I have had this virus twice before and thought I had removed it - however it is back and I followed my previous instructions onto how to delete it, but now find I cannot enter 'regedit' as the drop down box tells me my registery has been disabled by my administrator- who tells me differently. What do I need to look for and do, to re enter my registery.

well, try this:

Start | Run | Type gpedit.msc and hit OK
Expand the following tree... User Configuration | Administrative Templates
Highlight "System"
Right click "Prevent access to registry editing tools" and select "Properties"
Select the "Disabled" or "Not Configured" radio button.

The "Registry editing tools" are regedt32.exe and regedit.exe ;)

if that doesn't work. Try this

open notepad

past this in:

Set WshShell = WScript.CreateObject("WScript.Shell")
With WScript.CreateObject("WScript.Shell")

On Error Resume Next

.RegDelete "HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System\DisableRegistryTools"
.RegDelete "HKCU\Software\Policies\Microsoft\Windows\System\Di sableCMD"
.RegDelete "HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System\DisableTaskMgr"
.RegDelete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\system\DisableTaskMgr"

End With

Mybox = MsgBox(jobfunc & enab & vbCR & "Finished!", 4096, t)

save file as regeditfix.vbs

close, then run the vbs file.