Fixing Windows Registry
in most cases, virus also 'damage' your windows registry to prevent you to use regedit to fix stuffs and assosiating files with the virus itself.
this is how i fix it:
- create new text files and give it name regfix.inf
- double-click on the file to open it on notepad
- copy these and paste into notepad
[Version]
Signature="$Chicago$"
Provider=DennyHalim.com
[DefaultInstall]
AddReg=regfix
DelReg=enablereg
[regfix]
HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe ""%1"""
HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" /S"
HKLM, Software\CLASSES\scrfile\shell\config\command,,0,"%1"
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon,"Shell",,""Explorer.exe""
HKLM, SYSTEM\ControlSet001\Control\SafeBoot,"AlternateShell",,""cmd.exe""
HKLM, SYSTEM\ControlSet002\Control\SafeBoot,"AlternateShell",,""cmd.exe""
HKLM, SYSTEM\CurrentControlSet\Control\SafeBoot,"AlternateShell",,""cmd.exe""
[enablereg]
HKCU, "software\microsoft\windows\currentversion\policies\system","DisableRegistryTools"
HKCU, "software\microsoft\windows\currentversion\policies\system","DisableTaskMgr"
- save and exit notepad
- click your mouse right button on regfix.inf and choose install (you need administrator right to correctly install this)
- that's it! now you can do regedit and load task manager again.
- even if your system is clean, this wont damage your windows, coz, those registries values are windows default
now, you can download the regfix.inf file here. save you copy-paste trouble.
http://dwidget.googlecode.com/svn/trunk/win32registry/regfix.inf
Comments