Tuesday, June 5, 2007

Problem : My Registry is being locked !!

Some Virus's can disable the Task Manager and Redigit, they do this to make cleansing the system a more daunting process.


The easiest solution to Enable Task Manager:
Click Start/Run
now copy this EXACTLY as it is shown here and paste it to the Run Box and click Ok:

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies
\System /v DisableTaskMgr /t REG_DWORD /d 0 /f


To Enable RegEdit:

Please open Notepad and copy and paste this to notepad EXACTLY as shown here:


REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableRegistryTools"=dword:00000000 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableRegistryTools"=dword:00000000

Save it as "unlockreg.reg"
Once saved, double click Unlockreg.reg and merge the file to your Registry.


another method :

When you get that error message with regedit there are a few things you can do to fix the problem.
1) Rename regedit.exe to regedit.com sometimes this will fix your problem. You will need
to find where in the registry the trojan has disabled regedit. Below is an example
CODE

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools"Type: REG_DWORDData: 01, 00, 00, 00

2) Use a third party registry editor. You will find quite a few free ones on sites like
snapfiles.com (I even have a few on anti-trojan.org). Use the thrid party registry editor
to find the registry entry that is stopping regedit being run and remove it.

No comments: