[winvista]

Wait ... I think I found the ComboFix backup ... I found an ERNDT directory. How do I go about restoring the registry from this backup?

[Advertisements]

What files are in there? And what dates?

[azarl]

What files are in there? And what dates?

[winvista]

Here are the ERDNT and HIV-backup directories:



Volume in drive C is SQ004720V05
Volume Serial Number is C099-BA8B

Directory of C:\Windows\ERDNT

05/25/2012 03:18 AM <DIR> .
05/25/2012 03:18 AM <DIR> ..
05/25/2012 03:18 AM <DIR> cache
05/25/2012 03:09 AM 110 CFrecovery.bat
05/30/2012 03:44 PM <DIR> Hiv-backup
1 File(s) 110 bytes
4 Dir(s) 50,910,638,080 bytes free
Volume in drive C is SQ004720V05
Volume Serial Number is C099-BA8B

Directory of C:\Windows\ERDNT\Hiv-backup

05/30/2012 04:50 PM <DIR> .
05/30/2012 04:50 PM <DIR> ..
05/30/2012 10:14 PM 38,645,760 COMPON~3
05/30/2012 10:14 PM 229,376 default
05/30/2012 10:14 PM 814 ERDNT.CON
10/20/2005 08:02 AM 163,328 ERDNT.EXE
05/30/2012 10:14 PM 1,051 ERDNT.INF
08/30/2000 08:00 PM 2,815 ERDNTDOS.LOC
08/30/2000 08:00 PM 3,275 ERDNTWIN.LOC
05/30/2012 10:14 PM 167,936 sam
05/30/2012 10:14 PM 40,960 security
05/30/2012 10:14 PM 55,255,040 software
05/30/2012 10:14 PM 45,203,456 system
05/30/2012 10:14 PM <DIR> Users
11 File(s) 139,713,811 bytes
3 Dir(s) 50,910,068,736 bytes free

[winvista]

I have the original drivers, and I'm wondering if uninstalling and reinstalling the touchpad driver make any difference?

[azarl]

Try the drivers first. If not, to restore the registry run ERDNT.EXE, accept the default options and reboot when requested. Bear in mind, that when that backup was made, I have no idea of the status of the system so cannot guarantee what the result will be.

[winvista]

I uninstalled and re-installed the driver for the touchpad. Nothing changed except now in the Device Manager it doesn't say that I have a problem with the registry but instead says that it cannot locate the driver files. I don't know how this is possible because the driver has its own setup program which should have installed it.

So now is it worth trying to restore the registry backup? And if I do that, do I have to have the computer in any special mode, e.g. safe mode?

[azarl]

It's possible the registry has been damaged, in which case it's either try to repair, or reinstall the O/S.

Just follow the instructions in my previous post, in normal mode.

[winvista]

That did not work so I guess I'm going to have to re-install Windows. It will take me a day or two to find the disks.

[azarl]

It's probably best. Sometimes malware causes almost irreparable damage. In this case, I guessing that the registry has been crippled. Do you need to get any data off before reinstalling?

[azarl]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.