Link to home
Start Free TrialLog in
Avatar of Shaun Wingrin
Shaun WingrinFlag for South Africa

asked on

XP Home Security 2013 and Bogus Registry Removal Keys!

Say, I think Ive found a bogus removal link:

http://www.2-viruses.com/remove-xp-home-security-2013

IT Said to remove these!!!! A Huge Mistake!

HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = ''
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%LocalAppData%\.exe" -a "%1" %*
HKEY_CLASSES_ROOT\
HKEY_CURRENT_USER\Software\Classes\ "(Default)" = 'Application'

How can I recover from this!

Any program I try run has nothing ascociated with it. Can't even run regedit or do  System restore

OS is XP

It sais choose a program you want to open this file....
Can one edit the registry from a remote PC? or put drive in another PC and edit registry this way?

Is this a trusted web site?
http://www.2-viruses.com/remove-xp-home-security-2013
SOLUTION
Avatar of flubbster
flubbster
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Shaun Wingrin

ASKER

Tx!
On effected PC can't even run regedit.exe as promts with "Chose program to run this".
Will merge with registry work?
Pls see keys affected above- there must be a simple way to fix this...
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
TX!
Can you shed any light on my other queries?
Avatar of Darr247
Follow the instructions in this Experts Exchange Article by younghv.

Note that a lot more has happened than what you can currently see, so after you get rid of that malware, backup all your data, then do a full format and reinstall windows (or use the recovery partition or disks that came with your computer).
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I've requested that this question be closed as follows:

Accepted answer: 166 points for ThomasMcA2's comment #a38789572
Assisted answer: 167 points for flubbster's comment #a38787497
Assisted answer: 0 points for shaunwingin's comment #a38787590
Assisted answer: 167 points for flubbster's comment #a38787716

for the following reason:

Solved by Getting into CMD shell and launching programes from there and download malwarebytes