1. Home
  2. Docs
  3. RogueKillerCMD
  4. Getting Started
  5. Registry

Registry

List Registry Key elements (values and subkeys)

RogueKillerCMD.exe -list REG "{root}\{some_key}\{subkey}"
Exemple:
RogueKillerCMD.exe -list REG "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run"

Delete Registry Key (recursive)

RogueKillerCMD.exe -kill REG "{root}\{some_key}\{subkey}"
Exemple:
RogueKillerCMD.exe -kill REG "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Malware"

Delete Registry Key by index (1 based, recursive)

RogueKillerCMD.exe -kill REG "{root}\{some_key}\{subkey}:subkey:{1-based index}"
Exemple:
RogueKillerCMD.exe -kill REG "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run:subkey:1"

Delete Registry Value

RogueKillerCMD.exe -kill REG "{root}\{some_key}\{subkey}:{value}"
Exemple:
RogueKillerCMD.exe -kill REG "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run:the_malware"

Delete Registry Value by index (1 based)

RogueKillerCMD.exe -kill REG "{root}\{some_key}\{subkey}:value:{1-based index}"
Exemple:
RogueKillerCMD.exe -kill REG "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run:value:1"

Delete default (empty name) Registry Value

RogueKillerCMD.exe -kill REG "{root}\{some_key}\{subkey}:(default)"
Exemple:
RogueKillerCMD.exe -kill REG "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run:(default)"

How can we help?