Defender erases previous Restore Points...

[Guest]

Hi once again!

Here I am, after a long time without problems Microsoft AntiSpyware Beta 1
just installed the latest Defender version. To my surprise the installation
was a breeze and both scans (quick and full) worked perfectly. I mean, they
didn't took 6 hours since the last time I had WD in my Dell Inspiron 8200.
Now however, WD creates a Restore Point every time the computer starts and
even worse, is that it deletes previous Restore Points made by me. So, any
ideas of what is actually happening? And yes, System Restore is active in
this machine and I don't wish to turn it off, so is there any way to correct
this problem? Once again, thanks for your help.

 

[Bill Sanderson MVP]

Steve Dodson has posted a registry edit to change this behavior, which isn't
seen on all machines--let me find it:

In the registry editor,

Create a "REG_DWORD" Key named "DisableRestorePoint" and set it to TRUE
under the following location in the registry.

HKLM/Software/Microsoft/Windows Defender/Scan/
--------------------------------------
This needs a little interpretation:

1) find the location named above.
2) Highlight the Scan object, and right click it, choose permissions, and
give your user FULL.
3) create a value as instructed above, and set it to "1."
4) reverse your action in 2)--uncheck Full for your user.

 

[Dave M]

Hi Win;
What's your system restore size setting in Control Panel > System
Properties > System Restore ? If it's set on the minimum that's only 200
MB and you may be recycling the available restore points/space. There was
quite some discussion of this a few weeks ago... Defender making all those
restore points, and I believe Ms was looking at it. But not everyone
experiences the same amount of points being created. I think the idea was
to create a restore point at the detection of some suspicious software and
not at every startup, but your problem regarding erasing previous points
is the first I remember of that description.

Personally I have mine set on 1% or 3040 MB, FWIW

 

[Guest]

Thanks for the quick answers...

I have System Restore configured to 12% that is 3429 MB, which is by the
way the maximum. The case with WD is that before installing it, I created a
System Restore Point and erased the previous ones. However, to my surprise,
WD erased my Restore Point and created his own Restore Point first time I
restarted the computer. Today, I found that WD continues to create restore
points, but those restore points made by Windows itself (after removing a
program) doesn't seem affected by WD actions. Also it seems WD creates
Restore Points every time Windows starts. So, could this be an issue that
only disrupts user's restore points?
About modifying the Registry, I do appreciate the suggestion, but I am
"allergic" to even touch it. I know the configurations are something
problematic and it could crash the entire OS. Anyway, if there is no other
solution I think the best will be to wait to Microsoft making the proper
adjustments. Thanks again for your time.

 

[Bill Sanderson MVP]

About modifying the Registry, I do appreciate the suggestion, but I am
"allergic" to even touch it. I know the configurations are something
problematic and it could crash the entire OS. Anyway, if there is no other
solution I think the best will be to wait to Microsoft making the proper
adjustments. Thanks again for your time.

I'm entirely sympathetic with this feeling--registry editing isn't something
that should be undertaken lightly. Sorry we can't do better at this time.

 

[Guest]

YES! Defender wiped out all of my previous Restore Points as well. Sadly,
after an incident involving my first scan with Defender, I NEEDED those
previous Restore Points and now I have a somewhat larger problem. I will
formulate a question on that, later today.
Well at least I now KNOW that it was Defender that wiped out my RP and that
it was not a coincidence.