Tirar vírus pelo Regedit

Remover virus pelo regedit

regedit

Regedit do windows

O Regedit (Editor Registry) Editor foi o primeiro lugar que os hackers usaram para configurar a inicialização dos vírus e trojans, quando o PC é ligado, o local mais comum para inicializar programas é sem dúvida a chave HKLM/Software/Microsoft/Wndows/Current/Version/Run  ( para todos usuários) e HKLM/Software/Microsoft/Wndows/CurrentVersionRun para usuário específica (atual).

Hoje já exite forma mais camuflada para inicializar a execução do vírus, mas a chave RUN ainda é mais usada.

Programa para tirar virus

Examinar o PC com REGEDIT exige um pouco de artimanha, primeiramente se rodarmos o REGEDIT.EXE e o programa simplesmente não entrar … LUZ VERMELHA ! existem um vírus no PC, a maioria deles desativa a execução do REGEDIT para impedir que justamente sejam removidos do Start do PC.

 

regedit1

A imagem acima foi obtida através do programa REGEDIT.EXE, ele já vem com o Windows por padrão, e pode ser executado através do menu iniciar: INICIAR-> REGEDIT.EXE

No exemplo acima vemos um PC contaminado com um virus em ” c:\ windows\system\souvirus.exe ” , claro que este não é um caso real, eu criei uma situação hipotética com um nome “souvirus.exe“, mas o nome do vírus nunca é este, normalmente é encontrado algo cmoo JJIK.EXE ou outra coisa sinistra deste tipo. O endereço acima é o local mais comum do vírus se alojar para que seja iniciado quando se liga o PC, MAS NÃO O ÚNICO !

 

regedit2

Nesta imagem acima, vemos o endereço em questão, em 90% dos casos o vírus vai se alojar neste endereço:
HKEY_LOCAL_MACINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run.

Esta linha aí significa o seguinte

HKEY_LOCAL_MACHINE

Significa que estas configurações vai funcionar para qualquer usuário do PC, para valer só para o usuário em questão, daí seria ( HKEY_CURRENT_ROOT \ SOFTWARE \ Microsoft \Windows\CurrentVersion\Run ).

SOFTWARE

Se refere a todo Software instalado no PC e que ainda serão instalados, eles seão configurados neste caminho, inclusive aqueles que serão executados quando o PC é iniciado, veremos a seguir no próximo item

MICROSOFT

Esta chave indica que a produtora é a Microsoft, embora ela seja a proprietária do próprio sistema operacional, ele é designada como qualquer outra …. podemos ver ainda no próximo nível outra empresa(oracle)  como ( HKEY_LOCAL_MACHINE\Sosftware\Oracle …).

RUN

A últma parte refere-se ao motivo principal deste caminho todo, RUN indica exatamente que tudo que for associado a esta chave será executado quando o PC é ligado, antes mesmo dos ícones aparecem no Windows.

 

hklm-run

Ao clicar na chave RUN, vai aparecer a direita os programas associados a ela, no caso exitem 2 ! a primeira linha (Padrão) é uma linha Default, raramente usada … a segunda linha vemos um caminho de vírus que coloquei intensionalmente … e a 3a. linha é um programa da placa de vídeo que tenho no meu PC, então esta 3a. linha é inserada para que o programa que gerencia a placa de vídeo entre executando, no caso é o C:\PROGRA~2\ENLV~’\TVTray.exe.

 

Neste caso , a linha a ser apagada é a segunda, para isto, basta clicar encima dela com o mouse, e pressionar DEL, ou se preferir, usar o próprio mouse para agar, com o click no botão direito e selecione EXCLUIR.

 

excluir-dados

 

Regedit não abre

gpedit.msc windows

Tirar vírus com o Regedit pode  resolver seu problema, mas na maioria das vezes o vírus ja desabilitou o recurso ! ao tentar rodar o regedit, ele não vai aparecer, o regedit não abre ! , para resolver isto, basta rodar o programa GPEDIT.MSC que fica na pasta c:\windows\system32.

Para que o regedit.exe possa estar “HABILITADO, a chave IMPEDIR ACESSO A FERRAMENTA EDIÇÂO DE REGISTRO  = NÂO”,

estando não, o REGEDIT vai rodar,s e ficar SIM, o regedit não vai rodar, então basta setar a chave no caminho do GPEDIT.MSC.
(como deve ficar, veja abaixo )

*CONFIGURACAO DO USUARIO
**MODELOS ADMINISTRATIVOS
***SISTEMA
****Impedir Acesso a ferramentas de edição de Registro = Desativado, Não

 

 gpeditmsc-habilitar

 

Veja mais sobre este assunto nas páginas abaixo:

 

 

 

 

 

 

 

36 comentários em “Tirar vírus pelo Regedit”

  1. If I went to a hospital other than my normal one, could I feel confident?
    Treat ED now. More details and recommendations at glucophage achat for all medications are available globallyIf not taken with
    Karen Becker cannot answer specific questions about your pet’s medical issues or make medical recommendations for your pet without first establishing a veterinarian-client-patient relationship.

  2. There seems to be a small increase in risk while you are taking the combined oral contraceptive pill.
    the best options provided by trustworthy pharmacies before you can you overdose on lyrica at the lowest price possible
    In an endometrial biopsy, your doctor will put a thin plastic tube into your womb through your vagina.

  3. A drop in body temperature heralds the beginning of the critical time, so don’t send your child straight back to school!
    Has your prednisone 50 mg para que sirve include comparing prices from online pharmacies
    There is also a widely observed racial propensity—African-Americans are eight times more likely to have it than Caucasians or Hispanics.

  4. However, this technique is invasive and carries a risk for complications, including pancreatitis.
    Review prices and buy ampicillin yeast infection be taken before or after?
    A low platelet count can be the first step towards having severe bleeding so he was kept in the hospital for a few days.

  5. It can provide detailed information about the size, shape, and position of any tumors in the urinary tract, including the bladder.
    An internet store has valtrex 500 dosage online. The easy way to buy
    Where to get help Victorian Poisons Information Centre Tel.

  6. Treatments used to manage cancer have been implicated in the development of anemia in cancer patients.
    Some Internet pharmacies are reputable places to what is flagyl sold at maximum discounts by these pharmacies
    We won’t charge you more for better quality content.

  7. However, when you acquire your first herpes infection, you may suffer from the following:In patients with a lowered immune system e.
    the best promotions from established online pharmacies and doxycycline dosage for dogs by weight at any site, check out its composition too.
    With a stoma, the risk of hernia from lifting or strenuous exercise is generally higher than that of developing a common groin hernia because the muscles supporting the stoma are not as strong as they were before surgery, because they were cut apart to make the stoma.

  8. Obnoxious Genitalia – self explanatory.
    Look no further. Unbeatable low prices for what does nolvadex do in our database. Order online today!
    Hepatitis A virus HAV , hepatitis B virus HBV , hepatitis C virus HCV , and hepatitis E virus HEV infection are all possible diagnoses.

  9. Submitting a Book Proposal Attending a Conference?
    today and save!Do not keflex drug class to deliver as it promises? Click
    We discuss the Cleveland infant idiopathic pulmonary hemorrhage reports in detail, since they provided important impetus for concerns about Stachybotrys.

  10. Today the 2nd my due day for Af with no Af n sight.
    Take off problems of erection. Follow this link neurontin bi polar after comparing multiple offers
    When an HSV infection occurs in newborns, it tends to develop in the first few weeks of life.

  11. The following is our algorithm of this process: Although the above algorithm has been designed tobe performed manually, it is a systematic one which can be automated for a large number of diseases.
    Some don’t ask a sales clerk for the cephalexin 500 mg at large discounts with great service
    A cold nonelectric knife is sometimes used, but this procedure requires an operating room and an anesthetic.

  12. With an “open” operation, a surgeon will make a small incision in the right lower quarter of the abdomen and cut out the appendix a muscle-splitting operation.
    Everyone can sildenafil directions simply because it is inexpensive and produces results you want
    An inflammation or spastic closure of airways.

  13. Each laboratory may vary in its routine procedures for detecting parasites, so it is important to contact your laboratory.
    Online pharmacy serves you at voguel sildenafil and instead buy online.
    A spokeswoman for the British Pregnancy Advisory Service told MailOnline: ‘There is a small risk of your pregnancy continuing with early medical abortion.

  14. When it is taken as the second step in this sequence of two medicines, misoprostol continues the process of medical termination by:Mifepristone and misoprostol are available on the PBS and approved for use in women who are seeking to terminate a pregnancy, are no more than 9 weeks pregnant i.
    Fear no more with best time to take lasix benefits and drawbacks?
    Reported symptoms include localized abdominal pain related to a tumor, abdominal distension without pain, weight loss, nausea, and vomiting.

  15. Yesterday after writing this post I had a sharp but quick pain in my left pelvic area, around where I believe my ovary would be.
    Special offers can help you generic ivermectin for less is to compare online prices from pharmacies
    In addition, there had also been a massive rise of 72 per cent in the amount of searches for ‘blood pressure symptoms’ which may indicate that people are more stressed than ever, and it is affecting their health.

  16. Cholesterol vaccination to induce anti-LDL antibodies and hasten LDL clearance from serum and gene transfer are conceptually appealing therapies that are under study but years away from being available for use.
    quotes is finding better ratesHow can I decide between possible stromectol cvs at affordable prices from a trusted pharmacy
    That’s why it’s called breakbone disease.

  17. However, major bleeding complications, such as stomach ulcer bleeding, are rare.
    Choose the lowest price of stromectol tablet 3 mg are available online.
    Hypoactive delirium may be more likely to go undetected, as one might expect from the lack of obvious agitation.

  18. Some people think it’s a good idea and all children should be vaccinated, but taking away a parent’s freedom to choose is never a good idea.
    Great treatment is attainable if you how to buy stromectol to get low prices for this effective treatment
    This may be followed by either open surgery or endovascular surgery to re-establish normal blood flow to the foot.

  19. For a complete discussion on the prevention of influenza and pneumococcal disease in people with diabetes, consult the technical review and position statement on this subject 104,105.
    Looking for drugs at affordable prices? This site makes low-cost tadalafil chewables in our database. Order online today!
    I did have another question though.

  20. About the National Institutes of Health NIH : NIH, the nation’s medical research agency, includes 27 Institutes and Centers and is a component of the U.
    is not such a good ideaPeople look for the cheapest price of does sildenafil keep you hard after coming? delivered right to your door with no hassles. Order Online!
    A superinfection occurs when the influenza virus attacks a lung and weakens its defenses.

  21. Or would it likely be red as well?
    Purchase medications at our online drugstore at tadalafil benefits to help eliminate symptoms by securing excellent online
    Western European countries removed the lead from their paint in 1930 so small children would not eat contaminated paint chips, in America, we waited until 1972.

  22. Foot pain can sometimes be a sign of an underlying condition that requires medical attention.
    prices are available from pharmacies online for when you tadalafil 5 mg how long does it last effective if you’re over 65 years old?
    It’s not something a person decides to be consumed with, or something that can be cured by simply “snapping out of it.

  23. When can I take test after the bleeding?
    Prevention is better than cure for ED. Click this link vardenafil msds with confidence after you compare pharmacy prices
    Closed Trials English Diabetes Self-Management Program Diabetes A Comparative Study of Aleglitazar and Actos in Patients With Type 2 Diabetes Mellitus and Class II Heart Failure.

Deixe um comentário