Removing a banner through the registry: instruction

The Internet is a huge platform, where there is an incalculable amount of diverse content. And not always sites and documents carry positive content for users. In recent times, the spread of viruses in the form of banners has become more frequent. Thus, cybercriminals extort money from users, offering to send an SMS message, and in return receive an unlock code. In this article, we'll look at a method for how to remove a banner from the registry. It will quickly and effectively get rid of the virus.

Preparation

Removing a banner through the Windows 7 registry (as in other versions of Windows) can only be performed if the operating system is loaded. As a rule, banners block the manipulation during normal loading. Safe mode will help us. When the computer turns on, you need to press the F8 key. An additional menu appears, in which you must choose to boot the operating system in safe mode (the first one suggested). Next, the system will start without a banner. Safe Mode imposes some limitations on the PC. For example, low-grade graphics will be used, so do not be scared. Now the removal of the banner through the registry should be done according to the instructions, which will be further described. But it's worth noting that this virus can get to safe mode, then you have to use other options.

Instructions

So, if you were able to start the operating system, you can start to remove the banner through the registry. Do all the steps of the instruction.

1. First of all you need to go to the Registry Editor. To do this, open the "Start" and find the "Run" item. In Windows 7, it is in standard programs. Type in the line "regedit".
2. After entering the name of the program you will open a new window. In the left part of this utility there is a navigation bar. It is necessary to go to the address "HKEY_LOCAL_MACHINE / SOFTWARE / Microsoft / Windows NT / CurrentVersion / Winlogon".
3. You will see many parameters on the right side of the program. Most often, the banner edits the Userinit and Shell parameters. They are responsible for launching the programs. The Userinit parameter must be set to "C: \ WINDOWS \ system32 \ userinit.exe". And in Shell, "Explorer.exe".
4. Edit these parameters, if, of course, their values differ from those previously given. The change will be made by double clicking the left mouse button. In some cases, the parameters may be absent altogether. Then you will need to create them anew. To do this, right-click on the empty area of the program and select "Create". Enter the name of the missing parameter and its value.

Additional Information

Removing banners through the registry is not the only way to get rid of the virus. You can always resort to the use of anti-virus software. But if you can not load the system in normal mode, respectively, and install any software will not work. Then you can use passwords. On different portals, users post keys that can deactivate the banner. The password is entered in the banner, and it automatically stops. It is worth noting that this method does not always work, because sometimes you can not find the right key.

Finally

The question of how to remove a banner through the registry is one of the most asked. We hope that this article has helped you to cope with the problem.