Tuesday, December 9, 2008

Modifying Windows Registry to Fix Problems Caused by Virus

Working with MS Windows Registry is not a fun thing to do. Only few Windows users play with this. “Regedit” (Registry Editor) is a built-in powerful tool used to edit the registry. If you wrongly modify the registry, your Windows will be crashed, hang or working improperly.

Unfortunately, many viruses work by modifying the Windows Registry, which like or dislike will force you to fix the problem by reconfigure it and set it back to the previous state, because sometime the installed antivirus cannot clean or even detect the virus.

Following are some tips to help you fix Windows problem by editing the registry.
Go to Start > Run, type “Regedit” to bring the Registry Editor up.

1. Cannot Run any Registry Tool, like “Regedit”
Go to Start > Run, type:
reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools
Press
On confirmation prompt, press “Y”.
Now you can run your Regedit

2. Cannot Run “Task Manager”
Go to Start > Run, type:
reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr
Press

or.. if you manage to run Regedit, then you can do this:
Go to Start > Run, type: “Regedit”
Navigate to the following sub key:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System]
and/or
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System]
Name: DisableTaskMgr
Type: DWORD
If Value is 1 (Restricted) then change it to 0 (UnRetricted) by right clicking on it and select “Modify”, enter “0” on Value Data field, then select “OK”……… or select “Delete” if you want to delete the sub key.

3. Drive C, D or other drive is Hidden
Go to Start > Run, type: “Regedit”
Navigate to the following sub key:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
right click on sub key:
Name: NoDrives
Type: DWORD
And select “Delete”. This will make all drives in your computer visible

In Value, you will find Value Data = 1, 2, 4, etc… to tell you which drive is being hidden.
1=Drive A, 2=Drive B, 4=Drive C, 8=Drive D, 16=Drive E, and so on

4. On Explorer: Cannot Right Click at the folder or file
Go to Start > Run, type: “Regedit”
Navigate to the following sub key:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
right click on sub key:
Name: NoFolderOptions
Type: DWORD
Then select “Delete”

No comments:

Post a Comment

Leave a message