Comments on: How to Enable the Registry Editor When Disabled by Administrator

By: Michael

Michael — Fri, 18 Dec 2009 03:42:40 +0000

# Navigate to the following location:

User Configuration -> Administrative Templates -> System
# In the Settings pane, locate the Prevent access to registry editing tools option, and then double-click on it to open the settings dialog.

Yeah I’ve did that I’ve enabled it but when I’m going to open RegEdit already it’ll say the same again ” disabled by the administrator Errr…

By: farooq

farooq — Mon, 02 Nov 2009 07:17:44 +0000

thanks to UnHOOkexic file, it helped me alot
:-bd

By: vishal

vishal — Mon, 19 Oct 2009 17:22:28 +0000

very very thank you
befor my pc d’not show hidden file
after my pc show
ok

By: Rahul

Rahul — Tue, 13 Oct 2009 10:51:59 +0000

thank u so much..really helped

By: Irene

Irene — Thu, 08 Oct 2009 02:31:42 +0000

i can’t find system under administrative templates.
help please..

By: tanner

tanner — Thu, 01 Oct 2009 18:48:24 +0000

when i try to do this “cannot edit DisableCMD: error writing the values new contetns” pops up

By: Soyer

Soyer — Sun, 30 Aug 2009 11:26:45 +0000

Thnx a lot the UnHookExec.inf works,thx a lot

By: jatt

jatt — Thu, 30 Jul 2009 18:20:17 +0000

Discovered: May 7, 2004
Updated: December 14, 2005 12:00:00 AM
Type: Removal Information

As part of their routine, many worms and Trojans make changes to the registry. Some of them change one or more of the shell\open\command keys. If these keys are changed, the worm or Trojan will run each time that you run certain files.

For example, if the \exefile\shell\open\command key is changed, the threat will run each time that you run any .exe file. This may also stop you from running the Registry Editor to try to fix this.

They may also change a registry value so that you cannot run the Registry Editor at all.

Symantec Security Response has created a tool to reset these registry values to their default settings.

WARNING:
Do not use this tool unless:
A Symantec technician or document directs you to do so.
After reading the removal instructions in the writeup, you are sure that the tool is required.

Follow these steps:

Download the file UnHookExec.inf and save it to your Windows desktop.

(If you cannot connect to the Internet from the infected computer, download to an uninfected computer then save it to a floppy disk. Then take the floppy disk and insert it in the floppy disk drive of the infected computer.)

Note: The tool has a .inf file extension.

Locate the download file, either on the Windows desktop or the floppy disk.

Right-click the UnHookExec.inf file and click install. or copy and paste in u r note pad save as UnHookExec.inf and save in side u r admin folder or whatver u r acount name it and clilck it here is code

[Version]
Signature=”$Chicago$”
Provider=Symantec

[DefaultInstall]
AddReg=UnhookRegKey

[UnhookRegKey]
HKLM, Software\CLASSES\batfile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\comfile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\exefile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\piffile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\regfile\shell\open\command,,,”regedit.exe “”%1″”"
HKLM, Software\CLASSES\scrfile\shell\open\command,,,”"”%1″” %*”
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableRegistryTools,0×00000020,0

(This is a small file. It does not display any notice or boxes when you run it.)

Follow any other instructions for the threat that you are trying to remove.

By: Chris

Chris — Tue, 02 Jun 2009 03:52:47 +0000

While I can’t say I have had luck with this web page. The tips are valid however the Symantec file and the VBS script keep only coming up as text files.

By: exinco

exinco — Wed, 20 May 2009 14:02:26 +0000

my pc with vista business was attack by jambanmu.com, flash.10.exe and macromedia.10.exe.

all desktop are blank (black screen). start button and task bar are disappear. cannot run regedit.

i’m totally lost

By: albert

albert — Sat, 07 Mar 2009 05:07:30 +0000

works great, thanks for this

By: kundan

kundan — Sat, 21 Feb 2009 19:48:20 +0000

thanx!

By: Mani

Mani — Fri, 13 Feb 2009 04:04:03 +0000

what to di when both regedit and gpedit.msc are diabled by administrator which happens generally.

By: UweS.

UweS. — Tue, 23 Dec 2008 09:10:34 +0000

not bad, but that doesn’t work if the user isn’t able to run gpedit.msc.

Most of the admins restrict this too.

By: venkat

venkat — Tue, 23 Dec 2008 05:34:09 +0000

symantec’s tool is very useful when registry is disabled,it also easy to use for beginers.

By: How to Disable Registry Editor Editing Tool (RegEdit) » My Digital Life

How to Disable Registry Editor Editing Tool (RegEdit) » My Digital Life — Mon, 22 Dec 2008 18:12:57 +0000

[...] registry, and will not be able to use Regedit to undo the change. However, there are workarounds to re-enable the Registry Editor after [...]