Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


virus and registry

  • This topic is locked This topic is locked
2 replies to this topic

#1 zin8197


  • Members
  • 4 posts
  • Local time:06:50 AM

Posted 16 August 2009 - 01:16 PM

I am running Vista Home Premium on a Dell inspiron 530. I have been having trouble with the troj/bayrob B virus, and one site suggested the following to get rid of it, which I did:
turn off restore points
restart in safe mode
run full virus sweep
delete virus found in sweep
delete a suggested list of files from the registry
restart as normal

HOWEVER, when I went ot restart the computer, it will not reboot. It was the norton/symantic website, so I feel pretty good that their suggestions were not malacious. But obviously I did something, my fear is that I somehow erased something crucial in the registry. So how do I put it back? When I go through start up repair and get to system recovery options, the system restore tool tells me there are no restore points, even though I know there were before I disabled it. I thought it was just not make any more restore points, not delete previous ones, is that what happened? I have been through all the system recovery tools, except restoring from a backup or to factory settings, I wasn't quite ready to give up yet, but I about am. Is there any way to fix or reinstall registry components, and how do I do it if I can't get anything to boot?

Thanks in advance for any help.

BC AdBot (Login to Remove)


#2 garmanma


    Computer Masochist

  • Members
  • 27,809 posts
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:06:50 AM

Posted 16 August 2009 - 06:28 PM

You need to be a little more descriptive
When you say it doesn't boot, does it just sit there with a black screen or is it stuck in a loop?
Have you tried booting to safe mode?
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#3 Animal


    Bleepin' Animinion

  • Site Admin
  • 35,905 posts
  • Gender:Male
  • Location:Where You Least Expect Me To Be
  • Local time:02:50 AM

Posted 16 August 2009 - 08:55 PM

Please do not post another request for help. You were advised to run a HJT/DDS Log here on July 16: http://www.bleepingcomputer.com/forums/ind...p;#entry1343407

Trend Micro...
According to the said report, the spyware installs a “scaled down” Web server that hosts several spoofed eBay pages, as well as pages related to “motors” validation sites like Carfax.com, Autocheck.com, and Escrow.com. Simply put, this spyware (detected by Trend Micro as TSPY_BAYROB.:huh: does not simply monitor specific pages…it goes to another level and spoofs an entire transaction.

Read more: http://blog.trendmicro.com/hit-and-run-by-.../#ixzz0LQj449n4

You will need to run HJT/DDS.
Please follow this guide. Preparation Guide For Use Before Using Hijackthis. Then go here HijackThis Logs and Virus/Trojan/Spyware/Malware Removal ,click New Topic,give it a relevant Title and post that complete log.

Please follow those instructions if you wish to get help with your issue.

To prevent furthur confusion for those trying to help you, this topic is closed.

The Internet is so big, so powerful and pointless that for some people it is a complete substitute for life.
Andrew Brown (1938-1994)

A learning experience is one of those things that say, "You know that thing you just did? Don't do that." Douglas Adams (1952-2001)

"Imagination is more important than knowledge. Knowledge is limited. Imagination circles the world." Albert Einstein (1879-1955)

Follow BleepingComputer on: Facebook | Twitter | Google+

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users