On Error Resume Next Set Sh = CreateObject("WScript.Shell") Sh.RegWrite "HKEY_CLASSES_ROOT\txtfile\shell\open\command\", "notepad.exe %1" Sh.RegDelete "HKEY_CLASSES_ROOT\RDP.File\Friendlytypename" Sh.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Security Center\FirewallDisableNotify" Sh.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Security Center\UpdatesDisableNotify" Sh.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Security Center\AntiVirusDisableNotify" Sh.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun" Sh.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\ DisallowRun" Sh.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" Sh.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr" Sh.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools" Sh.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" Sh.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr" Sh.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools" Sh.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\systemrestore\DisableSR" Sh.RegDelete "HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\RDP.File\Friendlytypename" Sh.RegDelete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify" Sh.RegDelete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify" Sh.RegDelete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify" Sh.RegDelete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify" Sh.RegDelete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId" Sh.RegDelete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore\DisableSR" Sh.RegDelete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\runservices-\Windows Service" Sh.RegDelete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\windowsupdate\auto update" Sh.RegDelete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Agent Hacker" Sh.RegDelete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\LUALL.exe" Sh.RegDelete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Norton Auto-Protect" Sh.RegDelete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId" Sh.RegDelete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName\ActiveComputerName\ComputerName" Sh.RegDelete "HKEY_USERS\.DEFAULT\Software\Microsoft\Security Center\FirewallDisableNotify" Sh.RegDelete "HKEY_USERS\.DEFAULT\Software\Microsoft\Security Center\UpdatesDisableNotify" Sh.RegDelete "HKEY_USERS\.DEFAULT\Software\Microsoft\Security Center\AntiVirusDisableNotify" Sh.RegDelete "HKEY_USERS\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion\systemrestore\DisableSR" Sh.RegDelete "HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun" Sh.RegDelete "HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" Sh.RegDelete "HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\" Sh.RegDelete "HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr" Sh.RegDelete "HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools" Set Sh = Nothing