Jump to content

no network on win7 after ransomware


Recommended Posts

  • Root Admin

Please save the attached file to your computer.  Extract all the .reg files out and copy them to a new folder.

 

Then, one by one double click on them to merge them with the Registry and say OK

 

Once you've completed all of them please restart the computer and let me know if that made any difference or not.

 

default_services.zip

Link to post
Share on other sites

  • Replies 92
  • Created
  • Last Reply

Top Posters In This Topic

cannot import c:`/users/office/desktop/ex/DcomLaunch.reg:

not all data was sucessfully written to the registry ,some keys are open by the system or in other processes

 

cannot import c:`/users/office/desktop/ex/BITS.reg:

not all data was sucessfully written to the registry ,some keys are open by the system or in other processes

 

cannot import c:`/users/office/desktop/ex/Homegrouplister.reg:

not all data was sucessfully written to the registry ,some keys are open by the system or in other processes

 

cannot import c:`/users/office/desktop/ex/homegroupprovider.reg:

error accessing the registry

 

cannot import c:`/users/office/desktop/ex/legacy_afd.reg:

not all data was sucessfully written to the registry ,some keys are open by the system or in other processes

 

cannot import c:`/users/office/desktop/ex/legacy_fltmgr.reg:

not all data was sucessfully written to the registry ,some keys are open by the system or in other processes

 

cannot import c:`/users/office/desktop/ex/legacy_netbios.reg:

not all data was sucessfully written to the registry ,some keys are open by the system or in other processes

 

cannot import c:`/users/office/desktop/ex/legacy_storflt.reg:

error accessing the registry

 

cannot import c:`/users/office/desktop/ex/legacy_storvsc.reg:

error accessing the registry

 

cannot import c:`/users/office/desktop/ex/legacy_tcpip.reg:

not all data was sucessfully written to the registry ,some keys are open by the system or in other processes

 

cannot import c:`/users/office/desktop/ex/legacy_tcpipreg.reg:

not all data was sucessfully written to the registry ,some keys are open by the system or in other processes

 

cannot import c:`/users/office/desktop/ex/remoteaccess.reg:

not all data was sucessfully written to the registry ,some keys are open by the system or in other processes

 

cannot import c:`/users/office/desktop/ex/wlansvc.reg:

not all data was sucessfully written to the registry ,some keys are open by the system or in other processes

Link to post
Share on other sites

  • Root Admin

Okay.  Make sure no antivirus or other registry monitoring tool is running.

 

Try running RKill if needed before doing the merge.

 

RKill is a program that was developed at BleepingComputer.com that attempts to terminate known malware processes
so that your normal security software can then run and clean your computer of infections.
When RKill runs it will kill malware processes and then removes incorrect executable associations and fixes policies
that stop us from using certain tools. When finished it will display a log file that shows the processes that were
terminated while the program was running.

As RKill only terminates a program's running process, and does not delete any files, after running it you should not reboot
your computer as any malware processes that are configured to start automatically will just be started again.
Instead, after running RKill you should immediately scan your computer using the requested scans I've included.

Please download Rkill by Grinler from one of the links below and save it to your desktop.


Link 2

  • On Windows XP double-click on the Rkill desktop icon to run the tool.
  • On Windows Vista/Windows 7 or 8, right-click on the Rkill desktop icon and select Run As Administrator
  • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
  • If not, delete the file, then download and use the one provided in Link 2.
  • If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
  • If the tool does not run from any of the links provided, please let me know.
  • Do not reboot the computer, you will need to run the application again.


 

 

 

Review the video from here if needed to see how to take back OWNERSHIP of Registry keys if perhaps the permissions are wrong.

 

http://forums.malwarebytes.org/index.php?showtopic=124715

 

Basically for each of those registry files go to the Registry key and check it's permissions and reset them after taking ownership, then try to import again.

Link to post
Share on other sites

  • Root Admin

Are you sure that you're not just clicking on the wrong link.  With hidden files and folders enabled it will show junction points as well that are normally hidden.

 

You can open "Computer" and then on the menu under "Organize" click on "Folder and search options" and then click on "Restore Defaults"

Then on the View tab scroll down till you see "Hide protected operating system files (Recommended)    - and make sure there is a check mark in that option, then click OK

 

Then see if you can access your documents and images and let me know.

Link to post
Share on other sites

  • Root Admin

Okay, so how did the other operations go for importing the Registry keys?

 

Did you review the video on how to take ownership of the registry keys?

Did you take ownership back and reset those keys?

Did you then try again to re-import them?

If that failed did you start in Safe Mode and try to import them?

Link to post
Share on other sites

  • Root Admin

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.