Command line (or registry entry) to turn OFF/ON System Restore?

[KWW]

I cannot get system restore to come up all the way on a friend's PC (maybe
virus related... I am working that issue). I know how to start it via
command line (c:\windows\system32\restore\rstrui) but it comes up with a
white box and no text. I wonder if there is a way to feed it a command so
that it just turns OFF (or ON) the restore function. Otherwise, is there a
registery entry or an environment variable to do this?
Thanks!

 

[Ramesh, MS-MVP]

KWW,

For the blank System Restore UI, see if these commands help. From Start/Run,
type:

regsvr32 jscript
regsvr32 vbscript
regsvr32 /i mshtml

 

[Rick \Nutcase\ Rogers]

You're not trying to run it from the Recovery Console, are you? That won't
work. You have to run it from within a Windows session, even if it's only
"safe mode with command prompt".

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org

 

[Kelly]

Hi,

I haven't ever seen this behavior via Start/Run/CMD on infected systems. If
this is the case, I would be most interested in more info. )

As per your question, see line 178 for a reg file:
http://www.kellys-korner-xp.com/xp_tweaks.htm

Secondary information:

Single Click Creation of a System Restore Point/Runs as a Scheduled Task
http://www.dougknox.com/xp/utils/xp_sysrestorepoint.htm

System Restore Points - With Error Messages
http://www.billsway.com/notes_public/WinXP_Tweaks/XPSystemRestore.vbs

More info, if needed:

1. Insert the Windows XP CD
2. Click Start/Run and type:
"rundll32.exe advpack.dll,LaunchINFSection C:\Windows\Inf\sr.inf"

System Restore core files should be reinstalled.

Alternately, you may also open Windows Explorer, navigate to
"C:\Windows\Inf" folder and right-click sr.inf (choose Install)

--
All the Best,
Kelly (MS-MVP)

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

 

[KWW]

I finally took the drive out, made it a slave in one of my other WinXPSP2
systems, and ran NAV on it. It came up with over a dozen Trojans and
viruses. A number of them were in the RESTORE folders. Anyway, after
deleting those identified infected items (most of them were compressed .exe
files and could not be cleaned) I put the drive back in the DELL system and
it came up... System Restore now works... so I could turn it OFF.

A step or two before this I lost network connectivity, so I will be looking
into that for certain. I have a list of viruses I could post this evening.
Thx!
KWW

Hi,

I haven't ever seen this behavior via Start/Run/CMD on infected systems. If
this is the case, I would be most interested in more info. )

As per your question, see line 178 for a reg file:
http://www.kellys-korner-xp.com/xp_tweaks.htm

Secondary information:

Single Click Creation of a System Restore Point/Runs as a Scheduled Task
http://www.dougknox.com/xp/utils/xp_sysrestorepoint.htm

System Restore Points - With Error Messages
http://www.billsway.com/notes_public/WinXP_Tweaks/XPSystemRestore.vbs

More info, if needed:

1. Insert the Windows XP CD
2. Click Start/Run and type:
"rundll32.exe advpack.dll,LaunchINFSection C:\Windows\Inf\sr.inf"

System Restore core files should be reinstalled.

Alternately, you may also open Windows Explorer, navigate to
"C:\Windows\Inf" folder and right-click sr.inf (choose Install)

--
All the Best,
Kelly (MS-MVP)

Troubleshooting Windows XP
http://www.kellys-korner-xp.com