{"id":187998,"date":"2023-01-16T09:23:04","date_gmt":"2023-01-16T09:23:04","guid":{"rendered":"https:\/\/harchi90.com\/microsoft-script-recreates-shortcuts-deleted-by-bad-defender-asr-rule\/"},"modified":"2023-01-16T09:23:04","modified_gmt":"2023-01-16T09:23:04","slug":"microsoft-script-recreates-shortcuts-deleted-by-bad-defender-asr-rule","status":"publish","type":"post","link":"https:\/\/harchi90.com\/microsoft-script-recreates-shortcuts-deleted-by-bad-defender-asr-rule\/","title":{"rendered":"Microsoft script recreates shortcuts deleted by bad Defender ASR rule"},"content":{"rendered":"
\n

<\/p>\n

Microsoft released advanced hunting queries (AHQs) and a PowerShell script to find and recover some of the Windows application shortcuts deleted Friday morning by a buggy Microsoft Defender ASR rule.<\/p>\n

Early morning on January 13th, Microsoft released a new Microsoft Defender signature update that included a change to the Attack Surface Reduction (ASR) rule known as “Block Win32 API calls from Office macro” in Configuration Manager and “Win32 imports from Office macro code” in Intune.<\/p>\n

This rule detects and blocks malware from using VBA macros to call Win32 APIs.<\/p>\n

However, a bug in the updated rules caused Microsoft Defender to exhibit false positives, deleting application shortcuts from the desktop, the Start menu, and the Windows Taskbar.<\/p>\n

This faulty rule caused widespread disruption in corporate environments, with users unable to quickly launch their applications and Windows administrators scrambling to restore shortcuts.<\/p>\n

Microsoft later reverted the change in the new signature update 1.381.2164.0 but warned admins that it could take a few hours for the latest signatures to propagate to all environments.<\/p>\n

Script released to recreate deleted shortcuts<\/h2>\n

On Saturday morning, Microsoft released advanced hunting queries to find affected shortcuts and a PowerShell script to recreate shortcuts for some of the more commonly deleted applications.<\/p>\n

“Microsoft has confirmed steps that customers can take to recreate start menu links for a significant sub-set of the affected applications that were deleted,” Microsoft explained in a new support document.<\/p>\n

“These have been consolidated into the PowerShell script below to help enterprise administrators take recovery actions in their environment.”<\/p>\n

To determine the impact of this bug in your organization, Microsoft Defender hunting queries can be used to retrieve events from Friday associated with the faulty rule.<\/p>\n

If impacted, you can use this PowerShell script shared on GitHub, which will scan the HKLMSOFTWAREMicrosoftWindowsCurrentVersionApp Paths registry key to check if thirty-three different programs are installed on a computer.<\/p>\n

If a program is installed, the script will check if a corresponding shortcut exists in the Start Menu and, if not, recreate it.<\/p>\n

The list of applications whose shortcuts will be recreated are:<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Adobe Acrobat<\/td>\nAdobe Photoshop 2023<\/td>\n<\/tr>\n
Adobe Illustrator 2023<\/td>\nAdobe Creative Cloud<\/td>\n<\/tr>\n
Firefox Private Browsing<\/td>\nFirefox<\/td>\n<\/tr>\n
Google Chrome<\/td>\nMicrosoft Edge<\/td>\n<\/tr>\n
Notepad++<\/td>\nParallels Client<\/td>\n<\/tr>\n
Remote Desktop<\/td>\nTeamViewer<\/td>\n<\/tr>\n
Royal TS6<\/td>\nElgato StreamDeck<\/td>\n<\/tr>\n
Visual Studio 2022<\/td>\nVisual Studio Code<\/td>\n<\/tr>\n
Camtasia Studio<\/td>\nCamtasia Recorder<\/td>\n<\/tr>\n
Jabra Direct<\/td>\n7-Zip File Manager<\/td>\n<\/tr>\n
Access<\/td>\nExcel<\/td>\n<\/tr>\n
OneDrive<\/td>\nOneNote<\/td>\n<\/tr>\n
Outlook<\/td>\nPowerPoint<\/td>\n<\/tr>\n
Project<\/td>\nPublisher<\/td>\n<\/tr>\n
Visio<\/td>\nword<\/td>\n<\/tr>\n
PowerShell 7 (x64)<\/td>\nSQL Server Management Studio<\/td>\n<\/tr>\n
Azure Data Studio<\/td>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Organizations missing shortcuts for programs not listed above can modify the PowerShell script’s $programs<\/code> arrays to include other applications.<\/p>\n

Microsoft has also shared steps to deploy this script using Intune to devices in a Windows domain.<\/p>\n

For those who wish to recreate the shortcuts manually, Microsoft shared the following steps to repair the installation of a program.<\/p>\n

It should be noted that this process will take much longer, as in most cases, it will reinstall the entire program. Furthermore, not all applications offer a repair function.<\/p>\n

Repair an application in Windows 10:<\/strong><\/p>\n

    \n
  1. \n

    Select Start <\/strong> > Settings <\/strong> > Apps<\/strong> > Apps & features<\/strong><\/p>\n<\/li>\n

  2. \n

    Select the app you want to fix.<\/p>\n<\/li>\n

  3. \n

    Select Modify link under the name of the app if it is available.<\/p>\n<\/li>\n

  4. \n

    A new page will launch and allow you to select repair.<\/p>\n<\/li>\n<\/ol>\n

    Repair an application in Windows 11:<\/strong><\/p>\n

      \n
    1. \n

      Type \u201cInstalled Apps\u201d in the search bar.<\/p>\n<\/li>\n

    2. \n

      Click \u201cInstalled Apps\u201d.<\/p>\n<\/li>\n

    3. \n

      Select the app you want to fix.<\/p>\n<\/li>\n

    4. \n

      Click on \u201c\u2026\u201d<\/p>\n<\/li>\n

    5. \n

      Select Modify or Advanced Options if it is available.<\/p>\n<\/li>\n

    6. \n

      A new page will launch and allow you to select repair.<\/p>\n<\/li>\n<\/ol>\n

      Not a good enough solution<\/h2>\n

      While the released PowerShell script will help recreate shortcuts for some applications, Windows admins report that it does not work well enough.<\/p>\n

      The script only focuses on thirty-three programs, so it will not recreate the shortcuts for many other applications commonly installed on a computer.<\/p>\n

      However, even targeted applications like Microsoft Office are not having their shortcuts recreated in some cases.<\/p>\n

      “Unfortunately, this doesn’t restore Microsoft Office shortcuts which were deployed per-user – which is most 365 C2R installations. This is the default installation behavior for M365 deployed through Intune, so if this can be reflected in the script – this would be very helpful,” a Windows admin commented about the script.<\/p>\n

      Windows admins also commented that the script only recreates shortcuts in the Start Menu but fails to recreate those deleted from the Windows Taskbar Quick Launch toolbar or the Windows desktop.<\/p>\n

      As one admin noted, it may be possible to recover the Start Menu, Quick Launch bar, and Desktop shortcuts by retrieving them from Shadow Volume Copies.<\/p>\n

      Users can use tools like Shadow Explorer or ShadowCopyView to check if the shortcuts were saved in previous snapshots and simply copy them back to the system drive.<\/p>\n

      For those with many devices, using PowerShell to check for and recover the files from Shadow Volume Copies may also be possible.<\/p>\n

      Overall, this bug has created an enormous mess for Windows administrators and IT support, who will likely have to perform the tedious task of manually recreating some of the missing shortcuts.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

      Microsoft released advanced hunting queries (AHQs) and a PowerShell script to find and recover some of the Windows application shortcuts deleted Friday morning by a buggy Microsoft Defender ASR rule. Early morning on January 13th, Microsoft released a new Microsoft Defender signature update that included a change to the Attack Surface Reduction (ASR) rule known …<\/p>\n

      Microsoft script recreates shortcuts deleted by bad Defender ASR rule<\/span> Read More »<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"default","ast-global-header-display":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true},"categories":[4],"tags":[],"jetpack_publicize_connections":[],"yoast_head":"\nMicrosoft script recreates shortcuts deleted by bad Defender ASR rule - harchi90<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMidmh0dHBzOi8vd3d3LmJsZWVwaW5nY29tcHV0ZXIuY29tL25ld3MvbWljcm9zb2Z0L21pY3Jvc29mdC1zY3JpcHQtcmVjcmVhdGVzLXNob3J0Y3V0cy1kZWxldGVkLWJ5LWJhZC1kZWZlbmRlci1hc3ItcnVsZS_SAXpodHRwczovL3d3dy5ibGVlcGluZ2NvbXB1dGVyLmNvbS9uZXdzL21pY3Jvc29mdC9taWNyb3NvZnQtc2NyaXB0LXJlY3JlYXRlcy1zaG9ydGN1dHMtZGVsZXRlZC1ieS1iYWQtZGVmZW5kZXItYXNyLXJ1bGUvYW1wLw?oc=5\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft script recreates shortcuts deleted by bad Defender ASR rule - harchi90\" \/>\n<meta property=\"og:description\" content=\"Microsoft released advanced hunting queries (AHQs) and a PowerShell script to find and recover some of the Windows application shortcuts deleted Friday morning by a buggy Microsoft Defender ASR rule. Early morning on January 13th, Microsoft released a new Microsoft Defender signature update that included a change to the Attack Surface Reduction (ASR) rule known … Microsoft script recreates shortcuts deleted by bad Defender ASR rule Read More »\" \/>\n<meta property=\"og:url\" content=\"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMidmh0dHBzOi8vd3d3LmJsZWVwaW5nY29tcHV0ZXIuY29tL25ld3MvbWljcm9zb2Z0L21pY3Jvc29mdC1zY3JpcHQtcmVjcmVhdGVzLXNob3J0Y3V0cy1kZWxldGVkLWJ5LWJhZC1kZWZlbmRlci1hc3ItcnVsZS_SAXpodHRwczovL3d3dy5ibGVlcGluZ2NvbXB1dGVyLmNvbS9uZXdzL21pY3Jvc29mdC9taWNyb3NvZnQtc2NyaXB0LXJlY3JlYXRlcy1zaG9ydGN1dHMtZGVsZXRlZC1ieS1iYWQtZGVmZW5kZXItYXNyLXJ1bGUvYW1wLw?oc=5\" \/>\n<meta property=\"og:site_name\" content=\"harchi90\" \/>\n<meta property=\"article:published_time\" content=\"2023-01-16T09:23:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.bleepstatic.com\/content\/hl-images\/2021\/05\/26\/Microsoft-Defender.jpg\" \/>\n<meta name=\"author\" content=\"islamlacoste58\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.bleepstatic.com\/content\/hl-images\/2021\/05\/26\/Microsoft-Defender.jpg\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"islamlacoste58\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/harchi90.com\/microsoft-script-recreates-shortcuts-deleted-by-bad-defender-asr-rule\/\",\"url\":\"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMidmh0dHBzOi8vd3d3LmJsZWVwaW5nY29tcHV0ZXIuY29tL25ld3MvbWljcm9zb2Z0L21pY3Jvc29mdC1zY3JpcHQtcmVjcmVhdGVzLXNob3J0Y3V0cy1kZWxldGVkLWJ5LWJhZC1kZWZlbmRlci1hc3ItcnVsZS_SAXpodHRwczovL3d3dy5ibGVlcGluZ2NvbXB1dGVyLmNvbS9uZXdzL21pY3Jvc29mdC9taWNyb3NvZnQtc2NyaXB0LXJlY3JlYXRlcy1zaG9ydGN1dHMtZGVsZXRlZC1ieS1iYWQtZGVmZW5kZXItYXNyLXJ1bGUvYW1wLw?oc=5\",\"name\":\"Microsoft script recreates shortcuts deleted by bad Defender ASR rule - harchi90\",\"isPartOf\":{\"@id\":\"https:\/\/harchi90.com\/#website\"},\"datePublished\":\"2023-01-16T09:23:04+00:00\",\"dateModified\":\"2023-01-16T09:23:04+00:00\",\"author\":{\"@id\":\"https:\/\/harchi90.com\/#\/schema\/person\/0689156e87fbe869f0e5efdeef200d5b\"},\"breadcrumb\":{\"@id\":\"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMidmh0dHBzOi8vd3d3LmJsZWVwaW5nY29tcHV0ZXIuY29tL25ld3MvbWljcm9zb2Z0L21pY3Jvc29mdC1zY3JpcHQtcmVjcmVhdGVzLXNob3J0Y3V0cy1kZWxldGVkLWJ5LWJhZC1kZWZlbmRlci1hc3ItcnVsZS_SAXpodHRwczovL3d3dy5ibGVlcGluZ2NvbXB1dGVyLmNvbS9uZXdzL21pY3Jvc29mdC9taWNyb3NvZnQtc2NyaXB0LXJlY3JlYXRlcy1zaG9ydGN1dHMtZGVsZXRlZC1ieS1iYWQtZGVmZW5kZXItYXNyLXJ1bGUvYW1wLw?oc=5#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMidmh0dHBzOi8vd3d3LmJsZWVwaW5nY29tcHV0ZXIuY29tL25ld3MvbWljcm9zb2Z0L21pY3Jvc29mdC1zY3JpcHQtcmVjcmVhdGVzLXNob3J0Y3V0cy1kZWxldGVkLWJ5LWJhZC1kZWZlbmRlci1hc3ItcnVsZS_SAXpodHRwczovL3d3dy5ibGVlcGluZ2NvbXB1dGVyLmNvbS9uZXdzL21pY3Jvc29mdC9taWNyb3NvZnQtc2NyaXB0LXJlY3JlYXRlcy1zaG9ydGN1dHMtZGVsZXRlZC1ieS1iYWQtZGVmZW5kZXItYXNyLXJ1bGUvYW1wLw?oc=5\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMidmh0dHBzOi8vd3d3LmJsZWVwaW5nY29tcHV0ZXIuY29tL25ld3MvbWljcm9zb2Z0L21pY3Jvc29mdC1zY3JpcHQtcmVjcmVhdGVzLXNob3J0Y3V0cy1kZWxldGVkLWJ5LWJhZC1kZWZlbmRlci1hc3ItcnVsZS_SAXpodHRwczovL3d3dy5ibGVlcGluZ2NvbXB1dGVyLmNvbS9uZXdzL21pY3Jvc29mdC9taWNyb3NvZnQtc2NyaXB0LXJlY3JlYXRlcy1zaG9ydGN1dHMtZGVsZXRlZC1ieS1iYWQtZGVmZW5kZXItYXNyLXJ1bGUvYW1wLw?oc=5#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/harchi90.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft script recreates shortcuts deleted by bad Defender ASR rule\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/harchi90.com\/#website\",\"url\":\"https:\/\/harchi90.com\/\",\"name\":\"harchi90\",\"description\":\"Just another WordPress site\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/harchi90.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/harchi90.com\/#\/schema\/person\/0689156e87fbe869f0e5efdeef200d5b\",\"name\":\"islamlacoste58\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/harchi90.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/5bf7491076e3822b8e0de7b1f9364d75?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/5bf7491076e3822b8e0de7b1f9364d75?s=96&d=mm&r=g\",\"caption\":\"islamlacoste58\"},\"sameAs\":[\"http:\/\/harchi90.com\"],\"url\":\"https:\/\/harchi90.com\/author\/islamlacoste58\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Microsoft script recreates shortcuts deleted by bad Defender ASR rule - harchi90","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMidmh0dHBzOi8vd3d3LmJsZWVwaW5nY29tcHV0ZXIuY29tL25ld3MvbWljcm9zb2Z0L21pY3Jvc29mdC1zY3JpcHQtcmVjcmVhdGVzLXNob3J0Y3V0cy1kZWxldGVkLWJ5LWJhZC1kZWZlbmRlci1hc3ItcnVsZS_SAXpodHRwczovL3d3dy5ibGVlcGluZ2NvbXB1dGVyLmNvbS9uZXdzL21pY3Jvc29mdC9taWNyb3NvZnQtc2NyaXB0LXJlY3JlYXRlcy1zaG9ydGN1dHMtZGVsZXRlZC1ieS1iYWQtZGVmZW5kZXItYXNyLXJ1bGUvYW1wLw?oc=5","og_locale":"en_US","og_type":"article","og_title":"Microsoft script recreates shortcuts deleted by bad Defender ASR rule - harchi90","og_description":"Microsoft released advanced hunting queries (AHQs) and a PowerShell script to find and recover some of the Windows application shortcuts deleted Friday morning by a buggy Microsoft Defender ASR rule. Early morning on January 13th, Microsoft released a new Microsoft Defender signature update that included a change to the Attack Surface Reduction (ASR) rule known … Microsoft script recreates shortcuts deleted by bad Defender ASR rule Read More »","og_url":"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMidmh0dHBzOi8vd3d3LmJsZWVwaW5nY29tcHV0ZXIuY29tL25ld3MvbWljcm9zb2Z0L21pY3Jvc29mdC1zY3JpcHQtcmVjcmVhdGVzLXNob3J0Y3V0cy1kZWxldGVkLWJ5LWJhZC1kZWZlbmRlci1hc3ItcnVsZS_SAXpodHRwczovL3d3dy5ibGVlcGluZ2NvbXB1dGVyLmNvbS9uZXdzL21pY3Jvc29mdC9taWNyb3NvZnQtc2NyaXB0LXJlY3JlYXRlcy1zaG9ydGN1dHMtZGVsZXRlZC1ieS1iYWQtZGVmZW5kZXItYXNyLXJ1bGUvYW1wLw?oc=5","og_site_name":"harchi90","article_published_time":"2023-01-16T09:23:04+00:00","og_image":[{"url":"https:\/\/www.bleepstatic.com\/content\/hl-images\/2021\/05\/26\/Microsoft-Defender.jpg"}],"author":"islamlacoste58","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.bleepstatic.com\/content\/hl-images\/2021\/05\/26\/Microsoft-Defender.jpg","twitter_misc":{"Written by":"islamlacoste58","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/harchi90.com\/microsoft-script-recreates-shortcuts-deleted-by-bad-defender-asr-rule\/","url":"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMidmh0dHBzOi8vd3d3LmJsZWVwaW5nY29tcHV0ZXIuY29tL25ld3MvbWljcm9zb2Z0L21pY3Jvc29mdC1zY3JpcHQtcmVjcmVhdGVzLXNob3J0Y3V0cy1kZWxldGVkLWJ5LWJhZC1kZWZlbmRlci1hc3ItcnVsZS_SAXpodHRwczovL3d3dy5ibGVlcGluZ2NvbXB1dGVyLmNvbS9uZXdzL21pY3Jvc29mdC9taWNyb3NvZnQtc2NyaXB0LXJlY3JlYXRlcy1zaG9ydGN1dHMtZGVsZXRlZC1ieS1iYWQtZGVmZW5kZXItYXNyLXJ1bGUvYW1wLw?oc=5","name":"Microsoft script recreates shortcuts deleted by bad Defender ASR rule - harchi90","isPartOf":{"@id":"https:\/\/harchi90.com\/#website"},"datePublished":"2023-01-16T09:23:04+00:00","dateModified":"2023-01-16T09:23:04+00:00","author":{"@id":"https:\/\/harchi90.com\/#\/schema\/person\/0689156e87fbe869f0e5efdeef200d5b"},"breadcrumb":{"@id":"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMidmh0dHBzOi8vd3d3LmJsZWVwaW5nY29tcHV0ZXIuY29tL25ld3MvbWljcm9zb2Z0L21pY3Jvc29mdC1zY3JpcHQtcmVjcmVhdGVzLXNob3J0Y3V0cy1kZWxldGVkLWJ5LWJhZC1kZWZlbmRlci1hc3ItcnVsZS_SAXpodHRwczovL3d3dy5ibGVlcGluZ2NvbXB1dGVyLmNvbS9uZXdzL21pY3Jvc29mdC9taWNyb3NvZnQtc2NyaXB0LXJlY3JlYXRlcy1zaG9ydGN1dHMtZGVsZXRlZC1ieS1iYWQtZGVmZW5kZXItYXNyLXJ1bGUvYW1wLw?oc=5#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMidmh0dHBzOi8vd3d3LmJsZWVwaW5nY29tcHV0ZXIuY29tL25ld3MvbWljcm9zb2Z0L21pY3Jvc29mdC1zY3JpcHQtcmVjcmVhdGVzLXNob3J0Y3V0cy1kZWxldGVkLWJ5LWJhZC1kZWZlbmRlci1hc3ItcnVsZS_SAXpodHRwczovL3d3dy5ibGVlcGluZ2NvbXB1dGVyLmNvbS9uZXdzL21pY3Jvc29mdC9taWNyb3NvZnQtc2NyaXB0LXJlY3JlYXRlcy1zaG9ydGN1dHMtZGVsZXRlZC1ieS1iYWQtZGVmZW5kZXItYXNyLXJ1bGUvYW1wLw?oc=5"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMidmh0dHBzOi8vd3d3LmJsZWVwaW5nY29tcHV0ZXIuY29tL25ld3MvbWljcm9zb2Z0L21pY3Jvc29mdC1zY3JpcHQtcmVjcmVhdGVzLXNob3J0Y3V0cy1kZWxldGVkLWJ5LWJhZC1kZWZlbmRlci1hc3ItcnVsZS_SAXpodHRwczovL3d3dy5ibGVlcGluZ2NvbXB1dGVyLmNvbS9uZXdzL21pY3Jvc29mdC9taWNyb3NvZnQtc2NyaXB0LXJlY3JlYXRlcy1zaG9ydGN1dHMtZGVsZXRlZC1ieS1iYWQtZGVmZW5kZXItYXNyLXJ1bGUvYW1wLw?oc=5#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/harchi90.com\/"},{"@type":"ListItem","position":2,"name":"Microsoft script recreates shortcuts deleted by bad Defender ASR rule"}]},{"@type":"WebSite","@id":"https:\/\/harchi90.com\/#website","url":"https:\/\/harchi90.com\/","name":"harchi90","description":"Just another WordPress site","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/harchi90.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/harchi90.com\/#\/schema\/person\/0689156e87fbe869f0e5efdeef200d5b","name":"islamlacoste58","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/harchi90.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/5bf7491076e3822b8e0de7b1f9364d75?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5bf7491076e3822b8e0de7b1f9364d75?s=96&d=mm&r=g","caption":"islamlacoste58"},"sameAs":["http:\/\/harchi90.com"],"url":"https:\/\/harchi90.com\/author\/islamlacoste58\/"}]}},"jetpack_featured_media_url":"","jetpack-related-posts":[{"id":185712,"url":"https:\/\/harchi90.com\/microsoft-defender-asr-rules-cause-apps-and-icons-to-vanish-the-register\/","url_meta":{"origin":187998,"position":0},"title":"Microsoft Defender ASR rules cause apps and icons to vanish \u2022 The Register","date":"January 13, 2023","format":false,"excerpt":"Techies are reporting that Microsoft Defender for Endpoint attack surface reduction (ASR) rules have gone haywire and are removing icons and applications shortcuts from the Taskbar and Start Menu. The problems were first noted early today, Friday 13th, by multiple IT folk and many seem to be scratching their head\u2026","rel":"","context":"In "Technology"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":192055,"url":"https:\/\/harchi90.com\/microsoft-warns-some-of-its-apps-wont-restore-in-windows-11-the-register\/","url_meta":{"origin":187998,"position":1},"title":"Microsoft warns some of its apps won’t Restore in Windows 11 \u2022 The Register","date":"January 20, 2023","format":false,"excerpt":"Users running the latest versions of Windows 11 are losing some Microsoft apps after running System Restore. The bug affects Windows applications that use the MSIX app package format running on Windows 11 version 22H2, according to a Redmond advisory. The MSIX packaging format was introduced in 2018 in Windows\u2026","rel":"","context":"In "Technology"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":144560,"url":"https:\/\/harchi90.com\/fixes-windows-11-22h2-gaming-performance\/","url_meta":{"origin":187998,"position":2},"title":"fixes Windows 11 22H2 gaming performance","date":"December 1, 2022","format":false,"excerpt":"\r \r Microsoft has released KB5020044, an optional update for Windows 11 22H2 that addresses issues in various areas. To name one flaw that affected games and applications performance. The KB5020044 update's bug fixes show that Microsoft has addressed the issue that lowered app and game performance. The corporation claims\u2026","rel":"","context":"In "Technology"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":198069,"url":"https:\/\/harchi90.com\/microsoft-tackles-new-windows-10-11-start-menu-app-issues-the-register\/","url_meta":{"origin":187998,"position":3},"title":"Microsoft tackles new Windows 10, 11 Start menu, app issues \u2022 The Register","date":"January 26, 2023","format":false,"excerpt":"Microsoft has offered a workaround of sorts for Windows 10 and 11 users who've noticed their Start menu is suddenly unresponsive and that some applications won't open or work correctly. Unlike previous headaches with the Start menu and similar features, the latest problems are not caused by bad operating system\u2026","rel":"","context":"In "Technology"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":104107,"url":"https:\/\/harchi90.com\/microsoft-is-working-on-its-own-ccleaner-like-pc-optimizer-for-windows-11\/","url_meta":{"origin":187998,"position":4},"title":"Microsoft is working on its own CCleaner-like PC optimizer for Windows 11","date":"October 21, 2022","format":false,"excerpt":"Windows isn't really great at handling software as it wouldn't automatically clean your registry entries and folders for all apps. The remaining files of uninstalled apps are all over your system, and it's believed that the end result could be a slower PC. As a result, PC optimizer apps like\u2026","rel":"","context":"In "Technology"","img":{"alt_text":"Windows 11 PC Optimizer","src":"https:\/\/i0.wp.com\/www.windowslatest.com\/wp-content\/uploads\/2022\/10\/Windows-11-PC-Optimizer-696x433.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":163336,"url":"https:\/\/harchi90.com\/windows-11-is-almost-ready-for-android-13\/","url_meta":{"origin":187998,"position":5},"title":"Windows 11 is almost ready for Android 13","date":"December 20, 2022","format":false,"excerpt":"Running Android apps on Windows has always been possible thanks to emulators, but it's gotten a lot better with the Windows Subsystem for Android. Now, Microsoft is really proving just how good it is at providing Android updates, with progress on Android 13 for Windows 11 moving along very quickly.\u2026","rel":"","context":"In "Technology"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"fifu_image_url":"https:\/\/www.bleepstatic.com\/content\/hl-images\/2021\/05\/26\/Microsoft-Defender.jpg","_links":{"self":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/posts\/187998"}],"collection":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/comments?post=187998"}],"version-history":[{"count":0,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/posts\/187998\/revisions"}],"wp:attachment":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/media?parent=187998"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/categories?post=187998"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/tags?post=187998"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}