Registry key deletion

Questions about WAPT Packaging / Requests and help regarding Wapt packages.
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Locked
f4242
Messages: 54
Registration: Nov 23, 2016 - 8:51 p.m.

October 25, 2018 - 7:57 PM

Good morning,

I am trying to delete a registry key in my Eraser installation package.

I first tried using WAPT's native method:

Code: Select all

registry_deletekey(root=HKEY_LOCAL_MACHINE, path=r'SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers', keyname=r'c:\Program Files\Eraser\Eraser.exe')
The installation was successful, but the removal failed.

I then tried with

Code: Select all

run(r'reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers" /v "c:\Program Files\Eraser\Eraser.exe" /f')
But it makes me angry:
CalledProcessErrorOutput: Command 'reg delete "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Layers" /v "c:\\Program Files\\Eraser\\Eraser.exe" /f' returned non-zero exit status 1.
Output:u"Error: The system could not find the specified registry key or value.\r\n"
However, if I replace "run" with "print" and copy/paste the string into a command prompt as administrator, the deletion works correctly.

What is my problem?

THANKS!
User avatar
dcardon
WAPT Expert
Messages: 1932
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :

October 25, 2018 - 8:04 PM

Hello f4242,
f4242 wrote: Oct 25, 2018 - 7:57 PM I am trying to delete a registry key in my Eraser installation package.

I first tried using WAPT's native method:

Code: Select all

registry_deletekey(root=HKEY_LOCAL_MACHINE, path=r'SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers', keyname=r'c:\Program Files\Eraser\Eraser.exe')
The installation was successful, but the removal failed.

I then tried with

Code: Select all

run(r'reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers" /v "c:\Program Files\Eraser\Eraser.exe" /f')
But it makes me angry:
CalledProcessErrorOutput: Command 'reg delete "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Layers" /v "c:\\Program Files\\Eraser\\Eraser.exe" /f' returned non-zero exit status 1.
Output:u"Error: The system could not find the specified registry key or value.\r\n"
However, if I replace "run" with "print" and copy/paste the string into a command prompt as administrator, the deletion works correctly.

What is my problem?
There's probably a WOW64 redirection issue (a 32-bit process doesn't see the exact same registry as a 64-bit process). You can try with:

Code: Select all

with disable_file_system_redirection():
    registry_deletekey(root=HKEY_LOCAL_MACHINE, path=r'SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers', keyname=r'c:\Program Files\Eraser\Eraser.exe')
Sincerely,

Denis
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
f4242
Messages: 54
Registration: Nov 23, 2016 - 8:51 p.m.

October 25, 2018 - 8:29 PM

Hello,

it doesn't work with registry_deletekey, but my alternative using run in a with works.

Thank you!
User avatar
dcardon
WAPT Expert
Messages: 1932
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :

October 25, 2018 - 8:44 PM

Good evening f4242,

f4242 wrote: Oct 25, 2018 - 8:29 PM It doesn't work with registry_deletekey, but my alternative with run in a with works.
Could you try adding WOW6432node?

Code: Select all

registry_deletekey(HKEY_LOCAL_MACHINE, r'SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers', r'c:\Program Files\Eraser\Eraser.exe')
Sincerely,

Denis
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
f4242
Messages: 54
Registration: Nov 23, 2016 - 8:51 p.m.

October 26, 2018 - 4:39 PM

Hello,

No, it's still not working.

I'm still on version 1.3.13; I don't know if it could be a bug that was already fixed in 1.5/1.6.
Locked