Windows 10: My Windows 10 OS was just almost ruined by a glitch on registry file association. The cause...

I tried to view some compressed vector images SVGZ format. When the "open with" dialog window was shown, I chose Google Chrome and checked "Always use this program". Then I suddenly noticed that all the SVGZ and exe file icons change to Google Chrome icon.

Then, whenever I ran an exe file, Google Chrome pops up and asks me to download that EXE. I even couldn't run any program from Win+R window or from command prompt because that will also open Google Chrome instead. Luckily I had a PowerShell window still opened and ran "reg query" to check out the problem regedit won't work because that will pop up Chrome, but reg worked, I guess because of the argument attached?.

Turns out the default value for HKEY_CLASSES_ROOT\.exe was mistakenly changed from "exefile" to "svgz_auto_file". Changing it back by running reg add HKCR\.exe /ve /d "exefile" and restarting the explorer solved the problem I was glad it worked, otherwise I couldn't even start explorer anymore.

It just blowed my mind how Windows can mistake SVGZ to EXE. These two just look in no way similar at all. Another thing that annoys me is that M$ blocked editing of many keys by assining TrustedInstaller the ownership of those keys, but left something as crucial as HKEY_CLASSES_ROOT\.exe open.

Although I am also partially responsible for this mess because I added full permission for this key to myself, a quick check on my workplace computer shows that by default Administrator also has full permission on this key.

This means basically you can just send anyone a malicious REG file which alters HKEY_CLASSES_ROOT\.exe key and if they were tricked to merge the REG file the action requires UAC popup and elevation to Administrator anyway it can instantely cripple their system.

:)

 

File Association Helper in Startup

from another forum on May 6, 2018:
You can uninstall File Association Helper in less than 5 minutes. Here are the steps to follow:

Step 1 — Uninstall File Association Helper via Control Panel

Simply go to Start > type Control Panel > double click the first result to launch Control Panel.
Then go to Uninstall a program > locate File Association Helper in the list and select it
Select Uninstall > wait until Windows completely removes FAH from your PC.
Restart your PC.
Step 2 — Clean the Registry Editor

Now that you removed the program, you also need to remove any traces or file changes associated with it. To do that, you need to open the Registry Editor.

Go to Start > type “regedit” > launch the Registry Editor
Locate the following keys and delete them:
KEY_CURRENT_USERSoftwareFile Association Helper
HKEY_LOCAL_MACHINESoftwareFile Association Helper

Step 3 — Check all the hidden files and folders

File Association Helper may have left behind various hidden files and folders. In order to completely remove the software, you can also need to delete these files. Here’s how to do that:

Simply go to Start > type Control Panel > double click the first result to launch Control Panel. On Windows 10, you can also type “Show hidden files and folder” in the search box. Then simply check Show hidden files, folders and drives and jump straight to step number 3.
RECOMMENDED: Click here to fix common PC issues and speed up your system
Go to Folder > select Show Hidden Files and Folders
Locate the following folders:
Crogram FilesFile Association Helper
C*Biggrinocument and SettingsAll UsersApplication DataFile Association Helper
C*Biggrinocuments and Settings%USER%Application DataFile Association Helper

4. Delete them and then restart your PC.

Step 4 — Empty Temp Folder

The final step is to clean the Temp folder where all the temporary files are stored. To empty the folder, go to Start and type the %temp% command.

This will open the Temp folders. You can now empty them. If the system displays an error message when deleting some files, leave them. The files might be in use by Windows services or some running software.

Step 5 — Use a dedicated tool to remove software leftovers

After you performed all the steps listed above, you have removed 99.9% of all the files and folders left behind by File Association Helper. However, there may be a few file that escaped your scrutiny. In order to make sure that you have removed all of them, you can also use a dedicated software uninstaller.

These applications are specially designed to remove the selected application along with all of its files and registry entries. As a result, the application will be completely removed from your PC.

There are many great uninstaller tools available on the market, but the best are IOBit Uninstaller and Revo Uninstaller so feel free to try any of these tools.

 

Windows 10 Tweaks

Pressing “Windows+Pause Break” (it’s up there next to scroll lock) opens the “System” Window.

Windows 10: In the new version of Windows, Explorer has a section called Quick Access. This includes your frequent folders and recent files. Explorer defaults to opening this page when you open a new window. If you’d rather open the usual This PC, with links to your drives and library folders, follow these steps:

• Open a new Explorer window.
• Click View in the ribbon.
• Click Options.
• Under General, next to “Open File Explorer to:” choose “This PC.”
• Click OK

credit to Lifehacker.

 

Recent File List

Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file1

Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file2
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file3
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file4
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file5
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file6
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file7
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file8
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file9
...

you get the idea. ( too lazy to put it in a for loop and test it.

or just open regedit and remove all the fileX from that key.