wow64 redirection bug in Autoruns 14.05

_AW_ 6 Reputation points
2021-10-16T06:16:58.417+00:00

There's a bad wow64 redirection bug in 14.05, when you run Autoruns.exe (not Autoruns64.exe) on a 64 bit OS.

If you disable an entry(s) in HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, autoruns saves the backup to HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\AutorunsDisabled - meaning it can't reenable the entry.
Refreshing or restarting autoruns then shows the entry in HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run, which unsurprisingly, is where it restores the entry to, leaving those entries inoperable.

Windows Sysinternals
Windows Sysinternals
A website that offers technical information and advanced system utilities to manage, troubleshoot, and diagnose Windows systems and applications.
840 questions
No comments
{count} votes