How to fix disabled registry and taskmanager?

How to fix disabled registry and taskmanager? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: How to fix disabled registry and taskmanager? (/showthread.php?tid=2733155)

How to fix disabled registry and taskmanager? - BloodFire - Jul 31, 2012

Hi my friend got infected and I already removed the malware but that malware disabled his registry and taskmanager and I can't seem to fix it because he doesn't have gpedit.msc because his only using windows 7 enterprise which is gpedit.msc is not included. I've been seaching over the net for some fix but I haven't found any reliable one. I hope someone could help me with this. :(

Sorry about cross posting I already closed the other thread. I didn't notice that i was in 'HijackThis Log Analyzer and Tutorials'.

* - Dirty_Hunter - Jul 31, 2012

http://cona-controller.software.informer.com/
This might work I have never tried it, but good luck.

* - Netherex - Jul 31, 2012

Copy the below code into a notepad and save it as unhookexec.inf
(make sure it is saved as .inf and not .txt ) and after saving, right click on the file and press install.
Your registry will be enabled then.

Code 
[Version]

Signature="$Chicago$"

Provider=Symantec

[DefaultInstall]

AddReg=UnhookRegKey

[UnhookRegKey]

HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*"

HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*"

HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*"

HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*"

HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe ""%1"""

HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*"

HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableRegistryTools,0x0020,0

Inorder to enable your Task manager, you need to edit a registry entry .

Browse to the below mentioned path and remove the entry saying "DisableTaskMgr" or change the DWORD value to 0 which enables the registry.

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

* - Corso - Aug 1, 2012

Nice little script there Chrystz! I was thinking of having him test a .reg script - see how far the regedit disabling went haha.

* - BloodFire - Aug 4, 2012

(Jul 31, 2012 09:22 PM)chrystz Wrote: Copy the below code into a notepad and save it as unhookexec.inf
(make sure it is saved as .inf and not .txt ) and after saving, right click on the file and press install.
Your registry will be enabled then.

Code
[Version] Signature="$Chicago$" Provider=Symantec [DefaultInstall] AddReg=UnhookRegKey [UnhookRegKey] HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*" HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*" HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*" HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*" HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe ""%1""" HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*" HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableRegistryTools,0x0020,0

Inorder to enable your Task manager, you need to edit a registry entry .

Browse to the below mentioned path and remove the entry saying "DisableTaskMgr" or change the DWORD value to 0 which enables the registry.

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

thanks but it didn't work:( but its all good now because malwarebites fixed it ^^. Thank you all for trying to help i really appreciate it.