System restore in Windows XP

dg27,

The procedure I'm talking about is...

Insert the operating system disk and restart your computer.

Press any key to boot from CD.

Choose install.

Do the agreement.

Now choose repair. Leave the operating system disk in the computer until you see the Welcome Screen. Takes about 35 minutes. You'll then have to get all the Windows Updates, again(more painful). The rest of the programs that were installed and the files and folder usually remain intact on a Dell computer(this doesn't work on a HP/Compaq as it starts all over).

Like I said, if the operating system is all the person wanted to fix, this will do it. If they are missing a program or something, then they might have to find that and reinstall it.

Rick

>>and the files and folder usually remain intact on a Dell computer...

I invite others to weigh in, but in my experience it can get tricky because repair is not always offered as an option. I've heard of cases where people tried to follow this procedure and ended up unwittingly doing a completely new install.

You will need to be logged in as Admin for all of these. I have a few questions to see if we can determine what is happening.

I've no malware, as far as I know.

Another question:

Go to Start>Run> type in :

msconfig

Click OK

Look under General tab and click the Launch System Restore button.

When you click the "Launch System Restore" button, do you get  the following pop-up?
 "System Restore has been turned off by group policy.  To turn on System Restore, contact your domain Administrator."

I haven't "chosen to turn off System Restore; it can't be switched off as it's not switched on!

BTW, you never did say (I don't think) what the issue is that you're trying to resolve: Knowing that might help determine whether there is another fix (at which point, if we can help resolve it, you can activate System Restore)...

dg

Hi again rggraham1947

Well your certainly generating lots of replies to your thread  :emotion-5:

1. I'm afraid this didn't work.

OK, if you followed each step then it’s not a corrupt exe file

Did you revert to original rstrui.exe file (now named oldrstrui.exe) or delete it & now using the copied over rstrui.exe file from C:\Windows\ServicePackFiles\i386 folder?

2. I'm using XP Home.

Hmmm, anyway this may be a non-starter since you didn’t mention any error messages?

System Restore tab is missing can result in the error message “System Restore has been turned off by group policy”

The solution is to use Group Policy Editor utility to correct the problem, using the gpedit.msc command

Unfortunately that utility is only available in XP Pro

So pointless explaining that option

I don’t have XP Home but you could try just checking the following Registry entry:

Warning don’t make changes in Registry unless confident about doing so or first backing-up Registry

Start > Run > type in the term regedit then click OK

Navigate to the following key & confirm only if present?

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\SystemRestore

3. I've no malware, as far as I know.

I see a recent reply from Bugbatter (one of the Malware Removal experts I was referring to)

Quote:

"I haven't "chosen to turn off System Restore; it can't be switched off as it's not switched on!"

I did not ask you if  you turned System Restore off or on. Obviously it is OFF.

You have not answered my questions.  If this is not a malware situation, I can give you a simple registry fix to click on, but I would need more information.

 There are too many people in this thread. I'll let the others who are working on this carry on.

rggraham1947

Before moving onto registry entries, first check if System Restore Service is present?

Start > Control Panel > double click Administrative Tools > double click Services

Scroll down & check for System Restore Service, if present then make sure:

Status is Started, Startup Type is Automatic & Log On As is Local System

If present & Startup Type is Disabled then right click System Restore Service & select Properties

From General tab use Startup Type dropdown menu & select Automatic, then click OK

From the Log On tab you should see it’s a Local System account, Hardware Profile & Service Enable/Disable buttons

If the service is enabled the Enable button will be greyed-out

If the above doesn’t help then moving onto Registry Entries:

The missing registry key isn’t necessary for System Restore to function but in your case it’s not & XP Home doesn’t have the GPE utility either

You can try this from http://www.kellys-korner-xp.com/xp_tweaks.htm

Read the short instructions at top of web page then scroll down to item 278 on the left hand side

(Restore/Enable System Restore)

When you click on item 278 you should see the sysrestoreenable.reg download file

Click the Save button & save to your desktop then right click & select Merge then OK

Reboot & check if System Restore tab is back

If none of the above work you may need to do a Windows Repair Install (if available) or as previously suggested, if Malware is causing the problem, create a new post in Malware Removal forum

Reply if you need further clarification

System Restore Service is Started, Startup Type is Automatic & Log On As is Local System.

Before I do the registry edit, do I need to save/backup anything?

regards,

rggraham1947

Yes, backup the registry

Create a backup.reg file & save it to Desktop, leave it there until sure everything is OK

Registry Edit had no effect. How do I restore the backup.reg?

What is "Repair Install"?

regards,

rggraham1947

rggraham1947: "Repair Install" is a method of repairing your XP installation using your XP installation disc.

One point: we know that your system restore is not functioning, but you still have never told us why you want to use it (what the actual issue is that you're trying to rectify). Telling us that would probably save everyone a lot of time.

dg

The background to this is as follows (I don't know if these events are related to or responsible for the problem):

1. On 31 August,  my initial 3-year McAfee Security System subscription expired.

2. On 3 September, I uninstalled McAfee and installed AVG-Free, which I use on my PC and which seems satisfactory.

3. Initial scan of AVG revealed no problems.

4. On 4 or 5 September, at boot, my user account wouldn't start (the desktop "background" appeared but then the system blocked; my wif'e's account started OK but as I've reported, System Restore wouldn't run.

5. After trying to run System Restore in various ways (Admin account, Safe Mode, etc.), I recovered the situation by using the "Last known good configuration" option at boot-up.

6. The next anti-virus scan the same day reported and removed 12 Trojan Horse infections; the system has apparently been "clean" since.

7. Whilst following your various instructions, I noticed the following:

    There were 2 copies of rstrui in the "Restore" folder when I went to rename it.

    There was a "cabinet" file, created on 4 September.

8. I'm normally suspicious of software offered in my mailbox but today I installed (from CNET) and ran a program called IOBit Security 360, which claimed to have detected and removed several previously undetected malware threats.

9. Should I restore the backup.reg and, if so, how?

regards,

rggraham1947

rggraham1947

I was ready to reply with next step of instruction but then just read you latest reply

The reply I was ready to send was:

(A) If you successfully used the sysrestoreenable.reg download file

Did you check if HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\SystemRestore is now present?

(B) Only if still not present then to restore from backup.reg file, just double click it

(C) Quotes from your previous posts

1. “I recently tried to use system restore to solve a problem”

What problem? It may be related to “other issues” You have now explained

2. “I'd tried the other accounts, all with admin rights, already.”

It’s NOT good practice (exposure to security issues) to have all accounts with Admin rights

Based on your reply, as previously suggested create a new post in Malware Removal

They tend to ask that you reply exactly to questions asked & follow their instructions precisely

(As you have seen in Bugbatters’ reply, the nature & need for Malware removal)

The Malware Removal Forum can get very busy so you need to be patient

The only other options are to try the Repair Install option or depending on severity of Malmare use Dell PC Restore utility or Clean Install to wipe the system clean  

Reply if you require further help/clarification before using these options