Tech Support Guy banner
  • Please post in our Community Feedback thread for help with the new forum software! If you are having trouble logging in, please Contact Us for assistance.
Status
Not open for further replies.
1 - 15 of 15 Posts

·
Registered
Joined
·
722 Posts
Discussion Starter · #1 ·
HI guys :)

Ok I have a question for you guys and hope, someone can give me a hand in this one, and beforehand thank you very much for any help and assitance and pls. forgive my english:eek:

The situation is this, my computer got a trojan that place itself in the registy, so I followed teh instructions to delete those entries or teh registry itself, but I was to tired at the moment and............:( yes I delete this registries by accident :

HKCU\Software\Microsoft\Internet Explorer\Main\Search Page
HKLM\Software\Microsoft\Internet Explorer\Main\Search Page
HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant

Well my questin is, If there's a way to restore those registries that I delete ?
Or will need to reintall or Fix my windows ?

I was not doing back up of reg, because teh registries were with the Trojan URL Leave blank. so I was deleteing the URL but in the instructions was saying I need to get rid of some registries, so I delete this three , by my big mistake :(

So guys, if theres a way to get those registry back ? can i grab another reg. from teh computer of my roomate, save it in a disk or jumpdrive anf then place them in my reg, and edit teh adress?
So far my computer is not acting bad, but those registries I delte, are they going to cause me more grief later?

can be that posibly ? or I pretty much Toast?!!!:eek:

Thanks you very much for any help.


Toti
 

·
Registered
Joined
·
2,344 Posts
The Registry can be described as the "bare bones" of your system. Copying is possible, but not recommended. Copying the lot...absolutely not.
 

·
Registered
Joined
·
722 Posts
Discussion Starter · #4 ·
HI guys

I checked last nite and , no the regs, haven't come back :(

If there's a way to copy just those keys ? the "search page" and "search assitance" from HKLM.
and the "search page" from HKCU ?

And how to do this ? pls. forgive my ignorance :( and thank you very much for answer my questions .


Toti :eek:
 

·
Registered
Joined
·
722 Posts
Discussion Starter · #6 ·
HI guys , question

can I create those reg. with this program called RegEM version 1.0 ?

to restore the ones I deletd in my previos post?

or it can be create it in a simple form of notepad and save it as reg. I really appreciate if you guys can point me in the right direction , I doing my homework here , but I really need a hand . :D

I find something about it , I'll post my finds.

Toti
 

·
Registered
Joined
·
2,344 Posts
I would probably get in trouble for this, but I will report this post to the moderators myself after I finish typing it.

I think you can copy those registry entries from your roommates PC. Go to Start > Run... Type in "regedit" (without the quotes) and navigate to the above Registry entries from your first post. Then go to File > Export... Type in a name for the entry, ensure that "Selected branch" is selected at the bottom of that screen, and hit Save.

DO NOT do this unless a mod gives it the all clear.

Edit: I've tried to send a report to the mods, but it does not seem to be going through. For the records, though, this is what I sent:

To the mods of TSG.

I am posting this to you to ensure whether I am in breach of any rules with providing the advice I gave. Take whatever action you deem necessary in regards to this.

Thank you for your time.

Techkid.
 

·
Retired Moderator Retired Malware Specialist
Joined
·
56,449 Posts
Those registries entries aren't needed anyway

But easiest way to restore them is install google or MSN toolbar & it will definitely put them back with it's settings in those keys

or open IE/tools/options/programs & press reset web settings for IE6

and open IE/tools/options/advanced and press reset internet explorer settings in IE7
 

·
Registered
Joined
·
722 Posts
Discussion Starter · #10 ·
Hey hi guys !!

Techkid I really appreciatte yur efforts to help me :) I never intend to you to get in any trouble, you are so sweet !!

Good you are good to go by moderators, and you are very sincere , thanks again.

To moderators $teve and dvk01 Thanks you very much to check the status of this treath, you guys are very kind to take the time, to respond.

OK I will try the second option of I.E. because, I already was able to copy the folder of the reg, of my roomate, but I dont know how to pass them into my computer registries,:eek: me silly girl, so I see that problably my best shot could be the option of dvk01 , as soon I perform this , I will post my results.

Thank you very much guys to point me in the right direction !!

brb .
Toti
 

·
Registered
Joined
·
3,775 Posts
Those three registry entries are written by IE. Open internet explorer and go to Tools > Options and setup your search pages agian. The registry entries will be re-written.
 

·
Registered
Joined
·
722 Posts
Discussion Starter · #12 ·
Ok im back !!

Well I did the fix from I.E.7 as dvk01 indicated to do, and All went fine, I went to my regedit.exe and check if thsoe reg, were back and Yes they are there.
I just need to retype my paswords of sites and school etc. but all OK .
xoxo dvk01 !!!

The ones I cant find, I think were the ones contaiing the trojan, the path was:

1.- For CURRENT_USER
HKCU\Software\Microsoft\InternetExplorer\Main\ Search Bar <------- and---->
HKCU\Software\Microsoft\InternetExplorer\SearchUrl\Provider <----are gonne.

2.-For LOCAL_MACHINE
HKLM\Software\Microsoft\Internet Explorer\Search\CustomizeSearch<--and-->
HKLM\ " \ " \ " " \Main\Search Bar
HKLM\ " \ " \ " " \SearchAssistant <---Are gonne too .

So,do you think guys, that those reg. were part of the trojan and the "leave blank"
that,s why , when I delete them, there no more, tehy were not part of IE 7, default reg.
Right ? :confused: or Im complety wrong :eek:

But for now, You guys make me more calm. knowin that ther was a way, to restore those reg. that I deleted.

" still have in my jumpdrive teh folder containing the reg. of my roomate, but I dont kow how to pass the ones that I just need, to my system. :confused: "

bbearren you are very kind to assit e too ;) is like the same fix I did now? right? one is to reset the I.E.7 settings and yours is setup my search pages again.

Both make the same thing , but one deletes teh paswords and security, neds to redoo all.
and yours is just the pages, It dont reset paswords and sec. ?
Let me know pls. just to know wich is the diference between both, and how is the impact of each one in the Operating system. sorry to bother yu with this question :)
thank you.

Toti
 

·
Registered
Joined
·
2,344 Posts
Toti said:
" still have in my jumpdrive teh folder containing the reg. of my roomate, but I dont kow how to pass the ones that I just need, to my system. :confused: "
Double-click on those Registry entries on your jumpdrive. It will ask if you want to write those changes to the Registry, and just click "Yes" or "OK" or whatever the case may be.

bbearen's fix should do the same job. Probably best to try it first.

$teve: I thought I should post that to you guys, thinking it to be better to get whipped by bootlaces now, than the Cat o' nine tails later. Thanks.
 

·
Registered
Joined
·
722 Posts
Discussion Starter · #14 ·
HI ok,

Techkid, thank you very much for your prompt reply and assitance, Now I know how to copy this registries !! :D I wrote this in my notebook too .

and Thanks to you too : Bonk , $teve , dvk01 and bbearren, that by the way; I try to find the option to change my search pages , but I didn't find were to cliki,:confused: pls. don't get mad with me ok. I m just alil to tired tonite, but i'll look into it.
I'll do as you say :
Open internet explorer and go to Tools > Options and setup your search pages agian. The registry entries will be re-written.

In the other hand my trouble with the registries are SOLVED !! thanks to you guys !! ;)
Hope fully this treath helps another girl or guy, with the same situation as me.

I promise not to put my hands in those registries when Im to tired, I think that's the first step :eek:

I solved my trouble reseting my Internet Explorer 7 , that put my reg. back in order.
I got all my passwords in a back up disc. and in a notebook in my sec. box.

Im going to mark this post as SOLVED !!! WEEEeeeeeeeee !!! :)

Thanks again to all of you guys !!!
XOXOX ;)
a Happy girl
Toti
 

·
Registered
Joined
·
2,344 Posts
Toti said:
Techkid, thank you very much for your prompt reply and assitance, Now I know how to copy this registries !! :D I wrote this in my notebook too .
Not a problem.

Toti said:
I promise not to put my hands in those registries when Im to tired, I think that's the first step :eek:
Yeah, attempting any fix when you're tired usually results in some sort of disaster :p . I found that out a long time ago (and quite recently, too).
 
1 - 15 of 15 Posts
Status
Not open for further replies.
Top