If you ever encountered above error, i.e. "Registry editing has been disabled by your administrator" on Windows XP or any other Windows NT Operating system, this may help you.
I have encountered the above error while patching registry. Even manual "regedit" was not working.
Here is simple solution.
Click "Start >> Run" or press "[window key + R ]" and type this command exactly as given below (or you can copy-paste it too)
REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f
Go to run
Type "control folders"
If it doesnt work, try:
Solution 1:
->Run -> Type gpedit.msc
Then:->User Configuration ->Administrative Templates --> Windows Components --> Windows Explorer-> Removes the Folder Options menu item from the Tools menu.
Right click:-> Properties -> Disable ->Apply -> Again set it to not configured
Solution 2:
Go to Startmenu->Run and enter regedit there and press ok to execute regedit (registry editor).
There you'll see a tree like structure of folders like stuff in left.
There navigate to registry entry HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
and on right side you'll see many values.
Out of these values in right see a value (key) named "NoFolderOptions" .Double click after highlighting it, if there under value box it's written 1 then change it to 0 and press enter. Exit the registry editor and close any folder and open again to see the settings.
If you want to disable Folder Options then set the value of "NoFolderOptions" to 1 (and to retrieve it back change it to 0).
How to fix the Orkut is banned you fool! Virus
Orkut is banned you fool, The administrators didnt write this program guess who did?? MUHAHAHA!!! with title ORKUT IS BANNED.
Well, a similar message was displayed for YouTube also.
Solution given here:
1. Press CTRL+ALT+DEL and go to the processes tab
2. Look for svchost.exe under the image name. There will be many but look for the ones which have your username under the username
3. Press DEL to kill these files. It will give you a warning, Press Yes
4. Repeat for more svchost.exe files with your username and repeat. Do not kill svchost.exe with system, local service or network service!
5. Now open My Computer
6. In the address bar, type C:\heap41a and press enter. It is a hidden folder, and is not visible by default.
7. Delete all the files here
8. Now go to Start --> Run and type Regedit
9. Go to the menu Edit --> Find
10. Type "heap41a" here and press enter. You will get something like this "[winlogon] C:\heap41a\svchost.exe C:\heap(some number)\std.txt"
11. Select that and Press DEL. It will ask "Are you sure you wanna delete this value", click Yes
12. Now close the registry editor.
Now the virus is gone. But be sure to delete the autorun.inf file and any folder whose name ends with .exe in the pen drive.
UPDATE
It seems that they have named this malware as w32.USBWorm and according my friend, Avast is able to detect and remove it. I hope the other antivirus software will also be able to remove it soon.
First method
1) Open up Task Manager (Ctrl-Alt-Del)
2) If wscript.exe is running, end it.
3) If explorer.exe is running, end it.
4) Open up "File | New Task (Run)" in the Task manager
5) Run cmd
6) Run the following command on all your drives by replacing c:\ with other drives in turn
del c:\autorun.* /f /a /s /q
7) Go to your Windows\System32 directory by typing cd c:\windows\system32
8) Type dir /a avp*.*
9) If you see any files names avp0.dll or avpo.exe or avp0.exe, use the following commands to delete each of them:
attrib -r -s -h avpo.exe
del avpo.exe
10) Use the Task Manager's Run command to fire up regedit
11) Navigate to HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run
12) If there are any entries for avpo.exe, delete them.
13) Do a complete search of your registry for ntde1ect.com and delete any entries you find.
14) Restart your computer.
Second method
RUN>> type "regedit"(without quotes) & press enter >> then go to>>
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\Folder\Hidden\SHOWALL\
Now u can see two keys CheckedValue and DefaultValue
Double Click on CheckedValue and set the value 1 from 0
Double Click on DefaultValue and set the value 2 from 1
Now exit and
