Archived from groups: microsoft.public.windowsxp.basics (
More info?)
"Bert Kinney" wrote:
> Yes, rather than change the value, delete these two value keys
> from
> the registry.
>
> HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindows
> NTSystemRestore
>
> In the right pane, right click on each of these Value Keys and
> select
> delete.
> "DisableSR"
> "DisableConfig"
>
> --
> Regards,
> Bert Kinney [MS-MVP DTS]
> http://dts-l.org/
>
> STEWART wrote:
> > Hi Bert,
> >
> > I was the guy that used CAPS earlier today, I have been
> > through all the anti virus programs I can fing. the two
> > registries were set to value 0 but still no Restore Tab
> > Do you have any other suggestions
> >
> > Kind Regards
> >
> > Stewart
> >
> > "Bert Kinney" wrote:
> >
> >> Hi Wayne,
> >>
> >> Yes, some viruses are created in a way that it will
> >> disables the very tools used to remove them.
> >>
> >> Note: You should not be using your real email address
> as
> >> it can lead to SPAM.
> >>
> >> --
> >> Regards,
> >> Bert Kinney [MS-MVP DTS]
> >> http://dts-l.org/
> >>
> >> BigWhiteSnow wrote:
> >>> Same thing happened to me. I believe it is
> caused by a
> >>> worm picked up from MSN messanger.
> >>> Wayne Hansen
> >>> waynetrudy@hotmail.com
> >>>
> >>> "Bert Kinney" wrote:
> >>>
> >>>> Hi Icey,
> >>>>
> >>>> Previously posted by Ramesh, Microsoft MVP:
> >>>>
> >>>> Open Registry Editor and navigate to:
> >>>>
> >>>> HKEY LOCAL
> MACHINESOFTWAREPoliciesMicrosoftWindows
> >>>> NTSystemRestore
> >>>>
> >>>> In the right-pane, delete the value
> "DisableConfig".
> >>>> Close Registry Editor
> >>>> Close and re-open the System Restore
> properties page.
> >>>>
> >>>> For more information on System Restore.
> >>>> All About System Restore in WinXP
> >>>> http://home.earthlink.net/~mvp_bert/
> >>>>
> >>>> --
> >>>> Regards,
> >>>> Bert Kinney [MS-MVP DTS]
> >>>> http://dts-l.org/
> >>>>
> >>>>
> >>>> Icey wrote:
> >>>>> This is a sorta odd thing..for me anyway.
> >>>>> My moms pc has lost her system restore. I
> went to
> >>>>> system properties to see what was up and
> there was a
> >>>>> message stating the system restore was
> turned off by
> >>>>> group policy and that to restore it would
> have to be
> >>>>> done by domain administator.
> >>>>>
> >>>>> I am sure she doesnt want to lose what she
> has on her
> >>>>> pc...(which prolly isnt a bad idea) and i
> need a to
> >>>>> know how to get the resotre back. She also
> has lost
> >>>>> all access to her help and support files.
> They just
> >>>>> arent there any longer. I think she may have
> had a
> >>>>> virus an when virus was deleted her files
> went to.
> >>>>>
> >>>>> Any help will be appreciated. ty
Click Start, Run, type REGEDIT, click OK to get into the Registry
Editor.
In the left panel double-click the following:
HKEY_LOCAL_MACHINE>Software>Policies>Microsoft>Windows
NT>SystemRestore
To get your System Restore Tab back you need to DELETE the two entries
in the Registry Editor which appear on the RHS of the panel:
DisableSR
DisableConfig
www.trendmicro says that if you have Fatso.A you should change the
values from "0" to "1" (see below), but this doesn’t work for
Fatso.B worm and if you’ve tried modifying the entries and your Tab
hasn’t returned then you need to delete them completely, since they
were added by the worm in the first place and shouldn’t be there. To
delete them select the entry, right-click on it and click Delete.
For full instructions (copied from trendmicro) on how to manually
remove the Fatso.A worm see
http://forums.techguy.org/showthread.php?p=2443999
or go to www.techguy.org/forums and type "System restore" into the
Search and look for posts by Onowotnow. There are two posts with
manual removal instructions, the later one specifically for XP.
If you have Fatso.B worm you need to be looking for the following in
your Registry to delete:
Random Value: AvSer, DsmSer, rollbk
Random Data: dsm.exe, msmpatch.exe. svosm.exe, sysup.exe
Look also in: HKEY_CURRENT_USER>Microsoft>Windows>CurrentVersion>Run
as this location is listed in trendmicro’s solution for Fatso.B but
not in Fatso.A.
Hope this helps!
--
Posted using the
http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL:
http://www.windowsforumz.com/Basics-System-Restore-ftopict274271.html
Visit Topic URL to contact author (reg. req'd). Report abuse:
http://www.windowsforumz.com/eform.php?p=1077803
Facebook
Twitter
Instagram