HKCU\Software\Microsoft\Windows\CurrentVersion\Run\<random>.exe HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\<random>.exe HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\<random>.exe
4) Restore default registry values by deleting all added entries. To restore these, follow these steps:
a) Go to Start > Run and enter ” regedit. ” It will open Registry Editor.
b) From here, go to the Edit menu and click on the Export option. It will save the backup file at the location specified in the Save in box. By default, this location is C:\Documents and Settings<username>\My Documents folder.
c) Now move back to the Registry Editor window and click on the Import option present under the File menu. Select your previously saved backup file using the Browse button present next to the Open button. Confirm changes you have made into Registry.
