Registry delete

I have the following setup to delete registry keys. One key is in HKLM\Software\Test & the other is HKLM\SOFTWARE\Wow6432Node\Test. The issue I’m having is the below seems to be removing the key in the WOW6432Node location but not the key in the HKLM\Software location. Below is the action script I have setup.

delete __appendfile
delete temp.reg

appendfile [-HKEY_LOCAL_MACHINE\SOFTWARE\Test]
appendfile [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Test]

move __appendfile temp.reg
wait regedit -s temp.reg

Because you are a 32 bit process you are running the 32 bit regedit and both of those paths actually point to the same thing.

You will need to run a 64 bit version of regedit to delete the regular SOFTWARE hive version

You should be ok if you put a line before you import the reg file:
action uses wow64 redirection false

Is ActionScript ever going to be added to delete RegKeys? Would be nice.

I noticed that a while back that it was missing that functionality and had filed a bug. The only concern is someone doing something like deleting a major root key but it could be done just as badly through the method people are doing now so the defense argument isn’t really that great.

So long story short, eventually yes.

1 Like