Who told you to modify the Registry and to "flush" System Restore?

Have you asked them how to fix this?

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_R...:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/archive/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/

When all else fails, HijackThis v1.99.1
(http://aumha.net/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your log to http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org


ph23vo wrote:
> i was told to modify a file in [regedit] but i accidentally deleted
> it... and to top it off i had disabled system restore and it dumped all
> my previous restore points.. the file i think i deleted is..."shell"=
> Explorer.exe out of HKEY_LOCAL_MACHINE\
> software\microsoft\windows\current version\winlogon can anyone tell me
> if that file should be in there [ what it does ] and can i somehow
> replace it? i get a ACCESS IS DENIED when i try and download XP home
> pack 2...my memory is hazy as i have been working on this all day..appr
> it dan