Windows 10: I know I've been compromised, how do I know which items/users to delete in regedit?

I got some malicious stuff, they have been messing with my keyboard, my color/size schematic, making it impossible to do any administrative tasks... can someone help?Windows10 : I'm a newbie and I've been trying to learn how to get things back to normal thru the WindowsSHELLmgr and command center, but I keep getting syntax errors. I really think someone needs to actually spell it out for me. :Thanks, Plain Jane Next Door

:)

 

Recovering a deleted email from the deleted items folder or Recycle Bin

Thank you for the suggestion. The only message I find at the bottom of the message list in the deleted items folder is "To find older messages, use Search". My search did not work.

Thanks.

 

regedit help

any step by step guide?
that is like chinese to me

edit:
i did this that you posted and deleted after and it worked:
psexec -i -d -s c:\windows\regedit.exe

but the problem is still there *Frown

 

RegEdit - Can I delete this ?

None of the items in the screenshot have the same name. If you look closely you will see that some of the names are very similar but by no means the same. They are all unique, all important. VERY important.

Regedit is a very powerful and useful tool. But like all such it requires considerable knowledge and skill to be used safely and effectively. In the hands of a skilled surgeon a scalpel is a life saving tool. In the hands of the unskilled it is a dangerous weapon. Huge difference.

There are a couple of important things about Regedit that are important to know but far from obvious:

1. In a typical text editor making changes to a file is a 2 step process. You make the editing changes and when you are satisfied you click save. In Regedit there is no save function. All changes are immediate.

2. Most text editors have an undo facility. Regedit has no undo of any kind. All changes are permanent.

The only way to recover from a mistake in Regedit is restoring from a backup. That assumes you made one before the changes were made.

Most computer users should consider the registry as read only. Look but don't touch, and even then exercise due caution. That goes double for keys like HKEY_LOCAL_MACHINE and HKEY_USERS, and others as well. This is for experts only who REALLY understand what they are doing. It only takes a few mouse clicks to do extensive damage.