nuama
1 Nickel

What exact files and registry entries has SupportAssist deleted/modified/created?

I'd like to see a list of files and registry entries, not the output it has shown me below.

How do I get this?



When SupportAssist optimizes your system, a record of settings and adjustments are saved here as events, listed in descending chronological order:

- Deleted Files: 0

- Recovered Storage: 0MB

-Optimization Done: 6

  • : 1

  • Delete Internet Temporary Files on Close: 1

  • Disable Task Offload: 1

  • HTTP1.1: 1

  • Network Throttling Mechanism: 1

  • Slow Link Detection: 1

- Viruses Detected: 0

- Viruses Deleted: 0

- Fix Status: Failure

  • : 1

  • Delete Internet Temporary Files on Close: 1

  • Disable Task Offload: 1

  • HTTP1.1: 1

  • Network Throttling Mechanism: 1

  • Slow Link Detection: 1

- Deleted Files: 0

- Recovered Storage: 0MB

-Optimization Done: 430

  • Registry Cleaner: 423

  • Disable Paging Executive: 1

  • Distributed Link Tracking Client: 1

  • Microsoft iSCSI Initiator Service: 1

  • Naming Convention: 1

  • Recycle Bin Size: 1

  • Windows Biometric Service: 1

  • Windows Script Host: 1

- Viruses Detected: 0

- Viruses Deleted: 0

- Fix Status: Failure

  • Registry Cleaner: 423

  • Disable Paging Executive: 1

  • Distributed Link Tracking Client: 1

  • Microsoft iSCSI Initiator Service: 1

  • Naming Convention: 1

  • Recycle Bin Size: 1

  • Windows Biometric Service: 1

  • Windows Script Host: 1

- Deleted Files: 4359

  • Application: 23

  • System: 4335

  • Windows Explorer: 1

- Recovered Storage: 633MB

  • Application: 0

  • System: 633

  • Windows Explorer: 0

16 Replies

RE: What exact files and registry entries has SupportAssist deleted/modified/created?

HI Nuama,

Thanks for contacting us on the forum. This information is currently not displayed in the SupportAssist application, Neither the details are stored in the file system as a log file for this application. I can refer this as a request to the product team.

Thanks

Kusuma.

Tags (1)
Cape14
1 Nickel

RE: What exact files and registry entries has SupportAssist

I think this is completely unacceptable.
It is not possible for a program to decide what to delete from the PC without asking before for confirmation and giving a correct report at the end.

We are talking about a program that remove applications and registry keys, but does not tell us which ones.
Does it a backup first?
Not well at all. I am removing this software

ErikLockwar
1 Nickel

RE: What exact files and registry entries has SupportAssist

In my organization, this software caused (and still causing) a lot of issues.

- Netlogon set to manual

- Completely 'destroyed' my AppV infrastructure

I'm struggling to understand the changes made to avoid to re-install 30+ PC.

This is unacceptable: we NEED a DETAILED list of changes made by this software.

johndoepls
1 Copper

RE: What exact files and registry entries has SupportAssist

Would be really nice to know what this program changed of my network settings. Since running the optimization, websites usually do not load first time causing me to have to refresh page. While browsing some sites load incomplete. I never had this issue before.

ErikLockwar
1 Nickel

RE: What exact files and registry entries has SupportAssist

I tracked down the registry (deleted and, most importantly, modified) to revert my configuration... at least, this is related to my PCs.

I can't post the entire list due to post limitation (20.000 characters). Here's the 'modified' list of registry keys: 

MODIFIED:
"Time of Day","Process Name","PID","Operation","Path","Result","Detail"
"10:17:48,3600755","SRE.exe","3092","RegSetValue","HKLM\SOFTWARE\WOW6432Node\Microsoft\WBEM\CIMOM\Log File Max Size","SUCCESS","Type: REG_SZ, Length: 12, Data: 65536"
"10:17:48,7796978","SRE.exe","3092","RegSetValue","HKCU\Software\Classes\Local Settings\MuiCache\3\52C64B7E\LanguageList","SUCCESS","Type: REG_MULTI_SZ, Length: 20, Data: en-US, en"
"10:17:48,7805957","SRE.exe","3092","RegSetValue","HKCU\Software\Classes\Local Settings\MuiCache\3\52C64B7E\LanguageList","SUCCESS","Type: REG_MULTI_SZ, Length: 20, Data: en-US, en"
"10:17:48,7817972","SRE.exe","3092","RegSetValue","HKCU\Software\Classes\Local Settings\MuiCache\3\52C64B7E\LanguageList","SUCCESS","Type: REG_MULTI_SZ, Length: 20, Data: en-US, en"
"10:17:48,7827811","SRE.exe","3092","RegSetValue","HKCU\Software\Classes\Local Settings\MuiCache\3\52C64B7E\LanguageList","SUCCESS","Type: REG_MULTI_SZ, Length: 20, Data: en-US, en"
"10:18:53,3058439","SRE.exe","3092","RegSetValue","HKLM\System\CurrentControlSet\Services\cdrom\AutoRun","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:18:53,3060084","SRE.exe","3092","RegSetValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoRun","SUCCESS","Type: REG_DWORD, Length: 4, Data: 91"
"10:18:53,3064898","SRE.exe","3092","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoRun","SUCCESS","Type: REG_DWORD, Length: 4, Data: 91"
"10:18:53,3068719","SRE.exe","3092","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\DisableAutoplay","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:18:53,4920119","SRE.exe","3092","RegSetValue","HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management\DisablePagingExecutive","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:18:53,5614223","SRE.exe","3092","RegSetValue","HKLM\System\CurrentControlSet\Control\FileSystem\NtfsDisable8dot3NameCreation","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:18:53,5825960","SRE.exe","3092","RegSetValue","HKLM\System\CurrentControlSet\Services\Netlogon\Start","SUCCESS","Type: REG_DWORD, Length: 4, Data: 3"
"10:18:53,7470142","SRE.exe","3092","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{4516042d-0000-0000-0000-602200000000}\MaxCapacity","SUCCESS","Type: REG_DWORD, Length: 4, Data: 11419"
"10:18:53,9002228","SRE.exe","3092","RegSetValue","HKLM\System\CurrentControlSet\Services\WbioSrvc\Start","SUCCESS","Type: REG_DWORD, Length: 4, Data: 3"
"10:18:53,9941410","SRE.exe","3092","RegSetValue","HKLM\SOFTWARE\Microsoft\Windows Script Host\Settings\Enabled","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:18:53,9947237","SRE.exe","3092","RegSetValue","HKCU\Software\Microsoft\Windows Script Host\Settings\Enabled","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:18:54,1328678","SRE.exe","3092","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:18:54,1329107","SRE.exe","3092","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:18:54,1329330","SRE.exe","3092","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:18:54,1329541","SRE.exe","3092","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:18:54,1359880","SRE.exe","3092","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:18:54,1360074","SRE.exe","3092","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:18:54,1360224","SRE.exe","3092","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:18:54,1360402","SRE.exe","3092","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"

 

0 Kudos
IT_Op
1 Copper

RE: What exact files and registry entries has SupportAssist

I have "the same" issue. 
After the "Tune Performance" from Support Assist my SCCM has issues with some of the deployed applications.
All applications with the "detection method" checking the Windows Installer MSI GUID cannot be recognized from sccm. The applications are still working and are still installed but after the Support Assist Tune Performance SCCM cannot manage them.

 

0 Kudos
ErikLockwar
1 Nickel

RE: What exact files and registry entries has SupportAssist

Che the two most important modified 'things': the Netlogon service set to manual and NtfsDisable8dot3NameCreation set to 'false' (registry key).

 

0 Kudos
jinjaninja2
1 Copper

RE: What exact files and registry entries has SupportAssist

There are a load of log files if you look for them...

C:\ProgramData\SupportAssist\Client\Agent\logs

Which identifies log files in

C:\ProgramData\SupportAssist\Client\SRE\ExtendedLogs

You also have logs in the below folder

C:\ProgramData\SupportAssist\Client\TechnicianToolkit\Library\Logs

There are also registry logs and backups here

C:\ProgramData\SupportAssist\Client\TechnicianToolkit\Library\RegBackup

Also you can just stop it from scanning for the extra scans by disabling the Auto-optimize (at the bottom of the Home screen so at least it will still do a scheduled check for driver and firmware updates.

Happy log hunting

 

kbrauner
1 Nickel

RE: What exact files and registry entries has SupportAssist

The "Settings" for SupportAssist is completely worthless. 

For example, for the "Clean Files" function "settings" ought to allow one to pick and choose what files are to be "cleaned."  In particular, I don't want my "Recycle Bin" monkeyed with.  Apparently SupportAssist emptied my Recycle Bin without my knowledge or permission.  I was/am very upset by this turn of events.

For the "Tune Performance" function, I don't have a clue what functions are being altered.  I want to have some control over this.