[BloodFire]

Hi my friend got infected and I already removed the malware but that malware disabled his registry and taskmanager and I can't seem to fix it because he doesn't have gpedit.msc because his only using windows 7 enterprise which is gpedit.msc is not included. I've been seaching over the net for some fix but I haven't found any reliable one. I hope someone could help me with this. :(

Sorry about cross posting I already closed the other thread. I didn't notice that i was in 'HijackThis Log Analyzer and Tutorials'.

[Dirty_Hunter]

http://cona-controller.software.informer.com/
This might work I have never tried it, but good luck.

[Netherex]

Copy the below code into a notepad and save it as unhookexec.inf
(make sure it is saved as .inf and not .txt ) and after saving, right click on the file and press install.
Your registry will be enabled then.

Code

[Version]
Signature="$Chicago$"
Provider=Symantec

[DefaultInstall]
AddReg=UnhookRegKey

[UnhookRegKey]
HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe ""%1"""
HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*"
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableRegistryTools,0x0020,0

Inorder to enable your Task manager, you need to edit a registry entry .

Browse to the below mentioned path and remove the entry saying "DisableTaskMgr" or change the DWORD value to 0 which enables the registry.

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

[Corso]

Nice little script there Chrystz! I was thinking of having him test a .reg script - see how far the regedit disabling went haha.

[BloodFire]

Copy the below code into a notepad and save it as unhookexec.inf
(make sure it is saved as .inf and not .txt ) and after saving, right click on the file and press install.
Your registry will be enabled then.

Code

[Version]
Signature="$Chicago$"
Provider=Symantec

[DefaultInstall]
AddReg=UnhookRegKey

[UnhookRegKey]
HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe ""%1"""
HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*"
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableRegistryTools,0x0020,0

Inorder to enable your Task manager, you need to edit a registry entry .

Browse to the below mentioned path and remove the entry saying "DisableTaskMgr" or change the DWORD value to 0 which enables the registry.

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

thanks but it didn't work:( but its all good now because malwarebites fixed it ^^. Thank you all for trying to help i really appreciate it.