hii all,

i have a problem with my server and some of my clients...everyone affected by one virus win.exe...now i removed those viruses..but whenever i am bootin server all clients, i am getting one error message...can not find script file "c:\windows\system32\regedit.vbe"....i tried opening task manager and/or msconfig/regedit..i am getting the same error message....before symantec shows access denied to that virus(c:\windows\win.exe).....and i tried nod32...it removed the virus..and i unintalled that...now this regedit.vbe issue only....please help me to resolve this...please help...i tried one tool for xp to open registry..i can open with that tool(mpm4_registry_winxp).....but i need a permanent solution for this...

Thanks in advance...

Ok, once you are able to open registry using the tool you mentioned, run the  SEP Support  tool-Loadpoint and then, save and email, or post the  report  here.

How to use Symantec Sep Support Tool to collect data for Support 

http://clientui-kb.symantec.com/kb/index?page=content&id=HOWTO36951&actp=search&viewlocale=en_US&searchid=1296305611579

You are likely infected with some type of FakeAV. Make sure defs are updated and run a full scan in safe mode.

If that doesn't work, try the Power Eraser:

About Symantec Power Eraser

http://www.symantec.com/business/support/index?page=content&id=TECH134803&actp=search&viewlocale=en_US&searchid=1296309271571

If that still doesn't work, download a second opinion malware checker such as Malwarebytes or Hitman Pro. Install and run a scan in safe mode with either one.

Use this symantec tool to restore access to regedit

http://www.symantec.com/security_response/writeup.jsp?docid=2004-050614-0532-99

If the above tool from Symantec does not work,you can alternatively use RRT (Remove Restrictions Tool) 1.0

http://majorgeeks.com/RRT_Remove_Restrictions_Tool_d5635.html

Hi,

Always follow best practice guide. It will definitely help to protect your network.

http://www.symantec.com/business/support/index?page=content&id=TECH105236

There are many tools to fix this however the cause for this issue a Malware that is blocking all these. So make sure you update your SEP client with latest definitions and run full scan in safe mode.

Or scan using Norton Power Eraser.

However you should also submit the suspicious files to symantec security response so that they can create defs. that will catch these threats.

here's a good tool

https://www-secure.symantec.com/connect/downloads/simple-utility-reset-folder-options-show-all-hidden-enable-registry-editing-enable-task-ma