PDA

View Full Version : ?unchecking sustem restore


loveangels
January 3rd, 2004, 03:28 AM
Under file system/troubleshooting, the disable system restore button is checked. Should it be??

degsy
January 3rd, 2004, 06:08 PM
usually none of those options should be checked.

loveangels
January 4th, 2004, 10:36 PM
ok--so i unchecked disable system restore and re-booted my computer but it comes back with it checked again, tried it twice and it did it both times......any suggestions.....thanks

dammit
January 4th, 2004, 11:13 PM
Try clicking apply first....then ok

loveangels
January 5th, 2004, 01:20 AM
I pushed apply but OK was not an option, just close. The 1st option had a dotted line around it--disable new file sharing and locking semantics--it was not checked but I checked it, then unchecked it to remove the lines and then I got an OK. Clicked OK and tried it again and it still comes back as being checked after 3 boots. Any other suggestions???????

VirtualMe
January 5th, 2004, 03:39 AM
See if this will work.

Go to My Computer > Tools > Folder Options > View (tab) > remove the checkmark from "Hide protected operating system files". Repeat the steps you already took and it should work properly next time.

loveangels
January 6th, 2004, 12:07 AM
I am sorry to be beating this to death but should I uncheck that even though it says recommended? Thanks

dammit
January 6th, 2004, 12:21 AM
Yep....then change it back after ;)

loveangels
January 6th, 2004, 12:55 AM
OK--tried it like you suggested---3 times. Every time I rebooted both were checked again!!!!!Is there something you could suggest? Thanks

dammit
January 6th, 2004, 01:05 AM
Post a hijack log loveangels
Let's see whats going on on your PC

Download 'Hijack This!'. Unzip, doubleclick HijackThis.exe, and hit "Scan".
When the scan is finished, click "Save Log", and copy and paste it in a reply.
http://www.spywareinfo.com/~merijn/files/hijackthis.zip
It will show what's running on your computer...some things you might be
unaware of....

Don't make any changes until someone checks it out.

loveangels
January 6th, 2004, 01:23 AM
Here it is-thanks
Logfile of HijackThis v1.97.7
Scan saved at 8:26:13 PM, on 1/5/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\AWS\WEATHERBUG\WEATHER.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\TEMP\TD_0001.DIR\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.ezfastsearch.com/index2.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.ezfastsearch.com/index2.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.ezfastsearch.com/index2.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.rr.com/v5/home/0,1793,41,00.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://desktop.presario.net/scripts/redirectors/presario/deskredir.dll?c=3c00&s=consumer&LC=0409
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.ezfastsearch.com/index2.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.presario.net/scripts/redirectors/presario/srchredir.dll?c=3c00&s=searchbar&LC=0409
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = localhost
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [Weather] C:\PROGRAM FILES\AWS\WEATHERBUG\WEATHER.EXE 1
O4 - Startup: Compaq Knowledge Center.lnk = C:\Program Files\Compaq Knowledge Center\bin\silent.exe
O4 - Global Startup: ZoneAlarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
O8 - Extra context menu item: &Google Search - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsearch.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsimilar.html
O8 - Extra context menu item: Backward &Links - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate into English - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmtrans.html
O9 - Extra button: Translate (HKLM)
O9 - Extra 'Tools' menuitem: AV &Translate (HKLM)
O9 - Extra 'Tools' menuitem: &Find Pages Linking to this URL (HKLM)
O9 - Extra 'Tools' menuitem: Find Other Pages on this &Host (HKLM)
O9 - Extra 'Tools' menuitem: AV Live (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O12 - Plugin for .hpb: C:\PROGRA~1\INTERN~1\PLUGINS\nphpipb.dll
O12 - Plugin for .avi: C:\PROGRAM FILES\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npavi3 2.dll
O16 - DPF: {A7E092C3-692A-11D0-A7E5-08002B322F3B} (WebResponseAttachments Control) - https://webresponse.one.microsoft.com/WRActiveX/FileXfer.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5C90925-ABBF-4475-88F5-8622B452BA9E} (Compaq System Data Class) - http://web14.compaq.com/falco/SysQuery.cab
O16 - DPF: {9AF6E7AE-D248-11D2-BFAA-00805F2392C0} (Smi Class) - http://web14.compaq.com/falco/ScDmi.cab
O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37977.9885069444
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/en/check/qdiagh.cab?312

dammit
January 6th, 2004, 02:16 PM
I can't see anything nasty in there that would affect sys restore.

Try downloading THIS (http://www.windows-help.net/windowsMe/sysresupd.html) patch and see if it helps.

VirtualMe
January 6th, 2004, 04:55 PM
Something else you can check is click on

Start

Run

type in msconfig

click on the Startup tab

and be sure *StateMgr has a check by it.

statemgr.exe is Windows ME default for System Restore.



http://www.answersthatwork.com/Tasklist_pages/tasklist_s.htm

StateMgr
StateMgr.exe

(Microsoft)
Microsoft’s PC State Manager Stub. STATEMGR, present only in Windows Millennium Edition (Windows ME), is not a Task List item, it is purely a startup item which does its job at Windows boot‑up of starting STMGR, the memory resident part of the PC State Manager, and then terminates while Windows continues booting up. STATEMGR is part of the Windows ME’s System Restore feature and checks on boot-up how much time has elapsed since the last automatic or manual Restore Point and, if necessary, creates a new Restore Point. Once Windows has started, its alter ego STMGR then checks whether vital Windows system files were overwritten by older files by a recent installation of 3rd party software, and restores them to their previous level when necessary.

Recommendation :
Essential to the proper and safe running of your Windows ME PC – leave alone.

loveangels
January 7th, 2004, 12:19 AM
Thank you Virtual Me, that was the problem. Disable sys restore is no longer checked in trouble shooting. I must have unchecked statemgr when I was trying to clean up some start up items. Thank you all for all your help. I have learned so much from all of you......

VirtualMe
January 7th, 2004, 01:17 PM
Your Welcome. Glad we could help. :D