RegASSASSIN

[HW_Guy]

Hi

I just downloaded RegASSASSIN to delete the following registry in a Windows Vista machine:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USB\VID_0547&PID_0101

It keeps telling me that the Registry Key cannot be removed.

I'm logged-on with administrator access.

I initially tried regedit32 and was able to delete all sub-nodes except the following:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USB\VID_0547&PID_0101\6&26379b8a&0&3\Properties\{83da6326-97a6-4088-9453-a1923f573b29}

That is when I came accross RegASSASSIN and was hopping it would do a better job than I.

Does anyone know the solution?

Thanks.

[MysteryFCM]

Use the built in Windows REG CLI.

http://technet2.microsoft.com/windowsserve...3.mspx?mfr=true

/edit

Just remember to backup the registry first

[HW_Guy]

Thanks! I will try that.

In the mean time I found what was preventing me from deleting the registry with regedit32.

Turns out that, every time I gave myself permission to a particular VID key, a new sub-node gets created with no permissions.

One needs to refresh Reg Editor after each time a permission is added in order to see this.

After two or three iterations, it finally stops creating these sub-nodes and one can finally delete the registry.

I was logged into the machine from an external domain, not to the machine itself. That may be part of the problem since, I

noticed, each new sub-node has <LocalMachine>\Administrators automatically added.

Regards.

[MysteryFCM]

How are you logging in? (VNC, RWW, RA?)

Bear in mind, depending on the settings of the remote machine, you should be able to connect remotely via your local regedit, to the remote registry and save yourself alot of hassle (do that myself occasionally and not experienced perms issues)

[HW_Guy]

Actually, I'm logged in to the machine itself but under <SOME_DOMAIN>\UID instead of <LOCAL_MACHINE>\UID

The PC is connected to a corp network and allows users from other domains to log in.

Thank you for the tip!

[MysteryFCM]

No problem ..... if you need any further help, feel free to ask