Enable Regedit

As said in the earlier post here is an alternate method to get the registry editor back after a virus infection. Do exactly as given below..

--- Open notepad.

--- Copy and Paste the code given below as it is.

[Version]
Signature="$Chicago$"
Provider=Symantec

[DefaultInstall]
AddReg=UnhookRegKey

[UnhookRegKey]
HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe ""%1"""
HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*"
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableRegistryTools,0x00000020,0


--- Then go to file menu in notepad and then save as. Save this file as repair.inf or any name but save it as a .inf extension.

--- After the file is saved, double click on it or right click on it and press install.

That's it you got the Regedit back.

Enable Registry Editor, Task Manager and Folder Options

Many of us see that when a virus infects our system, the first thing it does is Disable Registry Editor, Task Manager and Folder Options. As soon as you see these option disabled you have to know your system is infected.

If you press Ctrl+Alt+Del you ll get a dialog box saying "Task manager has been disabled by your Administrator" and the same thing comes up when you try to edit registry using regedit.

It is irritating that, you cannot remove this problem by going to registry and you cannot see the Folder options also so you will not be able to delete the hidden files.

Now to first enable the Task manager

--- Go to Start menu --> Run and type gpedit.msc and press enter

--- Now in the left pane select
User Configuration --> Administrative Templates --> System --> Ctrl+Alt+Delete options

--- In the right pane double click on Remove task manager and disable it and press Apply and then OK.

You got back your Task manager

The process to get back regedit is similar

--- Go to Start menu --> Run and type gpedit.msc and press enter

--- Now in the left pane select User Configuration --> Administrative Templates --> System

--- In the right pane double click on "Prevent access to registry editing tools"

--- Disable this option

Now your registry editor is back.

To get the Folder options

--- Go to gpedit as given earlier.

--- Then to
User Configuration --> Administrative Templates --> Windows Component --> Windows Explorer

--- In the right pane look for "Removes the Folder Options menu item from the Tools menu"

--- Double click on it then disable it to get folder options back.

There are alternate methods for getting these settings back which I will give in the next post.