I found in registry an autorunsdisabled entry under an existing autorunsdisabled entry
in regedit this is shown as an endless recusive tree
the export by regedit of the first AutorunsDisable entry creates a 1.02 MB .reg file
Some lines of the .reg file:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\AutorunsDisabled]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\AutorunsDisabled\Appmon]
"Driver"="AppMon.dll"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\AutorunsDisabled\Appmon\Ports]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\AutorunsDisabled\Appmon\Ports\Microsoft.Office.OneNote_16001.14326.21886.0_x64__8wekyb3d8bbwe_microsoft.onenoteim_S-1-5-21-592951294-2061761917-3718062575-1001]
"Aumid"="Microsoft.Office.OneNote_8wekyb3d8bbwe!microsoft.onenoteim"
"AppSid"="S-1-15-2-3445883232-1224167743-206467785-1580939083-2750001491-3097792036-3019341970"
"PortName"="Microsoft.Office.OneNote_16001.14326.21886.0_x64__8wekyb3d8bbwe_microsoft.onenoteim_S-1-5-21-592951294-2061761917-3718062575-1001"
"AppExe"="onenoteim.exe"
"AppCmdlineTemplate"="%1"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\AutorunsDisabled\AutorunsDisabled]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\AutorunsDisabled\AutorunsDisabled\Appmon]
.. same subkeys and values as previous ..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\AutorunsDisabled\AutorunsDisabled\AutorunsDisabled]
.. same subkeys and values as previous ..
registry entries are recursively repeated up to 1,072,600 bytes size.
My question:
would the following command be safe?
REG DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\AutorunsDisabled\AutorunsDisabled