Windows 10: Disallowrun and locked exe, cmd, regedit

I did a very stupid thing. I tried to make windows block one application by creating registry in Policies/Explorer named RestrictRun.

I did it and then I also created DisallowRun. In KEy Restrict run I added one application, but i couldnt create key for DisallowRun and forgot to remove registry DWORD with DisallowRun.

After Restart I cannot access anything.. task manager, regedit, cmd, any programs.. they throw the same error about restrictions placed on PC and executing app was cancelled..
I have no USB Stick and I cannot edit anything.. help, how can I fix this?!

I can run only windows universal apps..

I was stupid but I have importatnt thing to do.. *Sad

:)

 

Windows 10 File System Error -1073741819

I just upgraded to Windows 10 and I got this error. I can't run setups and any .exe files even Regedit and cmd doesnt work.

Also I can't lower UAC

 

Accidentally changed .exe files

Can you get Task Manager open by pressing Ctrl+Shift+Esc ?

If so can you use File -> Run new task to launch "cmd" or "regedit"?

If you can get regedit open, you want to delete these two keys:

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\UserChoice]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Roaming\OpenWith\FileExts\.exe]

I'm assuming you didn't create a second account on the computer that is still functional...

Good Luck,

Keith

 

Can you use a system restore point (if it will execute, that is)? (You could try from advanced startup options via e.g. SHIFT + left click restart..... )

Do you use disk imaging- if you do, you could restore a recent image if you have one. (We constantly urge people to use disk imaging routinely to give themselves a means of recovery - even from disk failures).

 

No I have no restore point... whatsoever :c

I am panicking here, even with the safe mode I cant do anything :c

 

If you made the changes once and still have a usable backup copy of your registry that has not been affected by this, you could restore that.

 

I don't think I have registry backup... I never did such things because I never had issues.. this is first time it happened and I am on my friend's laptop now... I can't open regedit, cmd or even task manager. Only universal windows apps run... how can I edit that one registry key and remove it? I would never touch this thing again with a 10 feet pole..

 

Please help! I am trying anything here..

 

Oh wait, I entered the thing where you click shift and restart and couple of options.. and noticed 3 days old restore point from 6.03. So it was keeping restore points. I will see what happens if I restore it.

 

It couldnt restore it because of issues with some Universal app... couldnt unpack it or something.... so the problem is still there.

 

See if this is helpful.

http://www.winhelponline.com/blog/ed...ne-windows-re/

Ben

 

Okay I am in the registry but I have no idea what to load. I loaded as it said and have HKEY USers, but the registry entry isnt there, nor it is in HKEY CURRENT USER. Its just not there.

Can someone point me where I will find hive I need to load in order to edit it?

Key I added was in HKEY_Current_USER

Was something like that except it had also RestrictRun in it.

@ediT: I solved it.

For anyone who will have same issue by locking themselves out of exes, regedit, cmd or anything here is what I did:

1. Shift + Left Mouse click on restart PC
2. Go to Advanced tools and start command prompt.
3. IF your windows drive is C, type c:
4. type regedit
5. Highlight HKEY LOCAL MACHINE
6. Click File -> Load Hive
7. Navigate to c:\users\YOURUSERNAME
8. Tricky part. If you dont see ntuser.dat, just type it in the open box, and click open.
9. Navigate to the registry that was added or changed (Software/Microsoft/Windows/...etc)
10. Delete or modify the keys and values.
11. Select Hive you've loaded and click File-Unload Hive.

Done. All works.

 

You can access the reg from another PC or you may be able to boot a rescue DVD and revert from there or run a CMD to delete keys by running a schedule task as that runs as system

 

Windows automatically keeps a backup of the registry. My concern is it may be too late and this is also corrupt.

However....

 

I solved it.

For anyone who will have same issue by locking themselves out of exes, regedit, cmd or anything here is what I did:

1. Shift + Left Mouse click on restart PC
2. Go to Advanced tools and start command prompt.
3. IF your windows drive is C, type c:
4. type regedit
5. Highlight HKEY LOCAL MACHINE
6. Click File -> Load Hive
7. Navigate to c:\users\YOURUSERNAME
8. Tricky part. If you dont see ntuser.dat, just type it in the open box, and click open.
9. Navigate to the registry that was added or changed (Software/Microsoft/Windows/...etc), or use CRTL + F to search for key value (in my case it was DisallowRun or RestrictRun)
10. Delete or modify the keys and values.
11. Select Hive you've loaded and click File-Unload Hive.

Done. All works.