System Restore help needed please

[dfrog]

WinXPHome - SP2 - all updates - I run Avast, Comodo firewall, Adaware,
Spybot, Spyware blaster, all upto date.

Had PC for 3 years and never had a problem with System Restore

Only used System Restore very occasionally but do look at it regularly, so I
know it is usually working.

System restore will not start (from my desktop icon or
Run-Progs-Accessories-system tools-system restore)

Cannot try it in safe mode because F8 isn't working at boot up either.

Start-run-msconfig, gives - Windows cannot find msconfig

Computer managemant says System Restore is on Automatic and is running.

The reason I looked to System Restore is that recently, (maybe this last
week or so), when booting up, although desktop and icons appear just as
quickly as normal, there is an unusualy long bit of hard drive activity
which stops me running anything until its finished (whatever 'it' is)

Event Viewer is showing nothing other than :-

Event Type: Information

Event Source: SRService

Event Category: None

Event ID: 114

Date: 19/12/2006

Time: 21:01:55

User: N/A

Computer: DRONFIELDROG

Description:

System Restore monitoring was disabled on drive F:\.



which was something I instigated having reconnected a spare hard drive.



I've looked for, but not found, the help I need to restart System restore,
and would appreciate some help



dfrog

 

[Bert Kinney]

Hi,

Type or paste the following command in the Start - Run box then press Enter.


%systemroot%\system32\restore\rstrui.exe

Does System Restore start?

Regards,
Bert Kinney MS-MVP Shell/User
http://bertk.mvps.org
Member: http://dts-l.org

 

[dfrog]

Thanks Bert, but no it doesn't, all I get is a very brief 'hourglass' just
like before.
dfrog

 

[dfrog]

Bert, been looking thro' your help pages and done this but still no joy.
When I try to run System Restore, all I get is a quick flash of hourglass
and nothing else !!

dfrog

How do I reinstall System Restore?

Warning: This will delete ALL existing restore points.

Go to Start - Run and type %Windir%\INF then press enter.

In Windows Explorer go to Tools - Folder Options - View Tab and uncheck
"Hide extensions for known file types".

Find the sr.inf file, right click on it and select Install.

Or simply type or paste the following command into the Start - Run box and
press enter.

rundll32.exe advpack.dll,LaunchINFSection C:\Windows\Inf\sr.inf

If the Files Needed dialog box appears, click Browse and point to the i386
folder on the Windows XP CD or to the i386 folder on the hard drive, if it
exists, of for systems updated with the Service Pack 2 CD or Download from
Microsoft, browse to the C:\Windows\ServicePackFiles\i386 folder. The retail
version of Windows XP (SP2) also contains the latest version of the files
needed.

These are the files needed to perform the reinstall:



FILE NAME:
FILELIST.XML
RSTRUI.EXE
SR.SYS
SRCLIENT.DLL
SRDIAG.EXE
SRFRAME.MMF
SRRSTR.DLL
SRSVC.DLL
SRVSVC.DLL
SP2 VERSION #:

5.1.2600.2180
5.1.2600.2180
5.1.2600.2180
5.1.2600.0

5.1.2600.2180
5.1.2600.2180
5.1.2600.2577



"











Thanks Bert, but no it doesn't,
all I get is a very brief 'hourglass' just

 

[dfrog]

Bert, a little more information :-

I 'think' that System Restore is running, my 2 drives are shown as being
'monitored'.

I cannot though, see the System Restore window (gui ?), so I am unable to
use S/restore
When I right click on my desktop icon for S/Restore and select 'run as', I
am there as current user (owner) there's never been any other, but when I OK
out get a message - "you do not have sufficient security priveleges to
restore your system, Contact administrator or log out & login again as
administrator & try again"
I'm not aware of doing anything that should have changed my status.
My head is spinning trying to find a solution to this, which I'm sure must
be there but cannot find. I can find plenty of reference to it but no
solution.
I'd really appreciate some more help
dfrog

 

[Bert Kinney]

Did you reinstall System Restore?

Regards,
Bert Kinney MS-MVP Shell/User
http://bertk.mvps.org
Member: http://dts-l.org

 

[Bert Kinney]

Hi,

Both of these issues are covered on the following pages.

Tips Fixes & FAQs - System Restore opens to a blank window!
http://bertk.mvps.org/html/tips.html

And

Error: Can't Access System Restore - Disabled by Group Policy - or System
Restore tab missing
http://bertk.mvps.org/html/error.html

I am beginning to think the the system is infected in some way. If the above
does not work out, go to the AumHa Forums - HijackThis Logs and read the
Announcement topic at the very top of the page and post a HJT log.
http://aumha.net/viewforum.php?f=30


Regards,
Bert Kinney MS-MVP Shell/User
http://bertk.mvps.org
Member: http://dts-l.org

 

[dfrog]

Hi Bert,
Thanks for your 2 replies - Yes, I did reinstall System Restore and
subsequently 'System Properties tells me that C: & F: (my 2 hard drives) are
being monitored. I have the partitions on each which house the HP recovery
data, unmonitored.

1 My System Restore doesn't open to a blank window - it just doesn't open
at all, ie, nothing to see, but followed that thro' and did:-
regsvr32 jscript (OK), regsvr32 vbscript (OK), but regsvr32 /i mshtml gave
this >> 'mshtml was loaded but the DLLRegister Server entry point was not
found. mshtml does not appear to be a .DLL or .OCX file'.

2 Because of this, followed a link to Doug Knox's Restore the default
associations for htm/html files - this hs not helped either.

3 Error - can't access System Restore - Disabled by Group policy or
System Restore Tab missing :-
In registry, went to -
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore
but there was nothing under Windows NT but 'Terminal Services' so I am
unable to delete 'DisableSR or DisableConfig' ( in an earlier message I
mentioned msconfig didn't work if I typed it into 'run', is there a link
here?)

4 Will now go thro' the HJT process at AumHA Forums.

Thanks again, I really do appreciate your help, this is my first time in
this area and as you will gather, I'm struggling a bit.

dfrog

 

[Bert Kinney]

Hi Bert,
Thanks for your 2 replies - Yes, I did reinstall System Restore and
subsequently 'System Properties tells me that C: & F: (my 2 hard drives) are
being monitored. I have the partitions on each which house the HP recovery
data, unmonitored.

It's best to only let System Restore monitor the partition Windows is
installed on.

1 My System Restore doesn't open to a blank window - it just doesn't open
at all, ie, nothing to see, but followed that thro' and did:-
regsvr32 jscript (OK), regsvr32 vbscript (OK), but regsvr32 /i mshtml gave
this >> 'mshtml was loaded but the DLLRegister Server entry point was not
found. mshtml does not appear to be a .DLL or .OCX file'.

2 Because of this, followed a link to Doug Knox's Restore the default
associations for htm/html files - this hs not helped either.

3 Error - can't access System Restore - Disabled by Group policy or
System Restore Tab missing :-
In registry, went to -
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore
but there was nothing under Windows NT but 'Terminal Services' so I am
unable to delete 'DisableSR or DisableConfig' ( in an earlier message I
mentioned msconfig didn't work if I typed it into 'run', is there a link
here?)

Yes, type msconfig into the Run box then press enter.

4 Will now go thro' the HJT process at AumHA Forums.

Thanks again, I really do appreciate your help, this is my first time in
this area and as you will gather, I'm struggling a bit.

Good.


Regards,
Bert Kinney MS-MVP Shell/User
http://bertk.mvps.org
Member: http://dts-l.org