1. MSMG

    MSMG MDL Developer

    Jul 15, 2011
    6,414
    15,608
    210
    In Toolkit, TK_NTUSER referes to \Users\Default\ntuser.dat

    For live system, change TK_NTUSER to HKEY_CURRENT_USER

     
  2. Yanta

    Yanta MDL Senior Member

    May 21, 2017
    477
    274
    10
    #14463 Yanta, Mar 18, 2020
    Last edited: Mar 18, 2020
    Oh darn!

    So...
    HKLM\TK_NTUSER becomes \HKCU
    HKLM\TK_SOFTWARE is \HKLM\Software
    HKLM\TK_SYSTEM is \HKLM\System

    and

    HKLM\TK_DEFAULT becomes ???
     
  3. MSMG

    MSMG MDL Developer

    Jul 15, 2011
    6,414
    15,608
    210
    Services are under

    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services


    HKLM\TK_DEFAULT is HKEY_USERS\.DEFAULT

     
  4. LittlePro

    LittlePro MDL Senior Member

    Jan 19, 2017
    389
    138
    10
    #14465 LittlePro, Mar 18, 2020
    Last edited: Mar 18, 2020
    1. I read somewhere that Task Scheduler try to launch disabled things, apps, telemetry again & again but my understanding of the fact is very little.
    2. I was also checking Autoruns the other day with the option : Show Windows & Microsoft entries. What better if we can kill / disable the things on startup itself.
    ( I see it in you. So, what good if you use Autoruns with Process Monitor & Process Explorer )
    3. Event Log errors ? It reminds me of ''blackviper's service configurations for win 7'' & its obvious, isn't it ? System tries to launch something, gathers resources, initiates procesess & halted just at the final point! It has to be killed from the root, taking out all the branches & finally the tree but what to do if one of the branch is also shared /required among wanted components.
    4. I was very much interested in mounting the live os in the toolkit & make the changes straight from there. OP sir has plans for it.
    5. And I forgot to mention that before renaming the things, better kill them in Task Manager before hand.

    Thanks. ...
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. chrisk

    chrisk MDL Novice

    Mar 18, 2020
    2
    1
    0
    Windows Defender reports Trojan:Win32/Zpevdo.A
    in ToolKit_v9.6.7z downloaded from this forum. :(
     
  6. trim18

    trim18 MDL Novice

    Mar 2, 2018
    32
    16
    0
    Hi @ll . . . are SomeMan in drouble with 19o3-19o9 an DisPlay Brightness Profiles ! ? Have checked to late that for Portabe PC (-: DragTops :) there are no Option for :-DisPlay:) Brightness Profiles on Accu and or PSU use . MayBe SomeMan have an Regedit Tweak or Mach2 Cr@ck ! ? !

    Please * * * * *

    Th@nks ! ! ! ! !
     
  7. MSMG

    MSMG MDL Developer

    Jul 15, 2011
    6,414
    15,608
    210
    Known Issues:
    =============

    - Using ToolKit with Antivirus Programs enabled can affect the ToolKit's operations.
    - ToolKit's ToolKitHelper.exe may be flagged as a Virus/Trojan/Malware Program, Don't worry it's just a False Positive Sign.
    - The ToolKit won't support Post-Servicing of ToolKit serviced source images with other similar tools.


    Do use normal text size in forums.

     
  8. chrisk

    chrisk MDL Novice

    Mar 18, 2020
    2
    1
    0
    Many thanks for the quick reply. :)
    [ I just pasted the text from the browser tab, where Defender redirected to for the explanation, & I didn't realise that it wasn't normal size before I posted. :( ]
     
  9. Yanta

    Yanta MDL Senior Member

    May 21, 2017
    477
    274
    10
    #14470 Yanta, Mar 19, 2020
    Last edited: Mar 19, 2020
    So, is this correct?

    Code:
    HKLM\TK_DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Windows Search"
    ::
    HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Windows Search"
    
    and also, because it is defined for the current user also;

    Code:
    "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Windows Search"
    
    Toolkit lines 21850 and 21863.
     
  10. raptorddd

    raptorddd MDL Addicted

    Aug 17, 2019
    732
    281
    30
    @MSMG or anyone else.. if i want to use wondows 8.1 pro wich version of toolkit do i use.? for removal of components on windows 8.1 the packagelist i i use on last version of toolkit works also for windows 8.1 or i i need a specific version of msmgtoolkit and has its own pakage list rwmover.?
    or if anyone knows good source for already done .ISO please share.
     
  11. LittlePro

    LittlePro MDL Senior Member

    Jan 19, 2017
    389
    138
    10
    From the very first post spoiler :

    Code:
    For Windows 7 - Windows 10 v1803 Component removal use v8.8
    Thanks. ...
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  12. windows builder

    windows builder MDL Guru

    Sep 13, 2017
    2,219
    1,555
    90
    @MSMG
    How to return a deleted Xbox item in the Settings window?

    2020-03-19 001.png
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  13. trim18

    trim18 MDL Novice

    Mar 2, 2018
    32
    16
    0

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer]
    "SettingsPageVisibility"="hide:gaming-broadcasting;gaming-gamebar;gaming-gamedvr;gaming-gamemode;gaming-trueplay;gaming-xboxnetworking"

    Go to Regedit and Remove - "hide:gaming-broadcasting;gaming-gamebar;gaming-gamedvr;gaming-gamemode;gaming-trueplay;gaming-xboxnetworking"
     
  14. kovadimka

    kovadimka MDL Novice

    Mar 19, 2020
    40
    12
    0
    Hi. Seems like EdgeChromium_w7_x64 doesn't work properly. All pages open with "This page is having a problem" message.
     
  15. sonnet

    sonnet MDL Novice

    Aug 23, 2007
    10
    0
    0
    Can MSMG toolkit be used to remove components from a iso containing .swm file?
    I've downloaded a recovery DVD from the manufacturer of my tablet. Unpacking the iso,
    it extract a big .swm file divided in 2 chunks, + a boot.wim file.
     
  16. Bloccasterzo

    Bloccasterzo MDL Novice

    Aug 27, 2018
    2
    0
    0
    Hi. What's the component that remove the Windows Media Feature Pack?
    In my specific case, when i play Nioh, the cutscenes are not played, (and It gives me this error "Failure to play movie (RTM_ID_0001)", probably a codec issue). Note that all these cutscenes are .WMV files (I can open them simply double-clicking the file in the folder). I already tried leaving untouched the Windows Media Player feature and Windows Store, but these movies still won't play.

    Thank you

    PS: I'm using Windows 10 Home
     
  17. MSMG

    MSMG MDL Developer

    Jul 15, 2011
    6,414
    15,608
    210
    Yes it's correct.

    In offline image, the ntuser.dat hive used from the default user folder which will serve as a template for new users.
    In Online image, the ntuser.dat hive used from the user logged on folder.

    To get the actual registry hives list

    Code:
    Windows Registry Editor Version 5.00
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\hivelist]
    "\\REGISTRY\\MACHINE\\HARDWARE"=""
    "\\REGISTRY\\MACHINE\\SAM"="\\Device\\HarddiskVolume2\\Windows\\System32\\config\\SAM"
    "\\REGISTRY\\MACHINE\\SECURITY"="\\Device\\HarddiskVolume2\\Windows\\System32\\config\\SECURITY"
    "\\REGISTRY\\MACHINE\\SYSTEM"="\\Device\\HarddiskVolume2\\Windows\\System32\\config\\SYSTEM"
    "\\REGISTRY\\USER\\.DEFAULT"="\\Device\\HarddiskVolume2\\Windows\\System32\\config\\DEFAULT"
    "\\REGISTRY\\MACHINE\\SOFTWARE"="\\Device\\HarddiskVolume2\\Windows\\System32\\config\\SOFTWARE"
    "\\REGISTRY\\MACHINE\\BCD00000000"="\\Device\\HarddiskVolume1\\Boot\\BCD"
    "\\REGISTRY\\USER\\S-1-5-20"="\\Device\\HarddiskVolume2\\Windows\\ServiceProfiles\\NetworkService\\NTUSER.DAT"
    "\\REGISTRY\\USER\\S-1-5-19"="\\Device\\HarddiskVolume2\\Windows\\ServiceProfiles\\LocalService\\NTUSER.DAT"
    "\\REGISTRY\\USER\\S-1-5-21-3655912410-3539877339-157935435-1000"="\\Device\\HarddiskVolume2\\Users\\<User-Name>\\NTUSER.DAT"
    "\\REGISTRY\\USER\\S-1-5-21-3655912410-3539877339-157935435-1000_Classes"="\\Device\\HarddiskVolume2\\Users\\<User-Name>\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat"
    
    

     
  18. MSMG

    MSMG MDL Developer

    Jul 15, 2011
    6,414
    15,608
    210
    Will checkout, did you try updating the Edge from the about menu?