Reset Shell Open Command

Many worms and Trojans make changes to the registry. Some of them change one or more of the shellopencommand keys. If these keys are changed, the worm or Trojan will run each time that you run certain files.   Some viruses may also change a registry value so that you cannot run the Registry Editor at all.

For example, if the key is changed, the threat will run each time that you run any .exe file. This may also stop you from running the Registry Editor or any program when you try to run program from Windows Start Button > Run option.

Here are the steps:

• Download 350bytes (small file).


• Unzip it to your desktop.


• Right-click the ResetRun.inf file and click install.
  It does not display any notice or boxes when you run it.


• Restart the computer.

---

What is inside ResetRun.inf:

[Version]
Signature="$Chicago$"
Provider=Symantec

[DefaultInstall]
AddReg=UnhookRegKey

[UnhookRegKey]
HKLM, SoftwareCLASSESbatfileshellopencommand,,,"""%1"" %*"
HKLM, SoftwareCLASSEScomfileshellopencommand,,,"""%1"" %*"
HKLM, SoftwareCLASSESexefileshellopencommand,,,"""%1"" %*"
HKLM, SoftwareCLASSESpiffileshellopencommand,,,"""%1"" %*"
HKLM, SoftwareCLASSESregfileshellopencommand,,,"regedit.exe "%1""
HKLM, SoftwareCLASSESscrfileshellopencommand,,,"""%1"" %*"
HKCU, SoftwareMicrosoftWindowsCurrentVersionPoliciesSystem
    ,DisableRegistryTools,0x00000020,0

Updated On: 07.10.01