Repaired
December 17th 03, 10:26 PM
>-----Original Message-----
>I just got the W32/Swen@MM worm virus. It disables
Regedit.
>
>According to Symantec: "The virus modifies the
value: "DisableRegistryTools"
>= "1"
>in the registry key:
>HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersio
n\Policies\System
>to prevent the user from running regedit on the computer."
>
>Indeed every time I go to run Regedit I get the
error: "Registry editing
>has been disabled by your administrator".
>
>Question: How do I re-enable my Windows so that I am
able to run Regedit?
>
>I try to follow the directions on
>http://securityresponse.symantec.com/avcenter/venc/data/w3
>without success.
>
>Many Thanks
>Bill
>
>
>.
>
The UNDO.REG tool will reverse the changes made by the
virus and allow the user to execute REGEDIT.EXE as normal.
UNDO.REG
UNDO.REG <http://a64.g.akamai.net/7/64/2015/2003-08-04-03-
/download.nai.com/products/mcafee-avert/undo.reg>
MORE INFO ABOUT THE SWEN.WORM
http://securityresponse.symantec.com/avcenter/venc/data/w32
http://www.f-secure.com/v-descs/swen.shtml
http://us.mcafee.com/virusInfo/default.asp?
id=helpCenter&hcName=swen
>I just got the W32/Swen@MM worm virus. It disables
Regedit.
>
>According to Symantec: "The virus modifies the
value: "DisableRegistryTools"
>= "1"
>in the registry key:
>HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersio
n\Policies\System
>to prevent the user from running regedit on the computer."
>
>Indeed every time I go to run Regedit I get the
error: "Registry editing
>has been disabled by your administrator".
>
>Question: How do I re-enable my Windows so that I am
able to run Regedit?
>
>I try to follow the directions on
>http://securityresponse.symantec.com/avcenter/venc/data/w3
>without success.
>
>Many Thanks
>Bill
>
>
>.
>
The UNDO.REG tool will reverse the changes made by the
virus and allow the user to execute REGEDIT.EXE as normal.
UNDO.REG
UNDO.REG <http://a64.g.akamai.net/7/64/2015/2003-08-04-03-
/download.nai.com/products/mcafee-avert/undo.reg>
MORE INFO ABOUT THE SWEN.WORM
http://securityresponse.symantec.com/avcenter/venc/data/w32
http://www.f-secure.com/v-descs/swen.shtml
http://us.mcafee.com/virusInfo/default.asp?
id=helpCenter&hcName=swen