On my quest in searching for a tool or software that can actually restore deleted services that belongs to Windows and not just simply restoring the startup settings, I found a tool called RefreshPC which claims to refresh system services. RefreshPC is a free tool created by the same company that develops XP Smoker or 7Smoker that is able to reset registry settings, system services and clean up temporary folders and prefetch files. RefreshPC works on Windows XP, Windows Vista and Windows 7 on both 64bit and 32bit versions. The screenshot of the program shows that RefreshPC is an easy to use tool that is able to automatically perform all 4 actions by simply clicking a button.
I tried clicking the Refresh My Windows 7 Settings button on my
test machine and within seconds a report window pops out telling me that it has reset 169 Windows 7 registry entries to their default values, reset 144 Windows 7 services to their default values and cleaned all of temp folders and prefetch files.
That’s it. I can’t find any log nor information on what was being “refreshed” after clicking the button on RefreshPC. As we all know that the Windows registry is a very sensitive area where if you wrongly deleted an important registry key, Windows may not work properly. So before even attempting to use this tool on my client’s computer, let us investigate which registry entries and services that RefreshPC resets.
First run RefreshPC, then run RegFromApp as administrator. Select the RefreshPC process listed in RegFromApp and click the OK button to start injecting. Click the Options from RegFromApp menubar and select “Add Only Modified Values” to uncheck that setting. Go back to RefreshPC and click the “Refresh My Windows 7 Settings”. When RefreshPC has finished refreshing the registry settings and system services, go to RegFromApp and you will see a list of registry values that is modified by RefreshPC.
During installation, please take note that RefreshPC setup installer by default enables installation of WareSoft Search Toolbar. Uncheck all 3 checkboxes to prevent the installation of WareSoft Software Toolbar, setting home page to waresoftsearch.com and Yahoo! as default search provider, then only click the Next button.
test machine and within seconds a report window pops out telling me that it has reset 169 Windows 7 registry entries to their default values, reset 144 Windows 7 services to their default values and cleaned all of temp folders and prefetch files.
First run RefreshPC, then run RegFromApp as administrator. Select the RefreshPC process listed in RegFromApp and click the OK button to start injecting. Click the Options from RegFromApp menubar and select “Add Only Modified Values” to uncheck that setting. Go back to RefreshPC and click the “Refresh My Windows 7 Settings”. When RefreshPC has finished refreshing the registry settings and system services, go to RegFromApp and you will see a list of registry values that is modified by RefreshPC.
RegfromApp shows that RefreshPC does reset a lot of Windows settings back to default which can be quite useful but as for system services, it merely resets the DelayedAutoStart which I wouldn’t consider it as really “resetting system services”. If a service has been removed by a virus, simply adding back the DelayedAutoStart value alone will not restore the service.Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\ CurrentVersion\Explorer\ ControlPanel\NameSpace\{ D20EA4E1-3957-11d2-A40B- 0C5020524153}]
""="Administrative Tools"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\Policies\ Explorer]
"NoControlPanel"=dword:00000000
"NoAddPrinter"=dword:00000000
"NoDeletePrinter"=dword:00000000
"NoThemesTab"=dword:00000000
"NoChangeAnimation"=dword:00000000
"NoViewContextMenu"=dword:00000000
"NoDFSTab"=dword:00000000
"NoSecurityTab"=dword:00000000
"NoHardwareTab"=dword:00000000
"NoToolbarCustomize"=dword:00000000
"NoDesktop"=dword:00000000
"NoBandCustomize"=dword:00000000
"NoFileMenu"=dword:00000000
"NoNetHood"=dword:00000000
"NoFolderOptions"=dword:00000000
"NoPropertiesMyComputer"=dword:00000000
"NoFileAssociate"=dword:00000000
"NoLowDiskSpaceChecks"=dword:00000000
"NoSetFolders"=dword:00000000
"NoStartMenuMyGames"=dword:00000000
"NoSetTaskbar"=dword:00000000
"NoCommonGroups"=dword:00000000
"NoStartMenuNetworkPlaces"=dword:00000000
"NoFind"=dword:00000000
"NoTrayItemsDisplay"=dword:00000000
"NoToolbarsOnTaskbar"=dword:00000000
"NoSimpleStartMenu"=dword:00000000
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\Policies\ System]
"NoDispSettingsPage"=dword:00000000
"NoDispCPL"=dword:00000000
"NoDispScrSavPage"=dword:00000000
"NoDispBackgroundPage"=dword:00000000
"NoDispAppearancePage"=dword:00000000
"NoVisualStyleChoice"=dword:00000000
"NoColorChoice"=dword:00000000
"NoSizeChoice"=dword:00000000
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
"SecureDesktop"=dword:00000000
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel]
"Accessibility"=dword:00000000
"GeneralTab"=dword:00000000
"SecurityTab"=dword:00000000
"ContentTab"=dword:00000000
"ProgramsTab"=dword:00000000
"PrivacyTab"=dword:00000000
"AdvancedTab"=dword:00000000
"CertifPers"=dword:00000000
"CertifSite"=dword:00000000
"CertifPub"=dword:00000000
"SecChangeSettings"=dword:00000000
"Privacy Settings"=dword:00000000
"Connwiz Admin Lock"=dword:00000000
"Settings"=dword:00000000
"Advanced"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ USBSTOR]
"Start"=dword:00000003
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\cdrom]
"Start"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ flpydisk]
"Start"=dword:00000003
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ sfloppy]
"Start"=dword:00000003
[HKEY_CURRENT_USER\Control Panel\Desktop]
"MenuShowDelay"="400"
"WindowArrangementActive"=dword:00000001
"LowLevelHooksTimeout"="5000"
"HungAppTimeout"="5000"
"AutoEndTasks"="1"
"DragFullWindows"="1"
"SmoothScroll"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\ CurrentVersion\Explorer]
"Max Cached Icons"="500"
"AlwaysUnloadDLL"="0"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Executive]
"AdditionalCriticalWorkerThread s"=dword:00000000
"AdditionalDelayedWorkerThreads "=dword:00000000
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\Explorer\ Advanced]
"EnableBalloonTips"=dword:00000001
"DisablePreviewDesktop"=dword:00000000
"TaskBarAnimations"=dword:00000001
"Start_ShowRun"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Memory Management]
"SecondLevelDataCache"=dword:00000000
"ClearPageFileAtShutdown"=dword:00000000
"LargeSystemCache"=dword:00000000
"DisablePagingExecutive"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\ FileSystem]
"NtfsDisableLastAccessUpdate"=dword:00000000
"NtfsDisable8dot3NameCreation"=dword:00000000
"NtfsMemoryUsage"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Memory Management\PrefetchParameters]
"EnablePrefetcher"=dword:00000002
"EnableSuperfetch"=dword:00000002
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\ PriorityControl]
"Win32PrioritySeparation"=dword:00000026
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\ CurrentVersion\OptimalLayout]
"EnableAutoLayout"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control]
"WaitToKillServiceTimeout"="20000"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\Explorer\ VisualEffects]
"VisualFXSetting"=dword:00000001
[HKEY_CURRENT_USER\Control Panel\Desktop\WindowMetrics]
"MinAnimate"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\ CurrentVersion\Policies\ Explorer]
"NoFavoritesMenu"=dword:00000000
"NoRecentDocsMenu"=dword:00000000
"NoNetworkConnections"=dword:00000000
"NoRecentDocsHistory"=dword:00000000
"NoSMMyDocs"=dword:00000000
"NoSMMyPictures"=dword:00000000
"NoStartMenuMyMusic"=dword:00000000
"NoCDBurning"=dword:00000000
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\Explorer]
"StartMenuAdminTools"="Yes"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa]
"DisableDomainCreds"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"AllocateDASD"="2"
"AllocateFloppies"="0"
"AllocateCDRoms"="0"
"AutoRestartShell"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\ System]
"DisableGPO"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\ CrashControl]
"AutoReboot"=dword:00000000
[HKEY_CURRENT_USER\Software\Microsoft\Windows Script Host\Settings]
"TrustPolicy"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager]
"ProtectionMode"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ eventlog]
"RestrictGuestAccess"=dword:00000000
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\ CurrentVersion\Policies\ System]
"EnableLUA"=dword:00000001
"EnableInstallerDetection"=dword:00000001
"PromptOnSecureDesktop"=dword:00000001
"EnableVirtualization"=dword:00000001
"ConsentPromptBehaviorAdmin"=dword:00000005
"ConsentPromptBehaviorUser"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter]
"EnabledV8"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\ FEATURE_SECURITYBAND]
"(Reserved)"="1"
"explorer.exe"="1"
"iexplore.exe"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security]
"DisableSecuritySettingsCheck"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ EventSystem]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ CryptSvc]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\UxSms]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dhcp]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ Dnscache]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ FDResPub]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ iphlpsvc]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MMCSS]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NlaSvc]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\nsi]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ CscService]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ PlugPlay]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Power]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ Spooler]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ RpcEptMapper]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc]
"DelayedAutoStart"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ LanmanServer]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ ShellHWDetection]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc]
"DelayedAutoStart"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ SysMain]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SENS]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ Schedule]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ lmhosts]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Themes]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ ProfSvc]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ Audiosrv]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ AudioEndpointBuilder]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ WinDefend]
"DelayedAutoStart"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MpsSvc]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ Winmgmt]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ WSearch]
"DelayedAutoStart"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ wuauserv]
"DelayedAutoStart"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ dot3svc]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ Wlansvc]
"DelayedAutoStart"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ LanmanWorkstation]
"DelayedAutoStart"=dword:00000000
During installation, please take note that RefreshPC setup installer by default enables installation of WareSoft Search Toolbar. Uncheck all 3 checkboxes to prevent the installation of WareSoft Software Toolbar, setting home page to waresoftsearch.com and Yahoo! as default search provider, then only click the Next button.
Download Now
No Pass !
Post a Comment