What can I delete in registry Editor - need to remove PCUPGRADENOW












0















I want to delete the non essential registries in : Software - Microsoft - Windows - Current Version - Run.



The reason is I get a pop up from PCUPGRADENOW (I think a virus)and I have followed all the steps in the following blog : http://blog.vilmatech.com/remove-pcupgradenow-com-pop-malware-latest-removal/



I am stuck at the part where the say in the registry delete the .exe



HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun “.exe”
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerrun



MY REGISTRY:



Name                          Type           Data
(Default) REG_SZ (value not set)
EPLTargetP0000000000000000 REG_SZ C:Windowssystem32spoolDRIVERSx643E_YATII6E.EXE /EPT "EPLTargetP0000000000000000" /M "L550 Series"
Sidebar REG_SZ C:Program FilesWindows Sidebarsidebar.exe /autoRun
swg REG_SZ "C:Program Files (x86)GoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe"









share|improve this question




















  • 2





    The instructions on that blog for what to remove from the registry look like nonsense. You have the right idea in looking within those keys it mentions. I'd find better instructions if I were you. And try some anti-malware program.

    – barlop
    Aug 4 '14 at 20:34













  • try the advice on this site it mentions some programs to run that I know are ok.. like hitman and malware bytes malwaretips.com/blogs/pcupgradenow-com-virus

    – barlop
    Aug 4 '14 at 20:36
















0















I want to delete the non essential registries in : Software - Microsoft - Windows - Current Version - Run.



The reason is I get a pop up from PCUPGRADENOW (I think a virus)and I have followed all the steps in the following blog : http://blog.vilmatech.com/remove-pcupgradenow-com-pop-malware-latest-removal/



I am stuck at the part where the say in the registry delete the .exe



HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun “.exe”
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerrun



MY REGISTRY:



Name                          Type           Data
(Default) REG_SZ (value not set)
EPLTargetP0000000000000000 REG_SZ C:Windowssystem32spoolDRIVERSx643E_YATII6E.EXE /EPT "EPLTargetP0000000000000000" /M "L550 Series"
Sidebar REG_SZ C:Program FilesWindows Sidebarsidebar.exe /autoRun
swg REG_SZ "C:Program Files (x86)GoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe"









share|improve this question




















  • 2





    The instructions on that blog for what to remove from the registry look like nonsense. You have the right idea in looking within those keys it mentions. I'd find better instructions if I were you. And try some anti-malware program.

    – barlop
    Aug 4 '14 at 20:34













  • try the advice on this site it mentions some programs to run that I know are ok.. like hitman and malware bytes malwaretips.com/blogs/pcupgradenow-com-virus

    – barlop
    Aug 4 '14 at 20:36














0












0








0








I want to delete the non essential registries in : Software - Microsoft - Windows - Current Version - Run.



The reason is I get a pop up from PCUPGRADENOW (I think a virus)and I have followed all the steps in the following blog : http://blog.vilmatech.com/remove-pcupgradenow-com-pop-malware-latest-removal/



I am stuck at the part where the say in the registry delete the .exe



HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun “.exe”
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerrun



MY REGISTRY:



Name                          Type           Data
(Default) REG_SZ (value not set)
EPLTargetP0000000000000000 REG_SZ C:Windowssystem32spoolDRIVERSx643E_YATII6E.EXE /EPT "EPLTargetP0000000000000000" /M "L550 Series"
Sidebar REG_SZ C:Program FilesWindows Sidebarsidebar.exe /autoRun
swg REG_SZ "C:Program Files (x86)GoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe"









share|improve this question
















I want to delete the non essential registries in : Software - Microsoft - Windows - Current Version - Run.



The reason is I get a pop up from PCUPGRADENOW (I think a virus)and I have followed all the steps in the following blog : http://blog.vilmatech.com/remove-pcupgradenow-com-pop-malware-latest-removal/



I am stuck at the part where the say in the registry delete the .exe



HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun “.exe”
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerrun



MY REGISTRY:



Name                          Type           Data
(Default) REG_SZ (value not set)
EPLTargetP0000000000000000 REG_SZ C:Windowssystem32spoolDRIVERSx643E_YATII6E.EXE /EPT "EPLTargetP0000000000000000" /M "L550 Series"
Sidebar REG_SZ C:Program FilesWindows Sidebarsidebar.exe /autoRun
swg REG_SZ "C:Program Files (x86)GoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe"






windows-7 windows windows-registry






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Aug 4 '14 at 20:32







user3458266

















asked Aug 4 '14 at 20:27









user3458266user3458266

12




12








  • 2





    The instructions on that blog for what to remove from the registry look like nonsense. You have the right idea in looking within those keys it mentions. I'd find better instructions if I were you. And try some anti-malware program.

    – barlop
    Aug 4 '14 at 20:34













  • try the advice on this site it mentions some programs to run that I know are ok.. like hitman and malware bytes malwaretips.com/blogs/pcupgradenow-com-virus

    – barlop
    Aug 4 '14 at 20:36














  • 2





    The instructions on that blog for what to remove from the registry look like nonsense. You have the right idea in looking within those keys it mentions. I'd find better instructions if I were you. And try some anti-malware program.

    – barlop
    Aug 4 '14 at 20:34













  • try the advice on this site it mentions some programs to run that I know are ok.. like hitman and malware bytes malwaretips.com/blogs/pcupgradenow-com-virus

    – barlop
    Aug 4 '14 at 20:36








2




2





The instructions on that blog for what to remove from the registry look like nonsense. You have the right idea in looking within those keys it mentions. I'd find better instructions if I were you. And try some anti-malware program.

– barlop
Aug 4 '14 at 20:34







The instructions on that blog for what to remove from the registry look like nonsense. You have the right idea in looking within those keys it mentions. I'd find better instructions if I were you. And try some anti-malware program.

– barlop
Aug 4 '14 at 20:34















try the advice on this site it mentions some programs to run that I know are ok.. like hitman and malware bytes malwaretips.com/blogs/pcupgradenow-com-virus

– barlop
Aug 4 '14 at 20:36





try the advice on this site it mentions some programs to run that I know are ok.. like hitman and malware bytes malwaretips.com/blogs/pcupgradenow-com-virus

– barlop
Aug 4 '14 at 20:36










2 Answers
2






active

oldest

votes


















0














These registry keys contain programs that startup when windows starts. If there is an error here, you'll get a popup saying windows could not find a program to execute.



When you navigate to this key, and on the left side, you right click the key and choose Export... you can save the content of this key as a backup to a .reg file. Once you have made the backup, you can delete anything you want and test if the problem is gone. If you deleted an entry and you want it back, just doubleclick the .reg file you made, and everything is undone.



Be careful though, editing the registry can cause windows to stop working correctly or even boot. There will not be much trouble if you are in the following 4 keys:



HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRun
HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRunOnce
HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRun
HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRunOnce


Note that the LocalMachine part requires administrative privileges whereas the CurrentUser does not. If you have spyware and it was caused on your account, and the other accounts on your pc don't have it, it will not be in LocalMachine anyway.






share|improve this answer































    0














    If you're looking for programs that start up with your computer, give Autoruns a try. It will give you more information about your startup programs than what you're looking at wil.




    This utility, which has the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and shows you the entries in the order Windows processes them. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more.







    share|improve this answer























      Your Answer








      StackExchange.ready(function() {
      var channelOptions = {
      tags: "".split(" "),
      id: "3"
      };
      initTagRenderer("".split(" "), "".split(" "), channelOptions);

      StackExchange.using("externalEditor", function() {
      // Have to fire editor after snippets, if snippets enabled
      if (StackExchange.settings.snippets.snippetsEnabled) {
      StackExchange.using("snippets", function() {
      createEditor();
      });
      }
      else {
      createEditor();
      }
      });

      function createEditor() {
      StackExchange.prepareEditor({
      heartbeatType: 'answer',
      autoActivateHeartbeat: false,
      convertImagesToLinks: true,
      noModals: true,
      showLowRepImageUploadWarning: true,
      reputationToPostImages: 10,
      bindNavPrevention: true,
      postfix: "",
      imageUploader: {
      brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
      contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
      allowUrls: true
      },
      onDemand: true,
      discardSelector: ".discard-answer"
      ,immediatelyShowMarkdownHelp:true
      });


      }
      });














      draft saved

      draft discarded


















      StackExchange.ready(
      function () {
      StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f792409%2fwhat-can-i-delete-in-registry-editor-need-to-remove-pcupgradenow%23new-answer', 'question_page');
      }
      );

      Post as a guest















      Required, but never shown

























      2 Answers
      2






      active

      oldest

      votes








      2 Answers
      2






      active

      oldest

      votes









      active

      oldest

      votes






      active

      oldest

      votes









      0














      These registry keys contain programs that startup when windows starts. If there is an error here, you'll get a popup saying windows could not find a program to execute.



      When you navigate to this key, and on the left side, you right click the key and choose Export... you can save the content of this key as a backup to a .reg file. Once you have made the backup, you can delete anything you want and test if the problem is gone. If you deleted an entry and you want it back, just doubleclick the .reg file you made, and everything is undone.



      Be careful though, editing the registry can cause windows to stop working correctly or even boot. There will not be much trouble if you are in the following 4 keys:



      HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRun
      HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRunOnce
      HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRun
      HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRunOnce


      Note that the LocalMachine part requires administrative privileges whereas the CurrentUser does not. If you have spyware and it was caused on your account, and the other accounts on your pc don't have it, it will not be in LocalMachine anyway.






      share|improve this answer




























        0














        These registry keys contain programs that startup when windows starts. If there is an error here, you'll get a popup saying windows could not find a program to execute.



        When you navigate to this key, and on the left side, you right click the key and choose Export... you can save the content of this key as a backup to a .reg file. Once you have made the backup, you can delete anything you want and test if the problem is gone. If you deleted an entry and you want it back, just doubleclick the .reg file you made, and everything is undone.



        Be careful though, editing the registry can cause windows to stop working correctly or even boot. There will not be much trouble if you are in the following 4 keys:



        HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRun
        HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRunOnce
        HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRun
        HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRunOnce


        Note that the LocalMachine part requires administrative privileges whereas the CurrentUser does not. If you have spyware and it was caused on your account, and the other accounts on your pc don't have it, it will not be in LocalMachine anyway.






        share|improve this answer


























          0












          0








          0







          These registry keys contain programs that startup when windows starts. If there is an error here, you'll get a popup saying windows could not find a program to execute.



          When you navigate to this key, and on the left side, you right click the key and choose Export... you can save the content of this key as a backup to a .reg file. Once you have made the backup, you can delete anything you want and test if the problem is gone. If you deleted an entry and you want it back, just doubleclick the .reg file you made, and everything is undone.



          Be careful though, editing the registry can cause windows to stop working correctly or even boot. There will not be much trouble if you are in the following 4 keys:



          HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRun
          HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRunOnce
          HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRun
          HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRunOnce


          Note that the LocalMachine part requires administrative privileges whereas the CurrentUser does not. If you have spyware and it was caused on your account, and the other accounts on your pc don't have it, it will not be in LocalMachine anyway.






          share|improve this answer













          These registry keys contain programs that startup when windows starts. If there is an error here, you'll get a popup saying windows could not find a program to execute.



          When you navigate to this key, and on the left side, you right click the key and choose Export... you can save the content of this key as a backup to a .reg file. Once you have made the backup, you can delete anything you want and test if the problem is gone. If you deleted an entry and you want it back, just doubleclick the .reg file you made, and everything is undone.



          Be careful though, editing the registry can cause windows to stop working correctly or even boot. There will not be much trouble if you are in the following 4 keys:



          HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRun
          HKEY_Current_UserSoftwareMicrosoftWindowsCurrentVersionRunOnce
          HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRun
          HKEY_LocalMachineSoftwareMicrosoftWindowsCurrentVersionRunOnce


          Note that the LocalMachine part requires administrative privileges whereas the CurrentUser does not. If you have spyware and it was caused on your account, and the other accounts on your pc don't have it, it will not be in LocalMachine anyway.







          share|improve this answer












          share|improve this answer



          share|improve this answer










          answered Aug 4 '14 at 20:41









          LPChipLPChip

          36.6k55487




          36.6k55487

























              0














              If you're looking for programs that start up with your computer, give Autoruns a try. It will give you more information about your startup programs than what you're looking at wil.




              This utility, which has the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and shows you the entries in the order Windows processes them. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more.







              share|improve this answer




























                0














                If you're looking for programs that start up with your computer, give Autoruns a try. It will give you more information about your startup programs than what you're looking at wil.




                This utility, which has the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and shows you the entries in the order Windows processes them. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more.







                share|improve this answer


























                  0












                  0








                  0







                  If you're looking for programs that start up with your computer, give Autoruns a try. It will give you more information about your startup programs than what you're looking at wil.




                  This utility, which has the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and shows you the entries in the order Windows processes them. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more.







                  share|improve this answer













                  If you're looking for programs that start up with your computer, give Autoruns a try. It will give you more information about your startup programs than what you're looking at wil.




                  This utility, which has the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and shows you the entries in the order Windows processes them. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more.








                  share|improve this answer












                  share|improve this answer



                  share|improve this answer










                  answered Aug 4 '14 at 20:47









                  Marc05Marc05

                  271129




                  271129






























                      draft saved

                      draft discarded




















































                      Thanks for contributing an answer to Super User!


                      • Please be sure to answer the question. Provide details and share your research!

                      But avoid



                      • Asking for help, clarification, or responding to other answers.

                      • Making statements based on opinion; back them up with references or personal experience.


                      To learn more, see our tips on writing great answers.




                      draft saved


                      draft discarded














                      StackExchange.ready(
                      function () {
                      StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f792409%2fwhat-can-i-delete-in-registry-editor-need-to-remove-pcupgradenow%23new-answer', 'question_page');
                      }
                      );

                      Post as a guest















                      Required, but never shown





















































                      Required, but never shown














                      Required, but never shown












                      Required, but never shown







                      Required, but never shown

































                      Required, but never shown














                      Required, but never shown












                      Required, but never shown







                      Required, but never shown







                      Popular posts from this blog

                      How do I know what Microsoft account the skydrive app is syncing to?

                      When does type information flow backwards in C++?

                      Grease: Live!