What I have done in the past is use Registry Crawler to search for the keys, highlight the ones you want to remove and then select export from the menu on the right. All the keys will be saved to one reg file, then you can just add a minus sign before the name of the key you want to delete [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Norton AntiVirus Server] "Type"=dword:00000110 "Start"=dword:00000002 "ErrorControl"=dword:00000000 "ImagePath"=hex(2):43,00,3a,00,5c,00,50,00,52,00,4f,00,47,00,52,00,41,00,7e,00,\ 31,00,5c,00,53,00,59,00,4d,00,41,00,4e,00,54,00,7e,00,31,00,5c,00,53,00,59,\ 00,4d,00,41,00,4e,00,54,00,7e,00,31,00,5c,00,52,00,74,00,76,00,73,00,63,00,\ 61,00,6e,00,2e,00,65,00,78,00,65,00,00,00 "DisplayName"="Symantec AntiVirus Client" "ObjectName"="LocalSystem" "Description"="Provides real-time virus scanning, reporting, and management functionality for Symantec Client Security." then when the file is run it will remove all the info in the key and the key itself