Solved

XP Home Security 2013 and Bogus Registry Removal Keys!

Posted on 2013-01-17
10
398 Views
Last Modified: 2013-02-17
Say, I think Ive found a bogus removal link:

http://www.2-viruses.com/remove-xp-home-security-2013

IT Said to remove these!!!! A Huge Mistake!

HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = ''
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%LocalAppData%\.exe" -a "%1" %*
HKEY_CLASSES_ROOT\
HKEY_CURRENT_USER\Software\Classes\ "(Default)" = 'Application'

How can I recover from this!

Any program I try run has nothing ascociated with it. Can't even run regedit or do  System restore

OS is XP

It sais choose a program you want to open this file....
Can one edit the registry from a remote PC? or put drive in another PC and edit registry this way?

Is this a trusted web site?
http://www.2-viruses.com/remove-xp-home-security-2013
0
Comment
Question by:shaunwingin
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +1
10 Comments
 
LVL 30

Assisted Solution

by:flubbster
flubbster earned 332 total points
ID: 38787497
Using a computer that is working, open the registry and use File>Export to export the same keys that you deleted. Place the exported keys on a memory stick. Place the memory stick in the affected computer and copy the keys to the desktop. Right-click on each exported file and select "merge with registry." Test to see if that fixed it.

When you export the keys, make sure that you FIRST select the one that you need, then go to the file menu to export it.
0
 

Author Comment

by:shaunwingin
ID: 38787590
Tx!
On effected PC can't even run regedit.exe as promts with "Chose program to run this".
Will merge with registry work?
Pls see keys affected above- there must be a simple way to fix this...
0
 
LVL 30

Assisted Solution

by:flubbster
flubbster earned 332 total points
ID: 38787716
You don't need to open the registry to merge. Try it with one key.

Another option is to use UBCD for Windows:

http://www.ubcd4win.com/

You will need a working system with XP to create the CD. It is fairly easy and quick. Boot the system with the CD and run the Registry Restore Wizard. It is similar to System Restore. If you have valid restore points, it will restore the registry for you without having to use windows. It is called RegResWiz on the CD.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:shaunwingin
ID: 38787793
TX!
Can you shed any light on my other queries?
0
 
LVL 44

Expert Comment

by:Darr247
ID: 38788107
Follow the instructions in this Experts Exchange Article by younghv.

Note that a lot more has happened than what you can currently see, so after you get rid of that malware, backup all your data, then do a full format and reinstall windows (or use the recovery partition or disks that came with your computer).
0
 
LVL 14

Accepted Solution

by:
ThomasMcA2 earned 168 total points
ID: 38789572
I check all 3 of these when I research suspect websites:

1) WOT
http://www.mywot.com/en/scorecard/2-viruses.com

2) Do Not Track Plus. Their search function stinks, so I use Google:
site:donottrackplus.com 2-viruses.com

3) McAfee SiteAdvisor:
http://www.siteadvisor.com/sites/www.2-viruses.com

WOT has a large mix of good and bad reviews about 2-viruses.com, so use the site at your own discretion.

Best Free Anti-virus Choices, per Consumer Reports, May 2012, in order of preference

1)    Avira Free Antivirus
2)    AVG Anti-Virus Free 2012
3)    Avast Free Antivirus
4)    Microsoft Security Essentials

Only AVG Anti-Virus Free 2012 got a very good rating in the "net threats" category - the others only got "good"

Top-ranked for "net threats" with an "excellent" rating were Kaspersky Internet Security 2012 and BitDefender Internet Security 2012 (which are not free).

AVG has a free boot image. Download it, burn it to a CD, boot from it on the infected PC, and run the scan.

A good, free, online scan tool is here: http://housecall.trendmicro.com/
0
 

Author Comment

by:shaunwingin
ID: 38792811
I've requested that this question be closed as follows:

Accepted answer: 166 points for ThomasMcA2's comment #a38789572
Assisted answer: 167 points for flubbster's comment #a38787497
Assisted answer: 0 points for shaunwingin's comment #a38787590
Assisted answer: 167 points for flubbster's comment #a38787716

for the following reason:

Solved by Getting into CMD shell and launching programes from there and download malwarebytes
0
 
LVL 44

Expert Comment

by:Darr247
ID: 38792812
MalwareBytes Anti-Malware is the 'cleaner' recommend in the article linked to in
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Q_27998837.html#a38788107
0

Featured Post

Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We have adopted the strategy to use Computers in Student Labs as the bulletin boards. The same target can be achieved by using a Login Notice feature in Group policy but it’s not as attractive as graphical wallpapers with message which grabs the att…
Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question