HKLM/SOFTWARE/SPROVIDE it does not disappear from the PC

[Kiogren]

 

How to open the Group Policy Editor after installation. I followed this far, do I do anything else?

[AdvancedSetup]

No, you only need to install from one of them. If it's installed now you should be able to click on Start / Search and type in GPEDIT.MSC and it should open

Let me know if it does please

 

[Kiogren]

Installing gpedit.msc correctly.
I followed him up to here

[Kiogren]

[Kiogren]

https://www.majorgeeks.com/content/page/enable_group_policy_editor_in_windows_10_home_edition.html

Should I follow him?

[AdvancedSetup]

You need to right-click and run that batch file as an Administrator

 

[Kiogren]

Ok

[AdvancedSetup]

Doesn't matter which one. Choose either one you're able to follow easily

 

[Kiogren]

But I already followed the first link. Do I have to do it again?

[AdvancedSetup]

If you type in GPEDIT.MSC does it show? Can you open it?

 

[Kiogren]

This?

[Kiogren]

I use Wind+R, is ok?

[AdvancedSetup]

Okay, there you go. It works. Give me time to write up some other instructions

 

[Kiogren]

Ok, thank you

[AdvancedSetup]

Open regedit
Right-click on the key "HKEY_LOCAL_MACHINE\SOFTWARE\SProvide" and select Permissions.
From the dialog box opened above, click on the Advanced button.
Go to the Auditing tab and click on the Add button.
Enter your user account that has admin rights to configure auditing for and click OK.
Select the kind of access you want to audit (success - this key and sub-keys) and click OK.

Then open GPEDIT.MSC and browse the the following key and enable Audit object access Success

 

 

Once both of those are set. Then open Regedit, go to this key:  "HKEY_LOCAL_MACHINE\SOFTWARE\SProvide"

Then delete that key.

Then restart the computer.

Then after the restart open Event Viewer and go to Windows Logs -> Security

Then look for that entry for the registry key and it should show what account or process created it

 

[Kiogren]

 What i do, here?

[Kiogren]

 

What I select, anything I do in the 3rd window gives me an error

[Kiogren]

LUIGI\Administrator si ok?

[Kiogren]

Can you send me the position of the file?

[Kiogren]

 

Is it the first or the fifth?

[AdvancedSetup]

Sorry, I have a meeting. Will get back with you a bit later tonight.

 

[Kiogren]

I am Italian, the time zone is 6 hours. Is it possible to talk again at this time?

[AdvancedSetup]

Okay, I'll try to contact you about this time tomorrow then.. Good night

 

[Kiogren]

I thought, but I can't just put reading on the key somehow, can it be useful?

[Kiogren]

Besides, what are the dangers of the virus?