New
#21
The registry changes I made (listed in that link) were made on the recommendation of HonorGamer, listed as "Power User" - should I undo them, and if so, can you take a look at that link & tell me how to?
The registry changes I made (listed in that link) were made on the recommendation of HonorGamer, listed as "Power User" - should I undo them, and if so, can you take a look at that link & tell me how to?
please see post #16.
Use Control Panel | Programs and Features | rt-click on a file to uninstall
The only other approach I can recommend is RevoUninstaller Pro.
these were the changes I made - I downloaded the registry center files, base filtering engine, security center service and windows defender that you see linked below. Can you be more specific as to how I should uninstall them or undo what I did?
narenxp replied on
Hi
Make sure that PC is clean(free from zero access rootkit before trying this fixes)
This firewall issue is commonly found on vista and windows 7 (64 BIT OS)
This is symptom for rootkit on 64 bit systems
if you find a folder called system64
C:/WINDOWS/SYSTEM64(not the sysWOW64)
and a file called consrv.dll
C:/WINDOWS/SYSTEM32/CONSRV.DLL
You're infected by zero access rootkit.It is recommended to contact malware removal forums to remove it first and try the fix
Download both the registry files
http://download.bleepingcomputer.com...s/7/MpsSvc.reg
Base filtering engine
http://download.bleepingcomputer.com...ices/7/BFE.reg
Launch them and click YES when you get a UAC prompt
Restart your PC
Now,open RUN and type
regedit and click ok
go to
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BFE
Right click on it-permissions
Click on ADD and type
Everyone and click ok
Now Click on Everyone
Below you have permission for users
Select full control and click ok
Now,open RUN and type
services.msc and click ok
start base filtering engine service and then windows firewall service
You may also be missing security center and windows defender service
Download
Security center service
http://download.bleepingcomputer.com...s/7/wscsvc.reg
windows defender
http://download.bleepingcomputer.com.../WinDefend.reg
Launch it and click YES when you get a UAC prompt
P.S. I do have a System Restore point on CCleaner dated 7/18 at 10:37pm EST - which I believe is just before I did the registry and other changes recommended by HonorGamer (17 hrs ago, which would be just before or after then I think. Should I try doing system restore to that point? If I do, I'll need your help to see if it got rid of those changes
Don't ever listen to someone who tells you to muck around with the registry with the two exceptions which I gave.
you will never find me advising anyone to muck around with the registry.
Now with all of that said, we are going to find out if there is a restore point which pre-dates your registry changing.
Even if the restore point indicates that other software will be uninstalled, then still use the restore point.
I'm trying to avoid you needing to perform a 100% clean install just to get a stable system.
Believe it or not, unless you have been using one of those super-duper speedup your computer programs or the likes thereof, then you have restore points.
CCleaner can show you restore points, Win 7 can show you your restore points, I've a little on-liner PowerShell script that show your restore points.
We've got a nice tutorial on how to restore to a previous restore point.
Here is a synopsis:
RESTORE TO A PREVIOUS SYSTEM RESTORE POINT
1) WIN | type SYSTEM RESTORE | ENTER | NEXT
| Choose a different restore point radio button | NEXT
2) Show more restore pointscheckbox (lower left)
3) Highlight the desired restore point
4) Scan for affected programs(lower right)make a note of affected programs
5) CLOSE | NEXT | FINISH
WIN = key with the wavy Microsoft flag on top.
=========================================
Learn to ALWAYS create a restore point before undertaking changes.
karl
It seems that's the only restore point listed (see 1st attached pic). When I click the "Show more restore points" button, nothing happens. With that button clicked, when I click Next it gets me to a screen to enact the one restore point (see 2nd pic). Is there a way to get an earlier restore point, or is that the only one available?
...or should I click the click the "Show more restore points" button and then click the "Scan for affected programs" button (instead of clicking "Next" to check if there are more restore points?
I'm afraid with all of the actions you have taken that you'v eliminated some restore points.
Let's see what this one-liner powershell script says which will put a file on your desktop listing restore points. Upload the file.
# STEP 1 ** RUN POWERSHELL AS ADMINISTRATOR
WIN key | type POWERSHELL | do NOT hit ENTER |
in the PROGRAMS list, right-click on WINDOWS POWERSHELL |
choose "Run as administrator" |
Click on the YES button (if such appears)
# STEP 2 ** COPY AND PASTE
COPY the script using CTRL+C,
PASTE into Powershell
---Right-Click at the PowerShell Prompt
---(Ctrl+V does not work)
WIN key = key with Microsoft log on top
Script:
get-computerrestorepoint |sort -descending sequencenumber > $env:userprofile\desktop\RestorePoints.TXT