused
Will I be forever stuck with these unnecessary folders? *Oh Well hwell:
-
Unable to delete a folder — Invalid folder name
Suggestion:
- Run chkdsk x: /r to make sure that there’s no HD corruption.
x: is the drive containing the folder you want to delete. - Try to delete the folder again. If still does not work, go to step 3.
- Download: Download — Linux Mint and create a bootable USB using: Rufus — Create bootable USB
- Boot up with Linux Mint and try to delete the folder again.
NOTE: Unlike WinPE. Linux does not have any Windows permission imposed to it so it is easier to delete.
- Run chkdsk x: /r to make sure that there’s no HD corruption.
-
PCapatchdbtask file in application experience folder keeps coming back after deleted…
deleted files from favourites just keep coming back
deleted files from favourites list keep coming back
PCapatchdbtask file in application experience folder keeps coming back after deleted…
-
PCapatchdbtask file in application experience folder keeps coming back after deleted… — Similar Threads — PCapatchdbtask file application
-
Files keep coming back after being deleted
in Windows 10 Gaming
Files keep coming back after being deleted: I deleted some game save files of Witcher 1 to free up space on my OneDrive. I emptied them from the desktop recycle bin and the OneDrive recycle bin but they keep coming back into my save file and taking up OneDrive space. Essentially, the deleted files keep reappearing on… -
Files keep coming back after being deleted
in Windows 10 Software and Apps
Files keep coming back after being deleted: I deleted some game save files of Witcher 1 to free up space on my OneDrive. I emptied them from the desktop recycle bin and the OneDrive recycle bin but they keep coming back into my save file and taking up OneDrive space. Essentially, the deleted files keep reappearing on… -
deleted files keep coming back after restart
in Windows 10 Gaming
deleted files keep coming back after restart: I installed valorant to my pc but riot client always stuck at 0.1kb/s and always stop at 24%highest i’ve got was 31% now i’ve deleted it manually since i don’t know how to stop it, i’ve also deleted multiple remnant files of riot client and valorant on safe boot since i’m… -
deleted files keep coming back after restart
in Windows 10 Software and Apps
deleted files keep coming back after restart: I installed valorant to my pc but riot client always stuck at 0.1kb/s and always stop at 24%highest i’ve got was 31% now i’ve deleted it manually since i don’t know how to stop it, i’ve also deleted multiple remnant files of riot client and valorant on safe boot since i’m… -
16-bit application keeps coming back after deletion on windows 10!!!
in Windows 10 Network and Sharing
16-bit application keeps coming back after deletion on windows 10!!!: Hello my name is shoaib ahmed. I have a PC which is running on windows 10. I have installed zoom meeting application on my PC for online meetings. Suddenly, i have got this window pop up which says ’16-bit application error’ where it shows the path of the file. There are two… -
Folder keeps on coming back after deletion
in Windows 10 Network and Sharing
Folder keeps on coming back after deletion: have a bit of an issue with a folder on my desktop. I keep on deleting and it keeps on coming back. I installed Norton. Didnt pick up any viruses or malware. Scanned computer with safety scanner. Nothing was picked up. Driving me nuts. I installed latest Win10 updates. No… -
Deleted file keep coming back
in Windows 10 Network and Sharing
Deleted file keep coming back: Hello guys, i noticed file in C named with date and year created its own, i tried deleting it but everytime i restart laptop or shutdown then turn on, it recreates again on C, anyone know why is that happening and what is this file and why did it even create? And how can i… -
Deleted folder keep coming back after restarting
in Windows 10 Ask Insider
Deleted folder keep coming back after restarting: Couldn’t find a solution for this problem. Whenever I restart my laptop, a folder I delete keep coming back. Its not in the same path as my OS and I already scanned using Windows Defender and MalwareBytes. I dont think another app is using this folder because I used it to… -
Log Files keep coming back after deleted (Pics)
in Windows 10 Support
Log Files keep coming back after deleted (Pics): Hey guys looking for some help with my Windows 10 Acer. I have these files that i keep deleting and they keep coming back. Any idea what could cause this ? Thanks.[img]
63689
Users found this page by searching for:
-
www.windowsphoneinfo.com
*7-day Free Trial w/Credit card, no charge upfront or if you cancel up to 2 days before expiration; Subscription price varies per region w/ auto renewal unless you timely cancel; notification before you are billed; 30-day money-back guarantee; Read full terms and more information about free remover.
PcaPatchDbTask is a Trojan Horse malware program, and it is one of the more recently released representatives of its respective category. The reason we are writing this article is because many users have recently complained about spotting PcaPatchDbTask in their computers, and being unable to remove it.
Our task is to help the readers of this post who also have PcaPatchDbTask in their systems remove the insidious malware threat, and clean their computers. We have prepared a guide for you, which you can read at the bottom of this write up. However, before you try completing the guide, you are advised to read the paragraphs leading up to it, as they will give you some important information about the type of computer malware you are currently dealing with.
The PcaPatchDbTask Riskware Injector
Threats like the PcaPatchDbTask Riskware Injector have several distinctive features that set them apart from other malicious computer programs that you may encounter.
One such feature is the advanced stealth of most Trojans, and their ability to mislead the potential victims about their true nature. After all, there is a reason why this type of malware has been named after the Greek myth about the Trojan Horse. The name is used as a metaphor for something that may look safe on the outside, but is actually very dangerous on the inside. This is exactly how most Trojans are – on the outside they may be disguised as regular pieces of data such as software installers, media files, even PDF documents, and so on, but once you open them, they immediately begin to carry out their insidious tasks, oftentimes, without the users realizing anything.
Another typical trait of Trojans like PcaPatchDbTask is that they can be used in different ways depending on the situation. In some cases, a given Trojan may be tasked with keylogging your keystrokes, and thus acquiring sensitive details about you such as your online passwords, usernames, credit and debit card numbers, and so on. In other instances, the malware may directly take over the infected system, forcing it to carry out processes that the user hasn’t allowed. For example, the Trojan may tell your computer to mine cryptocurrency, and then send it to the hackers’ crypto-wallets, using up most of your system’s RAM, CPU, and GPU in the process. This may not directly harm your computer, or your virtual privacy, but it will most likely make the machine nearly unusable due to sever slow-downs, and frequent freezes.
A Trojan may even go as far as download additional harmful programs in your computer – for instance, many Ransomware cryptoviruses get distributed in this way, through the help of Trojan backdoor infections.
In the case with PcaPatchDbTask, we can’t really tell you the specific goal of this threat, because there isn’t sufficient research on that yet. Regardless, you must still make sure to eliminate this Trojan before it gets too late, and that is why we urge you to use the steps from the following removal guide, and/or the professional anti-malware program that you will find in it.
SUMMARY:
Remove PcaPatchDbTask Riskware
If you have a Windows virus, continue with the guide below.
If you have a Mac virus, please use our How to remove Ads on Mac guide.
If you have an Android virus, please use our Android Malware Removal guide.
If you have an iPhone virus, please use our iPhone Virus Removal guide
Some of the steps will likely require you to exit the page. Bookmark it for later reference.
Reboot in Safe Mode (use this guide if you don’t know how to do it).
WARNING! READ CAREFULLY BEFORE PROCEEDING!
Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab. Try to determine which processes are dangerous.
Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:
Each file will be scanned with up to 64 antivirus programs to ensure maximum accuracy
This scanner is free and will always remain free for our website’s users.
This file is not matched with any known malware in the database. You can either do a full real-time scan of the file or skip it to upload a new file. Doing a full scan with 64 antivirus programs can take up to 3-4 minutes per file.
Drag and Drop File Here To Scan
Analyzing 0 s
Each file will be scanned with up to 64 antivirus programs to ensure maximum accuracy
This scanner is based on VirusTotal’s API. By submitting data to it, you agree to their Terms of Service and Privacy Policy, and to the sharing of your sample submission with the security community. Please do not submit files with personal information if you do not want them to be shared.
After you open their folder, end the processes that are infected, then delete their folders.
Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections.
Hold together the Start Key and R. Type appwiz.cpl –> OK.
You are now in the Control Panel. Look for suspicious entries. Uninstall it/them. If you see a screen like this when you click Uninstall, choose NO:
Type msconfig in the search field and hit enter. A window will pop-up:
Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.
- Remember this step – if you have reason to believe a bigger threat (like ransomware) is on your PC, check everything here.
Hold the Start Key and R – copy + paste the following and click OK:
notepad %windir%/system32/Drivers/etc/hosts
A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:
If there are suspicious IPs below “Localhost” – write to us in the comments.
Type Regedit in the windows search field and press Enter.
Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:
- HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random
If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!
PcaPatchDbTask is a Trojan Horse malware program, and it is one of the more recently released representatives of its respective category. The argument we are writing this report is since many computer users have freshly complained related to spotting PcaPatchDbTask in their devices, and being not able to erase it.
Our function is to assistance the readers of this post who plus have PcaPatchDbTask in their machines terminate the insidious parasite parasite, and clear their pcs. We have produced a guidelines for you, which you may read at the bottom of this write up. However, former you try conducting the guidelines, it is advisable that you read the section known up to it, since they will grant you some important data about the category of system viruses you are now tackling.
The PcaPatchDbTask Riskware Injector
Threats like the PcaPatchDbTask Riskware Injector have several distinctive features that set them apart from other malicious computer programs that you may encounter.
Download Removal Toolto remove PcaPatchDbTask
One such characteristic is the advanced stealth of a majority of Trojans, and their expertise to trick the probable victims related to their correct roots. After all, there is a reasoning why this kind of virus has been titled after the Greek myth relating to the Trojan Horse. The title is accustomed as a metaphor for something that might seem protected on the outside, but is really terribly sly on the in. This is literally how a majority of Trojans are – on the outside they might be masked as general parts of content like utility installers, media files, even PDF documents, and so on, but as soon as you open them, they at once start to do their insidious functions, generally, without the people knowing anything.
Another general feature of Trojans like PcaPatchDbTask is that they may be utilized in various ways counting on the condition. In some instances, a exhibited Trojan can be tasked together with keylogging your keystrokes, and therefore getting personal details connected to you e.g your internet passwords, usernames, credit and debit card quantities, and so on. In other situations, the malicious software may straightaway seize the not clean device, forcing it to perform procedures that the user has not permitted. For instance, the Trojan may tell your device to mine cryptocurrency, and then forward it to the hackers’ crypto-wallets, via up majority of your system’s RAM, CPU, and GPU in the procedure. This might not straightaway harm your pc, or your virtual privacy, but it will most probably generate the operating system almost useless because of sever lethargic-downs, and usual freezes.
A Trojan may even go as far as download added corrupt software in your os – for example, a bunch of Ransomware cryptoviruses get spread in in this way, via the aid of Trojan backdoor malicious software.
In the case in bundles with PcaPatchDbTask, we can’t desperately tell you the various intentions of this parasite, as there isn’t advantageous study on that yet. Regardless, you need to regardless ensure to get rid of this Trojan former it obtains too late, and i.e. why we recommend you to utilize the stages from the following uninstallation guidelines, and/or the efficient anti-spyware tool which you will notice in it.
Download Removal Toolto remove PcaPatchDbTask
Learn how to remove PcaPatchDbTask from your computer
- Step 1. PcaPatchDbTask Removal from Windows
- Step 2. Delete PcaPatchDbTask from browsers
Step 1. PcaPatchDbTask Removal from Windows
a) Windows 7/XP
- Press on the Start icon.
- Control Panel → Programs and Features.
- Find the program you want to delete and press Uninstall.
b) Windows 8
- Right-click on the start icon (lower left corner).
- Select Control Panel.
- Click Programs and Features.
- Find and remove all unwanted programs.
c) Windows 10
- Open Start menu and click on the magnifying glass (next to the shut down button).
- Type in Control Panel.
- Control Panel → Programs and Features.
- Find and remove all unwanted programs.
d) Mac OS X
- Open Finder and press Applications.
- Check all suspicious programs you want to get rid of.
- Drag them to the trash icon in your dock (Alternatively, right-click on the program and press Move to Trash).
- After you move all the unwanted programs, right-click on the trash icon and select Empty Trash.
Step 2. Delete PcaPatchDbTask from browsers
a) Remove PcaPatchDbTask from Microsoft Edge
Reset Microsoft Edge (Method 1)
- Open Microsoft Edge.
- Press More located at the top right corner of the screen (the three dots).
- Settings → Choose what to clear.
- Check the boxes of the items you want removed, and press Clear.
- Press Ctrl + Alt + Delete together.
- Choose Task Manager.
- In the Processes tab, find the Microsoft Edge process, right click on it, and press Go to details (or More details if Go to details is not available).
- Right-click on all Microsoft Edge processes, and choose End task.
(Method 2)
Before you proceed with this method, backup your data.
- Go to C:\Users\%username%\AppData\Local\Packages\Microsoft.MicrosoftEdge_xxxxxxxxxx.
- Select all the folders, right-click on them and press Delete.
- Press the start button, and type in Windows PowerShell in the search box.
- Right-click on the result, and select Run as administrator.
- In Administrator: Windows PowerShell, paste
Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register $($_.InstallLocation)\AppXManifest.xml -Verbose}
under PS C:\WINDOWS\system32> and tap Enter.
- The issue should be gone now.
b) Remove PcaPatchDbTask from Internet Explorer
- Open Internet Explorer and press on the Gear icon.
- Select Manage add-ons, and then Toolbars and Extensions.
- Find and disable all suspicious extensions.
- Close the window.
c) Restore your homepage on Internet Explorer
- Open Internet Explorer and press on the Gear icon.
- Internet Options → General tab. Delete the homepage URL and type in your preferred one.
- Press Apply.
d) Reset Internet Explorer
- Open Internet Explorer and press on the Gear icon.
- Internet Options → Advanced tab.
- At the bottom, you will see a Reset button. Press that.
- In the window that appears, check the box that says Delete personal settings.
- Press Reset.
- Click OK to exit the window.
- Restart your browser.
e) Remove PcaPatchDbTask from Google Chrome
- Open Google Chrome and press the menu icon on the right, next to the URL field.
- Choose More tools and Extensions.
- Remove suspicious extensions by clicking the Trash icon next to them.
- If you are not certain about an extension, you can disable it by unchecking the box that says Enabled. If you later decide to keep it, simply check the box again.
Download Removal Toolto remove PcaPatchDbTask
* WiperSoft scanner, available at this website, only works as a tool for virus detection. More data on WiperSoft. To have WiperSoft in its full capacity, to use removal functionality, it is necessary to acquire its full version. In case you want to uninstall WiperSoft, click here.
f) Restore your homepage on Google Chrome
- Open Google Chrome and press the menu icon on the right, next to the URL field.
- Choose Settings.
- In the window that appears, under On startup, there will be a Set pages option. Press on that.
- Remove the set website, and type in the one you prefer to be your homepage. Press OK.
- In Settings, under Search, there is a Manage search engines option. Select that.
- Remove all search engines except the one you want to use. Click Done.
g) Reset Google Chrome
- Open Google Chrome and press the menu icon on the right, next to the URL field.
- Choose Settings.
- Scroll down and press on Show advanced settings.
- Find and press the Reset button.
- In the confirmation window that appears, press Reset.
h) Remove PcaPatchDbTask from Mozilla Firefox
- Open Mozilla Firefox and access the menu by clicking on the three bars on the right of the screen.
- Select Add-ons.
- Select the Extensions tab, and remove all questionable extensions.
- If you are not certain about an extension, you can disable it by clicking Disable. If you later decide to keep it, simply press Enable.
i) Restore your homepage on Mozilla Firefox
- Open Mozilla Firefox and access the menu by clicking on the three bars on the right side of the screen.
- Select Options.
- In General, click Restore to Default below the Home Page field.
j) Reset Mozilla Firefox
- Open Mozilla Firefox and access the menu by clicking on the three bars on the right of the screen.
- Press the question mark at the bottom of the menu.
- Select Troubleshooting Information.
- Select the Refresh Firefox option.
k) Remove PcaPatchDbTask from Safari (for Mac)
- Open Safari.
- Select Preferences (can be accesses by pressing on Safari at the top of your screen).
- Choose the Extensions tab.
- Uninstall all questionable extensions.
- If you are not certain about an extension, you can disable it by unchecking the box that says Enabled. If you later decide to keep it, simply check the box again.
l) Reset Safari
If you are using the Yosemite, El Capitan or the Sierra versions, the option to reset Safari with one click is not available. Thus you will have to clear the history and empty the caches in separate steps.
- Open Safari.
- Select Clear History (can be accesses by pressing on Safari at the top of your screen).
- Choose from what time you want the history deleted, and press Clear History.
- Press on Safari at the top of the screen and select Preferences.
- Select the Advanced tab and check the box next to Show Develop menu in menu bar.
- Select Develop (from the menu bar at the top of the screen).
- Press Empty Caches.
If for some reason you are unable to remove the extensions or reset your browsers, it may be a good idea to obtain anti-spyware software and have it deal with the problem.
Last Updated: 2024-08-07
Info
The Development Documentation is auto generated for every compilation of WinUtil, meaning a part of it will always stay up-to-date. Developers do have the ability to add custom content, which won’t be updated automatically.
Description¶
Disables Microsoft Telemetry. Note: This will lock many Edge Browser settings. Microsoft spies heavily on you when using the Edge browser.
Preview Code
{
"Content": "Disable Telemetry",
"Description": "Disables Microsoft Telemetry. Note: This will lock many Edge Browser settings. Microsoft spies heavily on you when using the Edge browser.",
"category": "Essential Tweaks",
"panel": "1",
"Order": "a003_",
"ScheduledTask": [
{
"Name": "Microsoft\\Windows\\Application Experience\\Microsoft Compatibility Appraiser",
"State": "Disabled",
"OriginalState": "Enabled"
},
{
"Name": "Microsoft\\Windows\\Application Experience\\ProgramDataUpdater",
"State": "Disabled",
"OriginalState": "Enabled"
},
{
"Name": "Microsoft\\Windows\\Autochk\\Proxy",
"State": "Disabled",
"OriginalState": "Enabled"
},
{
"Name": "Microsoft\\Windows\\Customer Experience Improvement Program\\Consolidator",
"State": "Disabled",
"OriginalState": "Enabled"
},
{
"Name": "Microsoft\\Windows\\Customer Experience Improvement Program\\UsbCeip",
"State": "Disabled",
"OriginalState": "Enabled"
},
{
"Name": "Microsoft\\Windows\\DiskDiagnostic\\Microsoft-Windows-DiskDiagnosticDataCollector",
"State": "Disabled",
"OriginalState": "Enabled"
},
{
"Name": "Microsoft\\Windows\\Feedback\\Siuf\\DmClient",
"State": "Disabled",
"OriginalState": "Enabled"
},
{
"Name": "Microsoft\\Windows\\Feedback\\Siuf\\DmClientOnScenarioDownload",
"State": "Disabled",
"OriginalState": "Enabled"
},
{
"Name": "Microsoft\\Windows\\Windows Error Reporting\\QueueReporting",
"State": "Disabled",
"OriginalState": "Enabled"
},
{
"Name": "Microsoft\\Windows\\Application Experience\\MareBackup",
"State": "Disabled",
"OriginalState": "Enabled"
},
{
"Name": "Microsoft\\Windows\\Application Experience\\StartupAppTask",
"State": "Disabled",
"OriginalState": "Enabled"
},
{
"Name": "Microsoft\\Windows\\Application Experience\\PcaPatchDbTask",
"State": "Disabled",
"OriginalState": "Enabled"
},
{
"Name": "Microsoft\\Windows\\Maps\\MapsUpdateTask",
"State": "Disabled",
"OriginalState": "Enabled"
}
],
"registry": [
{
"Path": "HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\DataCollection",
"Type": "DWord",
"Value": "0",
"Name": "AllowTelemetry",
"OriginalValue": "1"
},
{
"Path": "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\DataCollection",
"OriginalValue": "1",
"Name": "AllowTelemetry",
"Value": "0",
"Type": "DWord"
},
{
"Path": "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager",
"OriginalValue": "1",
"Name": "ContentDeliveryAllowed",
"Value": "0",
"Type": "DWord"
},
{
"Path": "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager",
"OriginalValue": "1",
"Name": "OemPreInstalledAppsEnabled",
"Value": "0",
"Type": "DWord"
},
{
"Path": "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager",
"OriginalValue": "1",
"Name": "PreInstalledAppsEnabled",
"Value": "0",
"Type": "DWord"
},
{
"Path": "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager",
"OriginalValue": "1",
"Name": "PreInstalledAppsEverEnabled",
"Value": "0",
"Type": "DWord"
},
{
"Path": "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager",
"OriginalValue": "1",
"Name": "SilentInstalledAppsEnabled",
"Value": "0",
"Type": "DWord"
},
{
"Path": "HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager",
"OriginalValue": "1",
"Name": "SubscribedContent-338387Enabled",
"Value": "0",
"Type": "DWord"
},
{
"Path": "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager",
"OriginalValue": "1",
"Name": "SubscribedContent-338388Enabled",
"Value": "0",
"Type": "DWord"
},
{
"Path": "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager",
"OriginalValue": "1",
"Name": "SubscribedContent-338389Enabled",
"Value": "0",
"Type": "DWord"
},
{
"Path": "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager",
"OriginalValue": "1",
"Name": "SubscribedContent-353698Enabled",
"Value": "0",
"Type": "DWord"
},
{
"Path": "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager",
"OriginalValue": "1",
"Name": "SystemPaneSuggestionsEnabled",
"Value": "0",
"Type": "DWord"
},
{
"Path": "HKCU:\\SOFTWARE\\Microsoft\\Siuf\\Rules",
"OriginalValue": "0",
"Name": "NumberOfSIUFInPeriod",
"Value": "0",
"Type": "DWord"
},
{
"Path": "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\DataCollection",
"OriginalValue": "0",
"Name": "DoNotShowFeedbackNotifications",
"Value": "1",
"Type": "DWord"
},
{
"Path": "HKCU:\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent",
"OriginalValue": "0",
"Name": "DisableTailoredExperiencesWithDiagnosticData",
"Value": "1",
"Type": "DWord"
},
{
"Path": "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\AdvertisingInfo",
"OriginalValue": "0",
"Name": "DisabledByGroupPolicy",
"Value": "1",
"Type": "DWord"
},
{
"Path": "HKLM:\\SOFTWARE\\Microsoft\\Windows\\Windows Error Reporting",
"OriginalValue": "0",
"Name": "Disabled",
"Value": "1",
"Type": "DWord"
},
{
"Path": "HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeliveryOptimization\\Config",
"OriginalValue": "1",
"Name": "DODownloadMode",
"Value": "1",
"Type": "DWord"
},
{
"Path": "HKLM:\\SYSTEM\\CurrentControlSet\\Control\\Remote Assistance",
"OriginalValue": "1",
"Name": "fAllowToGetHelp",
"Value": "0",
"Type": "DWord"
},
{
"Path": "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\OperationStatusManager",
"OriginalValue": "0",
"Name": "EnthusiastMode",
"Value": "1",
"Type": "DWord"
},
{
"Path": "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced",
"OriginalValue": "1",
"Name": "ShowTaskViewButton",
"Value": "0",
"Type": "DWord"
},
{
"Path": "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\People",
"OriginalValue": "1",
"Name": "PeopleBand",
"Value": "0",
"Type": "DWord"
},
{
"Path": "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced",
"OriginalValue": "1",
"Name": "LaunchTo",
"Value": "1",
"Type": "DWord"
},
{
"Path": "HKLM:\\SYSTEM\\CurrentControlSet\\Control\\FileSystem",
"OriginalValue": "0",
"Name": "LongPathsEnabled",
"Value": "1",
"Type": "DWord"
},
{
"_Comment": "Driver searching is a function that should be left in",
"Path": "HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DriverSearching",
"OriginalValue": "1",
"Name": "SearchOrderConfig",
"Value": "1",
"Type": "DWord"
},
{
"Path": "HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Multimedia\\SystemProfile",
"OriginalValue": "1",
"Name": "SystemResponsiveness",
"Value": "0",
"Type": "DWord"
},
{
"Path": "HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Multimedia\\SystemProfile",
"OriginalValue": "1",
"Name": "NetworkThrottlingIndex",
"Value": "4294967295",
"Type": "DWord"
},
{
"Path": "HKCU:\\Control Panel\\Desktop",
"OriginalValue": "1",
"Name": "MenuShowDelay",
"Value": "1",
"Type": "DWord"
},
{
"Path": "HKCU:\\Control Panel\\Desktop",
"OriginalValue": "1",
"Name": "AutoEndTasks",
"Value": "1",
"Type": "DWord"
},
{
"Path": "HKLM:\\SYSTEM\\CurrentControlSet\\Control\\Session Manager\\Memory Management",
"OriginalValue": "0",
"Name": "ClearPageFileAtShutdown",
"Value": "0",
"Type": "DWord"
},
{
"Path": "HKLM:\\SYSTEM\\ControlSet001\\Services\\Ndu",
"OriginalValue": "1",
"Name": "Start",
"Value": "2",
"Type": "DWord"
},
{
"Path": "HKCU:\\Control Panel\\Mouse",
"OriginalValue": "400",
"Name": "MouseHoverTime",
"Value": "400",
"Type": "String"
},
{
"Path": "HKLM:\\SYSTEM\\CurrentControlSet\\Services\\LanmanServer\\Parameters",
"OriginalValue": "20",
"Name": "IRPStackSize",
"Value": "30",
"Type": "DWord"
},
{
"Path": "HKCU:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Windows Feeds",
"OriginalValue": "1",
"Name": "EnableFeeds",
"Value": "0",
"Type": "DWord"
},
{
"Path": "HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Feeds",
"OriginalValue": "1",
"Name": "ShellFeedsTaskbarViewMode",
"Value": "2",
"Type": "DWord"
},
{
"Path": "HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"OriginalValue": "1",
"Name": "HideSCAMeetNow",
"Value": "1",
"Type": "DWord"
},
{
"Path": "HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\UserProfileEngagement",
"OriginalValue": "1",
"Name": "ScoobeSystemSettingEnabled",
"Value": "0",
"Type": "DWord"
}
],
"InvokeScript": [
"
bcdedit /set `{current`} bootmenupolicy Legacy | Out-Null
If ((get-ItemProperty -Path \"HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\" -Name CurrentBuild).CurrentBuild -lt 22557) {
$taskmgr = Start-Process -WindowStyle Hidden -FilePath taskmgr.exe -PassThru
Do {
Start-Sleep -Milliseconds 100
$preferences = Get-ItemProperty -Path \"HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\TaskManager\" -Name \"Preferences\" -ErrorAction SilentlyContinue
} Until ($preferences)
Stop-Process $taskmgr
$preferences.Preferences[28] = 0
Set-ItemProperty -Path \"HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\TaskManager\" -Name \"Preferences\" -Type Binary -Value $preferences.Preferences
}
Remove-Item -Path \"HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A}\" -Recurse -ErrorAction SilentlyContinue
# Fix Managed by your organization in Edge if regustry path exists then remove it
If (Test-Path \"HKLM:\\SOFTWARE\\Policies\\Microsoft\\Edge\") {
Remove-Item -Path \"HKLM:\\SOFTWARE\\Policies\\Microsoft\\Edge\" -Recurse -ErrorAction SilentlyContinue
}
# Group svchost.exe processes
$ram = (Get-CimInstance -ClassName Win32_PhysicalMemory | Measure-Object -Property Capacity -Sum).Sum / 1kb
Set-ItemProperty -Path \"HKLM:\\SYSTEM\\CurrentControlSet\\Control\" -Name \"SvcHostSplitThresholdInKB\" -Type DWord -Value $ram -Force
$autoLoggerDir = \"$env:PROGRAMDATA\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\"
If (Test-Path \"$autoLoggerDir\\AutoLogger-Diagtrack-Listener.etl\") {
Remove-Item \"$autoLoggerDir\\AutoLogger-Diagtrack-Listener.etl\"
}
icacls $autoLoggerDir /deny SYSTEM:`(OI`)`(CI`)F | Out-Null
# Disable Defender Auto Sample Submission
Set-MpPreference -SubmitSamplesConsent 2 -ErrorAction SilentlyContinue | Out-Null
"
],
"link": "https://christitustech.github.io/winutil/dev/tweaks/Essential-Tweaks/Tele"
}
Invoke Script¶
bcdedit /set `{current`} bootmenupolicy Legacy | Out-Null
If ((get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" -Name CurrentBuild).CurrentBuild -lt 22557) {
$taskmgr = Start-Process -WindowStyle Hidden -FilePath taskmgr.exe -PassThru
Do {
Start-Sleep -Milliseconds 100
$preferences = Get-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\TaskManager" -Name "Preferences" -ErrorAction SilentlyContinue
} Until ($preferences)
Stop-Process $taskmgr
$preferences.Preferences[28] = 0
Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\TaskManager" -Name "Preferences" -Type Binary -Value $preferences.Preferences
}
Remove-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A}" -Recurse -ErrorAction SilentlyContinue
# Fix Managed by your organization in Edge if regustry path exists then remove it
If (Test-Path "HKLM:\SOFTWARE\Policies\Microsoft\Edge") {
Remove-Item -Path "HKLM:\SOFTWARE\Policies\Microsoft\Edge" -Recurse -ErrorAction SilentlyContinue
}
# Group svchost.exe processes
$ram = (Get-CimInstance -ClassName Win32_PhysicalMemory | Measure-Object -Property Capacity -Sum).Sum / 1kb
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control" -Name "SvcHostSplitThresholdInKB" -Type DWord -Value $ram -Force
$autoLoggerDir = "$env:PROGRAMDATA\Microsoft\Diagnosis\ETLLogs\AutoLogger"
If (Test-Path "$autoLoggerDir\AutoLogger-Diagtrack-Listener.etl") {
Remove-Item "$autoLoggerDir\AutoLogger-Diagtrack-Listener.etl"
}
icacls $autoLoggerDir /deny SYSTEM:`(OI`)`(CI`)F | Out-Null
# Disable Defender Auto Sample Submission
Set-MpPreference -SubmitSamplesConsent 2 -ErrorAction SilentlyContinue | Out-Null
Registry Changes¶
Applications and System Components store and retrieve configuration data to modify windows settings, so we can use the registry to change many settings in one place.
You can find information about the registry on Wikipedia and Microsoft’s Website.
Registry Key: AllowTelemetry¶
Type: DWord
Original Value: 1
New Value: 0
Registry Key: AllowTelemetry¶
Type: DWord
Original Value: 1
New Value: 0
Registry Key: ContentDeliveryAllowed¶
Type: DWord
Original Value: 1
New Value: 0
Registry Key: OemPreInstalledAppsEnabled¶
Type: DWord
Original Value: 1
New Value: 0
Registry Key: PreInstalledAppsEnabled¶
Type: DWord
Original Value: 1
New Value: 0
Registry Key: PreInstalledAppsEverEnabled¶
Type: DWord
Original Value: 1
New Value: 0
Registry Key: SilentInstalledAppsEnabled¶
Type: DWord
Original Value: 1
New Value: 0
Registry Key: SubscribedContent-338387Enabled¶
Type: DWord
Original Value: 1
New Value: 0
Registry Key: SubscribedContent-338388Enabled¶
Type: DWord
Original Value: 1
New Value: 0
Registry Key: SubscribedContent-338389Enabled¶
Type: DWord
Original Value: 1
New Value: 0
Registry Key: SubscribedContent-353698Enabled¶
Type: DWord
Original Value: 1
New Value: 0
Registry Key: SystemPaneSuggestionsEnabled¶
Type: DWord
Original Value: 1
New Value: 0
Registry Key: NumberOfSIUFInPeriod¶
Type: DWord
Original Value: 0
New Value: 0
Registry Key: DoNotShowFeedbackNotifications¶
Type: DWord
Original Value: 0
New Value: 1
Registry Key: DisableTailoredExperiencesWithDiagnosticData¶
Type: DWord
Original Value: 0
New Value: 1
Registry Key: DisabledByGroupPolicy¶
Type: DWord
Original Value: 0
New Value: 1
Registry Key: Disabled¶
Type: DWord
Original Value: 0
New Value: 1
Registry Key: DODownloadMode¶
Type: DWord
Original Value: 1
New Value: 1
Registry Key: fAllowToGetHelp¶
Type: DWord
Original Value: 1
New Value: 0
Registry Key: EnthusiastMode¶
Type: DWord
Original Value: 0
New Value: 1
Registry Key: ShowTaskViewButton¶
Type: DWord
Original Value: 1
New Value: 0
Registry Key: PeopleBand¶
Type: DWord
Original Value: 1
New Value: 0
Registry Key: LaunchTo¶
Type: DWord
Original Value: 1
New Value: 1
Registry Key: LongPathsEnabled¶
Type: DWord
Original Value: 0
New Value: 1
Registry Key: SearchOrderConfig¶
Type: DWord
Original Value: 1
New Value: 1
Registry Key: SystemResponsiveness¶
Type: DWord
Original Value: 1
New Value: 0
Registry Key: NetworkThrottlingIndex¶
Type: DWord
Original Value: 1
New Value: 4294967295
Type: DWord
Original Value: 1
New Value: 1
Registry Key: AutoEndTasks¶
Type: DWord
Original Value: 1
New Value: 1
Registry Key: ClearPageFileAtShutdown¶
Type: DWord
Original Value: 0
New Value: 0
Registry Key: Start¶
Type: DWord
Original Value: 1
New Value: 2
Registry Key: MouseHoverTime¶
Type: String
Original Value: 400
New Value: 400
Registry Key: IRPStackSize¶
Type: DWord
Original Value: 20
New Value: 30
Registry Key: EnableFeeds¶
Type: DWord
Original Value: 1
New Value: 0
Registry Key: ShellFeedsTaskbarViewMode¶
Type: DWord
Original Value: 1
New Value: 2
Registry Key: HideSCAMeetNow¶
Type: DWord
Original Value: 1
New Value: 1
Registry Key: ScoobeSystemSettingEnabled¶
Type: DWord
Original Value: 1
New Value: 0
Scheduled Task Changes¶
Windows scheduled tasks are used to run scripts or programs at specific times or events. Disabling unnecessary tasks can improve system performance and reduce unwanted background activity.
You can find information about scheduled tasks on Wikipedia and Microsoft’s Website.
Task Name: Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser¶
State: Disabled
Original State: Enabled
Task Name: Microsoft\Windows\Application Experience\ProgramDataUpdater¶
State: Disabled
Original State: Enabled
Task Name: Microsoft\Windows\Autochk\Proxy¶
State: Disabled
Original State: Enabled
Task Name: Microsoft\Windows\Customer Experience Improvement Program\Consolidator¶
State: Disabled
Original State: Enabled
Task Name: Microsoft\Windows\Customer Experience Improvement Program\UsbCeip¶
State: Disabled
Original State: Enabled
Task Name: Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector¶
State: Disabled
Original State: Enabled
Task Name: Microsoft\Windows\Feedback\Siuf\DmClient¶
State: Disabled
Original State: Enabled
Task Name: Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload¶
State: Disabled
Original State: Enabled
Task Name: Microsoft\Windows\Windows Error Reporting\QueueReporting¶
State: Disabled
Original State: Enabled
Task Name: Microsoft\Windows\Application Experience\MareBackup¶
State: Disabled
Original State: Enabled
Task Name: Microsoft\Windows\Application Experience\StartupAppTask¶
State: Disabled
Original State: Enabled
Task Name: Microsoft\Windows\Application Experience\PcaPatchDbTask¶
State: Disabled
Original State: Enabled
Task Name: Microsoft\Windows\Maps\MapsUpdateTask¶
State: Disabled
Original State: Enabled
View the JSON file