Remove Windows Recovery files and dlls:

%TempDir%[random.exe]

Step 1: se Windows !ile Searc" Tool to !ind %TempDir%#[random].exe $at"

1. Go to Start % Searc" % &ll !iles or !olders. 2. In the '&ll or part of t"e t"e file name' section, type in '%TempDir%#[random].exe ' file name(s). 3. To get better results, select '(oo) in: (ocal *ard Drives' or '(oo) in: +y ,omp-ter' and then click 'Searc"' button. . !hen !indo"s finishes your search, ho#er o#er the $In %older$ of '%TempDir%#[random].exe ', highlight the file and copy&paste the path into the address bar. 'a#e the file(s path on your clipboard because you(ll need the file path to delete )Temp*ir)+,random-.e.e in the follo"ing manual remo#al steps.

/ead more about 0o" to *elete )Temp*ir)+,random-.e.e "ith %ile 'earch Tool

Step .: se Windows Tas) +ana/er to Remove %TempDir%#[random].exe $rocesses

1. To open the !indo"s Task 1anager, use the combination of ,TR(0&(T0D1( or ,TR(0S*2!T01S,. 2. 2lick on the '2ma/e 3ame' button to search for '%TempDir%#[random].exe ' process by name. 3. 'elect the '%TempDir%#[random].exe ' process and click on the '1nd $rocess' button to kill it.

/ead more about 0o" to kill )Temp*ir)+,random-.e.e 3rocesses

Step 4: Detect and Delete 5t"er %TempDir%#[random].exe !iles

1. To open the !indo"s 2ommand 3rompt, go to Start % R-n % cmd and then press the '56' button. 2. Type in 'dir 7& name8of8t"e8folder' (for e.ample, 24+'py"are5folder), "hich "ill display the folder(s content e#en the hidden files. 3. To change directory, type in 'cd name8of8t"e8folder'. . 6nce you ha#e the file you(re looking for type in del 'name8of8t"e8file'. 7. To delete a file in folder, type in 'del name8of8t"e8file'. 8. To delete the entire folder, type in 'rmdir 7S name8of8t"e8folder'. 9. 'elect the '%TempDir%#[random].exe ' process and click on the '1nd $rocess' button to kill it.

/ead more about 0o" to *elete )Temp*ir)+,random-.e.e 0armful %iles

nre/ister Windows Recovery re/istry val-es: *6198, RR13T8 S1RSoft"are1icrosoft!indo"s2urrent:ersion/un ;,random-.e.e< *6198, RR13T8 S1R'oft"are1icrosoft!indo"s2urrent:ersion/un ;,random-< *6198, RR13T8 S1R'oft"are1icrosoft!indo"s2urrent:ersion3olicies=ssociations ;>o"/isk%ileTypes< ? @& AhB4&sCs4&ogn4&uyu4&dyd4&cCu4&bnl4&ble4&sdf4&lrh4&iul4&iulm4&fhg4&clB4&kBf4&C"h4&lBf4&lBdf4&ln"4&lB24&l2t4&#C"4&rbs4D *6198, RR13T8 S1R'oft"are1icrosoft!indo"s2urrent:ersion3olicies=ttachments ;'a#eEoneInformation< ? @1F *6198, RR13T8 S1R'oft"are1icrosoftInternet G.plorer*o"nload ;2heckG.e'ignatures< ? @noD *6198, RR13T8 S1R'oft"are1icrosoftInternet G.plorer1ain ;Hse %orm'uggest< ? @yesD *6198, RR13T8 S1R'oft"are1icrosoft!indo"s2urrent:ersionInternet 'ettings ;!arnonIad2ert/ec#ing< ? @JF *6198, RR13T8 S1R'oft"are1icrosoft!indo"s2urrent:ersion3olicies'ystem ;*isableTask1gr< ? @1F