Devirusare RegistryClever – Program Fals de Optimizare a Registrilor Windows

RegistryClever este un program fals de tip registry cleaner.
Dupa cum exista antivirusi falsi, despre care v-am tot vorbit, exista si programe de acest gen. RegistryClever vine la pachet cu un Antivirus Fals, mai precis IronDefender.

Porneste automat cu Windows-ul si scaneaza sistemul pentru a gasi erori in registry-ul Windows.
Intrarile detectate sunt curate, iar alertele nu trebuie luate in considerare. NU achizitionati acest produs, iar daca ati fost infectati, urmati ghidul de mai jos:

RegistryClever

Programul creeaza urmatoarele fisiere\foldere:

  • c:\Program Files\RegistryClever Software\
  • c:\Program Files\RegistryClever Software\RegistryClever\
  • c:\Program Files\RegistryClever Software\RegistryClever\license.txt
  • c:\Program Files\RegistryClever Software\RegistryClever\RegistryClever.exe
  • c:\Program Files\RegistryClever Software\RegistryClever\RegistryCleverTray.exe
  • c:\Program Files\RegistryClever Software\RegistryClever\uninstall.exe
  • c:\Program Files\RegistryClever Software\RegistryClever\Styles\
  • c:\Program Files\RegistryClever Software\RegistryClever\Styles\Vista.cjstyles
  • %AllUsersProfile%\Application Data\RegistryClever\
  • %AllUsersProfile%\Application Data\RegistryClever\BackupedItems\
  • %AllUsersProfile%\Application Data\RegistryClever\BackupedItems\items.xml
  • %AllUsersProfile%\Desktop\RegistryClever.lnk
  • %AllUsersProfile%\Start Menu\Programs\RegistryClever\
  • %AllUsersProfile%\Start Menu\Programs\RegistryClever\Homepage.lnk
  • %AllUsersProfile%\Start Menu\Programs\RegistryClever\RegistryClever.lnk
  • %AllUsersProfile%\Start Menu\Programs\RegistryClever\Uninstall.lnk



Ii sunt asociate cheile registry:

HKEY_CURRENT_USER\Software\RegistryClever
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegistryClever
HKEY_LOCAL_MACHINE\SOFTWARE\RegistryClever
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “TrayScan”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “RegistryClever”

In log-ul HijackThis apar urmatoarele intrari:

O4 – HKLM\..\Run: [RegistryClever] C:\Program Files\RegistryClever Software\RegistryClever\RegistryClever.exe
O4 – HKCU\..\Run: [TrayScan] “C:\Program Files\RegistryClever Software\RegistryClever\RegistryCleverTray.exe”

DEVIRUSARE:

1.Descarcati si rulati rkill.com. Acest lucru este ncesar pentru a opri procesul activ folosit de virus.
Rulati rkill.com din nou, pana cand virusul nu mai este activ. Alternativ puteti incerca eXplorer.exe sau iExplore.exe


2. Descarcati Malwarebytes Anti-Malware. Scanati PC-ul complet si stergeti la final infectiile gasite apasand Remove selected.

Daca ai reusit sa cureti aceasta infectie, iti recomand sa cumperi versiunea PRO a Malwarebytes Anti-Malware pentru a te proteja si pe viitor de astfel de amenintari, avand in vedere ca nu au fost detectate\eliminate de antivirusul tau actual.

Administrator FaraVirusi.com
voluntar al Comodo Malware Research Team, expert Malwarebytes Anti-Malware

3 responses to “Devirusare RegistryClever – Program Fals de Optimizare a Registrilor Windows”

  1. Gigi

    Eu l-am cumparat si imi merge foarte bine sistemul acum. 🙂

    1. happyday

      😆 😆
      banii ii mai ai pe card? ca poate ti-a facut o optimizare si pe-acolo 😆 .

      1. Gigi

        Da! Sunt mai fluizi si mai usor de numarat …pe degete! 😆

Leave a Reply