Solved: Restore registry once deleted?

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Toti

Thread Starter
Joined
Apr 14, 2004
Messages
721
HI guys :)

Ok I have a question for you guys and hope, someone can give me a hand in this one, and beforehand thank you very much for any help and assitance and pls. forgive my english:eek:

The situation is this, my computer got a trojan that place itself in the registy, so I followed teh instructions to delete those entries or teh registry itself, but I was to tired at the moment and............:( yes I delete this registries by accident :

HKCU\Software\Microsoft\Internet Explorer\Main\Search Page
HKLM\Software\Microsoft\Internet Explorer\Main\Search Page
HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant

Well my questin is, If there's a way to restore those registries that I delete ?
Or will need to reintall or Fix my windows ?

I was not doing back up of reg, because teh registries were with the Trojan URL Leave blank. so I was deleteing the URL but in the instructions was saying I need to get rid of some registries, so I delete this three , by my big mistake :(

So guys, if theres a way to get those registry back ? can i grab another reg. from teh computer of my roomate, save it in a disk or jumpdrive anf then place them in my reg, and edit teh adress?
So far my computer is not acting bad, but those registries I delte, are they going to cause me more grief later?

can be that posibly ? or I pretty much Toast?!!!:eek:

Thanks you very much for any help.


Toti
 

bonk

Banned
Joined
Sep 8, 2005
Messages
11,097
Have you check in your Registry again as those keys may have returned.
 

techkid

David
Joined
Sep 1, 2004
Messages
2,339
The Registry can be described as the "bare bones" of your system. Copying is possible, but not recommended. Copying the lot...absolutely not.
 

Toti

Thread Starter
Joined
Apr 14, 2004
Messages
721
HI guys

I checked last nite and , no the regs, haven't come back :(

If there's a way to copy just those keys ? the "search page" and "search assitance" from HKLM.
and the "search page" from HKCU ?

And how to do this ? pls. forgive my ignorance :( and thank you very much for answer my questions .


Toti :eek:
 

Toti

Thread Starter
Joined
Apr 14, 2004
Messages
721
I double check today , and not the entries are not there.
so anyone have a clue in how to do this? to copy those keys?

Toti
 

Toti

Thread Starter
Joined
Apr 14, 2004
Messages
721
HI guys , question

can I create those reg. with this program called RegEM version 1.0 ?

to restore the ones I deletd in my previos post?

or it can be create it in a simple form of notepad and save it as reg. I really appreciate if you guys can point me in the right direction , I doing my homework here , but I really need a hand . :D

I find something about it , I'll post my finds.

Toti
 

techkid

David
Joined
Sep 1, 2004
Messages
2,339
I would probably get in trouble for this, but I will report this post to the moderators myself after I finish typing it.

I think you can copy those registry entries from your roommates PC. Go to Start > Run... Type in "regedit" (without the quotes) and navigate to the above Registry entries from your first post. Then go to File > Export... Type in a name for the entry, ensure that "Selected branch" is selected at the bottom of that screen, and hit Save.

DO NOT do this unless a mod gives it the all clear.

Edit: I've tried to send a report to the mods, but it does not seem to be going through. For the records, though, this is what I sent:

To the mods of TSG.

I am posting this to you to ensure whether I am in breach of any rules with providing the advice I gave. Take whatever action you deem necessary in regards to this.

Thank you for your time.

Techkid.
 
Joined
Oct 9, 2001
Messages
9,396
Cant see anything wrong with that advice,it may or may not work.

;)
 

dvk01

Derek
Retired Moderator Retired Malware Specialist
Joined
Dec 14, 2002
Messages
56,452
Those registries entries aren't needed anyway

But easiest way to restore them is install google or MSN toolbar & it will definitely put them back with it's settings in those keys

or open IE/tools/options/programs & press reset web settings for IE6

and open IE/tools/options/advanced and press reset internet explorer settings in IE7
 

Toti

Thread Starter
Joined
Apr 14, 2004
Messages
721
Hey hi guys !!

Techkid I really appreciatte yur efforts to help me :) I never intend to you to get in any trouble, you are so sweet !!

Good you are good to go by moderators, and you are very sincere , thanks again.

To moderators $teve and dvk01 Thanks you very much to check the status of this treath, you guys are very kind to take the time, to respond.

OK I will try the second option of I.E. because, I already was able to copy the folder of the reg, of my roomate, but I dont know how to pass them into my computer registries,:eek: me silly girl, so I see that problably my best shot could be the option of dvk01 , as soon I perform this , I will post my results.

Thank you very much guys to point me in the right direction !!

brb .
Toti
 
Joined
Jul 14, 2006
Messages
3,775
Those three registry entries are written by IE. Open internet explorer and go to Tools > Options and setup your search pages agian. The registry entries will be re-written.
 

Toti

Thread Starter
Joined
Apr 14, 2004
Messages
721
Ok im back !!

Well I did the fix from I.E.7 as dvk01 indicated to do, and All went fine, I went to my regedit.exe and check if thsoe reg, were back and Yes they are there.
I just need to retype my paswords of sites and school etc. but all OK .
xoxo dvk01 !!!

The ones I cant find, I think were the ones contaiing the trojan, the path was:

1.- For CURRENT_USER
HKCU\Software\Microsoft\InternetExplorer\Main\ Search Bar <------- and---->
HKCU\Software\Microsoft\InternetExplorer\SearchUrl\Provider <----are gonne.

2.-For LOCAL_MACHINE
HKLM\Software\Microsoft\Internet Explorer\Search\CustomizeSearch<--and-->
HKLM\ " \ " \ " " \Main\Search Bar
HKLM\ " \ " \ " " \SearchAssistant <---Are gonne too .

So,do you think guys, that those reg. were part of the trojan and the "leave blank"
that,s why , when I delete them, there no more, tehy were not part of IE 7, default reg.
Right ? :confused: or Im complety wrong :eek:

But for now, You guys make me more calm. knowin that ther was a way, to restore those reg. that I deleted.

" still have in my jumpdrive teh folder containing the reg. of my roomate, but I dont kow how to pass the ones that I just need, to my system. :confused: "

bbearren you are very kind to assit e too ;) is like the same fix I did now? right? one is to reset the I.E.7 settings and yours is setup my search pages again.

Both make the same thing , but one deletes teh paswords and security, neds to redoo all.
and yours is just the pages, It dont reset paswords and sec. ?
Let me know pls. just to know wich is the diference between both, and how is the impact of each one in the Operating system. sorry to bother yu with this question :)
thank you.

Toti
 

techkid

David
Joined
Sep 1, 2004
Messages
2,339
Toti said:
" still have in my jumpdrive teh folder containing the reg. of my roomate, but I dont kow how to pass the ones that I just need, to my system. :confused: "
Double-click on those Registry entries on your jumpdrive. It will ask if you want to write those changes to the Registry, and just click "Yes" or "OK" or whatever the case may be.

bbearen's fix should do the same job. Probably best to try it first.

$teve: I thought I should post that to you guys, thinking it to be better to get whipped by bootlaces now, than the Cat o' nine tails later. Thanks.
 

Toti

Thread Starter
Joined
Apr 14, 2004
Messages
721
HI ok,

Techkid, thank you very much for your prompt reply and assitance, Now I know how to copy this registries !! :D I wrote this in my notebook too .

and Thanks to you too : Bonk , $teve , dvk01 and bbearren, that by the way; I try to find the option to change my search pages , but I didn't find were to cliki,:confused: pls. don't get mad with me ok. I m just alil to tired tonite, but i'll look into it.
I'll do as you say :
Open internet explorer and go to Tools > Options and setup your search pages agian. The registry entries will be re-written.

In the other hand my trouble with the registries are SOLVED !! thanks to you guys !! ;)
Hope fully this treath helps another girl or guy, with the same situation as me.

I promise not to put my hands in those registries when Im to tired, I think that's the first step :eek:

I solved my trouble reseting my Internet Explorer 7 , that put my reg. back in order.
I got all my passwords in a back up disc. and in a notebook in my sec. box.

Im going to mark this post as SOLVED !!! WEEEeeeeeeeee !!! :)

Thanks again to all of you guys !!!
XOXOX ;)
a Happy girl
Toti
 

techkid

David
Joined
Sep 1, 2004
Messages
2,339
Toti said:
Techkid, thank you very much for your prompt reply and assitance, Now I know how to copy this registries !! :D I wrote this in my notebook too .
Not a problem.

Toti said:
I promise not to put my hands in those registries when Im to tired, I think that's the first step :eek:
Yeah, attempting any fix when you're tired usually results in some sort of disaster :p . I found that out a long time ago (and quite recently, too).
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Members online

Top