MrCharlie Posted December 23, 2013 ID:768045 Share Posted December 23, 2013 Does Internet Explorer work OK? When did this happen?? After running JRT?? MrC Link to post Share on other sites More sharing options...
coby9118 Posted December 23, 2013 Author ID:768048 Share Posted December 23, 2013 Yes, right after JRT. Some sites work on chrome (Malwarebytes, google search, drive). IE is not working at all. Also, Steam is not functional. Link to post Share on other sites More sharing options...
MrCharlie Posted December 23, 2013 ID:768051 Share Posted December 23, 2013 JRT creates a registry backup just before it runs, I think it's locate in C:\ or the Windows folder. Take a look for it, what you're looking for is ERUNT. MrC Link to post Share on other sites More sharing options...
coby9118 Posted December 23, 2013 Author ID:768055 Share Posted December 23, 2013 typed in ERUNT into the search bar...no results. Any way it didn't do the backup? Link to post Share on other sites More sharing options...
MrCharlie Posted December 23, 2013 ID:768057 Share Posted December 23, 2013 I just ran JRT and the first thing it does is create a backup of the registry. Here's where mine was backed up to: C:\WINDOWS\ERUNT\JRT Look again, MrC Link to post Share on other sites More sharing options...
coby9118 Posted December 23, 2013 Author ID:768059 Share Posted December 23, 2013 Got into the file. Now what? Link to post Share on other sites More sharing options...
MrCharlie Posted December 23, 2013 ID:768062 Share Posted December 23, 2013 Run ERDNT.EXE and that will start the process to restore the registry, just use the default settings that come up. Reboot and let me know.....MrC Link to post Share on other sites More sharing options...
coby9118 Posted December 23, 2013 Author ID:768064 Share Posted December 23, 2013 Everything seems to be back and running. Will there be any repercussions from the registry backup? Link to post Share on other sites More sharing options...
MrCharlie Posted December 23, 2013 ID:768067 Share Posted December 23, 2013 Good, just make sure these two folders are gone: C:\ProgramData\GorillaPrice C:\Program Files (x86)\GorillaPrice MrC Link to post Share on other sites More sharing options...
coby9118 Posted December 23, 2013 Author ID:768068 Share Posted December 23, 2013 They're still both there....unfortunately. Link to post Share on other sites More sharing options...
MrCharlie Posted December 23, 2013 ID:768070 Share Posted December 23, 2013 Delete them, I'll be back in the AM, MrC Link to post Share on other sites More sharing options...
coby9118 Posted December 25, 2013 Author ID:768872 Share Posted December 25, 2013 They're still there....IE pops up randomly with obscure advertising. Link to post Share on other sites More sharing options...
MrCharlie Posted December 26, 2013 ID:769007 Share Posted December 26, 2013 Please download and run ComboFix. The most important things to remember when running it is to disable all your malware programs and run Combofix from your desktop. Please visit this webpage for download links, and instructions for running ComboFix http://www.bleepingcomputer.com/combofix/how-to-use-combofix Please make sure you click download buttons that look similar to this, not "sponsored ad links": Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix. Information on disabling your malware programs can be found Here. Make sure you run ComboFix from your desktop. Give it at least 30-45 minutes to finish if needed. Please include the C:\ComboFix.txt in your next reply for further review. ---------->NOTE<----------If you get the message Illegal operation attempted on registry key that has been marked for deletion after you run ComboFix....please reboot the computer, this should resolve the problem. You may have to do this several times if needed. MrC Link to post Share on other sites More sharing options...
coby9118 Posted December 30, 2013 Author ID:770537 Share Posted December 30, 2013 I got a new laptop, and it came with 3 accounts of webroot. I believe it's been removed. Link to post Share on other sites More sharing options...
MrCharlie Posted December 30, 2013 ID:770588 Share Posted December 30, 2013 OK...MrC Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 1, 2014 Root Admin ID:771712 Share Posted January 1, 2014 Since this issue is resolved I will close the thread to prevent others from posting here. If you need assistance please start your own topic and someone will be happy to assist you. Link to post Share on other sites More sharing options...
Recommended Posts