Tot mai multe cazuri in care un malware impiedica accesul la Windows Registry.
Si astfel sunt impiedicate unele metode de indeartare a lui.
Daca infectia este curatata cu un software specializat(antivirus sau antispyware instalat) ori scanare online, restaurarea accesului la Windows Registry se poate face relativ usor.
Deschideti Notepad sau alt editor text. Dati paste la ce scrie mai jos. Salvati ca Registry.vbs . Atentie ! Extensia trebuie sa fie .vbs si nu .txt ca altfel nu are nici un efect. Dupa asta, dublu-click pe fisier. Scriptul se va ocupa de toate setarile pentru restaurarea accesului, setari ce iau ceva timp daca sunt facute manual.
‘Enable/Disable Registry Editing tools
‘© Doug Knox – rev 12/06/99
Option Explicit
‘Declare variables
Dim WSHShell, n, MyBox, p, t, mustboot, errnum, vers
Dim enab, disab, jobfunc, itemtype
Set WSHShell = WScript.CreateObject(“WScript.Shell”)
p = “HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\”
p = p & “DisableRegistryTools”
itemtype = “REG_DWORD”
mustboot = “Log off and back on, or restart your pc to” & vbCR & “effect the changes”
enab = “ENABLED”
disab = “DISABLED”
jobfunc = “Registry Editing Tools are now “
‘This section tries to read the registry key value. If not present an
‘error is generated. Normal error return should be 0 if value is
‘present
t = “Confirmation”
Err.Clear
On Error Resume Next
n = WSHShell.RegRead (p)
On Error Goto 0
errnum = Err.Number
if errnum <> 0 then
‘Create the registry key value for DisableRegistryTools with value 0
WSHShell.RegWrite p, 0, itemtype
End If
‘If the key is present, or was created, it is toggled
‘Confirmations can be disabled by commenting out
‘the two MyBox lines below
If n = 0 Then
n = 1
WSHShell.RegWrite p, n, itemtype
Mybox = MsgBox(jobfunc & disab & vbCR & mustboot, 4096, t)
ElseIf n = 1 then
n = 0
WSHShell.RegWrite p, n, itemtype
Mybox = MsgBox(jobfunc & enab & vbCR & mustboot, 4096, t)
End If
3 Responses to “Registry has been disabled by your administrator”
Trackbacks/Pingbacks
- Task Manager has been disabled by your administrator | Devirusare.com - [...] Manager has been disabled by your administrator Am scris un articol si despre Registry has been disabled ...
- Reseteaza fisierele ascunse de virusi | Devirusare.com - [...] http://devirusare.com/2009/04/12/registry-has-been-disabled-by-your-administrator/ [...]
- Command Prompt has been disabled by administrator | Devirusare.com - [...] Registry has been disabled by your administrator [...]
Nu functioneaza metoda
Care ma ajutati si pe mine add hyena_nice_boy
va rog frumos
Frate, macar scoate Protectia, vrei sa stau sa scriu toate comenzile in notepad?