Sign in with
Sign up | Sign in
Your question

System Restore

Last response: in Windows XP
Share
Anonymous
March 7, 2005 3:31:01 AM

Archived from groups: microsoft.public.windowsxp.basics (More info?)

This is a sorta odd thing..for me anyway.
My moms pc has lost her system restore. I went to system properties to see
what was up and there was a message stating the system restore was turned off
by group policy and that to restore it would have to be done by domain
administator.

I am sure she doesnt want to lose what she has on her pc...(which prolly
isnt a bad idea) and i need a to know how to get the resotre back. She also
has lost all access to her help and support files. They just arent there any
longer. I think she may have had a virus an when virus was deleted her files
went to.

Any help will be appreciated. ty

More about : system restore

Anonymous
March 7, 2005 8:01:48 PM

Archived from groups: microsoft.public.windowsxp.basics (More info?)

Hi Icey,

Previously posted by Ramesh, Microsoft MVP:

Open Registry Editor and navigate to:

HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Windows
NT\SystemRestore

In the right-pane, delete the value "DisableConfig".
Close Registry Editor
Close and re-open the System Restore properties page.

For more information on System Restore.
All About System Restore in WinXP
http://home.earthlink.net/~mvp_bert/

--
Regards,
Bert Kinney [MS-MVP DTS]
http://dts-l.org/


Icey wrote:
> This is a sorta odd thing..for me anyway.
> My moms pc has lost her system restore. I went to system
> properties to see what was up and there was a message
> stating the system restore was turned off by group policy
> and that to restore it would have to be done by domain
> administator.
>
> I am sure she doesnt want to lose what she has on her
> pc...(which prolly isnt a bad idea) and i need a to know
> how to get the resotre back. She also has lost all access
> to her help and support files. They just arent there any
> longer. I think she may have had a virus an when virus
> was deleted her files went to.
>
> Any help will be appreciated. ty
Anonymous
March 7, 2005 8:27:14 PM

Archived from groups: microsoft.public.windowsxp.basics (More info?)

Hi Icey,

Fix Windows XP Help
http://www.dougknox.com/xp/scripts_desc/fixwinxphelp.ht...

--
Regards,
Bert Kinney [MS-MVP DTS]
http://dts-l.org/

Icey wrote:
> She also has lost all access
> to her help and support files. They just arent there any
> longer. I think she may have had a virus an when virus
> was deleted her files went to.
>
> Any help will be appreciated. ty
Related resources
Anonymous
March 9, 2005 1:53:06 PM

Archived from groups: microsoft.public.windowsxp.basics (More info?)

Same thing happened to me. I believe it is caused by a worm picked up from
MSN messanger.
Wayne Hansen
waynetrudy@hotmail.com

"Bert Kinney" wrote:

> Hi Icey,
>
> Previously posted by Ramesh, Microsoft MVP:
>
> Open Registry Editor and navigate to:
>
> HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Windows
> NT\SystemRestore
>
> In the right-pane, delete the value "DisableConfig".
> Close Registry Editor
> Close and re-open the System Restore properties page.
>
> For more information on System Restore.
> All About System Restore in WinXP
> http://home.earthlink.net/~mvp_bert/
>
> --
> Regards,
> Bert Kinney [MS-MVP DTS]
> http://dts-l.org/
>
>
> Icey wrote:
> > This is a sorta odd thing..for me anyway.
> > My moms pc has lost her system restore. I went to system
> > properties to see what was up and there was a message
> > stating the system restore was turned off by group policy
> > and that to restore it would have to be done by domain
> > administator.
> >
> > I am sure she doesnt want to lose what she has on her
> > pc...(which prolly isnt a bad idea) and i need a to know
> > how to get the resotre back. She also has lost all access
> > to her help and support files. They just arent there any
> > longer. I think she may have had a virus an when virus
> > was deleted her files went to.
> >
> > Any help will be appreciated. ty
>
>
>
Anonymous
March 9, 2005 5:49:57 PM

Archived from groups: microsoft.public.windowsxp.basics (More info?)

Hi Wayne,

Yes, some viruses are created in a way that it will disables the very
tools used to remove them.

Note: You should not be using your real email address as it can lead
to SPAM.

--
Regards,
Bert Kinney [MS-MVP DTS]
http://dts-l.org/

BigWhiteSnow wrote:
> Same thing happened to me. I believe it is caused by a
> worm picked up from MSN messanger.
> Wayne Hansen
> waynetrudy@hotmail.com
>
> "Bert Kinney" wrote:
>
>> Hi Icey,
>>
>> Previously posted by Ramesh, Microsoft MVP:
>>
>> Open Registry Editor and navigate to:
>>
>> HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Windows
>> NT\SystemRestore
>>
>> In the right-pane, delete the value "DisableConfig".
>> Close Registry Editor
>> Close and re-open the System Restore properties page.
>>
>> For more information on System Restore.
>> All About System Restore in WinXP
>> http://home.earthlink.net/~mvp_bert/
>>
>> --
>> Regards,
>> Bert Kinney [MS-MVP DTS]
>> http://dts-l.org/
>>
>>
>> Icey wrote:
>>> This is a sorta odd thing..for me anyway.
>>> My moms pc has lost her system restore. I went to system
>>> properties to see what was up and there was a message
>>> stating the system restore was turned off by group
>>> policy and that to restore it would have to be done by
>>> domain administator.
>>>
>>> I am sure she doesnt want to lose what she has on her
>>> pc...(which prolly isnt a bad idea) and i need a to know
>>> how to get the resotre back. She also has lost all
>>> access to her help and support files. They just arent
>>> there any longer. I think she may have had a virus an
>>> when virus was deleted her files went to.
>>>
>>> Any help will be appreciated. ty
March 14, 2005 1:37:22 PM

Archived from groups: microsoft.public.windowsxp.basics (More info?)

Hi Bigwhitesnow
Did you manage to resolve this restore problem as I think my kids have the
same worrm from MSN and I am not sure what to do

"BigWhiteSnow" wrote:

> Same thing happened to me. I believe it is caused by a worm picked up from
> MSN messanger.
> Wayne Hansen
> waynetrudy@hotmail.com
>
> "Bert Kinney" wrote:
>
> > Hi Icey,
> >
> > Previously posted by Ramesh, Microsoft MVP:
> >
> > Open Registry Editor and navigate to:
> >
> > HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Windows
> > NT\SystemRestore
> >
> > In the right-pane, delete the value "DisableConfig".
> > Close Registry Editor
> > Close and re-open the System Restore properties page.
> >
> > For more information on System Restore.
> > All About System Restore in WinXP
> > http://home.earthlink.net/~mvp_bert/
> >
> > --
> > Regards,
> > Bert Kinney [MS-MVP DTS]
> > http://dts-l.org/
> >
> >
> > Icey wrote:
> > > This is a sorta odd thing..for me anyway.
> > > My moms pc has lost her system restore. I went to system
> > > properties to see what was up and there was a message
> > > stating the system restore was turned off by group policy
> > > and that to restore it would have to be done by domain
> > > administator.
> > >
> > > I am sure she doesnt want to lose what she has on her
> > > pc...(which prolly isnt a bad idea) and i need a to know
> > > how to get the resotre back. She also has lost all access
> > > to her help and support files. They just arent there any
> > > longer. I think she may have had a virus an when virus
> > > was deleted her files went to.
> > >
> > > Any help will be appreciated. ty
> >
> >
> >
March 14, 2005 1:38:52 PM

Archived from groups: microsoft.public.windowsxp.basics (More info?)

Hi Bert,

I was the guy that used CAPS earlier today, I have been through all the anti
virus programs I can fing. the two registries were set to value 0 but still
no Restore Tab
Do you have any other suggestions

Kind Regards

Stewart

"Bert Kinney" wrote:

> Hi Wayne,
>
> Yes, some viruses are created in a way that it will disables the very
> tools used to remove them.
>
> Note: You should not be using your real email address as it can lead
> to SPAM.
>
> --
> Regards,
> Bert Kinney [MS-MVP DTS]
> http://dts-l.org/
>
> BigWhiteSnow wrote:
> > Same thing happened to me. I believe it is caused by a
> > worm picked up from MSN messanger.
> > Wayne Hansen
> > waynetrudy@hotmail.com
> >
> > "Bert Kinney" wrote:
> >
> >> Hi Icey,
> >>
> >> Previously posted by Ramesh, Microsoft MVP:
> >>
> >> Open Registry Editor and navigate to:
> >>
> >> HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Windows
> >> NT\SystemRestore
> >>
> >> In the right-pane, delete the value "DisableConfig".
> >> Close Registry Editor
> >> Close and re-open the System Restore properties page.
> >>
> >> For more information on System Restore.
> >> All About System Restore in WinXP
> >> http://home.earthlink.net/~mvp_bert/
> >>
> >> --
> >> Regards,
> >> Bert Kinney [MS-MVP DTS]
> >> http://dts-l.org/
> >>
> >>
> >> Icey wrote:
> >>> This is a sorta odd thing..for me anyway.
> >>> My moms pc has lost her system restore. I went to system
> >>> properties to see what was up and there was a message
> >>> stating the system restore was turned off by group
> >>> policy and that to restore it would have to be done by
> >>> domain administator.
> >>>
> >>> I am sure she doesnt want to lose what she has on her
> >>> pc...(which prolly isnt a bad idea) and i need a to know
> >>> how to get the resotre back. She also has lost all
> >>> access to her help and support files. They just arent
> >>> there any longer. I think she may have had a virus an
> >>> when virus was deleted her files went to.
> >>>
> >>> Any help will be appreciated. ty
>
>
>
Anonymous
March 14, 2005 7:05:27 PM

Archived from groups: microsoft.public.windowsxp.basics (More info?)

Yes, rather than change the value, delete these two value keys from
the registry.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows
NT\SystemRestore

In the right pane, right click on each of these Value Keys and select
delete.
"DisableSR"
"DisableConfig"

--
Regards,
Bert Kinney [MS-MVP DTS]
http://dts-l.org/

STEWART wrote:
> Hi Bert,
>
> I was the guy that used CAPS earlier today, I have been
> through all the anti virus programs I can fing. the two
> registries were set to value 0 but still no Restore Tab
> Do you have any other suggestions
>
> Kind Regards
>
> Stewart
>
> "Bert Kinney" wrote:
>
>> Hi Wayne,
>>
>> Yes, some viruses are created in a way that it will
>> disables the very tools used to remove them.
>>
>> Note: You should not be using your real email address as
>> it can lead to SPAM.
>>
>> --
>> Regards,
>> Bert Kinney [MS-MVP DTS]
>> http://dts-l.org/
>>
>> BigWhiteSnow wrote:
>>> Same thing happened to me. I believe it is caused by a
>>> worm picked up from MSN messanger.
>>> Wayne Hansen
>>> waynetrudy@hotmail.com
>>>
>>> "Bert Kinney" wrote:
>>>
>>>> Hi Icey,
>>>>
>>>> Previously posted by Ramesh, Microsoft MVP:
>>>>
>>>> Open Registry Editor and navigate to:
>>>>
>>>> HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Windows
>>>> NT\SystemRestore
>>>>
>>>> In the right-pane, delete the value "DisableConfig".
>>>> Close Registry Editor
>>>> Close and re-open the System Restore properties page.
>>>>
>>>> For more information on System Restore.
>>>> All About System Restore in WinXP
>>>> http://home.earthlink.net/~mvp_bert/
>>>>
>>>> --
>>>> Regards,
>>>> Bert Kinney [MS-MVP DTS]
>>>> http://dts-l.org/
>>>>
>>>>
>>>> Icey wrote:
>>>>> This is a sorta odd thing..for me anyway.
>>>>> My moms pc has lost her system restore. I went to
>>>>> system properties to see what was up and there was a
>>>>> message stating the system restore was turned off by
>>>>> group policy and that to restore it would have to be
>>>>> done by domain administator.
>>>>>
>>>>> I am sure she doesnt want to lose what she has on her
>>>>> pc...(which prolly isnt a bad idea) and i need a to
>>>>> know how to get the resotre back. She also has lost
>>>>> all access to her help and support files. They just
>>>>> arent there any longer. I think she may have had a
>>>>> virus an when virus was deleted her files went to.
>>>>>
>>>>> Any help will be appreciated. ty
Anonymous
March 14, 2005 9:14:45 PM

Archived from groups: microsoft.public.windowsxp.basics (More info?)

"Bert Kinney" wrote:
> Yes, rather than change the value, delete these two value keys
> from
> the registry.
>
> HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindows
> NTSystemRestore
>
> In the right pane, right click on each of these Value Keys and
> select
> delete.
> "DisableSR"
> "DisableConfig"
>
> --
> Regards,
> Bert Kinney [MS-MVP DTS]
> http://dts-l.org/
>
> STEWART wrote:
> > Hi Bert,
> >
> > I was the guy that used CAPS earlier today, I have been
> > through all the anti virus programs I can fing. the two
> > registries were set to value 0 but still no Restore Tab
> > Do you have any other suggestions
> >
> > Kind Regards
> >
> > Stewart
> >
> > "Bert Kinney" wrote:
> >
>  >> Hi Wayne,
>  >>
>  >> Yes, some viruses are created in a way that it will
>  >> disables the very tools used to remove them.
>  >>
>  >> Note: You should not be using your real email address
> as
>  >> it can lead to SPAM.
>  >>
>  >> --
>  >> Regards,
>  >> Bert Kinney [MS-MVP DTS]
>  >> http://dts-l.org/
>  >>
>  >> BigWhiteSnow wrote:
>   >>> Same thing happened to me. I believe it is
> caused by a
>   >>> worm picked up from MSN messanger.
>   >>> Wayne Hansen
>   >>> waynetrudy@hotmail.com
>   >>>
>   >>> "Bert Kinney" wrote:
>   >>>
>   >>>> Hi Icey,
>   >>>>
>   >>>> Previously posted by Ramesh, Microsoft MVP:
>   >>>>
>   >>>> Open Registry Editor and navigate to:
>   >>>>
>   >>>> HKEY LOCAL
> MACHINESOFTWAREPoliciesMicrosoftWindows
>   >>>> NTSystemRestore
>   >>>>
>   >>>> In the right-pane, delete the value
> "DisableConfig".
>   >>>> Close Registry Editor
>   >>>> Close and re-open the System Restore
> properties page.
>   >>>>
>   >>>> For more information on System Restore.
>   >>>> All About System Restore in WinXP
>   >>>> http://home.earthlink.net/~mvp_bert/
>   >>>>
>   >>>> --
>   >>>> Regards,
>   >>>> Bert Kinney [MS-MVP DTS]
>   >>>> http://dts-l.org/
>   >>>>
>   >>>>
>   >>>> Icey wrote:
>   >>>>> This is a sorta odd thing..for me anyway.
>   >>>>> My moms pc has lost her system restore. I
> went to
>   >>>>> system properties to see what was up and
> there was a
>   >>>>> message stating the system restore was
> turned off by
>   >>>>> group policy and that to restore it would
> have to be
>   >>>>> done by domain administator.
>   >>>>>
>   >>>>> I am sure she doesnt want to lose what she
> has on her
>   >>>>> pc...(which prolly isnt a bad idea) and i
> need a to
>   >>>>> know how to get the resotre back. She also
> has lost
>   >>>>> all access to her help and support files.
> They just
>   >>>>> arent there any longer. I think she may have
> had a
>   >>>>> virus an when virus was deleted her files
> went to.
>   >>>>>
>   >>>>> Any help will be appreciated. ty

Click Start, Run, type REGEDIT, click OK to get into the Registry
Editor.

In the left panel double-click the following:
HKEY_LOCAL_MACHINE>Software>Policies>Microsoft>Windows
NT>SystemRestore

To get your System Restore Tab back you need to DELETE the two entries
in the Registry Editor which appear on the RHS of the panel:

DisableSR
DisableConfig

www.trendmicro says that if you have Fatso.A you should change the
values from "0" to "1" (see below), but this doesn’t work for
Fatso.B worm and if you’ve tried modifying the entries and your Tab
hasn’t returned then you need to delete them completely, since they
were added by the worm in the first place and shouldn’t be there. To
delete them select the entry, right-click on it and click Delete.

For full instructions (copied from trendmicro) on how to manually
remove the Fatso.A worm see

http://forums.techguy.org/showthread.php?p=2443999

or go to www.techguy.org/forums and type "System restore" into the
Search and look for posts by Onowotnow. There are two posts with
manual removal instructions, the later one specifically for XP.

If you have Fatso.B worm you need to be looking for the following in
your Registry to delete:

Random Value: AvSer, DsmSer, rollbk
Random Data: dsm.exe, msmpatch.exe. svosm.exe, sysup.exe

Look also in: HKEY_CURRENT_USER>Microsoft>Windows>CurrentVersion>Run
as this location is listed in trendmicro’s solution for Fatso.B but
not in Fatso.A.

Hope this helps!

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Basics-System-Restore-ftop...
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1077803
Anonymous
March 14, 2005 9:15:33 PM

Archived from groups: microsoft.public.windowsxp.basics (More info?)

"Onowotnow" wrote:
> Click Start, Run, type REGEDIT, click OK to get into the
> Registry Editor.
>
> In the left panel double-click the following:
> HKEY_LOCAL_MACHINE>Software>Policies>Microsoft>Windows
> NT>SystemRestore
>
> To get your System Restore Tab back you need to DELETE the two
> entries in the Registry Editor which appear on the RHS of the
> panel:
>
> DisableSR
> DisableConfig
>
> www.trendmicro says that if you have Fatso.A you should change
> the values from "0" to "1" (see below), but this doesn't work
> for Fatso.B worm and if you've tried modifying the entries and
> your Tab hasn't returned then you need to delete them
> completely, since they were added by the worm in the first
> place and shouldn't be there. To delete them select the
> entry, right-click on it and click Delete.
>
> For full instructions (copied from trendmicro) on how to
> manually remove the Fatso.A worm see
>
> http://forums.techguy.org/showthread.php?p=2443999
>
> or go to www.techguy.org/forums and type "System restore" into
> the Search and look for posts by Onowotnow. There are two
> posts with manual removal instructions, the later one
> specifically for XP.
>
> If you have Fatso.B worm you need to be looking for the
> following in your Registry to delete:
>
> Random Value: AvSer, DsmSer, rollbk
> Random Data: dsm.exe, msmpatch.exe. svosm.exe, sysup.exe
>
> Look also in:
> HKEY_CURRENT_USER>Microsoft>Windows>CurrentVersion>Run
> as this location is listed in trendmicro's solution for
> Fatso.B but not in Fatso.A.
>
> Hope this helps!

Bert, a Frenchman wants to thank you...

http://forums.techguy.org/showthread.php?p=2445774#post...
Anonymous
March 15, 2005 2:25:53 AM

Archived from groups: microsoft.public.windowsxp.basics (More info?)

You're very welcome.

--
Regards,
Bert Kinney MS-MVP Shell/User
http://dts-l.org/


Onowotnow wrote:
> "Onowotnow" wrote:
>> Click Start, Run, type REGEDIT, click OK to get into the
>> Registry Editor.
>>
>> In the left panel double-click the following:
>> HKEY_LOCAL_MACHINE>Software>Policies>Microsoft>Windows
>>> SystemRestore
>>
>> To get your System Restore Tab back you need to DELETE
>> the two entries in the Registry Editor which appear on
>> the RHS of the panel:
>>
>> DisableSR
>> DisableConfig

> Bert, a Frenchman wants to thank you...
>
> http://forums.techguy.org/showthread.php?p=2445774#post...
Anonymous
March 15, 2005 4:10:15 PM

Archived from groups: microsoft.public.windowsxp.basics (More info?)

"Onowotnow" wrote:
> Bert, a Frenchman wants to thank you...
>
> http://forums.techguy.org/showthread.php?p=2445774#post...

That extra registry entry I mentioned in trendmicro’s solution for
Fatso.B is a typing error. I’m pretty sure it should read:
HKCU>Software>Microsoft>Windows>CurrentVersion>Run
Symantec’s information for Serflog.B has the correct entries.

As someone else has pointed out elsewhere if you’re trying to fix the
Serflog/Fatso/Crog worms the Hijackthis program will tell you which
entries in the Registry are infected and delete them for you when you
check those boxes and click on "Fix....". You just need to know the
names you’re looking for. AvSer, DsmSer, rollbk, dsm.exe,
msmpatch.exe, svosm.exe, sysup.exe - you’ve got Fatso.B/serflog.B. If
you see Itwob,serpe,Avnort, msmbw.exe, serbw.exe, formatsys.exe -
you’ve Fatso.A/Serflog.A.
Anonymous
March 16, 2005 10:33:07 AM

Archived from groups: microsoft.public.windowsxp.basics (More info?)

Yes, I went through all of the worm cleaning suggestions and the Registry
Edit suggestions but still no System Restore capability. Finally what worked
was basicly reinstalling the System restore from my original XP home version
CD:


Go to the hidden folder Windows\Inf (set to see hidden items in My
Computer Tools - Folder Options - View)

Look for sr.inf, right click on it, choose "Install" (it will probably ask
for the CD) I said "yes" when asked to overwrite the "newer" files with the
"older" files found on the CD. I suspect the worm corrupted the System
Restore files.

Regards Bigwhitesnow


"STEWART" wrote:

> Hi Bigwhitesnow
> Did you manage to resolve this restore problem as I think my kids have the
> same worrm from MSN and I am not sure what to do
>
> "BigWhiteSnow" wrote:
>
> > Same thing happened to me. I believe it is caused by a worm picked up from
> > MSN messanger.
> > Wayne Hansen
> >
> > "Bert Kinney" wrote:
> >
> > > Hi Icey,
> > >
> > > Previously posted by Ramesh, Microsoft MVP:
> > >
> > > Open Registry Editor and navigate to:
> > >
> > > HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Windows
> > > NT\SystemRestore
> > >
> > > In the right-pane, delete the value "DisableConfig".
> > > Close Registry Editor
> > > Close and re-open the System Restore properties page.
> > >
> > > For more information on System Restore.
> > > All About System Restore in WinXP
> > > http://home.earthlink.net/~mvp_bert/
> > >
> > > --
> > > Regards,
> > > Bert Kinney [MS-MVP DTS]
> > > http://dts-l.org/
> > >
> > >
> > > Icey wrote:
> > > > This is a sorta odd thing..for me anyway.
> > > > My moms pc has lost her system restore. I went to system
> > > > properties to see what was up and there was a message
> > > > stating the system restore was turned off by group policy
> > > > and that to restore it would have to be done by domain
> > > > administator.
> > > >
> > > > I am sure she doesnt want to lose what she has on her
> > > > pc...(which prolly isnt a bad idea) and i need a to know
> > > > how to get the resotre back. She also has lost all access
> > > > to her help and support files. They just arent there any
> > > > longer. I think she may have had a virus an when virus
> > > > was deleted her files went to.
> > > >
> > > > Any help will be appreciated. ty
> > >
> > >
> > >
March 16, 2005 1:39:02 PM

Archived from groups: microsoft.public.windowsxp.basics (More info?)

Hi Bert

Just a mail to say a big thank you. The Kenny Korner(think that was the site)
line 278 worked a treat

Once again thanks

Stewart


"Bert Kinney" wrote:

> Yes, rather than change the value, delete these two value keys from
> the registry.
>
> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows
> NT\SystemRestore
>
> In the right pane, right click on each of these Value Keys and select
> delete.
> "DisableSR"
> "DisableConfig"
>
> --
> Regards,
> Bert Kinney [MS-MVP DTS]
> http://dts-l.org/
>
> STEWART wrote:
> > Hi Bert,
> >
> > I was the guy that used CAPS earlier today, I have been
> > through all the anti virus programs I can fing. the two
> > registries were set to value 0 but still no Restore Tab
> > Do you have any other suggestions
> >
> > Kind Regards
> >
> > Stewart
> >
> > "Bert Kinney" wrote:
> >
> >> Hi Wayne,
> >>
> >> Yes, some viruses are created in a way that it will
> >> disables the very tools used to remove them.
> >>
> >> Note: You should not be using your real email address as
> >> it can lead to SPAM.
> >>
> >> --
> >> Regards,
> >> Bert Kinney [MS-MVP DTS]
> >> http://dts-l.org/
> >>
> >> BigWhiteSnow wrote:
> >>> Same thing happened to me. I believe it is caused by a
> >>> worm picked up from MSN messanger.
> >>> Wayne Hansen
> >>> waynetrudy@hotmail.com
> >>>
> >>> "Bert Kinney" wrote:
> >>>
> >>>> Hi Icey,
> >>>>
> >>>> Previously posted by Ramesh, Microsoft MVP:
> >>>>
> >>>> Open Registry Editor and navigate to:
> >>>>
> >>>> HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Windows
> >>>> NT\SystemRestore
> >>>>
> >>>> In the right-pane, delete the value "DisableConfig".
> >>>> Close Registry Editor
> >>>> Close and re-open the System Restore properties page.
> >>>>
> >>>> For more information on System Restore.
> >>>> All About System Restore in WinXP
> >>>> http://home.earthlink.net/~mvp_bert/
> >>>>
> >>>> --
> >>>> Regards,
> >>>> Bert Kinney [MS-MVP DTS]
> >>>> http://dts-l.org/
> >>>>
> >>>>
> >>>> Icey wrote:
> >>>>> This is a sorta odd thing..for me anyway.
> >>>>> My moms pc has lost her system restore. I went to
> >>>>> system properties to see what was up and there was a
> >>>>> message stating the system restore was turned off by
> >>>>> group policy and that to restore it would have to be
> >>>>> done by domain administator.
> >>>>>
> >>>>> I am sure she doesnt want to lose what she has on her
> >>>>> pc...(which prolly isnt a bad idea) and i need a to
> >>>>> know how to get the resotre back. She also has lost
> >>>>> all access to her help and support files. They just
> >>>>> arent there any longer. I think she may have had a
> >>>>> virus an when virus was deleted her files went to.
> >>>>>
> >>>>> Any help will be appreciated. ty
>
>
>
Anonymous
March 16, 2005 2:56:42 PM

Archived from groups: microsoft.public.windowsxp.basics (More info?)

"BigWhiteSnow" wrote:
> Yes, I went through all of the worm cleaning suggestions and
> the Registry
> Edit suggestions but still no System Restore capability.
> Finally what worked
> was basicly reinstalling the System restore from my original
> XP home version
> CD:
>
>
> Go to the hidden folder WindowsInf (set to see hidden items
> in My
> Computer Tools - Folder Options - View)
>
> Look for sr.inf, right click on it, choose "Install" (it will
> probably ask
> for the CD) I said "yes" when asked to overwrite the "newer"
> files with the
> "older" files found on the CD. I suspect the worm corrupted
> the System
> Restore files.
>
> Regards Bigwhitesnow
>
>
> "STEWART" wrote:
>
> > Hi Bigwhitesnow
> > Did you manage to resolve this restore problem as I think my
> kids have the
> > same worrm from MSN and I am not sure what to do
> >
> > "BigWhiteSnow" wrote:
> >
>  > > Same thing happened to me. I believe it is caused
> by a worm picked up from
>  > > MSN messanger.
>  > > Wayne Hansen
>  > >
>  > > "Bert Kinney" wrote:
>  > >
>   > > > Hi Icey,
>   > > >
>   > > > Previously posted by Ramesh, Microsoft MVP:
>   > > >
>   > > > Open Registry Editor and navigate to:
>   > > >
>   > > > HKEY LOCAL
> MACHINESOFTWAREPoliciesMicrosoftWindows
>   > > > NTSystemRestore
>   > > >
>   > > > In the right-pane, delete the value
> "DisableConfig".
>   > > > Close Registry Editor
>   > > > Close and re-open the System Restore
> properties page.
>   > > >
>   > > > For more information on System Restore.
>   > > > All About System Restore in WinXP
>   > > > http://home.earthlink.net/~mvp_bert/
>   > > >
>   > > > --
>   > > > Regards,
>   > > > Bert Kinney [MS-MVP DTS]
>   > > > http://dts-l.org/
>   > > >
>   > > >
>   > > > Icey wrote:
>   > > > > This is a sorta odd thing..for me anyway.
>   > > > > My moms pc has lost her system restore. I
> went to system
>   > > > > properties to see what was up and there
> was a message
>   > > > > stating the system restore was turned off
> by group policy
>   > > > > and that to restore it would have to be
> done by domain
>   > > > > administator.
>   > > > >
>   > > > > I am sure she doesnt want to lose what she
> has on her
>   > > > > pc...(which prolly isnt a bad idea) and i
> need a to know
>   > > > > how to get the resotre back. She also has
> lost all access
>   > > > > to her help and support files. They just
> arent there any
>   > > > > longer. I think she may have had a virus
> an when virus
>   > > > > was deleted her files went to.
>   > > > >
>   > > > > Any help will be appreciated. ty
>   > > >
>   > > >
>   > > >

Did you delete both DisableSR and DisableConfig entries from the
Register, BWS? I deleted BOTH entries and got my Tab back.

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Basics-System-Restore-ftop...
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1081615
Anonymous
March 16, 2005 7:50:17 PM

Archived from groups: microsoft.public.windowsxp.basics (More info?)

Glad to hear that, and thanks for the feedback.

--
Regards,
Bert Kinney MS-MVP Shell/User
http://dts-l.org/

STEWART wrote:
> Hi Bert
>
> Just a mail to say a big thank you. The Kenny
> Korner(think that was the site) line 278 worked a treat
>
> Once again thanks
>
> Stewart
>
>
> "Bert Kinney" wrote:
>
>> Yes, rather than change the value, delete these two
>> value keys from the registry.
>>
>> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows
>> NT\SystemRestore
>>
>> In the right pane, right click on each of these Value
>> Keys and select delete.
>> "DisableSR"
>> "DisableConfig"
>>
>> --
>> Regards,
>> Bert Kinney [MS-MVP DTS]
>> http://dts-l.org/
>>
>> STEWART wrote:
>>> Hi Bert,
>>>
>>> I was the guy that used CAPS earlier today, I have been
>>> through all the anti virus programs I can fing. the two
>>> registries were set to value 0 but still no Restore Tab
>>> Do you have any other suggestions
>>>
>>> Kind Regards
>>>
>>> Stewart
>>>
>>> "Bert Kinney" wrote:
>>>
>>>> Hi Wayne,
>>>>
>>>> Yes, some viruses are created in a way that it will
>>>> disables the very tools used to remove them.
>>>>
>>>> Note: You should not be using your real email address
>>>> as it can lead to SPAM.
>>>>
>>>> --
>>>> Regards,
>>>> Bert Kinney [MS-MVP DTS]
>>>> http://dts-l.org/
>>>>
>>>> BigWhiteSnow wrote:
>>>>> Same thing happened to me. I believe it is caused by
>>>>> a worm picked up from MSN messanger.
>>>>> Wayne Hansen
>>>>> waynetrudy@hotmail.com
>>>>>
>>>>> "Bert Kinney" wrote:
>>>>>
>>>>>> Hi Icey,
>>>>>>
>>>>>> Previously posted by Ramesh, Microsoft MVP:
>>>>>>
>>>>>> Open Registry Editor and navigate to:
>>>>>>
>>>>>> HKEY LOCAL
>>>>>> MACHINE\SOFTWARE\Policies\Microsoft\Windows
>>>>>> NT\SystemRestore
>>>>>>
>>>>>> In the right-pane, delete the value "DisableConfig".
>>>>>> Close Registry Editor
>>>>>> Close and re-open the System Restore properties page.
>>>>>>
>>>>>> For more information on System Restore.
>>>>>> All About System Restore in WinXP
>>>>>> http://home.earthlink.net/~mvp_bert/
>>>>>>
>>>>>> --
>>>>>> Regards,
>>>>>> Bert Kinney [MS-MVP DTS]
>>>>>> http://dts-l.org/
>>>>>>
>>>>>>
>>>>>> Icey wrote:
>>>>>>> This is a sorta odd thing..for me anyway.
>>>>>>> My moms pc has lost her system restore. I went to
>>>>>>> system properties to see what was up and there was a
>>>>>>> message stating the system restore was turned off by
>>>>>>> group policy and that to restore it would have to be
>>>>>>> done by domain administator.
>>>>>>>
>>>>>>> I am sure she doesnt want to lose what she has on
>>>>>>> her pc...(which prolly isnt a bad idea) and i need
>>>>>>> a to know how to get the resotre back. She also has
>>>>>>> lost all access to her help and support files. They
>>>>>>> just arent there any longer. I think she may have
>>>>>>> had a virus an when virus was deleted her files
>>>>>>> went to.
>>>>>>>
>>>>>>> Any help will be appreciated. ty
Anonymous
March 18, 2005 5:40:58 PM

Archived from groups: microsoft.public.windowsxp.basics (More info?)

"Bert Kinney" wrote:
> Glad to hear that, and thanks for the feedback.
>
> --
> Regards,
> Bert Kinney MS-MVP Shell/User
> http://dts-l.org/
>
> STEWART wrote:
> > Hi Bert
> >
> > Just a mail to say a big thank you. The Kenny
> > Korner(think that was the site) line 278 worked a treat
> >
> > Once again thanks
> >
> > Stewart
> >
> >
> > "Bert Kinney" wrote:
> >
>  >> Yes, rather than change the value, delete these two
>  >> value keys from the registry.
>  >>
>  >>
> HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindows
>  >> NTSystemRestore
>  >>
>  >> In the right pane, right click on each of these Value
>  >> Keys and select delete.
>  >> "DisableSR"
>  >> "DisableConfig"
>  >>
>  >> --
>  >> Regards,
>  >> Bert Kinney [MS-MVP DTS]
>  >> http://dts-l.org/
>  >>
>  >> STEWART wrote:
>   >>> Hi Bert,
>   >>>
>   >>> I was the guy that used CAPS earlier today, I
> have been
>   >>> through all the anti virus programs I can
> fing. the two
>   >>> registries were set to value 0 but still no
> Restore Tab
>   >>> Do you have any other suggestions
>   >>>
>   >>> Kind Regards
>   >>>
>   >>> Stewart
>   >>>
>   >>> "Bert Kinney" wrote:
>   >>>
>   >>>> Hi Wayne,
>   >>>>
>   >>>> Yes, some viruses are created in a way that
> it will
>   >>>> disables the very tools used to remove them.
>   >>>>
>   >>>> Note: You should not be using your real email
> address
>   >>>> as it can lead to SPAM.
>   >>>>
>   >>>> --
>   >>>> Regards,
>   >>>> Bert Kinney [MS-MVP DTS]
>   >>>> http://dts-l.org/
>   >>>>
>   >>>> BigWhiteSnow wrote:
>   >>>>> Same thing happened to me. I believe it is
> caused by
>   >>>>> a worm picked up from MSN messanger.
>   >>>>> Wayne Hansen
>   >>>>> waynetrudy@hotmail.com
>   >>>>>
>   >>>>> "Bert Kinney" wrote:
>   >>>>>
>   >>>>>> Hi Icey,
>   >>>>>>
>   >>>>>> Previously posted by Ramesh, Microsoft MVP:
>   >>>>>>
>   >>>>>> Open Registry Editor and navigate to:
>   >>>>>>
>   >>>>>> HKEY LOCAL
>   >>>>>> MACHINESOFTWAREPoliciesMicrosoftWindows
>   >>>>>> NTSystemRestore
>   >>>>>>
>   >>>>>> In the right-pane, delete the value
> "DisableConfig".
>   >>>>>> Close Registry Editor
>   >>>>>> Close and re-open the System Restore
> properties page.
>   >>>>>>
>   >>>>>> For more information on System Restore.
>   >>>>>> All About System Restore in WinXP
>   >>>>>> http://home.earthlink.net/~mvp_bert/
>   >>>>>>
>   >>>>>> --
>   >>>>>> Regards,
>   >>>>>> Bert Kinney [MS-MVP DTS]
>   >>>>>> http://dts-l.org/
>   >>>>>>
>   >>>>>>
>   >>>>>> Icey wrote:
>   >>>>>>> This is a sorta odd thing..for me anyway.
>   >>>>>>> My moms pc has lost her system restore. I
> went to
>   >>>>>>> system properties to see what was up and
> there was a
>   >>>>>>> message stating the system restore was
> turned off by
>   >>>>>>> group policy and that to restore it would
> have to be
>   >>>>>>> done by domain administator.
>   >>>>>>>
>   >>>>>>> I am sure she doesnt want to lose what she
> has on
>   >>>>>>> her pc...(which prolly isnt a bad idea)
> and i need
>   >>>>>>> a to know how to get the resotre back. She
> also has
>   >>>>>>> lost all access to her help and support
> files. They
>   >>>>>>> just arent there any longer. I think she
> may have
>   >>>>>>> had a virus an when virus was deleted her
> files
>   >>>>>>> went to.
>   >>>>>>>
>   >>>>>>> Any help will be appreciated. ty

Hey, big companies like trendmicro do listen to us minions after all.
Having emailed them a few days ago, I’ve just checked its Solution
page for the worm I had and I’m pleased to say it is now telling
people to delete the two entries in the registry which disable the
system restore. See, even a drop in the ocean can make a
difference...

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Basics-System-Restore-ftop...
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1086009
!