System Restore

Archived from groups: microsoft.public.windowsxp.basics (More info?)

This is a sorta odd thing..for me anyway.
My moms pc has lost her system restore. I went to system properties to see
what was up and there was a message stating the system restore was turned off
by group policy and that to restore it would have to be done by domain
administator.

I am sure she doesnt want to lose what she has on her pc...(which prolly
isnt a bad idea) and i need a to know how to get the resotre back. She also
has lost all access to her help and support files. They just arent there any
longer. I think she may have had a virus an when virus was deleted her files
went to.

Any help will be appreciated. ty
16 answers Last reply
More about system restore
  1. Archived from groups: microsoft.public.windowsxp.basics (More info?)

    Hi Icey,

    Previously posted by Ramesh, Microsoft MVP:

    Open Registry Editor and navigate to:

    HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Windows
    NT\SystemRestore

    In the right-pane, delete the value "DisableConfig".
    Close Registry Editor
    Close and re-open the System Restore properties page.

    For more information on System Restore.
    All About System Restore in WinXP
    http://home.earthlink.net/~mvp_bert/

    --
    Regards,
    Bert Kinney [MS-MVP DTS]
    http://dts-l.org/


    Icey wrote:
    > This is a sorta odd thing..for me anyway.
    > My moms pc has lost her system restore. I went to system
    > properties to see what was up and there was a message
    > stating the system restore was turned off by group policy
    > and that to restore it would have to be done by domain
    > administator.
    >
    > I am sure she doesnt want to lose what she has on her
    > pc...(which prolly isnt a bad idea) and i need a to know
    > how to get the resotre back. She also has lost all access
    > to her help and support files. They just arent there any
    > longer. I think she may have had a virus an when virus
    > was deleted her files went to.
    >
    > Any help will be appreciated. ty
  2. Archived from groups: microsoft.public.windowsxp.basics (More info?)

    Hi Icey,

    Fix Windows XP Help
    http://www.dougknox.com/xp/scripts_desc/fixwinxphelp.htm

    --
    Regards,
    Bert Kinney [MS-MVP DTS]
    http://dts-l.org/

    Icey wrote:
    > She also has lost all access
    > to her help and support files. They just arent there any
    > longer. I think she may have had a virus an when virus
    > was deleted her files went to.
    >
    > Any help will be appreciated. ty
  3. Archived from groups: microsoft.public.windowsxp.basics (More info?)

    Same thing happened to me. I believe it is caused by a worm picked up from
    MSN messanger.
    Wayne Hansen
    waynetrudy@hotmail.com

    "Bert Kinney" wrote:

    > Hi Icey,
    >
    > Previously posted by Ramesh, Microsoft MVP:
    >
    > Open Registry Editor and navigate to:
    >
    > HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Windows
    > NT\SystemRestore
    >
    > In the right-pane, delete the value "DisableConfig".
    > Close Registry Editor
    > Close and re-open the System Restore properties page.
    >
    > For more information on System Restore.
    > All About System Restore in WinXP
    > http://home.earthlink.net/~mvp_bert/
    >
    > --
    > Regards,
    > Bert Kinney [MS-MVP DTS]
    > http://dts-l.org/
    >
    >
    > Icey wrote:
    > > This is a sorta odd thing..for me anyway.
    > > My moms pc has lost her system restore. I went to system
    > > properties to see what was up and there was a message
    > > stating the system restore was turned off by group policy
    > > and that to restore it would have to be done by domain
    > > administator.
    > >
    > > I am sure she doesnt want to lose what she has on her
    > > pc...(which prolly isnt a bad idea) and i need a to know
    > > how to get the resotre back. She also has lost all access
    > > to her help and support files. They just arent there any
    > > longer. I think she may have had a virus an when virus
    > > was deleted her files went to.
    > >
    > > Any help will be appreciated. ty
    >
    >
    >
  4. Archived from groups: microsoft.public.windowsxp.basics (More info?)

    Hi Wayne,

    Yes, some viruses are created in a way that it will disables the very
    tools used to remove them.

    Note: You should not be using your real email address as it can lead
    to SPAM.

    --
    Regards,
    Bert Kinney [MS-MVP DTS]
    http://dts-l.org/

    BigWhiteSnow wrote:
    > Same thing happened to me. I believe it is caused by a
    > worm picked up from MSN messanger.
    > Wayne Hansen
    > waynetrudy@hotmail.com
    >
    > "Bert Kinney" wrote:
    >
    >> Hi Icey,
    >>
    >> Previously posted by Ramesh, Microsoft MVP:
    >>
    >> Open Registry Editor and navigate to:
    >>
    >> HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Windows
    >> NT\SystemRestore
    >>
    >> In the right-pane, delete the value "DisableConfig".
    >> Close Registry Editor
    >> Close and re-open the System Restore properties page.
    >>
    >> For more information on System Restore.
    >> All About System Restore in WinXP
    >> http://home.earthlink.net/~mvp_bert/
    >>
    >> --
    >> Regards,
    >> Bert Kinney [MS-MVP DTS]
    >> http://dts-l.org/
    >>
    >>
    >> Icey wrote:
    >>> This is a sorta odd thing..for me anyway.
    >>> My moms pc has lost her system restore. I went to system
    >>> properties to see what was up and there was a message
    >>> stating the system restore was turned off by group
    >>> policy and that to restore it would have to be done by
    >>> domain administator.
    >>>
    >>> I am sure she doesnt want to lose what she has on her
    >>> pc...(which prolly isnt a bad idea) and i need a to know
    >>> how to get the resotre back. She also has lost all
    >>> access to her help and support files. They just arent
    >>> there any longer. I think she may have had a virus an
    >>> when virus was deleted her files went to.
    >>>
    >>> Any help will be appreciated. ty
  5. Archived from groups: microsoft.public.windowsxp.basics (More info?)

    Hi Bigwhitesnow
    Did you manage to resolve this restore problem as I think my kids have the
    same worrm from MSN and I am not sure what to do

    "BigWhiteSnow" wrote:

    > Same thing happened to me. I believe it is caused by a worm picked up from
    > MSN messanger.
    > Wayne Hansen
    > waynetrudy@hotmail.com
    >
    > "Bert Kinney" wrote:
    >
    > > Hi Icey,
    > >
    > > Previously posted by Ramesh, Microsoft MVP:
    > >
    > > Open Registry Editor and navigate to:
    > >
    > > HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Windows
    > > NT\SystemRestore
    > >
    > > In the right-pane, delete the value "DisableConfig".
    > > Close Registry Editor
    > > Close and re-open the System Restore properties page.
    > >
    > > For more information on System Restore.
    > > All About System Restore in WinXP
    > > http://home.earthlink.net/~mvp_bert/
    > >
    > > --
    > > Regards,
    > > Bert Kinney [MS-MVP DTS]
    > > http://dts-l.org/
    > >
    > >
    > > Icey wrote:
    > > > This is a sorta odd thing..for me anyway.
    > > > My moms pc has lost her system restore. I went to system
    > > > properties to see what was up and there was a message
    > > > stating the system restore was turned off by group policy
    > > > and that to restore it would have to be done by domain
    > > > administator.
    > > >
    > > > I am sure she doesnt want to lose what she has on her
    > > > pc...(which prolly isnt a bad idea) and i need a to know
    > > > how to get the resotre back. She also has lost all access
    > > > to her help and support files. They just arent there any
    > > > longer. I think she may have had a virus an when virus
    > > > was deleted her files went to.
    > > >
    > > > Any help will be appreciated. ty
    > >
    > >
    > >
  6. Archived from groups: microsoft.public.windowsxp.basics (More info?)

    Hi Bert,

    I was the guy that used CAPS earlier today, I have been through all the anti
    virus programs I can fing. the two registries were set to value 0 but still
    no Restore Tab
    Do you have any other suggestions

    Kind Regards

    Stewart

    "Bert Kinney" wrote:

    > Hi Wayne,
    >
    > Yes, some viruses are created in a way that it will disables the very
    > tools used to remove them.
    >
    > Note: You should not be using your real email address as it can lead
    > to SPAM.
    >
    > --
    > Regards,
    > Bert Kinney [MS-MVP DTS]
    > http://dts-l.org/
    >
    > BigWhiteSnow wrote:
    > > Same thing happened to me. I believe it is caused by a
    > > worm picked up from MSN messanger.
    > > Wayne Hansen
    > > waynetrudy@hotmail.com
    > >
    > > "Bert Kinney" wrote:
    > >
    > >> Hi Icey,
    > >>
    > >> Previously posted by Ramesh, Microsoft MVP:
    > >>
    > >> Open Registry Editor and navigate to:
    > >>
    > >> HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Windows
    > >> NT\SystemRestore
    > >>
    > >> In the right-pane, delete the value "DisableConfig".
    > >> Close Registry Editor
    > >> Close and re-open the System Restore properties page.
    > >>
    > >> For more information on System Restore.
    > >> All About System Restore in WinXP
    > >> http://home.earthlink.net/~mvp_bert/
    > >>
    > >> --
    > >> Regards,
    > >> Bert Kinney [MS-MVP DTS]
    > >> http://dts-l.org/
    > >>
    > >>
    > >> Icey wrote:
    > >>> This is a sorta odd thing..for me anyway.
    > >>> My moms pc has lost her system restore. I went to system
    > >>> properties to see what was up and there was a message
    > >>> stating the system restore was turned off by group
    > >>> policy and that to restore it would have to be done by
    > >>> domain administator.
    > >>>
    > >>> I am sure she doesnt want to lose what she has on her
    > >>> pc...(which prolly isnt a bad idea) and i need a to know
    > >>> how to get the resotre back. She also has lost all
    > >>> access to her help and support files. They just arent
    > >>> there any longer. I think she may have had a virus an
    > >>> when virus was deleted her files went to.
    > >>>
    > >>> Any help will be appreciated. ty
    >
    >
    >
  7. Archived from groups: microsoft.public.windowsxp.basics (More info?)

    Yes, rather than change the value, delete these two value keys from
    the registry.

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows
    NT\SystemRestore

    In the right pane, right click on each of these Value Keys and select
    delete.
    "DisableSR"
    "DisableConfig"

    --
    Regards,
    Bert Kinney [MS-MVP DTS]
    http://dts-l.org/

    STEWART wrote:
    > Hi Bert,
    >
    > I was the guy that used CAPS earlier today, I have been
    > through all the anti virus programs I can fing. the two
    > registries were set to value 0 but still no Restore Tab
    > Do you have any other suggestions
    >
    > Kind Regards
    >
    > Stewart
    >
    > "Bert Kinney" wrote:
    >
    >> Hi Wayne,
    >>
    >> Yes, some viruses are created in a way that it will
    >> disables the very tools used to remove them.
    >>
    >> Note: You should not be using your real email address as
    >> it can lead to SPAM.
    >>
    >> --
    >> Regards,
    >> Bert Kinney [MS-MVP DTS]
    >> http://dts-l.org/
    >>
    >> BigWhiteSnow wrote:
    >>> Same thing happened to me. I believe it is caused by a
    >>> worm picked up from MSN messanger.
    >>> Wayne Hansen
    >>> waynetrudy@hotmail.com
    >>>
    >>> "Bert Kinney" wrote:
    >>>
    >>>> Hi Icey,
    >>>>
    >>>> Previously posted by Ramesh, Microsoft MVP:
    >>>>
    >>>> Open Registry Editor and navigate to:
    >>>>
    >>>> HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Windows
    >>>> NT\SystemRestore
    >>>>
    >>>> In the right-pane, delete the value "DisableConfig".
    >>>> Close Registry Editor
    >>>> Close and re-open the System Restore properties page.
    >>>>
    >>>> For more information on System Restore.
    >>>> All About System Restore in WinXP
    >>>> http://home.earthlink.net/~mvp_bert/
    >>>>
    >>>> --
    >>>> Regards,
    >>>> Bert Kinney [MS-MVP DTS]
    >>>> http://dts-l.org/
    >>>>
    >>>>
    >>>> Icey wrote:
    >>>>> This is a sorta odd thing..for me anyway.
    >>>>> My moms pc has lost her system restore. I went to
    >>>>> system properties to see what was up and there was a
    >>>>> message stating the system restore was turned off by
    >>>>> group policy and that to restore it would have to be
    >>>>> done by domain administator.
    >>>>>
    >>>>> I am sure she doesnt want to lose what she has on her
    >>>>> pc...(which prolly isnt a bad idea) and i need a to
    >>>>> know how to get the resotre back. She also has lost
    >>>>> all access to her help and support files. They just
    >>>>> arent there any longer. I think she may have had a
    >>>>> virus an when virus was deleted her files went to.
    >>>>>
    >>>>> Any help will be appreciated. ty
  8. Archived from groups: microsoft.public.windowsxp.basics (More info?)

    "Bert Kinney" wrote:
    > Yes, rather than change the value, delete these two value keys
    > from
    > the registry.
    >
    > HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindows
    > NTSystemRestore
    >
    > In the right pane, right click on each of these Value Keys and
    > select
    > delete.
    > "DisableSR"
    > "DisableConfig"
    >
    > --
    > Regards,
    > Bert Kinney [MS-MVP DTS]
    > http://dts-l.org/
    >
    > STEWART wrote:
    > > Hi Bert,
    > >
    > > I was the guy that used CAPS earlier today, I have been
    > > through all the anti virus programs I can fing. the two
    > > registries were set to value 0 but still no Restore Tab
    > > Do you have any other suggestions
    > >
    > > Kind Regards
    > >
    > > Stewart
    > >
    > > "Bert Kinney" wrote:
    > >
    >  >> Hi Wayne,
    >  >>
    >  >> Yes, some viruses are created in a way that it will
    >  >> disables the very tools used to remove them.
    >  >>
    >  >> Note: You should not be using your real email address
    > as
    >  >> it can lead to SPAM.
    >  >>
    >  >> --
    >  >> Regards,
    >  >> Bert Kinney [MS-MVP DTS]
    >  >> http://dts-l.org/
    >  >>
    >  >> BigWhiteSnow wrote:
    >   >>> Same thing happened to me. I believe it is
    > caused by a
    >   >>> worm picked up from MSN messanger.
    >   >>> Wayne Hansen
    >   >>> waynetrudy@hotmail.com
    >   >>>
    >   >>> "Bert Kinney" wrote:
    >   >>>
    >   >>>> Hi Icey,
    >   >>>>
    >   >>>> Previously posted by Ramesh, Microsoft MVP:
    >   >>>>
    >   >>>> Open Registry Editor and navigate to:
    >   >>>>
    >   >>>> HKEY LOCAL
    > MACHINESOFTWAREPoliciesMicrosoftWindows
    >   >>>> NTSystemRestore
    >   >>>>
    >   >>>> In the right-pane, delete the value
    > "DisableConfig".
    >   >>>> Close Registry Editor
    >   >>>> Close and re-open the System Restore
    > properties page.
    >   >>>>
    >   >>>> For more information on System Restore.
    >   >>>> All About System Restore in WinXP
    >   >>>> http://home.earthlink.net/~mvp_bert/
    >   >>>>
    >   >>>> --
    >   >>>> Regards,
    >   >>>> Bert Kinney [MS-MVP DTS]
    >   >>>> http://dts-l.org/
    >   >>>>
    >   >>>>
    >   >>>> Icey wrote:
    >   >>>>> This is a sorta odd thing..for me anyway.
    >   >>>>> My moms pc has lost her system restore. I
    > went to
    >   >>>>> system properties to see what was up and
    > there was a
    >   >>>>> message stating the system restore was
    > turned off by
    >   >>>>> group policy and that to restore it would
    > have to be
    >   >>>>> done by domain administator.
    >   >>>>>
    >   >>>>> I am sure she doesnt want to lose what she
    > has on her
    >   >>>>> pc...(which prolly isnt a bad idea) and i
    > need a to
    >   >>>>> know how to get the resotre back. She also
    > has lost
    >   >>>>> all access to her help and support files.
    > They just
    >   >>>>> arent there any longer. I think she may have
    > had a
    >   >>>>> virus an when virus was deleted her files
    > went to.
    >   >>>>>
    >   >>>>> Any help will be appreciated. ty

    Click Start, Run, type REGEDIT, click OK to get into the Registry
    Editor.

    In the left panel double-click the following:
    HKEY_LOCAL_MACHINE>Software>Policies>Microsoft>Windows
    NT>SystemRestore

    To get your System Restore Tab back you need to DELETE the two entries
    in the Registry Editor which appear on the RHS of the panel:

    DisableSR
    DisableConfig

    www.trendmicro says that if you have Fatso.A you should change the
    values from "0" to "1" (see below), but this doesn’t work for
    Fatso.B worm and if you’ve tried modifying the entries and your Tab
    hasn’t returned then you need to delete them completely, since they
    were added by the worm in the first place and shouldn’t be there. To
    delete them select the entry, right-click on it and click Delete.

    For full instructions (copied from trendmicro) on how to manually
    remove the Fatso.A worm see

    http://forums.techguy.org/showthread.php?p=2443999

    or go to www.techguy.org/forums and type "System restore" into the
    Search and look for posts by Onowotnow. There are two posts with
    manual removal instructions, the later one specifically for XP.

    If you have Fatso.B worm you need to be looking for the following in
    your Registry to delete:

    Random Value: AvSer, DsmSer, rollbk
    Random Data: dsm.exe, msmpatch.exe. svosm.exe, sysup.exe

    Look also in: HKEY_CURRENT_USER>Microsoft>Windows>CurrentVersion>Run
    as this location is listed in trendmicro’s solution for Fatso.B but
    not in Fatso.A.

    Hope this helps!

    --
    Posted using the http://www.windowsforumz.com interface, at author's request
    Articles individually checked for conformance to usenet standards
    Topic URL: http://www.windowsforumz.com/Basics-System-Restore-ftopict274271.html
    Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1077803
  9. Archived from groups: microsoft.public.windowsxp.basics (More info?)

    "Onowotnow" wrote:
    > Click Start, Run, type REGEDIT, click OK to get into the
    > Registry Editor.
    >
    > In the left panel double-click the following:
    > HKEY_LOCAL_MACHINE>Software>Policies>Microsoft>Windows
    > NT>SystemRestore
    >
    > To get your System Restore Tab back you need to DELETE the two
    > entries in the Registry Editor which appear on the RHS of the
    > panel:
    >
    > DisableSR
    > DisableConfig
    >
    > www.trendmicro says that if you have Fatso.A you should change
    > the values from "0" to "1" (see below), but this doesn't work
    > for Fatso.B worm and if you've tried modifying the entries and
    > your Tab hasn't returned then you need to delete them
    > completely, since they were added by the worm in the first
    > place and shouldn't be there. To delete them select the
    > entry, right-click on it and click Delete.
    >
    > For full instructions (copied from trendmicro) on how to
    > manually remove the Fatso.A worm see
    >
    > http://forums.techguy.org/showthread.php?p=2443999
    >
    > or go to www.techguy.org/forums and type "System restore" into
    > the Search and look for posts by Onowotnow. There are two
    > posts with manual removal instructions, the later one
    > specifically for XP.
    >
    > If you have Fatso.B worm you need to be looking for the
    > following in your Registry to delete:
    >
    > Random Value: AvSer, DsmSer, rollbk
    > Random Data: dsm.exe, msmpatch.exe. svosm.exe, sysup.exe
    >
    > Look also in:
    > HKEY_CURRENT_USER>Microsoft>Windows>CurrentVersion>Run
    > as this location is listed in trendmicro's solution for
    > Fatso.B but not in Fatso.A.
    >
    > Hope this helps!

    Bert, a Frenchman wants to thank you...

    http://forums.techguy.org/showthread.php?p=2445774#post2445774
  10. Archived from groups: microsoft.public.windowsxp.basics (More info?)

    You're very welcome.

    --
    Regards,
    Bert Kinney MS-MVP Shell/User
    http://dts-l.org/


    Onowotnow wrote:
    > "Onowotnow" wrote:
    >> Click Start, Run, type REGEDIT, click OK to get into the
    >> Registry Editor.
    >>
    >> In the left panel double-click the following:
    >> HKEY_LOCAL_MACHINE>Software>Policies>Microsoft>Windows
    >>> SystemRestore
    >>
    >> To get your System Restore Tab back you need to DELETE
    >> the two entries in the Registry Editor which appear on
    >> the RHS of the panel:
    >>
    >> DisableSR
    >> DisableConfig

    > Bert, a Frenchman wants to thank you...
    >
    > http://forums.techguy.org/showthread.php?p=2445774#post2445774
  11. Archived from groups: microsoft.public.windowsxp.basics (More info?)

    "Onowotnow" wrote:
    > Bert, a Frenchman wants to thank you...
    >
    > http://forums.techguy.org/showthread.php?p=2445774#post2445774

    That extra registry entry I mentioned in trendmicro’s solution for
    Fatso.B is a typing error. I’m pretty sure it should read:
    HKCU>Software>Microsoft>Windows>CurrentVersion>Run
    Symantec’s information for Serflog.B has the correct entries.

    As someone else has pointed out elsewhere if you’re trying to fix the
    Serflog/Fatso/Crog worms the Hijackthis program will tell you which
    entries in the Registry are infected and delete them for you when you
    check those boxes and click on "Fix....". You just need to know the
    names you’re looking for. AvSer, DsmSer, rollbk, dsm.exe,
    msmpatch.exe, svosm.exe, sysup.exe - you’ve got Fatso.B/serflog.B. If
    you see Itwob,serpe,Avnort, msmbw.exe, serbw.exe, formatsys.exe -
    you’ve Fatso.A/Serflog.A.
  12. Archived from groups: microsoft.public.windowsxp.basics (More info?)

    Yes, I went through all of the worm cleaning suggestions and the Registry
    Edit suggestions but still no System Restore capability. Finally what worked
    was basicly reinstalling the System restore from my original XP home version
    CD:


    Go to the hidden folder Windows\Inf (set to see hidden items in My
    Computer Tools - Folder Options - View)

    Look for sr.inf, right click on it, choose "Install" (it will probably ask
    for the CD) I said "yes" when asked to overwrite the "newer" files with the
    "older" files found on the CD. I suspect the worm corrupted the System
    Restore files.

    Regards Bigwhitesnow


    "STEWART" wrote:

    > Hi Bigwhitesnow
    > Did you manage to resolve this restore problem as I think my kids have the
    > same worrm from MSN and I am not sure what to do
    >
    > "BigWhiteSnow" wrote:
    >
    > > Same thing happened to me. I believe it is caused by a worm picked up from
    > > MSN messanger.
    > > Wayne Hansen
    > >
    > > "Bert Kinney" wrote:
    > >
    > > > Hi Icey,
    > > >
    > > > Previously posted by Ramesh, Microsoft MVP:
    > > >
    > > > Open Registry Editor and navigate to:
    > > >
    > > > HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Windows
    > > > NT\SystemRestore
    > > >
    > > > In the right-pane, delete the value "DisableConfig".
    > > > Close Registry Editor
    > > > Close and re-open the System Restore properties page.
    > > >
    > > > For more information on System Restore.
    > > > All About System Restore in WinXP
    > > > http://home.earthlink.net/~mvp_bert/
    > > >
    > > > --
    > > > Regards,
    > > > Bert Kinney [MS-MVP DTS]
    > > > http://dts-l.org/
    > > >
    > > >
    > > > Icey wrote:
    > > > > This is a sorta odd thing..for me anyway.
    > > > > My moms pc has lost her system restore. I went to system
    > > > > properties to see what was up and there was a message
    > > > > stating the system restore was turned off by group policy
    > > > > and that to restore it would have to be done by domain
    > > > > administator.
    > > > >
    > > > > I am sure she doesnt want to lose what she has on her
    > > > > pc...(which prolly isnt a bad idea) and i need a to know
    > > > > how to get the resotre back. She also has lost all access
    > > > > to her help and support files. They just arent there any
    > > > > longer. I think she may have had a virus an when virus
    > > > > was deleted her files went to.
    > > > >
    > > > > Any help will be appreciated. ty
    > > >
    > > >
    > > >
  13. Archived from groups: microsoft.public.windowsxp.basics (More info?)

    Hi Bert

    Just a mail to say a big thank you. The Kenny Korner(think that was the site)
    line 278 worked a treat

    Once again thanks

    Stewart


    "Bert Kinney" wrote:

    > Yes, rather than change the value, delete these two value keys from
    > the registry.
    >
    > HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows
    > NT\SystemRestore
    >
    > In the right pane, right click on each of these Value Keys and select
    > delete.
    > "DisableSR"
    > "DisableConfig"
    >
    > --
    > Regards,
    > Bert Kinney [MS-MVP DTS]
    > http://dts-l.org/
    >
    > STEWART wrote:
    > > Hi Bert,
    > >
    > > I was the guy that used CAPS earlier today, I have been
    > > through all the anti virus programs I can fing. the two
    > > registries were set to value 0 but still no Restore Tab
    > > Do you have any other suggestions
    > >
    > > Kind Regards
    > >
    > > Stewart
    > >
    > > "Bert Kinney" wrote:
    > >
    > >> Hi Wayne,
    > >>
    > >> Yes, some viruses are created in a way that it will
    > >> disables the very tools used to remove them.
    > >>
    > >> Note: You should not be using your real email address as
    > >> it can lead to SPAM.
    > >>
    > >> --
    > >> Regards,
    > >> Bert Kinney [MS-MVP DTS]
    > >> http://dts-l.org/
    > >>
    > >> BigWhiteSnow wrote:
    > >>> Same thing happened to me. I believe it is caused by a
    > >>> worm picked up from MSN messanger.
    > >>> Wayne Hansen
    > >>> waynetrudy@hotmail.com
    > >>>
    > >>> "Bert Kinney" wrote:
    > >>>
    > >>>> Hi Icey,
    > >>>>
    > >>>> Previously posted by Ramesh, Microsoft MVP:
    > >>>>
    > >>>> Open Registry Editor and navigate to:
    > >>>>
    > >>>> HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Windows
    > >>>> NT\SystemRestore
    > >>>>
    > >>>> In the right-pane, delete the value "DisableConfig".
    > >>>> Close Registry Editor
    > >>>> Close and re-open the System Restore properties page.
    > >>>>
    > >>>> For more information on System Restore.
    > >>>> All About System Restore in WinXP
    > >>>> http://home.earthlink.net/~mvp_bert/
    > >>>>
    > >>>> --
    > >>>> Regards,
    > >>>> Bert Kinney [MS-MVP DTS]
    > >>>> http://dts-l.org/
    > >>>>
    > >>>>
    > >>>> Icey wrote:
    > >>>>> This is a sorta odd thing..for me anyway.
    > >>>>> My moms pc has lost her system restore. I went to
    > >>>>> system properties to see what was up and there was a
    > >>>>> message stating the system restore was turned off by
    > >>>>> group policy and that to restore it would have to be
    > >>>>> done by domain administator.
    > >>>>>
    > >>>>> I am sure she doesnt want to lose what she has on her
    > >>>>> pc...(which prolly isnt a bad idea) and i need a to
    > >>>>> know how to get the resotre back. She also has lost
    > >>>>> all access to her help and support files. They just
    > >>>>> arent there any longer. I think she may have had a
    > >>>>> virus an when virus was deleted her files went to.
    > >>>>>
    > >>>>> Any help will be appreciated. ty
    >
    >
    >
  14. Archived from groups: microsoft.public.windowsxp.basics (More info?)

    "BigWhiteSnow" wrote:
    > Yes, I went through all of the worm cleaning suggestions and
    > the Registry
    > Edit suggestions but still no System Restore capability.
    > Finally what worked
    > was basicly reinstalling the System restore from my original
    > XP home version
    > CD:
    >
    >
    > Go to the hidden folder WindowsInf (set to see hidden items
    > in My
    > Computer Tools - Folder Options - View)
    >
    > Look for sr.inf, right click on it, choose "Install" (it will
    > probably ask
    > for the CD) I said "yes" when asked to overwrite the "newer"
    > files with the
    > "older" files found on the CD. I suspect the worm corrupted
    > the System
    > Restore files.
    >
    > Regards Bigwhitesnow
    >
    >
    > "STEWART" wrote:
    >
    > > Hi Bigwhitesnow
    > > Did you manage to resolve this restore problem as I think my
    > kids have the
    > > same worrm from MSN and I am not sure what to do
    > >
    > > "BigWhiteSnow" wrote:
    > >
    >  > > Same thing happened to me. I believe it is caused
    > by a worm picked up from
    >  > > MSN messanger.
    >  > > Wayne Hansen
    >  > >
    >  > > "Bert Kinney" wrote:
    >  > >
    >   > > > Hi Icey,
    >   > > >
    >   > > > Previously posted by Ramesh, Microsoft MVP:
    >   > > >
    >   > > > Open Registry Editor and navigate to:
    >   > > >
    >   > > > HKEY LOCAL
    > MACHINESOFTWAREPoliciesMicrosoftWindows
    >   > > > NTSystemRestore
    >   > > >
    >   > > > In the right-pane, delete the value
    > "DisableConfig".
    >   > > > Close Registry Editor
    >   > > > Close and re-open the System Restore
    > properties page.
    >   > > >
    >   > > > For more information on System Restore.
    >   > > > All About System Restore in WinXP
    >   > > > http://home.earthlink.net/~mvp_bert/
    >   > > >
    >   > > > --
    >   > > > Regards,
    >   > > > Bert Kinney [MS-MVP DTS]
    >   > > > http://dts-l.org/
    >   > > >
    >   > > >
    >   > > > Icey wrote:
    >   > > > > This is a sorta odd thing..for me anyway.
    >   > > > > My moms pc has lost her system restore. I
    > went to system
    >   > > > > properties to see what was up and there
    > was a message
    >   > > > > stating the system restore was turned off
    > by group policy
    >   > > > > and that to restore it would have to be
    > done by domain
    >   > > > > administator.
    >   > > > >
    >   > > > > I am sure she doesnt want to lose what she
    > has on her
    >   > > > > pc...(which prolly isnt a bad idea) and i
    > need a to know
    >   > > > > how to get the resotre back. She also has
    > lost all access
    >   > > > > to her help and support files. They just
    > arent there any
    >   > > > > longer. I think she may have had a virus
    > an when virus
    >   > > > > was deleted her files went to.
    >   > > > >
    >   > > > > Any help will be appreciated. ty
    >   > > >
    >   > > >
    >   > > >

    Did you delete both DisableSR and DisableConfig entries from the
    Register, BWS? I deleted BOTH entries and got my Tab back.

    --
    Posted using the http://www.windowsforumz.com interface, at author's request
    Articles individually checked for conformance to usenet standards
    Topic URL: http://www.windowsforumz.com/Basics-System-Restore-ftopict274271.html
    Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1081615
  15. Archived from groups: microsoft.public.windowsxp.basics (More info?)

    Glad to hear that, and thanks for the feedback.

    --
    Regards,
    Bert Kinney MS-MVP Shell/User
    http://dts-l.org/

    STEWART wrote:
    > Hi Bert
    >
    > Just a mail to say a big thank you. The Kenny
    > Korner(think that was the site) line 278 worked a treat
    >
    > Once again thanks
    >
    > Stewart
    >
    >
    > "Bert Kinney" wrote:
    >
    >> Yes, rather than change the value, delete these two
    >> value keys from the registry.
    >>
    >> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows
    >> NT\SystemRestore
    >>
    >> In the right pane, right click on each of these Value
    >> Keys and select delete.
    >> "DisableSR"
    >> "DisableConfig"
    >>
    >> --
    >> Regards,
    >> Bert Kinney [MS-MVP DTS]
    >> http://dts-l.org/
    >>
    >> STEWART wrote:
    >>> Hi Bert,
    >>>
    >>> I was the guy that used CAPS earlier today, I have been
    >>> through all the anti virus programs I can fing. the two
    >>> registries were set to value 0 but still no Restore Tab
    >>> Do you have any other suggestions
    >>>
    >>> Kind Regards
    >>>
    >>> Stewart
    >>>
    >>> "Bert Kinney" wrote:
    >>>
    >>>> Hi Wayne,
    >>>>
    >>>> Yes, some viruses are created in a way that it will
    >>>> disables the very tools used to remove them.
    >>>>
    >>>> Note: You should not be using your real email address
    >>>> as it can lead to SPAM.
    >>>>
    >>>> --
    >>>> Regards,
    >>>> Bert Kinney [MS-MVP DTS]
    >>>> http://dts-l.org/
    >>>>
    >>>> BigWhiteSnow wrote:
    >>>>> Same thing happened to me. I believe it is caused by
    >>>>> a worm picked up from MSN messanger.
    >>>>> Wayne Hansen
    >>>>> waynetrudy@hotmail.com
    >>>>>
    >>>>> "Bert Kinney" wrote:
    >>>>>
    >>>>>> Hi Icey,
    >>>>>>
    >>>>>> Previously posted by Ramesh, Microsoft MVP:
    >>>>>>
    >>>>>> Open Registry Editor and navigate to:
    >>>>>>
    >>>>>> HKEY LOCAL
    >>>>>> MACHINE\SOFTWARE\Policies\Microsoft\Windows
    >>>>>> NT\SystemRestore
    >>>>>>
    >>>>>> In the right-pane, delete the value "DisableConfig".
    >>>>>> Close Registry Editor
    >>>>>> Close and re-open the System Restore properties page.
    >>>>>>
    >>>>>> For more information on System Restore.
    >>>>>> All About System Restore in WinXP
    >>>>>> http://home.earthlink.net/~mvp_bert/
    >>>>>>
    >>>>>> --
    >>>>>> Regards,
    >>>>>> Bert Kinney [MS-MVP DTS]
    >>>>>> http://dts-l.org/
    >>>>>>
    >>>>>>
    >>>>>> Icey wrote:
    >>>>>>> This is a sorta odd thing..for me anyway.
    >>>>>>> My moms pc has lost her system restore. I went to
    >>>>>>> system properties to see what was up and there was a
    >>>>>>> message stating the system restore was turned off by
    >>>>>>> group policy and that to restore it would have to be
    >>>>>>> done by domain administator.
    >>>>>>>
    >>>>>>> I am sure she doesnt want to lose what she has on
    >>>>>>> her pc...(which prolly isnt a bad idea) and i need
    >>>>>>> a to know how to get the resotre back. She also has
    >>>>>>> lost all access to her help and support files. They
    >>>>>>> just arent there any longer. I think she may have
    >>>>>>> had a virus an when virus was deleted her files
    >>>>>>> went to.
    >>>>>>>
    >>>>>>> Any help will be appreciated. ty
  16. Archived from groups: microsoft.public.windowsxp.basics (More info?)

    "Bert Kinney" wrote:
    > Glad to hear that, and thanks for the feedback.
    >
    > --
    > Regards,
    > Bert Kinney MS-MVP Shell/User
    > http://dts-l.org/
    >
    > STEWART wrote:
    > > Hi Bert
    > >
    > > Just a mail to say a big thank you. The Kenny
    > > Korner(think that was the site) line 278 worked a treat
    > >
    > > Once again thanks
    > >
    > > Stewart
    > >
    > >
    > > "Bert Kinney" wrote:
    > >
    >  >> Yes, rather than change the value, delete these two
    >  >> value keys from the registry.
    >  >>
    >  >>
    > HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindows
    >  >> NTSystemRestore
    >  >>
    >  >> In the right pane, right click on each of these Value
    >  >> Keys and select delete.
    >  >> "DisableSR"
    >  >> "DisableConfig"
    >  >>
    >  >> --
    >  >> Regards,
    >  >> Bert Kinney [MS-MVP DTS]
    >  >> http://dts-l.org/
    >  >>
    >  >> STEWART wrote:
    >   >>> Hi Bert,
    >   >>>
    >   >>> I was the guy that used CAPS earlier today, I
    > have been
    >   >>> through all the anti virus programs I can
    > fing. the two
    >   >>> registries were set to value 0 but still no
    > Restore Tab
    >   >>> Do you have any other suggestions
    >   >>>
    >   >>> Kind Regards
    >   >>>
    >   >>> Stewart
    >   >>>
    >   >>> "Bert Kinney" wrote:
    >   >>>
    >   >>>> Hi Wayne,
    >   >>>>
    >   >>>> Yes, some viruses are created in a way that
    > it will
    >   >>>> disables the very tools used to remove them.
    >   >>>>
    >   >>>> Note: You should not be using your real email
    > address
    >   >>>> as it can lead to SPAM.
    >   >>>>
    >   >>>> --
    >   >>>> Regards,
    >   >>>> Bert Kinney [MS-MVP DTS]
    >   >>>> http://dts-l.org/
    >   >>>>
    >   >>>> BigWhiteSnow wrote:
    >   >>>>> Same thing happened to me. I believe it is
    > caused by
    >   >>>>> a worm picked up from MSN messanger.
    >   >>>>> Wayne Hansen
    >   >>>>> waynetrudy@hotmail.com
    >   >>>>>
    >   >>>>> "Bert Kinney" wrote:
    >   >>>>>
    >   >>>>>> Hi Icey,
    >   >>>>>>
    >   >>>>>> Previously posted by Ramesh, Microsoft MVP:
    >   >>>>>>
    >   >>>>>> Open Registry Editor and navigate to:
    >   >>>>>>
    >   >>>>>> HKEY LOCAL
    >   >>>>>> MACHINESOFTWAREPoliciesMicrosoftWindows
    >   >>>>>> NTSystemRestore
    >   >>>>>>
    >   >>>>>> In the right-pane, delete the value
    > "DisableConfig".
    >   >>>>>> Close Registry Editor
    >   >>>>>> Close and re-open the System Restore
    > properties page.
    >   >>>>>>
    >   >>>>>> For more information on System Restore.
    >   >>>>>> All About System Restore in WinXP
    >   >>>>>> http://home.earthlink.net/~mvp_bert/
    >   >>>>>>
    >   >>>>>> --
    >   >>>>>> Regards,
    >   >>>>>> Bert Kinney [MS-MVP DTS]
    >   >>>>>> http://dts-l.org/
    >   >>>>>>
    >   >>>>>>
    >   >>>>>> Icey wrote:
    >   >>>>>>> This is a sorta odd thing..for me anyway.
    >   >>>>>>> My moms pc has lost her system restore. I
    > went to
    >   >>>>>>> system properties to see what was up and
    > there was a
    >   >>>>>>> message stating the system restore was
    > turned off by
    >   >>>>>>> group policy and that to restore it would
    > have to be
    >   >>>>>>> done by domain administator.
    >   >>>>>>>
    >   >>>>>>> I am sure she doesnt want to lose what she
    > has on
    >   >>>>>>> her pc...(which prolly isnt a bad idea)
    > and i need
    >   >>>>>>> a to know how to get the resotre back. She
    > also has
    >   >>>>>>> lost all access to her help and support
    > files. They
    >   >>>>>>> just arent there any longer. I think she
    > may have
    >   >>>>>>> had a virus an when virus was deleted her
    > files
    >   >>>>>>> went to.
    >   >>>>>>>
    >   >>>>>>> Any help will be appreciated. ty

    Hey, big companies like trendmicro do listen to us minions after all.
    Having emailed them a few days ago, I’ve just checked its Solution
    page for the worm I had and I’m pleased to say it is now telling
    people to delete the two entries in the registry which disable the
    system restore. See, even a drop in the ocean can make a
    difference...

    --
    Posted using the http://www.windowsforumz.com interface, at author's request
    Articles individually checked for conformance to usenet standards
    Topic URL: http://www.windowsforumz.com/Basics-System-Restore-ftopict274271.html
    Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1086009
Ask a new question

Read More

Microsoft System Restore Windows XP