However, if Microsoft again changes the signature on vcredist, my setup will start throwing errors again. Now, I managed to fix it (sort of) by manually editing C:\Program Files (x86)\Microsoft SDKs\ClickOnce Bootstrapper\Packages\vcredist_圆4\product.xml putting the downloaded vcredist public key into the xml file and rebuilding the installer project. If the public key of the downloaded file doesn't match the embedded one in setup, you get the error. exe extension of a file name displays an executable file. The software is usually about 6.56 MB in size. When user runs the setup, bootstrapper downloads the vcredist from Microsoft's web (in my case ) and checks the digital signature. vcredistx86.exe is an executable file that is part of the Ravaged Zombie Apocalypse program developed by 2 Dawn Studios. More precisely, it seems to embed the public key of the vc++ redistributable in the setup. It seems that when installer creates bootstrapper (the setup.exe) it embeds information from C:\Program Files (x86)\Microsoft SDKs\ClickOnce Bootstrapper\Packages\vcredist_圆4\product.xml.
I have the same issue, and I found sort of a workaround: