What can I delete in registry Editor - need to remove PCUPGRADENOW
I want to delete the non essential registries in : Software - Microsoft - Windows - Current Version - Run.
The reason is I get a pop up from PCUPGRADENOW (I think a virus)and I have followed all the steps in the following blog : http://blog.vilmatech.com/remove-pcupgradenow-com-pop-malware-latest-removal/
I am stuck at the part where the say in the registry delete the .exe
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun “.exe”
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerrun
MY REGISTRY:
Name Type Data
(Default) REG_SZ (value not set)
EPLTargetP0000000000000000 REG_SZ C:Windowssystem32spoolDRIVERSx643E_YATII6E.EXE /EPT "EPLTargetP0000000000000000" /M "L550 Series"
Sidebar REG_SZ C:Program FilesWindows Sidebarsidebar.exe /autoRun
swg REG_SZ "C:Program Files (x86)GoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe"
windows-7 windows windows-registry
add a comment |
I want to delete the non essential registries in : Software - Microsoft - Windows - Current Version - Run.
The reason is I get a pop up from PCUPGRADENOW (I think a virus)and I have followed all the steps in the following blog : http://blog.vilmatech.com/remove-pcupgradenow-com-pop-malware-latest-removal/
I am stuck at the part where the say in the registry delete the .exe
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun “.exe”
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerrun
MY REGISTRY:
Name Type Data
(Default) REG_SZ (value not set)
EPLTargetP0000000000000000 REG_SZ C:Windowssystem32spoolDRIVERSx643E_YATII6E.EXE /EPT "EPLTargetP0000000000000000" /M "L550 Series"
Sidebar REG_SZ C:Program FilesWindows Sidebarsidebar.exe /autoRun
swg REG_SZ "C:Program Files (x86)GoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe"
windows-7 windows windows-registry
2
The instructions on that blog for what to remove from the registry look like nonsense. You have the right idea in looking within those keys it mentions. I'd find better instructions if I were you. And try some anti-malware program.
– barlop
Aug 4 '14 at 20:34
try the advice on this site it mentions some programs to run that I know are ok.. like hitman and malware bytes malwaretips.com/blogs/pcupgradenow-com-virus
– barlop
Aug 4 '14 at 20:36
add a comment |
I want to delete the non essential registries in : Software - Microsoft - Windows - Current Version - Run.
The reason is I get a pop up from PCUPGRADENOW (I think a virus)and I have followed all the steps in the following blog : http://blog.vilmatech.com/remove-pcupgradenow-com-pop-malware-latest-removal/
I am stuck at the part where the say in the registry delete the .exe
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun “.exe”
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerrun
MY REGISTRY:
Name Type Data
(Default) REG_SZ (value not set)
EPLTargetP0000000000000000 REG_SZ C:Windowssystem32spoolDRIVERSx643E_YATII6E.EXE /EPT "EPLTargetP0000000000000000" /M "L550 Series"
Sidebar REG_SZ C:Program FilesWindows Sidebarsidebar.exe /autoRun
swg REG_SZ "C:Program Files (x86)GoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe"
windows-7 windows windows-registry
I want to delete the non essential registries in : Software - Microsoft - Windows - Current Version - Run.
The reason is I get a pop up from PCUPGRADENOW (I think a virus)and I have followed all the steps in the following blog : http://blog.vilmatech.com/remove-pcupgradenow-com-pop-malware-latest-removal/
I am stuck at the part where the say in the registry delete the .exe
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun “.exe”
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerrun
MY REGISTRY:
Name Type Data
(Default) REG_SZ (value not set)
EPLTargetP0000000000000000 REG_SZ C:Windowssystem32spoolDRIVERSx643E_YATII6E.EXE /EPT "EPLTargetP0000000000000000" /M "L550 Series"
Sidebar REG_SZ C:Program FilesWindows Sidebarsidebar.exe /autoRun
swg REG_SZ "C:Program Files (x86)GoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe"
windows-7 windows windows-registry
windows-7 windows windows-registry
edited Aug 4 '14 at 20:32
user3458266
asked Aug 4 '14 at 20:27
user3458266user3458266
12
12
2
The instructions on that blog for what to remove from the registry look like nonsense. You have the right idea in looking within those keys it mentions. I'd find better instructions if I were you. And try some anti-malware program.
– barlop
Aug 4 '14 at 20:34
try the advice on this site it mentions some programs to run that I know are ok.. like hitman and malware bytes malwaretips.com/blogs/pcupgradenow-com-virus
– barlop
Aug 4 '14 at 20:36
add a comment |
2
The instructions on that blog for what to remove from the registry look like nonsense. You have the right idea in looking within those keys it mentions. I'd find better instructions if I were you. And try some anti-malware program.
– barlop
Aug 4 '14 at 20:34
try the advice on this site it mentions some programs to run that I know are ok.. like hitman and malware bytes malwaretips.com/blogs/pcupgradenow-com-virus
– barlop
Aug 4 '14 at 20:36
2
2
The instructions on that blog for what to remove from the registry look like nonsense. You have the right idea in looking within those keys it mentions. I'd find better instructions if I were you. And try some anti-malware program.
– barlop
Aug 4 '14 at 20:34
The instructions on that blog for what to remove from the registry look like nonsense. You have the right idea in looking within those keys it mentions. I'd find better instructions if I were you. And try some anti-malware program.
– barlop
Aug 4 '14 at 20:34
try the advice on this site it mentions some programs to run that I know are ok.. like hitman and malware bytes malwaretips.com/blogs/pcupgradenow-com-virus
– barlop
Aug 4 '14 at 20:36
try the advice on this site it mentions some programs to run that I know are ok.. like hitman and malware bytes malwaretips.com/blogs/pcupgradenow-com-virus
– barlop
Aug 4 '14 at 20:36
add a comment |
2 Answers
2
active
oldest
votes
These registry keys contain programs that startup when windows starts. If there is an error here, you'll get a popup saying windows could not find a program to execute.
When you navigate to this key, and on the left side, you right click the key and choose Export... you can save the content of this key as a backup to a .reg file. Once you have made the backup, you can delete anything you want and test if the problem is gone. If you deleted an entry and you want it back, just doubleclick the .reg file you made, and everything is undone.
Be careful though, editing the registry can cause windows to stop working correctly or even boot. There will not be much trouble if you are in the following 4 keys:
HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRun
HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRunOnce
HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRun
HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRunOnce
Note that the LocalMachine part requires administrative privileges whereas the CurrentUser does not. If you have spyware and it was caused on your account, and the other accounts on your pc don't have it, it will not be in LocalMachine anyway.
add a comment |
If you're looking for programs that start up with your computer, give Autoruns a try. It will give you more information about your startup programs than what you're looking at wil.
This utility, which has the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and shows you the entries in the order Windows processes them. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more.
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f792409%2fwhat-can-i-delete-in-registry-editor-need-to-remove-pcupgradenow%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
These registry keys contain programs that startup when windows starts. If there is an error here, you'll get a popup saying windows could not find a program to execute.
When you navigate to this key, and on the left side, you right click the key and choose Export... you can save the content of this key as a backup to a .reg file. Once you have made the backup, you can delete anything you want and test if the problem is gone. If you deleted an entry and you want it back, just doubleclick the .reg file you made, and everything is undone.
Be careful though, editing the registry can cause windows to stop working correctly or even boot. There will not be much trouble if you are in the following 4 keys:
HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRun
HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRunOnce
HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRun
HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRunOnce
Note that the LocalMachine part requires administrative privileges whereas the CurrentUser does not. If you have spyware and it was caused on your account, and the other accounts on your pc don't have it, it will not be in LocalMachine anyway.
add a comment |
These registry keys contain programs that startup when windows starts. If there is an error here, you'll get a popup saying windows could not find a program to execute.
When you navigate to this key, and on the left side, you right click the key and choose Export... you can save the content of this key as a backup to a .reg file. Once you have made the backup, you can delete anything you want and test if the problem is gone. If you deleted an entry and you want it back, just doubleclick the .reg file you made, and everything is undone.
Be careful though, editing the registry can cause windows to stop working correctly or even boot. There will not be much trouble if you are in the following 4 keys:
HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRun
HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRunOnce
HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRun
HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRunOnce
Note that the LocalMachine part requires administrative privileges whereas the CurrentUser does not. If you have spyware and it was caused on your account, and the other accounts on your pc don't have it, it will not be in LocalMachine anyway.
add a comment |
These registry keys contain programs that startup when windows starts. If there is an error here, you'll get a popup saying windows could not find a program to execute.
When you navigate to this key, and on the left side, you right click the key and choose Export... you can save the content of this key as a backup to a .reg file. Once you have made the backup, you can delete anything you want and test if the problem is gone. If you deleted an entry and you want it back, just doubleclick the .reg file you made, and everything is undone.
Be careful though, editing the registry can cause windows to stop working correctly or even boot. There will not be much trouble if you are in the following 4 keys:
HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRun
HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRunOnce
HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRun
HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRunOnce
Note that the LocalMachine part requires administrative privileges whereas the CurrentUser does not. If you have spyware and it was caused on your account, and the other accounts on your pc don't have it, it will not be in LocalMachine anyway.
These registry keys contain programs that startup when windows starts. If there is an error here, you'll get a popup saying windows could not find a program to execute.
When you navigate to this key, and on the left side, you right click the key and choose Export... you can save the content of this key as a backup to a .reg file. Once you have made the backup, you can delete anything you want and test if the problem is gone. If you deleted an entry and you want it back, just doubleclick the .reg file you made, and everything is undone.
Be careful though, editing the registry can cause windows to stop working correctly or even boot. There will not be much trouble if you are in the following 4 keys:
HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRun
HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRunOnce
HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRun
HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRunOnce
Note that the LocalMachine part requires administrative privileges whereas the CurrentUser does not. If you have spyware and it was caused on your account, and the other accounts on your pc don't have it, it will not be in LocalMachine anyway.
answered Aug 4 '14 at 20:41
LPChipLPChip
36.6k55487
36.6k55487
add a comment |
add a comment |
If you're looking for programs that start up with your computer, give Autoruns a try. It will give you more information about your startup programs than what you're looking at wil.
This utility, which has the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and shows you the entries in the order Windows processes them. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more.
add a comment |
If you're looking for programs that start up with your computer, give Autoruns a try. It will give you more information about your startup programs than what you're looking at wil.
This utility, which has the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and shows you the entries in the order Windows processes them. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more.
add a comment |
If you're looking for programs that start up with your computer, give Autoruns a try. It will give you more information about your startup programs than what you're looking at wil.
This utility, which has the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and shows you the entries in the order Windows processes them. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more.
If you're looking for programs that start up with your computer, give Autoruns a try. It will give you more information about your startup programs than what you're looking at wil.
This utility, which has the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and shows you the entries in the order Windows processes them. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more.
answered Aug 4 '14 at 20:47
Marc05Marc05
271129
271129
add a comment |
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f792409%2fwhat-can-i-delete-in-registry-editor-need-to-remove-pcupgradenow%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
2
The instructions on that blog for what to remove from the registry look like nonsense. You have the right idea in looking within those keys it mentions. I'd find better instructions if I were you. And try some anti-malware program.
– barlop
Aug 4 '14 at 20:34
try the advice on this site it mentions some programs to run that I know are ok.. like hitman and malware bytes malwaretips.com/blogs/pcupgradenow-com-virus
– barlop
Aug 4 '14 at 20:36