Windows XP Home Edition System Restore Stopped Working 2

[wildfiretaskforce]

I've tried every scan I could get my hands on, tried Safe Mode, ran different AV programs, Ad Aware, Spy Bot S&D, I still cannot get System Restore to return to the month of October. Anyone have a clue what might be causing this? I contacted Hp Customer Care, they blew me off, out of warranty would not give me one suggestion.

 

[linney]

Is this a duplicate post, I seem to remember answering a similar question yesterday?

The last comment I posted was about restoring the things AVG removed from the System Restore folders via the AVG Virus Vault options. If you restore then back into System Restore, does it then show the October restore points?

Are there any restore points from October in this location?

How to gain access to the System Volume Information folder

http://support.microsoft.com/default.aspx?scid=kb;en-us;309531&FR=1&PA=1&SD=HSCH

If you have trouble accessing the Security tab from XP Home, it is accessible via Safe Mode.

 

[wildfiretaskforce]

I had to re-post because one user had me post the Hijack This Log, but I was not aware it had so much personal data, such as everything in my trusted Zone, Bank, etc, I had passwords saved in the web site, and if you ticked the link, it opened sites, I had to change all my passwords. I tried as you suggested, but still no October. Only November.

 

[linney]

Can you have a look at the hidden and system folders that the above article mentions and see if you have folders that begin with RPxx, standing for restore point

You should find them in the hidden and system folder location similar to this. You will have to do what the article says concerning being able to see these locations.

C:\System Volume Information\_restore{6E93E235-2C38-40A9-B2F7-B1C7DA8F4FF1}

If you have some RP folders, check the Properties and see if you can tell when they were created, we are looking for some that were created in October.

Incidental, do you have any restore points from September or earlier when viewing the System Restore GUI? I suspect that you don't. It may be that the restore points are gone for ever unless you have some backup that can resurrect them.

You can look at some data recovery software if you like. Were you able to grab your E-mail files and save them, then re-install your E-mail program, which I believe was your reason for doing a System Restore in the first place?


Data recovery.
PC Inspector

http://www.pcinspector.de/file_recovery/UK/welcome.htm

http://www.restorer2000.com

http://www.runtime.org/hints.htm

Plenty of other recovery software listed here.

http://dmoz.org/Computers/Software/Disk_Management/Error_Checking_and_Repair/

 

[wildfiretaskforce]

Can't get out of November, I will try your suggestions you mentioned, thanks.

 

[G0AOZ]

I've had similar problems in the past, but found that booting up using Winternals ERD Commander allowed me to successfully run a Restore. Unfortunately this proramme is not free...

ROGER - G0AOZ.

 

[wildfiretaskforce]

TO: Linney

In my virus vault there are 2 items that look like this one you mentioned in your post, they say Trojan Hose & Back Door as well

C:\System Volume Information\_restore{6E93E235-2C38-40A9-B2F7-B1C7DA8F4FF1}

 

[archwayguy]

Can you get to the DOS prompt for Recovery Console?

 

[linney]

You can try and have AVG restore those and see if it revitalizes System Restore, but if the Restore Point folders are no longer in existence it is hardly likely to make any difference. This is the reason I was asking about RPxx folders in the following location (see article from earlier re access).

C:\System Volume Information\_restore{6E93E235-2C38-40A9-B2F7-B1C7DA8F4FF1}. The alpha-numeric from _restore will not match your machine but it gives you an idea as to what folder to look for.

Restored virus files will have to be removed later.

 

[wildfiretaskforce]

G'day Linney, By crikey, the Restore Point folders are no longer in existence .......... some where along the line I must have made a bloody mistake, there not even showing the infected files in the AVG Virus Vault any longer.

"goodonya" for trying to help Matey,


Cheers,

Sean

 

[linney]

If it is anything like Vista, once the Restore folders are tampered with (i.e. removing a virus) outside of System Restore, System Restore will dump them (delete) as they are no longer viable or valid. I'm guessing it was something like that which happened to you?

 

[wildfiretaskforce]

G'day Linney, sorry I had a doctors appointment and a cat scan today and just got back, a mite more sore but I'm here. It dawned on me that back on 1 November 2008 I made a backup of the register for some bloody reason, but when I got home it's in my Documents folder, almost 54 MB long, does that give you any clue or ideas?

 

[linney]

I hope your health is not a worry, and wish you all the best along those lines.

A Registry backup is just that, a backup of the Registry, it is not going to magically restore your missing Restore Point folders, unfortunately.

It is time to move on and forget about the "spilled milk". Turn off System Restore, reboot, then turn it back on. This will give you a clean start but you should monitor the situation to make sure it is working properly from now on.

Try and save your E-mail folders (you'll have to tell us the name of the problem E-mail client, so we can help you find the folder location), then uninstall your E-mail client and re-install that to fix up any problems that you are having with that.

 

[wildfiretaskforce]

G'day Linney, thank you for your concern. I bloody well made it through two tours in Afghanistan, then back in September i get hit by a drunk driving teenager .. can't dwell on that though.

I use the Paid version of Incredimail, it has worked great for me for several years because I can have all my Australian Yahoo & Hotmail E-Mail collected in that Program, even though the free American Yahoo & Hotmail no longer have Pop3 available unless you have a paid account.

Mite you clarify something for me mate? I was told System Recovery has two options, one to re-format the drive etc., and one option that recovers the system back to it's original state but you have to re-install any software that was installed Post purchase of the PC? Is that true, and if so, what are the risks? Ta Mate

 

[linney]

Use these links to backup your E-mail, if you want to.

How to Find And Open Your IncrediMail Data Folder and Message Store

http://email.about.com/od/incredimailtips/qt/et102705.htm

http://www.google.com/search?hl=en&...=incredimail+storage+folders+of+email&spell=1

Repairing XP by running Windows over itself, is the main repair option I think you are talking about. With this procedure you will only use your Windows Updates back to the date of the XP CD used. Your data and installed programs are not touched and are left intact. Of course nothing is 100% guaranteed when using a computer.

How to Perform an In-Place Upgrade (Reinstallation) of Windows XP (Q315341)

http://support.microsoft.com/support/kb/articles/q315/3/41.asp

Other less drastic things you can try first include the following.

Try running ChkDsk to check your drive for errors. Right-click your Drive icon/ Properties/ Tools/ Error Checking. Select both boxes.

Run the System File Checker program from the Run Box by typing.....Sfc /Scannow in it and have your XP CD handy. This will check and replace corrupted system files if it finds any, will not make changes to your programs, data or Windows Updates.

 

[wildfiretaskforce]

Linney, my problem is this Mate, I don't have the Windows XP CD, the PC came with it pre-installed, so I reckon I am up the creek. You and others have been so kind to me, and spent so much time with my problems I will be making a donation in your name to Tek Tips. It's one of those bloody problems that you really don't know what caused the Restore Feature to not go back to October, but bloody well wish you knew what caused it to do that.

 

[linney]

Once your anti virus removed files from the system restore folders, system restore was dead in the water, that I believe is the cause of your problems.


Look at some of the posts here concerning anti virus software.

http://aumha.net/viewforum.php?f=54

Microsoft Windows XP System Restore
Bobbie Harder
Microsoft Corporation

http://msdn2.microsoft.com/en-us/library/ms997627

 

[wildfiretaskforce]

Linney, reckon I will just live with it ..... thanks so much Mate for your help, and others.

Cheers

 

[G0AOZ]

I wonder if you could use something like GetDataBack to "undelete" the System restore folders...

Get a trial version from

http://www.runtime.org/data-recovery-software.htm

and give it a whirl. This will tell you if the files are likely to be recoverable, but you'll have to buy the full version to do the business. However, myself and many other Tek-Tips posters have had very good results with this software.

If you manage to recover them, first temporarily turn off the antivirus, do a System Restore, then re-engage the AV and cleanup.

Good luck!

ROGER - G0AOZ.