System Restore

Yes, I went through all of the worm cleaning suggestions and the Registry
Edit suggestions but still no System Restore capability. Finally what worked
was basicly reinstalling the System restore from my original XP home version
CD:


Go to the hidden folder Windows\Inf (set to see hidden items in My
Computer Tools - Folder Options - View)

Look for sr.inf, right click on it, choose "Install" (it will probably ask
for the CD) I said "yes" when asked to overwrite the "newer" files with the
"older" files found on the CD. I suspect the worm corrupted the System
Restore files.

Regards Bigwhitesnow


"STEWART" wrote:

 > Hi Bigwhitesnow
 > Did you manage to resolve this restore problem as I think my kids have the
 > same worrm from MSN and I am not sure what to do
 >
 > "BigWhiteSnow" wrote:
 >
  > > Same thing happened to me. I believe it is caused by a worm picked up from
  > > MSN messanger.
  > > Wayne Hansen
  > >
  > > "Bert Kinney" wrote:
  > >
   > > > Hi Icey,
   > > >
   > > > Previously posted by Ramesh, Microsoft MVP:
   > > >
   > > > Open Registry Editor and navigate to:
   > > >
   > > > HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Windows
   > > > NT\SystemRestore
   > > >
   > > > In the right-pane, delete the value "DisableConfig".
   > > > Close Registry Editor
   > > > Close and re-open the System Restore properties page.
   > > >
   > > > For more information on System Restore.
   > > > All About System Restore in WinXP
<font color=brown>   > > > <a style='text-decoration: underline;' href="http://home.earthlink.net/~mvp_bert/</font" target="_blank">http://home.earthlink.net/~mvp_bert/</font</a>>
   > > >
   > > > --
   > > > Regards,
   > > > Bert Kinney [MS-MVP DTS]
<font color=brown>   > > > <a style='text-decoration: underline;' href="http://dts-l.org/</font" target="_blank">http://dts-l.org/</font</a>>
   > > >
   > > >
   > > > Icey wrote:
   > > > > This is a sorta odd thing..for me anyway.
   > > > > My moms pc has lost her system restore. I went to system
   > > > > properties to see what was up and there was a message
   > > > > stating the system restore was turned off by group policy
   > > > > and that to restore it would have to be done by domain
   > > > > administator.
   > > > >
   > > > > I am sure she doesnt want to lose what she has on her
   > > > > pc...(which prolly isnt a bad idea) and i need a to know
   > > > > how to get the resotre back. She also has lost all access
   > > > > to her help and support files. They just arent there any
   > > > > longer. I think she may have had a virus an when virus
   > > > > was deleted her files went to.
   > > > >
   > > > > Any help will be appreciated. ty
   > > >
   > > >
   > > ><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: System Restore 

Hi Bert

Just a mail to say a big thank you. The Kenny Korner(think that was the site)
line 278 worked a treat

Once again thanks

Stewart


"Bert Kinney" wrote:

 > Yes, rather than change the value, delete these two value keys from
 > the registry.
 >
 > HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows
 > NT\SystemRestore
 >
 > In the right pane, right click on each of these Value Keys and select
 > delete.
 > "DisableSR"
 > "DisableConfig"
 >
 > --
 > Regards,
 > Bert Kinney [MS-MVP DTS]
<font color=purple> > <a style='text-decoration: underline;' href="http://dts-l.org/</font" target="_blank">http://dts-l.org/</font</a>>
 >
 > STEWART wrote:
  > > Hi Bert,
  > >
  > > I was the guy that used CAPS earlier today, I have been
  > > through all the anti virus programs I can fing. the two
  > > registries were set to value 0 but still no Restore Tab
  > > Do you have any other suggestions
  > >
  > > Kind Regards
  > >
  > > Stewart
  > >
  > > "Bert Kinney" wrote:
  > >
   > >> Hi Wayne,
   > >>
   > >> Yes, some viruses are created in a way that it will
   > >> disables the very tools used to remove them.
   > >>
   > >> Note: You should not be using your real email address as
   > >> it can lead to SPAM.
   > >>
   > >> --
   > >> Regards,
   > >> Bert Kinney [MS-MVP DTS]
<font color=brown>   > >> <a style='text-decoration: underline;' href="http://dts-l.org/</font" target="_blank">http://dts-l.org/</font</a>>
   > >>
   > >> BigWhiteSnow wrote:
   > >>> Same thing happened to me. I believe it is caused by a
   > >>> worm picked up from MSN messanger.
   > >>> Wayne Hansen
   > >>> waynetrudy.DeleteThis@hotmail.com
   > >>>
   > >>> "Bert Kinney" wrote:
   > >>>
   > >>>> Hi Icey,
   > >>>>
   > >>>> Previously posted by Ramesh, Microsoft MVP:
   > >>>>
   > >>>> Open Registry Editor and navigate to:
   > >>>>
   > >>>> HKEY LOCAL MACHINE\SOFTWARE\Policies\Microsoft\Windows
   > >>>> NT\SystemRestore
   > >>>>
   > >>>> In the right-pane, delete the value "DisableConfig".
   > >>>> Close Registry Editor
   > >>>> Close and re-open the System Restore properties page.
   > >>>>
   > >>>> For more information on System Restore.
   > >>>> All About System Restore in WinXP
<font color=brown>   > >>>> <a style='text-decoration: underline;' href="http://home.earthlink.net/~mvp_bert/</font" target="_blank">http://home.earthlink.net/~mvp_bert/</font</a>>
   > >>>>
   > >>>> --
   > >>>> Regards,
   > >>>> Bert Kinney [MS-MVP DTS]
<font color=brown>   > >>>> <a style='text-decoration: underline;' href="http://dts-l.org/</font" target="_blank">http://dts-l.org/</font</a>>
   > >>>>
   > >>>>
   > >>>> Icey wrote:
   > >>>>> This is a sorta odd thing..for me anyway.
   > >>>>> My moms pc has lost her system restore. I went to
   > >>>>> system properties to see what was up and there was a
   > >>>>> message stating the system restore was turned off by
   > >>>>> group policy and that to restore it would have to be
   > >>>>> done by domain administator.
   > >>>>>
   > >>>>> I am sure she doesnt want to lose what she has on her
   > >>>>> pc...(which prolly isnt a bad idea) and i need a to
   > >>>>> know how to get the resotre back. She also has lost
   > >>>>> all access to her help and support files. They just
   > >>>>> arent there any longer. I think she may have had a
   > >>>>> virus an when virus was deleted her files went to.
   > >>>>>
   > >>>>> Any help will be appreciated. ty
 >
 >
 ><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: System Restore 

Did you delete both DisableSR and DisableConfig entries from the Register, BWS? I deleted BOTH entries and got my Tab back.
 >> Stay informed about: System Restore 

Glad to hear that, and thanks for the feedback.

--
Regards,
Bert Kinney MS-MVP Shell/User
<a style='text-decoration: underline;' href="http://dts-l.org/" target="_blank">http://dts-l.org/</a>

STEWART wrote:
 > Hi Bert
 >
 > Just a mail to say a big thank you. The Kenny
 > Korner(think that was the site) line 278 worked a treat
 >
 > Once again thanks
 >
 > Stewart
 >
 >
 > "Bert Kinney" wrote:
 >
  >> Yes, rather than change the value, delete these two
  >> value keys from the registry.
  >>
  >> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows
  >> NT\SystemRestore
  >>
  >> In the right pane, right click on each of these Value
  >> Keys and select delete.
  >> "DisableSR"
  >> "DisableConfig"
  >>
  >> --
  >> Regards,
  >> Bert Kinney [MS-MVP DTS]
<font color=green>  >> <a style='text-decoration: underline;' href="http://dts-l.org/</font" target="_blank">http://dts-l.org/</font</a>>
  >>
  >> STEWART wrote:
   >>> Hi Bert,
   >>>
   >>> I was the guy that used CAPS earlier today, I have been
   >>> through all the anti virus programs I can fing. the two
   >>> registries were set to value 0 but still no Restore Tab
   >>> Do you have any other suggestions
   >>>
   >>> Kind Regards
   >>>
   >>> Stewart
   >>>
   >>> "Bert Kinney" wrote:
   >>>
   >>>> Hi Wayne,
   >>>>
   >>>> Yes, some viruses are created in a way that it will
   >>>> disables the very tools used to remove them.
   >>>>
   >>>> Note: You should not be using your real email address
   >>>> as it can lead to SPAM.
   >>>>
   >>>> --
   >>>> Regards,
   >>>> Bert Kinney [MS-MVP DTS]
<font color=brown>   >>>> <a style='text-decoration: underline;' href="http://dts-l.org/</font" target="_blank">http://dts-l.org/</font</a>>
   >>>>
   >>>> BigWhiteSnow wrote:
   >>>>> Same thing happened to me. I believe it is caused by
   >>>>> a worm picked up from MSN messanger.
   >>>>> Wayne Hansen
   >>>>> waynetrudy RemoveThis @hotmail.com
   >>>>>
   >>>>> "Bert Kinney" wrote:
   >>>>>
   >>>>>> Hi Icey,
   >>>>>>
   >>>>>> Previously posted by Ramesh, Microsoft MVP:
   >>>>>>
   >>>>>> Open Registry Editor and navigate to:
   >>>>>>
   >>>>>> HKEY LOCAL
   >>>>>> MACHINE\SOFTWARE\Policies\Microsoft\Windows
   >>>>>> NT\SystemRestore
   >>>>>>
   >>>>>> In the right-pane, delete the value "DisableConfig".
   >>>>>> Close Registry Editor
   >>>>>> Close and re-open the System Restore properties page.
   >>>>>>
   >>>>>> For more information on System Restore.
   >>>>>> All About System Restore in WinXP
<font color=brown>   >>>>>> <a style='text-decoration: underline;' href="http://home.earthlink.net/~mvp_bert/</font" target="_blank">http://home.earthlink.net/~mvp_bert/</font</a>>
   >>>>>>
   >>>>>> --
   >>>>>> Regards,
   >>>>>> Bert Kinney [MS-MVP DTS]
<font color=brown>   >>>>>> <a style='text-decoration: underline;' href="http://dts-l.org/</font" target="_blank">http://dts-l.org/</font</a>>
   >>>>>>
   >>>>>>
   >>>>>> Icey wrote:
   >>>>>>> This is a sorta odd thing..for me anyway.
   >>>>>>> My moms pc has lost her system restore. I went to
   >>>>>>> system properties to see what was up and there was a
   >>>>>>> message stating the system restore was turned off by
   >>>>>>> group policy and that to restore it would have to be
   >>>>>>> done by domain administator.
   >>>>>>>
   >>>>>>> I am sure she doesnt want to lose what she has on
   >>>>>>> her pc...(which prolly isnt a bad idea) and i need
   >>>>>>> a to know how to get the resotre back. She also has
   >>>>>>> lost all access to her help and support files. They
   >>>>>>> just arent there any longer. I think she may have
   >>>>>>> had a virus an when virus was deleted her files
   >>>>>>> went to.
   >>>>>>>
   >>>>>>> Any help will be appreciated. ty<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: System Restore 

Hey, big companies like trendmicro do listen to us minions after all. Having emailed them a few days ago, I've just checked its Solution page for the worm I had and I'm pleased to say it is now telling people to delete the two entries in the registry which disable the system restore. See, even a drop in the ocean can make a difference...
 >> Stay informed about: System Restore 

Hi,

I can say that even if some valuable files are lost or erased special data recovery tools can always help bring it back. Imho Active@ Undelete and Uneraser (for pure DOS) are the most powerful ones, they worked awesome and were always able to restore literally all of the lost data. You should pay attention to this indeed.

http://www.active-undelete.com/

http://www.uneraser.com/
 >> Stay informed about: System Restore