How to Remove Registry Entries

What is the Registry?

The Windows registry is a central hierarchical collection of software, hardware and user settings that are present in your machine. It is used in Microsoft Windows 9x, Windows CE, Windows NT, Windows 2000, Windows Millennium, Windows XP and Windows Vista. Although the Registry is common to several Windows operating systems, there are some differences among them. The registry plays a very important role in your computer’s operating system, for example, by allowing Windows to start and ensuring the stability of the entire system.

When the user makes any modifications to Control Panel settings, file associations, system policies and installed software, all these changes are reflected and stocked up in the registry. The Registry replaces most of the text-based .ini files used in Windows 3.x and MS-DOS configuration files, such as the Autoexec.bat and Config.sys.

Why is it important to remove malicious registry entries?

The majority of all hazardous parasites, especially Trojans, browser hijackers, spyware and adware threats have the ability to change the Windows registry. The malicious programs usually add various registry entries, generate new keys and modify default values. That’s why it is important to learn how to remove malicious registry entries so you can quickly detect and remove deep-seated infections. Invalid registry entries may cause a serious harm, and they may be a reason of sluggish performance of your PC as well.

Remove Spyware Registry Entries Manually

Warning: Removing spyware registry entries is difficult and risky.

» Learn more about SpyHunter's Spyware Detection Tool
and steps to uninstall SpyHunter.

If you delete the wrong file, your computer may crash and important data may be lost. As a precautionary measure, please back up important files and set a System Restore point (click Start > All Programs > Accessories > System Tools > System Restore, and follow the on-screen instructions) or run a spyware check with a trusted anti-spyware program to automatically detect spyware.

Follow the steps below to manually remove registry entries:
  1. To open the Registry Editor, press the “Start” button and then choose the option “Run”. In the “Open” field, type “regedit” and click the “OK” button.

    Run Regedit
  2. The Registry Editor has two panes. The left pane is to navigate on certain registry keys and the right pane is to see values of selected keys.

    The Registry Editor
  3. To edit the value, right-click on it and select the “Modify” option.

    Modify the value
  4. You can also double-click on the value with your left mouse button. Another option is to use the “Edit” menu, where you type in the chosen value in the window and click the “OK” button. You can do the same with any other value or registry key.

    Edit the value
  5. Follow the same steps as just described to delete the value or the registry key. On this step, you will have to select the “Delete” option. If you get a list of results, you may want to plug them into the Web before you delete them, just to be sure you’re erasing malware-related keys.

    Delete the value
  6. To add a new registry key or a new value, click on the “Edit” menu. Then, select option “New” and select a type for the entry.

    Add the new value
  7. To export any key or value from the registry to the defined file, right-click on the object and select “Export” from the menu.

    Export the value
  8. Enter a file name and save the exported registry files as a .reg extension.

    Export registry entries to a file
  9. It is also possible to import a certain value or a key. Click on the “File” menu and choose “Import”. Then, select the objects that you want to import.

    Import registry entries
  10. Close the registry editor and reboot your computer. If something appears wrong after you change the registry, you can restore the registry from the backup you’ve created.
Posted: June 6, 2006 | By
Rate this article:
1 Star2 Stars3 Stars4 Stars5 Stars (2 votes, average: 2.00 out of 5)
Loading ... Loading ...
Home Tutorials How to Remove Registry Entries


  • shyla says:

    Just do a complete scrub back to factory settings back every thing up if you can and wipe it clean worked for me

  • Raymond Babcock says:

    I want conduit out of my computer

  • John says:

    I’ve got the virus. How do I remove

  • hubovetz says:

    watch out for the program security shield or security shield 2012, it is a rogue anti-virus…I almost fell into the trap last night & would have bought it. If you ever buy a fake anti-virus they are not going to refund your money…they are criminals; go directly to your bank or card company and stop payment.
    If you are receiving a warning that you have trojans, worms, etc. & they suggest getting security shield then you already have the virus… Do not worry if your files or desktop shortcuts disappear, they are only hidden; this is the trick of this virus. Run msconfig and in the "Startup" tab disable "pBT2cvaY8dfZI" & "lLtVggLHlNRwEcv" and restart your system.

  • Cobb Hunter says:

    Finally, thanks for this. I was able to remove the entries that were loading some pop-ups on my system when booting. Thanks again.

  • Normand Burgardt says:

    Aw, this was a really nice post. In idea I would like to put in writing like this additionally – taking time and actual effort to make a very good article… but what can I say… I procrastinate alot and by no means seem to get something done.

  • proxy list says:

    You are my role models. Thanks for the article

  • ktongman-ktsoft says:

    Amy, what you need to do is go to C:\\program files\\to look for the software program that you want to remove. Some nasty programs do not allow you to delete all files. In such a case, you need to change the program folder to a different name to deceive the PC and delete the folder. It always works in my case. Good luck.

  • ktongman-ktsoft says:

    For those files cannot be deleted, you can try by changing the folder to some different name to deceive the computer and delete. It always works in my case.

  • Louise Tyvol says:

    I found out Spybot has a Trojan. Saw someone’s comment when I googled it. I removed Spybot and it has been working better. (not as slow). But, I cannot remove the Sptybot folder in Program Files. It says "access denied" even though i am the Administrator and only user. Says it "may be write protected or disk full" or something. Also, I found in the Registry, there are a whole lot of web sites listed that I have no interest in and don’t want. (gambling, porno, etc). I deleted a whole bunch, Now not sure if I can delete still more. I know a lot of them I have no interest in. Some are in German, I think.

  • angela says:

    i dont know what to do!! :( i have just bought a license with spyware protection for 3 years cover and just found out after reading some websites that the payment was fake but they have already deducted the money from my card. i have applied for a refund throught their website which i think is also fake and havent received a feedback. i want my money back!! due to annoyance i just deleted the spyware protection icon from my desktop. can anybody help me??! :( (

  • amy says:

    hello..i could not uninstall the program called seekmo. when i tried to delete it,it said ‘u dont have the right permission to complete this action.pls contact the administrator of this computer to continue’.ive tried ur steps but it still appear on the program features and cant be uninstalled.Plz help.
    thank you

  • glen says:

    guys u need to run your computer in safe mode so the virus wont mess you up do this by spamming f8 when your computer is booting up and click networkng

  • xcyclist says:

    Sorry for the above message. I have the System Tolls 2011 virus and thought I was on a different message board. However if anybody has any help to offer about System Tools, let me know. I PROMISE TO BE MORE CAREFUL in the future.

    the old fart cyclist

  • xcyclist says:

    I wish I had found this info before I tried everything i could think of. I got desperate and just booted in the safe mode and went to a good restore date. Everything seems to be okay now. Is this really a solution and is it safe to leave the virus on my computer??
    I’m and old fart and not to savy with windows.

  • chloe says:

    would just say to anyone run spyhunter before trying anything as i couldnt disable virus because i couldnt even opn windows explorer or the “run” application

  • chloe says:

    I was so pleased with spyhunter 4. it completely got rid of “antivirus scan” which had stopped me opening any folder of any kind on my computer apart from firefox. every other program i had like norton became useless as it blocked all .exe files and changes settings so i cudnt change file type and blocked the programs which allowed me to change setting. One click and spy hunter changed my interernet setting to block antivirus from blocking the download. and has now removed it from my computer! thank you so much!

  • jolin says:

    Maybe the most important thing you need is to clean your computer, try the software “tuneup360″, it won’t let you down (*^__^*)

  • paul says:

    thanx but i real need more explanation

  • Salvador says:

    My Laptop does not boot in safe mode, each time I try, I get a message saying that does not recognize the user name or password, check user name and domain and try again. (my lap has a domain).
    Any suggestions?

  • lawrie says:

    I have the antivirus IS. I’ve tried following the instructions above but my PC won’t let me get into the registry editor.What’s my next move without contacting expensive computer firms to solve the problem? Desperate. PLease help.

  • THUTO says:

    MY question is, how do you restore files that one had on USB, which the tojan virus made look like shortcuts and are noe un-openable!

  • Charles W says:

    I rebooted my PC in safe mode, and ran system restore, this built in program restored my registry to the state it was in 2 days ago, without affecting any of my files, the evil malware is gone, along with a program I had downloaded which couldn’t run (spydoctor) anyway, farewell, it took 5 minutes to do this, after staying up til 4am trying to solve the problem otherways. thank you microsoft.

  • mikefinance says:

    Misleading.SecurityMasterAV, Registry Key,
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}, 4-29665

    How can I locate this registry? got to “Classes” and I am stuck!!!!!!!!

    IOBIT Security 360 can’t remove this registry. Please help!!!!!!!

  • sameer says:

    my computer is very slow at start up and internet connection has also become too slow than before.for that i have downloaded adware and scanned .i found System Spy and Bear Share in the affecting the registry .how to remove them????????plz heeeeeeeeelp

  • Dee says:

    Go into Safe Mode (F8 on startup) and open the Task Manager (Ctrl+Alt+Delete). In the Windows Task Manager, select “File” and choose “New Task (Run…)”. This will open up “Create New Task” window and allow you to enter “regedit”; click ok. This should help you get to the “Registry Editor” window. I’m still trying to figure out the rest from here. If any one has more information they can share, I would really appreicate it. -Thanks.

  • Carl says:

    I am trying to manually remove Av Security Suite but as soon as I put in regedit and press run it will be blocked and a messsage comes up saying; application cannot be executed the file is infected. do you nwant to activate your antivirus software now?
    please help!!!!

  • elizabeth says:

    i am ready to throw my computer out the window i have tried everything. i am blocked at every avenue. security masters av wont let me delete anything . cant get anything into the RUN because it tellls me that it is not found or not on my computer. and it goes on and on. HELP ME PLEASE!!!!!!!!!!!!!!!!!!!!!!!!!!!!

  • John says:

    I have a file from garmin on my comuter that wont delete says it is being used by another program. I have uninstalled all of the garmin software and files. In the registry is a folder with the garmin name on it. can I just delete it ? can I then get rid of the remaining file ?

  • zoraida says:

    i dont know what wessite but i want delete it now from my pc ,and this is my house number 212 828 3134.i dont want sysitivirus antivirus.and i dont got no

  • jmpkumara says:

    I have this problem,

    After I un-install one of my software, I wanted to remove all the relevant registry entries too. But when I search them, I found lots of them spread every where in the registry. So what I had to do was search one by one (F3) and delete them. Is there a program or any way to search them all at once (which are related to specific key word) and delete. (I know there can be found registries having same keyword but relevant to different software, that I can manage).

    Thank you

  • gillian olney says:

    antivirus 7 i canot get on to the internet

  • marcia kaplan says:

    Worked on this all weekend. Can’t get the security tool off of my computer.

  • Jake says:

    ok i was able to access my registry entries but i had to do it as soon i was able to access the start menu… before security tool was able to show any error messages…..i know nothing about computers but i hope that helps

  • Jake says:

    Nobody has any info related to why i cant even enter my registry entries….security tool will not let me?????

  • rhonda says:

    can someone please help…security tool has infected my computer an I tried all the above an more to locate an remove an can not find the file..even in safe mode..can someone please me help. Much apperciated

  • Brian says:

    Prior to myself getting infected, I had regseeker, spybot, cleanup and AVG installed. Once infected, I couldn’t open and run any of these. I went into safe mode (F8 upon startup). Forums reccomended downloading stopzilla, malwarebytes…..I also lost the ability to access the internet and download. I tried installing Stopzilla and malwarebytes into my laptop via an SD Card, and a memory stick. Problem was, they wouldn’t even open, or run, in Safe Mode. In Safe mode, I was able to run my existing Spybot, which immediately detected, notified, then was successful in removing Security Tool when prompted. Had I not had an updated Spybot on my laptop, I could be still chasing my tail. I believe Security Tool appeared whilst I was doing a google search, and it started snowballing after I clicked on some links or prompts within the suspect website. In a nutshell, I am normally very vigilant, and reluctant to open suspect files, and must admit, they pulled the wool over my eyes

  • YUSUF says:

    i cant seem to remove security tool…it wont allow me into regedit HELP…

  • Karen Way says:

    Iam having the same problem as Phil, everytime I try step 1 security tool pops up….help

  • Mission Impossible says:

    Help Help Help Wth Is this Security Tool Doing Cant get It Off And Its Blokking Everything I try To Do Help!!!!!

  • fringe says:

    please! it’s really annoying me. :(

  • fringe says:


  • fringe says:

    aaaargh! i cant open regedit

  • andy says:

    sorry it was surcurity tool i can not get rid of please help………. as above is my last comment

  • andy says:

    I am grateful to your website, since my computer has been infected with antivirusdoc, and I can’t remove it; it pops up everytime I do anything. I followed your instructions about going to REGEDIT, and did all the steps, but when I got to UNINSTALL, I couldn’t find AntivirusDoc. At the moment, I’m on your second web page, so can’t exactly remember where AntivirusDoc was supposed to be. But I did do all the steps. HELP!!!

  • Rey says:

    I’m not very good with computers so I’m afraid and I don’t know how to remove spywares manually using “regedit”. These have been detected by your free software – SpyHunter. Please help me. I tried using my full antivirus with anti-spyware but they couldn’t be detected. Here are the spywares: test_cookie.doubleclick[1].txt and[2].txt

  • Elizabeth says:

    I am having the same problem as phil I can’t get rid of the antivirus 7 everything I bring up it blocks it and I can’t do anything how can I get rid of it? PLEASE HELP!!!!!!!!!!!!!!!!!

  • Roxanne Rink says:

    This was clicked on my mistake and my 8 year old Grandson didn’t know what h it was and it was out on by mistake I am on diability and can’t affored more then I already have an dneed it off and can not afford to take it into the shop please I didn not apply for it and have rejected it please remeove your site from my computer, Thankyou, PS this is not right –I just had my computer cleaned and there were no virus–please help me

  • phil says:

    I am having trouble with “Security Tool” I am looking at the directions to remove it, but it wont even let me open the “run” box. So I cant get any farther than step 1. Have any suggestion? PLEASE HELP

  • Deleteregistry says:

    Once in registry editor, right click the folder you want to delete, then click on “permissions” then, click on the account and select “Full control” checkbox. If you cant do that, go to advanced > select user > allow full control then click ok or apply. After its done you will be able to delete anything.

1 2 3

Leave a Reply

What is 10 + 2 ?
Please leave these two fields as-is:
IMPORTANT! To be able to proceed, you need to solve the following simple math (so we know that you are a human) :-)