Re: default page changed and greyed, as well as the regedit

From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 09/06/04 

Date: Mon, 06 Sep 2004 01:36:27 +0200

sway wrote:

> hi there:
>
> My IE home page was maliciously changed when I visited some website. and
> I cannot change it back to my previous one. and I found the regedit was
> disabled as well. What can I do?
Hi

This might be the work of the Swen worm or something similar
(it could be from some spyware or parasite as well).

To try to solve your problem, do the following:

Copy and paste the URL address lines into your IE address bar:

http://www.dougknox.com

In the menu, select Security, Disable/Enable Registry Editing Tools.

This small VB Script will remove this restriction. If the first time the
script is run it says "Disabled", run it again to enable registry edits again.

For the home page part:

See http://www.dougknox.com/, Win XP Fixes, Fix Internet Options Restrictions

To try to find what has caused this:

Run a cleanup tool, e.g. Stinger.exe from McAfee, it removes the
30+ most common virus/worms in one sweep.

McAfee AVERT Stinger
http://vil.nai.com/vil/stinger/

Be sure to run an updated Antivirus program at all times.

For the Spyware and Parasites part, you will need to run other tools:

Dealing with Unwanted Spyware and Parasites
http://www.mvps.org/winhelp2002/unwanted.htm

The Parasite Fight Quick Fix Protocol
http://aumha.org/a/quickfix.htm 

-- 
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

Relevant Pages

  • Re: Task Manager Closes Immediately
    ... McAfee AVERT Stinger ... For the Spyware and Parasites part, you will need to run other tools: ... The Parasite Fight Quick Fix Protocol ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Cannot open regedit
    ... McAfee AVERT Stinger ... For the Spyware and Parasites part, you will need to run other tools: ... The Parasite Fight Quick Fix Protocol ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.win2000.registry)
  • Re: All windows related (Task manager, registry edit etc.) programs auto close
    ... McAfee AVERT Stinger ... For the Spyware and Parasites part, you will need to run other tools: ... The Parasite Fight Quick Fix Protocol ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.win2000.security)
  • Re: registry editing question
    ... Microsoft support but I could not get into the registry to delete the ... > (it could be from some spyware or parasite as well). ... > torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.windowsxp.general)
  • Re: Cant open regedit
    ... McAfee AVERT Stinger ... For the Spyware and Parasites part, you will need to run other tools: ... The Parasite Fight Quick Fix Protocol ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.win2000.registry)
Quantcast