Hi, CarolLJ.
The post was split from the Wiki and the article was not written for Windows 7.
It is unclear if the question was about deleting the registry key, but as read and as replied by Ernie San, the assumption is that the question involves deleting the actual exe and not the registry key.
Assuming the registry key:
7. Delete conflicting Registry Entry
Some malwares adds malicious entries in registry that blocks real antiviruses from running. To remove these entries, follow these steps:
- Press Windows key + R. This will open Run. Alternatively, you can go to Start and search for 'Run'.
- In Run dialog box, type 'regedit' and hit enter. This will open Registry Editor.
- In Registry Editor, navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options.
- In this key, if you find any entry for MSASCui.exe, MpCmdRun.exe or MsMpEng.exe then right click on it and click on Delete. If you do not find any of these entry then it is normal and you don't need to do anything.
Are you seeing msmpeng.exe as an entry in this specific key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
You would need to start Regedit by running as Administrator. Type regedit in the search box, right click on regedit that appears in the results as run command and select Run as Administrator.
-steve