Author Topic: System Restore No Longer Working After Using Tweaking Windows. (Read 60061 times)

Novice22 · « **Reply #25 on:** December 17, 2015, 02:55:44 pm »

I still need the anxiety tablets!
For instance: How do you create an expandable string Value?

Julian · « **Reply #26 on:** December 17, 2015, 03:02:48 pm »

here is a picture on the reg key you are looking for and how to make a expandable string value. right click and select expandable string value

Novice22 · « **Reply #27 on:** December 17, 2015, 03:25:37 pm »

Opened in Opera for some reason.
When I click on Expandable String Value the wording only increases or decreases in size.
Have to leave it there for today as it is quite late.
Thanks again for your time and patience Julian.

Julian · « **Reply #28 on:** December 17, 2015, 03:52:03 pm »

Hmm do you know how to open registry editor ?

Novice22 · « **Reply #29 on:** December 18, 2015, 04:32:18 pm »

I tried there a few minutes ago and it seemed to open alright.

jraju · « **Reply #30 on:** December 18, 2015, 11:37:50 pm »

hi, Novice, Has your problem resolved.
May i know the reply posted lastly by you, meant opening of regedit or system restore? please be specific in your reply..
From the posts by you, it was learned that you propose to do the repair in the christmas weekend. Has your problem solved?
System restore points are very important and would you say, how you resolved your problem, if the problem is solved so that users would benefit?

Novice22 · « **Reply #31 on:** December 19, 2015, 02:55:01 am »

No, problem not yet resolved.

Novice22 · « **Reply #32 on:** January 02, 2016, 12:37:56 pm »

Hi Julian.
Sorry for delay in getting back.
My friend was unable to help.
Someone else suggested ticking boxes in Tweaking Repairs and this resulted
in partial success in so far as System Restore is available to me again.
The "Catastropic Failure" notice has gone and I am able to create Manual Restore Points.
Problem is that newly created restore points are not holding overnight but at least some
progress has been made and I am able to have restore points for a time which is better than
nothing at all, and a lot better than the situation was previously.
I presume that things are going in the right direction although I don't know where to go from here.

Shane · « **Reply #33 on:** January 07, 2016, 08:56:58 am »

Make sure to get the newest Windows Repair and run all the repairs, and I mean all of them and in safe mode.

I found a bug where on vista the permissions where not running right and I got that fixed. I had a user on vista with all sorts of problems that got fixed right up with the new version

Shane

Novice22 · « **Reply #34 on:** January 08, 2016, 02:59:54 am »

Thanks Shane.
Do you mean a Windows Tool or the repair facility in Tweaking?

jraju · « **Reply #35 on:** January 08, 2016, 03:49:25 am »

Hi, Shane means that you use his All in one repair tool and select all the repairs. Some selected repairs are default selected. Please select all the repairs and run it in safe mode . It will solve all the issues.

Novice22 · « **Reply #36 on:** January 08, 2016, 04:21:43 am »

OK.
Thanks.

Julian · « **Reply #37 on:** January 08, 2016, 04:32:04 am »

let me know how it goes

Novice22 · « **Reply #38 on:** January 08, 2016, 08:11:44 am »

Hi Julian.
Back to Catastrophic Failure in System Restore.
No longer able to manually create restore points.

Julian · « **Reply #39 on:** January 08, 2016, 12:58:49 pm »

does the

Code: [Select]

vssadmin list writers command show any writers?

Novice22 · « **Reply #40 on:** January 08, 2016, 01:26:57 pm »

Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Windows\system32>vssadmin list writers
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2005 Microsoft Corp.

C:\Windows\system32>

No writers listed.
Will be out for rest of evening but will be keeping in touch.

jraju · « **Reply #41 on:** January 09, 2016, 10:38:34 pm »

Pl try this. If your system is 32 execute the one not containing the 64. Ok. If your system is 64 bit then use the other. It will fix most vss problems. try and inform

Novice22 · « **Reply #42 on:** January 11, 2016, 03:25:06 am »

Afraid it didn't work.

jraju · « **Reply #43 on:** January 11, 2016, 03:28:24 am »

Hi, I have given this to correct the VSS service. Then the cause is somewhere else

Novice22 · « **Reply #44 on:** January 11, 2016, 03:37:37 am »

OK.
Thanks.

jraju · « **Reply #45 on:** January 11, 2016, 03:43:55 am »

Hi, Julian
I am afraid that Novice system is deeply penetrated by a Trojan, which makes the dependent services to be changed manual and disabled.
He has to get rid of this trojan. Otherwise, on boot , whatever be the change he makes would be disabled by that trojan.
Has he done a through check by using eset scanner and malware bytes. these are two programs that will fix the trojan. He should do the full scan in mbtyes and scan his computer to get rid of this trojan. If he has already done that, then he has to do the boot scan by reputed antivirus, which will kill it before the point of booting.

jraju · « **Reply #46 on:** January 11, 2016, 04:58:55 am »

Hi, Novice Please understand that you have to take some steps on the suggestion, as it will not be possible to look in to your system .
First, do the scans to get rid of the trojan, which disable creating restore points.
Others are in the following way. Pl go to the registry and look for those things and if found do the cure.check the following files for existence
%windir%\system32 directory:
Srrstr.dll, srclient.dll, srcore.dll,rstrui.exe
3. Check that the VSS is not disabled.This is a must. It should be verified to be running. You should also see the dependency servicess are also started and set to automatic.
4. Check the registry keys
HKLM\Software\Microsoft\WindowsNT\Current Version\System restore
5. When you find Disable config DWORD set to "1"in these keys, export the keys and delete it.
Vista system ,supports sfc /scannow and if it is run once, it will fix most problems as they are in OS

Novice22 · « **Reply #47 on:** January 11, 2016, 07:34:08 am »

A Trojan was found - Trojan.Siredef - but machine is now clean.
Panda antivirus is running all the time.
I am not experienced enough to play around with the registry.
VSS is enabled - stsrted - and set to manual.
sfc /scannow and chkdsk have been run numerous times.

jraju · « **Reply #48 on:** January 11, 2016, 06:51:38 pm »

Hi, It is not playing. It should be done to have the cure.
Ok. What about the dependency services , that are also to be started and set to automatic. You said that VSS set to manual. It should be set to Automatic.
The dependency services may be seen in the VSS tab itself. You note it and then make it also started and set to automatic.
edit: it is default manual.
It is not risky to change or remove an item from registry , in this case Disabled config. Because this key has been started by some infection program. It made the key, and it is not a system key. Understand. By exporting this key totally , Just click on the key and export and export to desktop or anywhere. This is a known issue and your computer booting has nothing to do with this key. So, go to your search box. type run.press enter. On the open Run box type regedit and you get registry editor.
There you will have those hklm on the left side of the window. Just go through the path shown in my link. Just find the system restore folder. When you click this, there may be items shown in the right side of the window. If there is a key named Disabledconfig, you just export the key to your desktop. I would delete the key. But as you express your reluctance using regedit, i ask you to export, it will be exported to desktop, if you choose the desktop as destination folder. Now just close the Registry editor by closing x mark on the top of the right corner.
Now try system restore if it is working. Probably will work, because you have removed trojan and the registry key it has injected or modified. OK. If you leave, if any other key is deleted, it will automatically recreate. Are you clear now?
Did you see the four files in your system32 folder. If there is missing of these application extension, then you have to copy those files either from some other computer having the same version of OS and replace in the same folder. It may fix .
System restore is a main thing and if you cannot create or system does not create, then your trojan, which has been deleted may inject again.
As a last resort, you could use your vista dvd, and then booting thro, it you could do the system restore by selecting repair computer menu at the set up window. This is also one of the easy method if you know how to boot from dvd
edit: the component services by this VSS, like dcom and rpc services have so many dependencies and look and correct those entries are cumbersome. It has so much dependencies that it is having more than 10 sub components.

jraju · « **Reply #49 on:** January 11, 2016, 07:29:18 pm »

Hi, I have already said in another thread the link and how to use the dependency walker. I do not know the extent of it's capability. But it is worth a try, if application gives error message. I will give the link, and try it.
Hi, shane, Boggins. I checked this Dependency walker tool and found some usefulness in executing failed applications. I have not tried by choosing the options. But checking all the boxes of those exes only in the application. It worked remarkably if there are no other bugs in the program .Please comment on it.In this case, it is rstrui.exe
I just come across this tool, when i could not execute some application. like path edit etc. I downloaded and execute it and proceeded as in the link. To my surprise, it worked and the execute works.
I am thinking of using this tool to troubleshoot application errors.
http://www.tweaking.com/forums/index.php/topic,4075.0.html
The log in the bottom box would show in line red the problems in detail. If it could call and fix, it it will otherwise, the real technical details of the problem may be noted and solution to the problem may be attempted