When the "swen" virus infected someone's system, it made significant changes to the registry that caused it to be extremely difficult to be removed by hand. what were those changes and why did those changes make it so difficult to remove?