Table of Contents

Information

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dwm.exe

Unmark Dirty

sudo ntfsfix '/dev/sda2'

Mount R/W

sudo mkdir -p '/run/media/linux/Windows'
sudo ntfs-3g '/dev/sda2' '/run/media/linux/Windows'

Delete Key

chntpw -e '/run/media/linux/Windows/Windows/System32/config/SOFTWARE'
ls Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dwm.exe
rdel Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dwm.exe
q

Unmount

sync && sudo umount '/dev/sda2'