System Restore.

[Guest]

Hi,

I have Windows XP and I don't know what's going with my system restore. It
keeps turning itself off. I had to do a system restore about 2 weeks ago and
it worked fine.. I had lots of dates to choose from.
However, I was having some the other day so I went to do a System restore
and it says it has been turned off, do you want to turn it on?. I go to
System restore to turn it back and unclear the box and apply, but each time I
turn the computer off and then restart it has been switched off again.
After I have turned it on, all my restore dates have been deleted.
Can anyway point me in the right direction to keep it on permanently. I have
more than enough space on my hard drive that system restore requires. I have
read everything in the help section, but nothing seems to help.

Thanks heaps in advance

 

[Galen]

In Lydia had this to say:

My reply is at the bottom of your sent message:

Hi,

I have Windows XP and I don't know what's going with my system
restore. It keeps turning itself off. I had to do a system restore
about 2 weeks ago and it worked fine.. I had lots of dates to choose
from.
However, I was having some the other day so I went to do a System
restore and it says it has been turned off, do you want to turn it
on?. I go to System restore to turn it back and unclear the box and
apply, but each time I turn the computer off and then restart it has
been switched off again.
After I have turned it on, all my restore dates have been deleted.
Can anyway point me in the right direction to keep it on permanently.
I have more than enough space on my hard drive that system restore
requires. I have read everything in the help section, but nothing
seems to help.

Thanks heaps in advance

Well with those symptoms I'd expect the issue to lie with malware and any
restore points you have being suspect now anyhow.

Malware Cleaners and Repair:
http://kgiii.info/windows/all/general/malwarefix.html

--
Galen - MS MVP - Windows (Shell/User & IE)
http://dts-l.org/
http://kgiii.info/

"We approached the case, you remember, with an absolutely blank mind,
which is always an advantage. We had formed no theories. We were simply
there to observe and to draw inferences from our observations." -
Sherlock Holmes

 

[Guest]

With this deep-seated problem it may be necessary for a reinstall of Windows
and your software. Make sure you back up your docs, email program, etc.
before doing a reinstall. If it's a Dell bought after 07/05, you have the
ability for a reinstall built in.

 

[Bert Kinney]

Hi Lydia,

There are several reasons this may occur. Let's take a look at Event
Viewer for any System Restore logs that may have been created recently
that may help us diagnosing the problem.

Go to Start - Run and type eventvwr.msc and press enter.
Click on System in the left pane.
Click the gray title "Source" at the top of the source name column in
the right pane to sort by source name, look for "sr" and "srservice".
Double click on each of these events, then click on the button below the
two arrows in the upper right corner. This will copy the event
information to the clipboard. Paste the information for each of the two
event here. There's no need to post duplicate Event ID's.

How do I use the Event Viewer to search for System Restore logs?
http://bertk.mvps.org/html/tips.html#EventViewer

Here are some more links for troubleshooting System Restore.

System Restore Failures to restore:
http://bertk.mvps.org/html/srfail.html

System Restore fails to create an automatic restore point:
http://bertk.mvps.org/html/srauto.html

 

[Guest]

Hi Bert,

These are the two messages that seem to re-occurng where you told me to
check. I beleive these are mostly from me turning it on each time I reset the
computer.

Event Type: Information
Event Source: SRService
Event Category: None
Event ID: 115
Date: 1/14/2006
Time: 4:28:23 PM
User: N/A

Description:
System Restore monitoring was enabled on all drives.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Information
Event Source: SRService
Event Category: None
Event ID: 116
Date: 1/14/2006
Time: 4:28:11 PM
User: N/A

Description:
System Restore monitoring was disabled on all drives.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

There is nothing coming up with an error. However, whilst searching through
the event viewer I did come accross this Error message, and was wondering if
this may be related.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 1/16/2006
Time: 6:51:26 PM
User: N/A

Description:
The IPSEC Services service terminated with the following error:
The authentication service is unknown.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

I really have no idea why the system is doing this and would appreciate any
advice that you could give.

Thanks

Lydia

 

[Gerry Cornell]

Lydia

Any Event Viewer Reports of any type in the 12 second interval between
between System Restore being turned on (Event ID: 116 ) and turned off
( Event ID: 115 )?

Do you have any external drives?

Have you run a full anti-virus scan with updated virus definitions?


--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Bert Kinney]

Hi Lydia,

I would start by stopping the monitoring of all drives/partitions other
than the one Windows is installed on. This will eliminate the
possibility of a low disk space issue.

Now check for free disk space on the drive/partition Windows is
installed on.
Open My Computer, right click on the drive/partition Windows is
installed on and select Properties.

You will also want to check out these troubleshooting steps.

System Restore Failures to restore
http://bertk.mvps.org/html/srfail.html