How to enable registry editor after remove virus Swen

[thuynguyen]

My XP and W2K machines infected by virus Swen. After removed this virus - I followed Symantec instructions, I can run all applications (including regedit and regedit32) again only under administrator account ( I logged in by using administrator a/c to remove the swen virus).

The user (with local administrator permission) now logging in but the machines would not let him to run "regedit" (only allows administrator to run regedit even that user a/c had fully local administrator permission granted.

The error displayed as follow:

"Registry Editing has been disbaled by your administrator"

Please help how to enable registry editor (regedit and regedit32 editores)

Regards,
Thuy

 

[carrr]

Why go to the trouble to manually do this. There is a specific removal tool available:

http://www.symantec.com/avcenter/venc/data/w32.swen.a@mm.removal.tool.html

and, Stinger from McAfee can also be used to remove the virus:

http://vil.nai.com/vil/stinger/

 

[telthecelt]

Thuy
Just noticed your request. YOu will know more of handling virus problems than I do probably but I am struggling with this virus too and have had great problems getting the symantec tool and patch to be accepted by my XP machine. The information I have gained is in the general virus discussion that you may/may not find of use.
Cheers,
telthecelt

 

[thuynguyen]

I have went through the instructions from Symantec and managed to make machines running again - I also tried Sting.exe from McAfee to make sure after used Symantec removal instructions.

It seems working fine as I can run almost programs under SP and W2K with administrator account (inclding regedit editor), and Symantec virus scanning gave me no virus found.

But when I log in as a user a/c (called smith with fully administrative permissions as administrator a/c) - I can run almost everything (like administrator a/c) but "regedit" editor will not run - the PC gave me message as "Registry Editing has been disabled by your administrator".

Please help.
Regards,
Thuy

 

[telthecelt]

Hi Thuy
I still have not cured my machine due to work overload but I will tryout the instructions from the Symantec page whose amazingly long link is shown here,
I searched in Symantec for the words at the start of the recurrent error messages 'cant find file' or similar and it got me to instructions for correcting the mess left in the registry by the trojan an older 32. virus.

http://service1.symantec.com/SUPPOR...=2003 for Windows 2000/Me/98/XP&osv=&osv_lvl=

Hope this can help you out.
Cheers,
Tel