can't enable system restoreSolved/Closed

Question

Hello

after recovering my comp from spyware infestation

trying to enable system restore..getting following error

"system restore encountered an error trying to enable/dissable one or more drives please restart your machine and try again"

followed the instructions in microsoft's website, no change

did anyone encountered this, pls  let me know how to fix this

harnold31 · Accepted Answer

hello,

have you recently disconnect any hardware or connected any hardware from your pc? if this is the case then it might be this which is causing this problem. try to see for the hardware and then if its not good try to write here on the forum

yavben · Answer

did not connect or dissconnct any hardware

brakers · Answer

Hi There I have the same problem on two computers. I think this might be a virus that is new on the internet as the threads for this error is very low.
 Someone told me to install SuperAntispyware which is free and in prefferences has a choice to repair System Restore, I tried it but it did not work.
Hope someone finds a repair soon.
Kindest Regards Tony B.

Eoghan · Answer

Hello,

I am desperate...can anyone help...Please!

I had exactly the same symptoms as detailed by yavben in message of Aug 17.  Then, I followed the recommendations in brakers message of Aug 19.  However, when run, the resulting downloaded file asked...Do you want to write this line to the registry?...but it didn't display the line. I agreed to writing the new line, then the file added  the unknown line to the registry  and my problem immediately worsened.  

I had previously been able to access System Restore by right clicking on My Computer, then clicking on Properties, then on the System Restore tab presented as part of System Properties.  Now I found that the System Restore tab had been completely removed from the System Properties menu and that the only way I could access it was from the start menu, but instead of being allowed to enable System Restore  from there  I now get the following message...System Restore is not able to protect your computer.  Please restart your computer, then run System Restore again...When I did this I was once again presented with the last message but there was no other change or improvement.  

 
Configuration: Windows XP Professional, SP3,
Internet Explorer 7.0

Eoghan · Answer

Hello,

I am desperate...can anyone help...Please!

I had exactly the same symptoms as detailed by  yavben  in  message of Aug 17.  Then, I followed the recommendations in brakers message of Aug 19.  However, when run, the resulting downloaded file asked...Do you want to write this line to the registry...but it didn't display the line. I agreed to writing the new line, then the file added  the unknown line to the registry  and my problem immediately worsened.  

I had previously been able to access System Restore by right clicking on My Computer, then clicking on Properties, then on the System Restore tab presented as part of System Properties, but I now found that the System Restore tab had been completely removed from the System Properties menu and that the only way I could access it was from the start menu, but instead of being allowed to enable System Restore  from there  I now get the following message...System Restore is not able to protect your computer.  Please restart your computer, then run System Restore again...When I did this I was once again presented with the last message but there was no other change or improvement.   
Configuration: Windows XP Professional, SP3,
Internet Explorer 7.0

Eoghan · Answer

Hello,

Many thanks for your speedy reply.  I took great encouragement from the fact that your suggestion cured the problem with your own two computers and with the two computers owned by Yavben and VVC, but it was a disappointment that it didn't work for me. It seems that my problem must be caused by something different...just my bad luck!  Details for my computer and system are as follows:- 
Computer:  ASUS A7NBX DeLuxe, 2.21 GHz AMD Athlon 3200+, 3.00 GB of RAM
System:	 Windows XP Professional Version 2002 with Service Pack 3 and Office 2007, AVG 8 Anti-Virus Free

I look forward to hearing any suggestions you may have and I fervently hope that between us we will be able to get System Restore up and running soon.

Thank you very much
Eoghan

Aquarian3 · Answer

I just Googled the same error message and came across your replies, after downloading the 'sysrestoreenable' file and running it, I'm chuffed to find I can now turn on system restore, so THANK YOU VERY MUCH!!!!

Lisa
-x-

brakers · Answer

Hi There
            Sorry to hear you are having trouble. I have search for a solution to your problem but it seems to only refer to Windows XP. Sorry I could not help.
Best Wishes and good luck
Tony B.

William · Answer

Hi there,

If I click on the link it doesn't give me anything to download but instead just shows a lot of text. 

Please help.

Regards,

William

Zo · Answer

Hi

It worked for me (an XP user) too. I disabled System Restore to do an antivirus scan, later tried to re-enable it but couldn't, and the fix worked. Many thanks!

Benny · Answer

Got up to the point where it tels me to hit the next button so it can restore my computer to an eairlier date. Clicked on the next Button. Nothing happens. Deleted that virus everyone is taking about. Dont know how I go it. 

Also, I believe my internet is infected. I have Windows XP HP Laptop. My home page works fine except for the message that Appears in red at the top. Warning! Your computer could be infected with a virus. o a FULL System scan NOW. Something like that. All my text on my homepage is red as well. I changed homepages. Same problem. Cant get ride of it.

Also, My Active Desktop works...sort of. Can put up a new pic for my Backroud. The area is Greyed out. I can "RightClick" on a pic and cit that way. Only works after my PC is restarted.

help with any of these is much appretiated. PLZ

Dons · Answer

Will the registry tweak referenced in this string also work for Vista?

heinz · Answer

I followed the link Juergen put out there and it saved my PC!!!!!

Thank you Juergen

bifaerie79 · Answer

Hello! 
Looks like you are helping a ton of people! I have similar yet different problems with my computer. I think it all started after I downloaded some movie viewer from a movie site I visited. No idea which site I visited or what virus I may or may not have. I tried all of things suggested here, except reboting from disk,I bought my computer used and it didn't come with one (I'm aware that this may be my only solution, but I can't afford to buy windows xp!). I was able to download the malware software, yet despite renaming it, I am not able to get it to open or run. I used the registry thing, I was able to download it and it says it worked but I still cannot use system restore. I think my system restore works..........kind of..........because I get to the very last screen where it says to restore blah blah click whatever. I click and NOTHING happens, OR I click and I get this message "system restore is not able to protect your computer. please restart your computer, and then run system restore again. Obviously I have tried that..... to no avail. I'm at my wits end! PLEASE help me!!! Thanks a million!

brakers · Answer

Hi There was this a second hand computer if not what model and serial No. is on it.
Regards Tony B.

Zhaligkeer · Answer

I am having a similar problem, however, the only symptoms other than not being able to click the next button during system restore is that I am getting redirected from almost every link in Google to advertisements, everything from car insurance to Ebay, though fortunately nothing crude yet. I have tried the .reg file, and when I click it it says "can not import, specified file is not a registry script. you can only import binary registry files from within the registry editor. can anyone help? and what/where is the registry editor?

Hihhih · Answer

ahhh. im having the same problem. but when I try the tweak. instead of giving me a reg file it gave me a txt file. what should I change to make it a reg file?

jeff · Answer

hi im new to this. A friend had virus could not do defrag set restor-point and otherthings I have ran scans and have fixed every thing but resore-point. I have downloaded sysrestoreenable-reg to hard drive to my computer that works ok but wonted to test script but when I dubble klick on it I get this message 
(this file dose not have a progran associated with this action. Create an association in the folder option control panel) so how do you do this. I know this may work on my friends computer but at least if she gets this message I now what to do ,thank you for taken the time to read this

brakers · Answer

Hi There you say you followed the instructions on the Microsoft site have you tried the script file that is talked abrout in the messages below.
Regards Tony B.

parrot1958 · Answer

Hi sorry I forgot OS it is XP-HOME OME. I have service-pack 3 and all up to date. As for the sysrestoreenable.reg
it is light blue as you mentioned. So if I'm going to look for associated program in regedit.exe there do I go and what do I look for. If you can explain this it will be most great full. jeff

parrot1958 · Answer

First of all I would like to thank everyone for there help specially Tony. I finely installed sysrestoreable.reg on windows XP Home. By going to start then  typed regedit in run, like Tony said. But when I doubled clicked on sysrestoreable.reg I got the same massage as before. So in regedit I went in to file and click on import then found sysrestoreable.reg and doubled clicked on it and it installed. So thanks everyone JEFF

BIGZED · Answer

I cant enable systemrestore either. I have followed the "tweaks" suggestion and still nothing.

Here is my hijackthis report if anyone can help please?

"Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:15:20 AM, on 8/29/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HP\digital imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe
C:\DOWNLOADS\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.aol.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://isp.netscape.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://isp.netscape.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://isp.netscape.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=53EEB45F21EA47F2B95DF58497B5E6B6
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://isp.netscape.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=53EEB45F21EA47F2B95DF58497B5E6B6
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [IcoSet] c:\hp\bin\cloaker.exe c:\hp\bin\IcoSet\adjust.bat seticon
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Uniblue RegistryBooster 2] C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S
O4 - HKUS\S-1-5-21-4110579514-2662294639-1093473559-1008\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-21-4110579514-2662294639-1093473559-1008\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User '?')
O4 - HKUS\S-1-5-21-4110579514-2662294639-1093473559-1008\..\Run: [Uniblue RegistryBooster 2] C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S (User '?')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HPDIGI~1.LNK = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: PrintKey-Pro.lnk = C:\Program Files\Warecentral\PrintKey-Pro\PKey_Pro.exe
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

bobflys · Answer

Hey, I cannot restore, drag and drop, copy and paste, send file any where, help inoperative, search inoperative, cannot get on the internet, just stuck, but I can look at files, and documents, just cannot do anything, tried some of the items I read on this page and still no where.. any ideas?  Plus I cannot install anything either.

AJtheKJ · Answer

A Canadian lady-friend of mine (I'm in WA state) had her Dell XP Home severely infected with trojans and rootkits and refused to run in anything but safe mode.  It was a long process to clean her machine via remote assistance, but she is now back up and running.

3 programs were necessary to clean it out:

1.) Malwarebytes AntiMalware - Had to change the setup file (mbam-setup) name to enable it to finish the install - used PtFix as the name, which was also used to change the program executable (mbam.exe) to initiate the program

2.) SUPERAntiSpyware - Had to change the name on the setup file, using PTFix2.  This program installed with an alternate program execuatable.  (Someone had evidently incurred the problem and was kind enough to include the alternate for future users.)

3.) Avira Antivir - No changes necessary and was outstanding in getting many viruses not found after using the two programs above.

Updates were only obtainable after the first round of scans had been completed, but after 3 full rounds of scans, over 300 infected files and registry entries were deleted.  After doing program uninstalls, disc cleanup and a double dose of defrag, it was ready - except System Restore would NOT start back up.  Was VERY thankful to have found this website, which led me to http://ww11.kellys-korner-xp.com/regs_edits/systemrestore.reg - Using regedit to change all information to match exactly what showed in that webpage, System Restore fired up the first time, without having to reboot, even.

Big kudos to Kelly and crew - Lime wire and Kazza can bite on a lit stick of TNT!

keksa23 · Answer

Hello,
I have a virus that has taken control of my computer. I am typing from a different computer because the virus will not even allow me to open up Internet Explorer. I think the culprit may be something disguising itself as a virus type of software called "Internet Security 2010". Someone suggested I do the "Dell System Recovery Partition Hotkey Restore", where I try to do recovery from the Dell logo screen by pressing CTRL & F11. Unfortunately the Restore/Reboot screen by Symantec does not appear on the machine, the virus must be blocking it from appearing. At one point the option to start in safe mode, normal mode, etc. appeared but went away just as quickly and did not allow me to choose.

Can someone please help me with this and possibly offer suggestions on how I can get my system back to the way it was when I got it from the factory? I am not concerned with any saved files on there. Besides this incident, the machine is otherwise healthy.

Thanks so much in advance.

Ryan · Answer

sorry I dont know but the same thing happened to me, if I find a link to fix it ill post it

JP · Answer

A "spyware" site has attached itself to my machine and when trying to activate my malware detectors or virus programs, it wouldnt allow me to open any of them.  Then when I went to try and restore back to a previous date, it wouldn't allow that box to remain up either.

Please advise what is needed to restore system and eliminate the worm or whatever it is that attached itself.

Thanks.

jorge · Answer

I have illegally in my pc a program winguard pro and don't let me delete and whe I try to use system restore I can't. Can somebody help me?

joe · Answer

after installing a disc for a mobile phone it introduced a fault on my PC I unistalled
it but that didn't help I tried to go back in time but my system restore is blocked it worked perfectly before this
the fault is a constant flickering on anything I open in internet explorer I get around this by using google chrome but system restore is still blocked

Can't enable system restore

29 responses

Similar discussions

Subscribe To Our Newsletter!