Help - Search - Members
Full Version: How to restore what CCleaner removed?
Piriform Community Forums > Piriform Software > CCleaner Discussion
Pages: 1, 2
Harry07
Hi All,

I've used the search option but because of my limited knowledge of the English language, I was not able to track the answer.

I'm having IE problems (doesn't work anymore). I want to restore the Registry Items that are deleted. Where do I find the file (usually) that contains all the deleted (and saved)?

Regards,

Harry
Augeas
If you made a registry backup before deleting the registry entries, then find it (usually in My Documents as cc_20080917_121924.reg or similar, chose the file with the latest date), right click on it and select Merge. If you didn't make a backup then there's not a lot you can do, you could try a system restore.

Deleted data can't be undone by CC, but you could run Recuva to attempt to find and restore the most important files.
Alan_B
Possibilities include :-

1. If you never touched the registry, and merely removed files, they unfortunately did not go into the recycle bin.
You may be lucky if you "undelete", e.g. via use of RECUVA (available at this site).

WARNING If you have RECUVA already installed you are luckier than most people.
If not then it may be best to download and install it onto a drive other than C:\ (e.g. borrow a flash drive).
All deleted files are part of free space, and anything you install on C:\ will overwrite a piece of free space, destroying files that could otherwise be undeleted - hence it is best to minimise any writing to disc before you try to RECUVA.
n.b. System Restore will involve an awful amount of writing to the disc.

2. Merge the Registry backups - assuming you removed via a Registry Issue Fix and accepted the option to create a backup;

3. System Restore to a Restore Point early than removal. With a bit of luck this SHOULD restore something as vital to the system as I.E.

Regards
Alan
Harry07
Sorry all,
Just saw your replies. Didn't get a message there was a reply written.
Edit: changed it. Now it should be o.k.

First, thanks for willing to help me. cool.gif

I did save the Registry's CC deleted.
At the moment I'm 'searching' for them.......
Found them!! biggrin.gif
But how do I get them in the right position (back) again? huh.gif
With 'right-click' I only get the usual options, not 'put back' or similar.
hazelnut
Harry, have you renamed the backup at all?

Does it end in .reg?
Harry07
QUOTE (hazelnut @ Nov 21 2008, 05:16 PM) *
Harry, have you renamed the backup at all?

Does it end in .reg?



Hmm, did not get an email again mad.gif (not your fault dry.gif )


I did not change anything on them.

This is what I have: click.



Augeas
On right click do you get Merge (or your language equivalent) as an option? It should be the first in bold type. If so choose the correct file to restore (maybe the last one in your list, dated 19/11?) and click Merge. It's a large file so maybe you have done some big changes to the registry. I have never actually restored the registry so I'm not familiar with what happens next, but it should be fool-proof.

If you don't get Merge then possibly the extension isn't .reg. Rename and try Merge? Is the concensus that this is safe?
Andavari
QUOTE (Augeas @ Nov 22 2008, 05:22 AM) *
If you don't get Merge then possibly the extension isn't .reg. Rename and try Merge? Is the concensus that this is safe?

From the screenshot they're all Registration Entries files. Merging them shouldn't hurt anything because if the data is really invalid CCleaner will find it again.

To merge reg files you can also:
* Double click them.
* Right click them to merge them.
* In Registry Editor (Start->Run type in: regedit) by clicking File->Import.
Harry07
When I double click them I get the question "Are you sure you want to ad this to your Registry?" I will click Yes.
Harry07
QUOTE (Harry07 @ Nov 22 2008, 02:50 PM) *
When I double click them I get the question "Are you sure you want to ad this to your Registry?" I will click Yes.

It worked (to move them) but when I startup IE, (after a reboot) it still shuts down again. huh.gif

Made some 'shots'to show you the messages. There are more, do you need them?
Advanced User
translate.google.com <3

I would suggest you to move to linux smile.gif

Ubuntu for example
Harry07
QUOTE (Advanced User @ Nov 22 2008, 03:36 PM) *
translate.google.com <3

I would suggest you to move to linux smile.gif

Ubuntu for example


huh.gif Do not understand what you mean.
Linux I know (by Name) but Ubuntu huh.gif

The most important failure lines are in English.
YoKenny
QUOTE (Harry07 @ Nov 22 2008, 02:03 PM) *
huh.gif Do not understand what you mean.
Linux I know (by Name) but Ubuntu huh.gif

The most important failure lines are in English.

My experience with Ubuntu:
http://forum.piriform.com/index.php?showtopic=16745

I refuse to associate with Neck Beards as they would rather type cryptic commands on a keyboard than speak an intelligible language that does not need Awk or a Vi editor to input stuff.
hazelnut
QUOTE (Advanced User @ Nov 22 2008, 01:36 PM) *
translate.google.com <3

I would suggest you to move to linux smile.gif

Ubuntu for example


The user is asking for help with a particular problem.

Your suggestion is not the answer to everything.
hazelnut
QUOTE (Harry07 @ Nov 22 2008, 01:03 PM) *
It worked (to move them) but when I startup IE, (after a reboot) it still shuts down again. huh.gif

Made some 'shots'to show you the messages. There are more, do you need them?


Do you get a window asking you to report the problem to Microsoft?

I think that these screenshots are what they are telling you about. They are not the problem

Have you looked in Event Viewer to see what error windows is getting?

Start>control panel> administative tools>event viewer.
Augeas
QUOTE (Harry07 @ Nov 22 2008, 01:03 PM) *
It worked (to move them) but when I startup IE, (after a reboot) it still shuts down again.

Did you restore more than one registry backup? If so in which order? You only needed to restore the backup made before IE stopped working, which is I think the last large one.
Harry07
QUOTE (hazelnut @ Nov 23 2008, 08:41 AM) *
Do you get a window asking you to report the problem to Microsoft?

NO

I think that these screenshots are what they are telling you about. They are not the problem

Have you looked in Event Viewer to see what error windows is getting?

NO

Start>control panel> administative tools>event viewer.


Hope I understood you. Is this what you mean? (ignore the language wink.gif)
Harry07
QUOTE (Augeas @ Nov 23 2008, 11:36 AM) *
Did you restore more than one registry backup? If so in which order? You only needed to restore the backup made before IE stopped working, which is I think the last large one.


Ups! I restored them all, including those of the date of downloading IE8 (not before that date).
Augeas
Well, you could try restoring the last one again, but this in clutching at straws land.
Harry07
Just thought of something.

I let CCleaner remove the Registry Keys it finds, and after that I restore the largest one (not the last one wink.gif) That should be Nov. 19th. If that doesn't do anything, i will restore the 17th to.
But I'll wait until some of you respond to my suggestion.

Anyone an idea if this possible works?
Augeas
I would think that a registry restore just reinstates the values held in the backup, so you shouldn't need to remove any keys. I'm not too sure about removing any more registry entry at the moment. However some more experienced registry-tweaker might know more. You certainly get the prize for persistence, Harry.
Alan_B
QUOTE (Harry07 @ Nov 23 2008, 05:19 PM) *
Hope I understood you. Is this what you mean? (ignore the language wink.gif)


Harry

You have correctly found the events of interest.

The extreme left of your picture shows you selected "Toepassing";
I guess that corresponds to "Application".

Where you have 6 different event logs to choose from, I have only 4.
My 4 logs are, from top to bottom :-
Application
Security
System
Internet Explorer

Application has :-
"Very interesting" events marked with a Red Error (e.g. your FOUT); and possibly
"Very significant" events marked with a Yellow Warning.

Security has never yet shown me anything significant.

System is crucial, with Red Error and Yellow Warning when things go wrong.
You should always start at "System" and not at "Application".

Internet Explorer is always empty - perhaps because I always use Firefox instead of I.E.

When the O.S. (Operating System) has problems, then
System is where you get the best clues upon what went wrong with O.S.
Application will show you things that went wrong with user applications,
and many of these events are consequences of the O.S. problems, and are not necessarily due to defects in the application.

I suggest you look for Red Errors and Yellow Warnings in the various logs.
Also note the exact time of any such Red or Yellow event,
and then inspect all the other logs for ANY event at or preceding the time just noted - it may give a clue upon what led up to the error.

If you select an event (e.g. FOUT) then right click it, you can select "Properties";
this gives a small window with very useful information
and on the right hand side are Up and Down buttons - the next button down shows 2 overlapping pages, and clicking that will select all the information (including lots of mysterious hexadecimal numbers) and copy it into your clip board, just paste the clipboard into Notepad and you can easily include it when you next post to this forum.

Finally, I notice that in post 10 on Nov 22 2008, 01:03 PM
all the errors refer to
C:\Docume~\Harry\Locals~1\Temp\*.txt
I think this is one of the first regions that CCleaner will purge.

Question - if I.E. fails because it depends upon a temporary file, should it be re-installed ?
Which I suspect means re-installing Windows - life is so much better with Firefox !!!

Is it possible that I.E. (or its Windows host) was actually doing something with this temporary file when CCleaner came along and pulled the rug out from under its feet ?

Regards
Alan
Harry07
@ Alan B

Wow! what a List! And you understand Dutch! wink.gif
I will Print it and do my best to do it as you described.
Hope to Inform you with good News after it all.
Harry07
When I have the 'Systeem" clicked, it only shows today's faults and warnings 2,477 lines! huh.gif
In 'Toepassing' there are also items of the IE7->IE8->IE7 period.
Harry07
Hi Alan,

Got a headache from it wink.gif

Note: "Vastgelopen toepassing" is "stuck in/on? Application"
Dates are reversed. I checked all those Red Markings. When they are the same as I already copied, I did not do it again.
davey
QUOTE (Harry07 @ Nov 24 2008, 03:01 PM) *
Hi Alan,

Got a headache from it wink.gif

Note: "Vastgelopen toepassing" is "stuck in/on? Application"
Dates are reversed. I checked all those Red Markings. When they are the same as I already copied, I did not do it again.

Hi Harry07,
In reviewing the log for Alan it appears that things have become mixed between IE7 and IE8.
Your best bet may be re-installing IE7. If you do, be sure to follow the instructions to the letter and please Reboot when they say as soon as they say. "Do not do any cleaning of anything" for a couple of days.
Good luck,
smile.gif davey
P.S. After reviewing your log again I may be misled by some of the translation not actually relating to Hex listing.
Alan's advise is valuable.
You may still consider re-installing.
By the way, what are your system specs, OS, etc ?
Alan_B
QUOTE (Harry07 @ Nov 24 2008, 08:01 PM) *
Note: "Vastgelopen toepassing" is "stuck in/on? Application"
Dates are reversed. I checked all those Red Markings. When they are the same as I already copied, I did not do it again.


The image shows a fresh error every second, suggesting you have one sick puppy there !!!
I guess it took less than one hour to fill the 512 KByte normally allocated for each log.

I like the dates "reversed".
I immediately see at the top the last thing that happened,
and if I want to know why I can scroll down to see what led up to it.
If you want to un-reverse, just click at the column heading "Datum".

You can sort the table on any column.
e.g. if you click on "Tijd" it is all sorted in time (with dates scrambled).

If you sort on "Geeb..." then all event numbers appear in a sequence,
and you only have to look at the TOP of the list to see events less than 7001,
and then at the bottom of the list to see numbers greater than 7001.
This SHOULD save your eyesight - you no longer have to scrutinise every line to find anything other than "7001",
BUT Microsoft STUPIDLY did not reserve 3 blocks of contiguous numbers for Information/Warning/Error,
so some Error numbers will actually appear between Information numbers,
therefore you would need a rapid scroll through the log to see if any other Red flags appear between Information or Warning events.
(Though I suspect you only have one event 6006, and 2837 off events 7001).

If you select one "7001" error and right click and choose properties, it will show a description followed by
"For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp."
If you click on that link, it should take you to relevant Knowledge Base information.

When my daughter's IPOD SHUFFLE is plugged into a USB Port,
it causes chaos on all the other ports,
and my External USB connected Hard Drive is immediately permanently busy and unavailable,
with no recovery other than to power right down and restart the system,
and a subsequent chkdsk found 3 errors on each of 1299 files
ohmy.gif Nice one Apple - IPOD is their stealth weapon against Windows ohmy.gif

So, I learnt to disconnect the hard drive before letting the IPOD any where near,
and then IPOD caused this system error
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Event Type: Error
Event Source: i8042prt
Event Category: None
Event ID: 40
Date: 09/11/2008
Time: 18:59:00
User: N/A
Computer: ACER-311VPBCEH0
Description:
An error occurred while trying to acquire the device ID of the mouse

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 08 00 01 00 62 00 ......b.
0008: 00 00 00 00 28 00 05 c0 ....(..À
0010: 32 05 00 00 00 00 00 00 2.......
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 00 00 00 00 00 00 00 00 ........
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

I did not click on the offered link,
instead I clicked on the "copy text" button,
and then pasted into this post as above.

If you do the same with one of your error 7001 events, some-one may have further advice for you

Regards
Alan




Alan_B
I started the above post before Davey posted his response, and my post is NOT a contradiction of Davey.

My information should allow you to get maximum information out of the event log.

Davey's information should get your computer mended.

Incidentally, is I.E.8 out of Beta release yet !!!

Regards
Alan
Harry07
Thanks Alan & Davey.
I've printed it and try to understand it all and work it out.
YoKenny
I like Event Log Explorer™
QUOTE
Event Log Explorer allows you to view the description of each event without any additional mouse click - all desciptions are displayed in the Event Description box of log window, or even directly in the event list.

Friendly and powerful user interface lets you select between two styles: Multi-document or tabbed-document interface.

Event Log Explorer provides powerful event search and filtering engine. You can easily filter events in the list by any criteria. Every filter can be saved into file - this saves your time when you want to re-apply the filter in future.

Unlike standard Windows Event Viewer, Event Log Explorer can print event logs or even separate events. You can also export your event logs to other formats. At the time, Event Log Explorer supports export to HTML, Microsoft Excel and tab-separated text files.
http://www.eventlogxp.com

IE8 is still in beta and probably will not be released until 2nd quarter 2009.
Harry07
In 'System' there is only Nov. the 23rd Listed.
I only see (with Red Warning): 7000 (2x), 7026 (2x) the rest is 7001.
With Yellow warning: 260 (2x) for the PlugPlayManager.

Am I working in the right direction?
Harry07
Here's the 7001 Information:

I try to translate it all.

“The connection management for RAS-Service is depending of the Telephony-Service, who because of the following fault couldn’t be started. Cannot start the Service because it is switched off or because there are no devices connected with it”

Clicking the Link I get (see attached).


Hope you understand.
Alan_B
QUOTE (YoKenny @ Nov 25 2008, 03:05 PM) *
I like Event Log Explorer™ http://www.eventlogxp.com

IE8 is still in beta and probably will not be released until 2nd quarter 2009.


I thought that was the case;
but I never bothered to Google because I tend to view all Microsoft products as still only fit to be called Beta !!!

Any officially Beta product is likely to fail.

Most software, Beta or otherwise, can fail.

CCleaner could damage stupid software that depends upon the continued existence of stuff it places in %TEMP% etc.,
but is unlikely to damage anything it knows.
and is unlikely to damage what it does not know,
BUT
If CCleaner removes junk that I.E.7. dumps all over the place,
it will probably purge those same junk locations if I.E.8. BETA puts stuff there,
and if I.E.8 BETA is now placing essential data or executables in those junk locations,
then CCleaner (and ANY other temporary / junk cleaner) will destroy it.

I suspect that could be the cause of your problem,
and CCleaner (and all other junk cleaners) will damage I.E.8 until such time as :-
Microsoft makes I.E.8. compatible with I.E.7. (wait for Service Pack 4 !!!) or,
CCleaner is updated to distinguish between I.E.7 and I.E.8.

Moral of this story :-
Don't use BETA releases;
If you can't resist a BETA package - do uncheck any CCleaner option that was good for the "ALPHA" version.

Suggestion - Follow Davey's advice - go back to I.E.7.

Regards
Alan
Alan_B
QUOTE (Harry07 @ Nov 25 2008, 05:09 PM) *
Here's the 7001 Information:

I try to translate it all.

“The connection management for RAS-Service is depending of the Telephony-Service, who because of the following fault couldn’t be started. Cannot start the Service because it is switched off or because there are no devices connected with it”

Clicking the Link I get (see attached).


Hope you understand.


I Googled for "RAS-Service" and got 13,100 hits.

Top of the list was http://www.comptechdoc.org/os/windows/ntse...ide/ntsras.html

Most interesting was a security warning at
http://www.heise-online.co.uk/security/Mic...ce--/news/74818

"RAS-Service" is outside my experience, but others here may be able to advise.

Regards
Alan
Harry07
Thanks Allan! I will check those Links biggrin.gif

I changed the setting of RAS to 'Automatic' and will reboot in a moment, @ all you think it's safe to do?
Harry07
QUOTE (davey @ Nov 25 2008, 12:31 PM) *
Hi Harry07,
.....By the way, what are your system specs, OS, etc ?


Ehm, where do I find them? unsure.gif
Harry07
Just thought of something.
I have downloaded (around the Problem Date) a dll file on my Computer (to the Desktop) that was for my wife's Computer. But it did not work on hers. Therefore I deleted it.
But, could that have been of influence for todays Problems?
davey
QUOTE (Harry07 @ Nov 25 2008, 02:15 PM) *
Just thought of something.
I have downloaded (around the Problem Date) a dll file on my Computer (to the Desktop) that was for my wife's Computer. But it did not work on hers. Therefore I deleted it.
But, could that have been of influence for todays Problems?

Hi Harry07,
You have done exceptionally well,Harry, for a very inexperienced user and trying to get help in a foreign language.
You have done so well I did not realize that you are a relative inexperienced PC user.
I apologize for that. I always try to keep the viewpoint of a "newbie" user and I forgot all about it with you.

I was misled by one of your translations for the logs. That it why I thought some of the programs were mixed up between IE7 and IE8.

What I mean by system specifications can found at the top of your CCleaner window in what is called the Banner area.
I looked but I could not find any mention in your posts as to what OS you are using WinXP ? Vista ?
I use Windows XP Professional edition Service Pack 3. (This is WinXP Pro SP3)

Do you use other browsers like Firefox on your PC ?

How have you been communicating with us ?

smile.gif davey

Harry07
QUOTE (davey @ Nov 26 2008, 01:43 AM) *
Hi Harry07,
You have done exceptionally well,Harry, for a very inexperienced user and trying to get help in a foreign language.
You have done so well I did not realize that you are a relative inexperienced PC user.
I apologize for that. I always try to keep the viewpoint of a "newbie" user and I forgot all about it with you.

NO PROBLEM wink.gif

I was misled by one of your translations for the logs. That it why I thought some of the programs were mixed up between IE7 and IE8.

What I mean by system specifications can found at the top of your CCleaner window in what is called the Banner area.

SEE ATTACHED

I looked but I could not find any mention in your posts as to what OS you are using WinXP ? Vista ?
I use Windows XP Professional edition Service Pack 3. (This is WinXP Pro SP3)

I USE WIN-XP-P WITH SP3 TO

Do you use other browsers like Firefox on your PC ?

THE ONLY ONE I CAN USE AT THIS MOMENT IS FF. IE = DEAD (THAT'S WHY I TRY TO SOLVE THE INSSUE)


How have you been communicating with us ?

FF

smile.gif davey

Harry07
Today I downloaded IE7 (again) en after that I tried if it would work, no mad.gif
I also did the 'search and repair' option on my C-disc. Didn't give a better result to.

What do you suggest? Shall I perform a system restore with Date 2-3 days before the Problems started? Or better not?
davey
QUOTE (Harry07 @ Nov 27 2008, 07:12 AM) *
What do you suggest? Shall I perform a system restore with Date 2-3 days before the Problems started? Or better not?

Hi Harry,
First thing I would do is some malware scans.
Malwarebytes is excellent as an extra scanner.
It is small, fast, easy to update free and outstanding reputation.
You can download install and Quick scan in less than 15 minutes.
http://www.malwarebytes.org/mbam.php

Do the System Restore if no malware is found.
smile.gif davey
Harry07
Thanks Davey! But I already did a Malwarebytes scan (and got after that, SpySweeper and NOD32 to be blocking like crazy).
And no Malware was found.
I'll make a restore point for today and after that I do a restore 3 days before the problems started.
davey
QUOTE (Harry07 @ Nov 27 2008, 11:30 AM) *
Thanks Davey! But I already did a Malwarebytes scan (and got after that, SpySweeper and NOD32 to be blocking like crazy).
And no Malware was found.
I'll make a restore point for today and after that I do a restore 3 days before the problems started.

OK Harry.
What were you doing prior to this problem.?
Had you installed, uninstalled or updated anything ? (Hardware or Software)
What files did you delete ?

smile.gif davey
Harry07
I changed IE7 into IE8, bur ran into a lot of problems with IE8 and got fad up with it. So I changed to IE7 again.
As usual I did the CCleaner scan and also the Registryscan and removed what was found. (but saved what it did remove in a file).
While IE7 didn't work, I used the System Restore Point of one day before the change IE7->IE8. But that didn't help to. I did the 'search for damages and repair it' feature on the C-disc. No (better) result.
I removed with the REVO Uninstaller, IE7 completely, did a reboot and downloaded IE7 new. No better result.
davey
QUOTE (Harry07 @ Nov 27 2008, 12:41 PM) *
I changed IE7 into IE8, bur ran into a lot of problems with IE8 and got fad up with it. So I changed to IE7 again.
As usual I did the CCleaner scan and also the Registryscan and removed what was found. (but saved what it did remove in a file).
While IE7 didn't work, I used the System Restore Point of one day before the change IE7->IE8. But that didn't help to. I did the 'search for damages and repair it' feature on the C-disc. No (better) result.
I removed with the REVO Uninstaller, IE7 completely, did a reboot and downloaded IE7 new. No better result.

I have heard of others with problems trying to get back to IE7.
Some programs may have the same names but from where you are I would use add/remove only for uninstalling IE7 again. Then download and install IE7 again with an "immediate" REBOOT. Do not try any cleaning or registry fixing at all for a couple of days. smile.gif davey

P.S. I am not saying that you should not try System Restore prior to installing IE8 but I would try this first.
I have heard the lament that "you can't go back from IE8". How true this is,I do not know.
Harry07
davey,

I do not use the Registry cleaner since I've been writing on this Forum. Only, when my PC starts up. CCleaner cleans the regular stuff and not the Registry's. (I think/hope).
When I this afternoon downloaded IE7, I did after that the Reboot.
Perhaps you are right with your remark "you can't go back from IE8".
Note: I don't want IE8, just IE7 as a backup system for FF.
davey
QUOTE (Harry07 @ Nov 27 2008, 03:01 PM) *
davey,

I do not use the Registry cleaner since I've been writing on this Forum. Only, when my PC starts up. CCleaner cleans the regular stuff and not the Registry's. (I think/hope).
When I this afternoon downloaded IE7, I did after that the Reboot.
Perhaps you are right with your remark "you can't go back from IE8".
Note: I don't want IE8, just IE7 as a backup system for FF.

Nothing left then try System Restore to prior to IE 8.
You can always go back but it may require WinXP re-install.
Good luck, smile.gif davey Harry, you can always be on my team anytime !!! tongue.gif
Harry07
Just thought (again) of something.

I did a system backup prior to the IE8 download (I think, I hope rolleyes.gif )
Does this backup include the registry keys etc?
Worth trying or could it cause possible damage?
davey
QUOTE (Harry07 @ Nov 28 2008, 10:07 AM) *
Just thought (again) of something.

I did a system backup prior to the IE8 download (I think, I hope rolleyes.gif )
Does this backup include the registry keys etc?
Worth trying or could it cause possible damage?

Yes, the System Restore has the Registry and hopefully the other files necessary to restore you back to that time. However , you must keep in mind that any Registry changes since then will disappear. If you don't change things very often then you should be OK. smile.gif davey
Harry07
Okay, I will use the Back Up feature this weekend (more time available), thanks.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.