How to edit registry key (regkey) in Windows XP or Vista?
February 28th, 2007 by Brian
————————————————————————-
Basic Registry Editing in Windows XP/Vista
Editing registry key can be very complicated and highly risky. Please do NOT try this unless you are absolutely positive that you might mess up the system, and as always, it’s highly recommended that you do a backup of the registry (or whole system) before making any modifications.
Since it would take hours to talk about the registry, I am just going through the very basic steps. You can always refer to the Microsoft website or books for full details. Here’s the most common steps you might ever need to know for basic troubleshooting:
For Windows XP:
- In Windows XP, from Start, and then click on Run.
- Type “regedit“, then click on OK.
- Now it opens the Registry Editor.
- You can easily navigate through the subkey if you know what you are looking for. Or, you can press “Ctrl + F” to locate the subkey that contains the value you want to edit. (F3 to Find Next)
For Windows Vista:
- From Start, then type “regedit“.
- Click on “regedit” on the search result to open the registry editor in Windows Vista.
- Step 3 & 4 are the same as Windows XP (see above).
That’s all you need to know for basic editing such as removing spyware or troubleshooting a basic Windows problem. Please digg it if you find this helpful. Good luck!
Digg
del.icio.us
Google
Yahoo
Reddit
Furl
carl Says
Thanks for the guide, good to know when you need to make that registry edit to fix some obscure thing that goes wrong with windows that needs a registry check/fix to sort it out!
Feb 28th, 2007 at 1:58 pm
Martins Says
I couldn’t find these…
HKEY_LOCAL_MACHINESOFTWARESpyDawn HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows CurrentVersion App PathsSpyDawn.exe HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows CurrentVersion UninstallSpyDawn HKEY_CLASSES_ROOTTypeLib{661173EE-FA31-4769-97D4-B556B5D09BDA} HKEY_LOCAL_MACHINESOFTWAREClassesTypeLib{661173EE-FA31-4769-97D4-B556B5D09BDA […]
WHY????????????
Mar 4th, 2007 at 4:36 am
megan Says
Thank you for the help. I’ve been trying to figure this out for weeks. Im not to technical with what software isn’t a scam!
Mar 4th, 2007 at 12:17 pm
megan Says
now what am I suppose to do with the files that was located?
Mar 4th, 2007 at 12:18 pm
jack Says
couldn’t find these…
HKEY_LOCAL_MACHINESOFTWARESpyDawn HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows CurrentVersion App PathsSpyDawn.exe HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows CurrentVersion UninstallSpyDawn HKEY_CLASSES_ROOTTypeLib{661173EE-FA31-4769-97D4-B556B5D09BDA} HKEY_LOCAL_MACHINESOFTWAREClassesTypeLib{661173EE-FA31-4769-97D4-B556B5D09BDA […]
WHY????????????
whyyyyyyyyyyyyyyyyyyyyyy
Apr 5th, 2007 at 3:03 pm
Cole Says
Do I have to reboot afterwards because after deleting them the icon for Spylocked is still in the bottom right.
Apr 10th, 2007 at 11:15 pm
Suzuna Says
do we just delete the registery keys below:
HKEY HKEY_LOCAL_MACHINE\SOFTWARE\SpyDawn
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows \CurrentVersion \App Paths\SpyDawn.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows \CurrentVersion \Uninstall\SpyDawn
HKEY_CLASSES_ROOT\TypeLib\{661173EE-FA31-4769-97D4-B556B5D09BDA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{661173EE-FA31-4769-97
HKEY_LOCAL_MACHINE\software\antivermins
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\antivermins.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run antivermins
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\antivermins
HKEY_CURRENT_USER\Software\SNO2 HKEY_CURRENT_USER\Software\PestTrap
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SpywareQuake
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\E2CA7CD1-1AD9-F1C4-3D2A-DC1A33E7AF9D
HKEY_LOCAL_MACHINE\SOFTWARE\SpywareQuake\refid:”1″
HKEY_LOCAL_MACHINE\SOFTWARE\SpywareQuake\Language:”1033″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SpyQuake2.co
to get rid of the system alert problem??? pls help.
Apr 16th, 2007 at 12:20 pm
Brian Says
Suzuna,
Removing those regkeys alone would not get rid of the system alert popups. You need to stop the appropriate processes, unregister and delete the infected dll’s then delete the corresponding regkeys in order to completely get rid of the annoying system alert problems. You can also check the SpyLocked removal instructions which contain the latest infected files at this point in time.
Hope this helps. Good luck!
Apr 16th, 2007 at 7:33 pm
Your Worst Nightmare Says
Why the Damned Hell it always say Registry Editing Has Been Disabled by The Admin !!!! but im the admin !!!! the hell with it pls help me !!!!!!!!!!
Apr 16th, 2007 at 10:12 pm
Your Worst Nightmare Says
anybody help ???????????????
Apr 17th, 2007 at 11:34 pm
Your Worst Nightmare Says
help pls anybody ???????????????????????/ pls pls pls pls pls pls
Apr 17th, 2007 at 11:36 pm
zoliasi Says
for y.w.n.
try to log off and log in back with the admin account
Apr 22nd, 2007 at 4:59 am
Same Story Says
for y.w.n
if you are using an account w admin access already, then most likely a mal software has disabled your regedit.
you’ll first have to be sure that the software is not active on the memory.
then copy and paste below code to a textfile named whatever.inf and left click install on the file
hope this help
[Version]
Signature=”$Chicago$”
Provider=SameStory
[DefaultInstall]
DelReg=del
[del]
HKCU,Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableRegistryTools
Apr 24th, 2007 at 11:57 pm
… Says
my pal has his regedit hacked, so everytime i tried to open it notepad appears instead…
you have suggestions?
email ASAP
May 10th, 2007 at 4:06 am
Redlightning Says
I got spylocked removed but the toolbar is still there any other way to get to go away?
May 11th, 2007 at 2:25 am
Redlightning Says
lol nvm its gone…
I used Spyhunter ,Regseeker,& Clean up! all together
& btw I never used spyhunter to remove them I used it just to location of the Registry then used Regseeker to Destory them.
& 1 more thing the (dir/w/p) command can help in CMD mode
May 11th, 2007 at 3:36 am
zemo420 Says
i found these files in my registery HKEY_CLASSES_ROOT\CLSID\{25b7d2fd-4f71-46d1-801a-7de323e4ec82}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
can i just delete them. trying to get rid of spylock. thanks for the help
May 25th, 2007 at 1:34 pm
Tonia Says
I have a win 98 SE and it is not just only Win XP or Vista that the spylocked is infecting and btw the version I got is Spylocked 4.1 i am gona try to remove it from my add and remove progam and see if it will solve my pblm.
So you need to change the cliam that it only infects win xp and vista on your heading and include win 98 and win 98 se.
Tonia
Jun 3rd, 2007 at 1:07 am
Susan Says
I apologize for my ingnorance, but I am not sure how to delete the registry. My computer has the Vundo Trojan and I am trying to delete its registry. I found the directory and inthe directory there are 5 files
1. Default REG_SZ
2. Asynchronous REG_DWORD
3. DLLName REG_SZ
4. Impersonate REG_DWORD
5. Unlock REG_SZ
Do I the folder containing these files and that’s it?
Thanks in advance for your help.
Jun 4th, 2007 at 4:46 am
girl Says
i used SpyHunter in order to find all the files, cookies, and registry keys that i needed to delete or unregister, etc. i figured out how to delete the files and such, but in the registry, there are still a few keys that i cannot find at all. why is this? the only part of the keys i can see in SpyHunter are Object name:System location: HKey_Current_User\SOF… and another file is Object name: Microsoft\Windows\… with the location in HKEY_CURRENT_USER\SOF.. now i’m assuming that HKEY_CURRENT_USER\SOF .. ends with SOFTWARE. i went in there millions of times and i still cannot find these files. are they hiding somewhere?
Jun 7th, 2007 at 3:07 pm
Smarty101 Says
SpyCrush just popped up on my computer out of the blue, so i looked it up and this website told me just about everything i needed to know.
All i’ve got to do is try out the steps and hope to hell that it works.
Jun 14th, 2007 at 1:12 pm
George Says
I have Windows 2000 and ran the Spyhunter program. While it found and removed the bad cookies, registries and files, the icon is still flashing in the lower right corner. Any help with this?
Jul 18th, 2007 at 1:43 pm
Miguel Says
All I want to know is: Is it possible to do all that that you’ve talked? I ask this because when I start windows it fails in the desktop with the message “Windows Explorer doesn’t respond” and then he restarts the desktop icons again and again. Always doing this, I can’t even click on any icon because I don’t have time. The only program that the computer starts is the Virus protect pro.
Jul 24th, 2007 at 5:09 am
gil_lsa Says
hi there. i’ve used spyhunter to scan for the WinAntiVirus Pro. i just want to ask if i’ve found the registries then what do i do with them? do i just have to delete them?
also i got a virus called RateYouFace or RateTheFace(i forgot which one) and it’s a msn virus. i tried googling on how to remove it but nothing comes up. What should i do to remove it????
Aug 24th, 2007 at 7:38 am
TL Says
i can’t access regedit…everytime i try, it says it has been disabled by the admin….but it is MY comp…i never disabled anything for regedit…plz help
Aug 31st, 2007 at 9:35 pm
ks Says
i can’t seem to get rid of the annoying system alert. I’ve purchase software to scan and remove protect pro virus from the computer. but can’t seem to get rid of the “system alert” on the right hand, bottom corner.
Any help, suggest? Thanks.
Oct 8th, 2007 at 1:08 am
kyawmyothet Says
i want to know more please write more
Dec 16th, 2007 at 2:30 am
Pedmer Says
What reg concern to the gui envirnoment of XP?
Feb 28th, 2008 at 1:40 am
computertard Says
hi im trying to install a program on vista and it says i cant access HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.pal
i tryed opening that in regedit and it says i cant access it but im the administrator….
btw im running vista
Mar 5th, 2008 at 1:05 pm
computertard Says
nvm fixed it by doing some batch shizzle
Mar 5th, 2008 at 1:28 pm
darren Says
help to remove xp antivirus 2008 pls
Mar 21st, 2008 at 4:34 am
BobbyJ Says
xpantivirus2008…. making me crazy… deleted everything found in files, registry, start-up…etc… still getting never-ending pop-ups, unwanted scans and interruptions….. HELP?????
Mar 22nd, 2008 at 2:18 pm
john Says
help….Im getting VERY mad at my computer, i want to throw it across the room. I have a crap load of trojans because of this darn zlob adware. you can email me at sum41ismyidol@yahoo.com for info on my problem.. it would REALLY help…
Mar 28th, 2008 at 9:03 am
Jeff Says
help, i have files secure 2.2 on my computer and every time i open IE a box pops up that says i have a trojan and tries to get me to download a program when i choose “ok.”
i cant even search anything on google because my browser gets hijacked by porn ads… im getting very angry with my computer and none of this stuff makes any sense at all to me… btw im running vista
Apr 7th, 2008 at 7:49 am
Fastfreddie1959 Says
First things first.
Turn off system restore-then scan & remove.
Worse case do it in safe mode…
works every time…
Apr 16th, 2008 at 12:44 am
hally Says
i want to enable the LAn properties of my account.so please give me suzzestion ho wto enable the setting of LAN properties
May 11th, 2008 at 10:14 am
bruce hoyt Says
lease remove this from my computer
May 12th, 2008 at 8:57 am
Payal Says
1.I realised my PC was infected with spyware by the blue desktop taking over with a warning that my machine was infected with spyware, and then a link to scan my PC. The link then takes you to a download site for PC-antispyware and PC-cleaner. Mistakenly I had downloaded both the files and now my system has become very slow with intermediate false pop ups. Can anybody just tel how to get rid of this softwares. You may mail me: Payal@yahoo.com
May 13th, 2008 at 12:31 pm
sarkar Says
how to unhook the registry key. i m using win xp n not able to run task manager
May 14th, 2008 at 1:27 pm