[Resolved] ME System Restore unsuccessful

[sparrownightly]

Hi there,

On 1/19/2003 03:50 pm I posted query about problem that turned out to be (thank you, Rollin' Rog of this forum) in Outlook 2000. But prior to that I naively tried Win ME's System Restore (it's enabled, I checked); I had set a "restore point" 2 days earlier. When I tried it, got progress box but no moving gauge. After an hour (strong cautions not to touch anything were displayed in red) I shut it via the X box, but couldn't turn off computer except by switch. When it rebooted OK, got the Systems Restore box on desktop with a benign "System Restore was unsuccessful." This is unnerving for the future. Can I fix this so it works when I need it?

Here's the vitals:

P4 1.5, 640, Win ME, IE 5.5

Running in background:
Explorer
Zone Alarm
Em_exe
Hpsplmwa
Rundll
Direct CD
Dpps2
Hidserv
Vettray
Motron
Systray
Osd
Hpmdlbwa
Vetmsg9x

Thank you for any directions!

 

[Rollin' Rog]

Direct CD has been known to interfere with System Restore in that way and also prevent restore points from being automatically created. I would disable that in msconfig.

Also I don't see stmgr.exe there, I'm not sure whether it should show as a running task in WinME (STMGR.EXE > sometimes I see it, sometimes I don't)

-- but it and pchealth should be enabled in msconfig. Restore won't work without statemgr starting. In msconfig, look for statemgr.exe and enable that. The running task, when it is there, is spelled stmgr.exe, the startup is statemgr; I know this is confusing.

 

[sparrownightly]

Hi & thanks again,

Went to msconfig, unchecked Adaptec Direct CD. PCHealth was already checked. So was statemgr.exex, but it has an asterisk before it, i.e., *statemgr.exe. I left it checked. You're correct, it just doesn't show in running programs.
But I should mention that System Restore had been showing (on its little calendar) that it was supposedly making automatic restore points all along. Yet it still didn't work. And I guess there's no way of knowing if it will actually work when needed, short of restoring?

 

[Rollin' Rog]

Yup, statemgr is supposed to have the asterisk.

About all I can do right now is link to you Bill's troubleshooting page:

http://support.microsoft.com/default.aspx?scid=kb;en-us;306768

You might want to delete the currrent points and manually create one to see if that takes.

If you don't get lucky with the above, perhaps we can get Davey to take over on the help, he has WinME and has worked on many previous System Restore problems in more detail than can I.

 

[sparrownightly]

Thank you. Got error msg (new as of today) "System Restore was unable to create a restore point. Please restart your computer (note: doesn't work, get same msg a second time)and run System Restore again." So I guess my registry is damaged.

Tried turning Direct cd on again (left it on), still same msg. Went to your link above, got to article 303354. Method 1 not usable, my registry entries llook different. Metod 3 only for experts. So I guess I'll have to try the scary Method 2? seems so much to do to fix the Win ME's System Restore, which is supposed to be for the average user!
By all means, any other TSG brain help welcome!

 

[sparrownightly]

OK, in a quandry. Don't have pressing need to restore, but know System Restore won't create a Restore Point & probably won't restore to an earlier point (it didn't a few days ago.)

So: Do I enable/disable System Restore, thus wiping out all previous restore points (going back months at least), hoping to fix System Restore this way (per MKB Article 264887),
Or: Do I restore from one of the 5 backup registry copies (per Article 303354)?

Any ideas appreciated.

 

[Rollin' Rog]

I suspect restoring an older registry is not going to be of much use unless you know System Restore worked in the last few days. When was the last time you used it successfully?

If never, there is yet another possiblilty which requires a patch.

http://support.microsoft.com/default.aspx?scid=KB;en-us;q290700

Method 2 is undoubtably the easist to try, as they don't even give adequate information to carry out method 3. For method 3, which is what I'd probably try, you need to boot with a WinME boot disk. Then enter each of the commands:

cd: c:\windows\command

attrib -r -s -h c:\_restore

ren c:\ _RESTORE oldrest

Then you remove the floppy and ctrl-alt-del to reboot

Note I've done this somewhat differently than they have, since I'm not sure if the WinME boot disk will allow you to carry out the commands they give unless you change to the windows\command directory first and then include the full file paths.

Do leave adaptec disabled it can't be doing any good. You can always run it from the start menu if you want it.

 

[sparrownightly]

Hello & thanks,

No, never used System Restore at all--until unsuccessfully tried on evening of 01/19. I updated with the patch a year ago, & found it in computer, altho could be corrupted, or part of it got deleted by accident(?).

Ironically, reinstalling patch will erase all previous restore points, as will disabling & re-enabling System Restore. Don't know if problem is bad patch or bad registry---so risk is losing all good dates. Had a bad cab in there [I think caused by me] [now deleted] from morning of 01/19, altho had tried to restore to 01/16. If problem is registry, it's subtle & seems confined to System Restore utility. I confess I don't understand why Method 2 scanreg /restore will fix System Restore when I tried to restore to a date BEFORE the dates of the 5 copies in there(?)

Today I downloaded SpyBot & gazed at spyware to be deleted, but with System Restore doubtful, deleted nothing. Unchecked Adaptec again per advice.

Don't know what risk to assume. Will sleep on it.

Any contributions from other nightowls out there also appreciated.

 

[mtbird]

You might find that your problem is associated with your firewall, Zone Alarm. This seems to be a well known issue with many. You can read some of the comments at these links......

http://groups.google.com/groups?q=w...TF-8&[email protected]&rnum=2

http://forums.zonelabs.com/zonelabs/search?q=system+restore


Debe

 

[sparrownightly]

Hi & thanks to Rog & MTBird,

Went to Zone Alarm links, learned a lot---incl. how to turn off the annoying splash sceen & how ZA conflicts with various things.

Reinstalled System Recovery patch (note: contarary to MS data, did NOT erase old points), still wouldn't create restore point. Turned off ZA for 20 min., ditto. But did use SpyBot for first time to get rid of spyware--and now can again create a restore point. Now, will it work when I need it?

Thank you again. You are good-hearted wizards all.

 

[Rollin' Rog]

Interesting, as there was nothing particular showing in the startups you indicated. What all did Spybot come back with that was pre checked? There's a report you can copy/paste here to show. It is the "checks....txt" file rather than the one with a .log extension in Spybot's Programs folder.

 

[Davey7549]

sparrownightly
I see you are in fine hands with Rog and MT. I have one question though. Are you currently able to create and utilize a manual restore point?

The message you received from SR stating it cannot run unless you restart generally indicates you have a wininit.ini file hanging out in C:\Windows\System folder that needs processing which will be done at restart.

Also as you have found out that SR must find a continuous quiescent state for 5 to 10 minutes before creation is triggered. If a program is polling such as ZoneAlarm is likely doing you will not meet the idle requirements.

As Rog mentioned it would be interesting to find out what Spybot removed that was interfering with SR idle time requirement.

Please run a test when you can find the time. Create a manual restore point and then turn around and actually restore your system to that point.

Dave

 

[sparrownightly]

Hello again TSG's,

I was able to make a restore point (actually, 2), but haven't tried restoring from one yet. I'm working up the courage because I've heard restoring in itself can be damaging? True?

Also, re Davey's note, I did try restarting over & over--even MSKB article notes such action to be futile.

Thank you all.

Here's the text file showing the items destroyed by SpyBot:

--- Report generated: 2003-01-22 14:38 ---

Alexa Related: What's related link (Replace file)
RELATED.HTM

BackWeb lite: Class (Registry key)
HKEY_CLASSES_ROOT\BackWeb

BackWeb lite: Class ID (Registry key)
HKEY_CLASSES_ROOT\CLSID\{53FCF358-5323-11D0-A864-0000B43699FC}

BackWeb lite: Interface( (IBackWebChannelCollection)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{53FCF35A-5323-11D0-A864-0000B43699FC}

BackWeb lite: Interface( (IBackWebChannel)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{53FCF35B-5323-11D0-A864-0000B43699FC}

BackWeb lite: Interface( (IBackWebInfoPak)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{EB1FFFC2-5688-11D0-A865-0000B43699FC}

BackWeb lite: Interface( (IBackWebChannelVariable)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{FEFCA7F0-6C8E-11D0-A866-0000B43699FC}

BackWeb lite: Interface( (IBackWebSetup)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{12473FC7-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface( (IBackWebCommSettings)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{12473FC5-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface( (IBackWebDownloadTimeConstraint)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{0D1F7C83-8123-11D0-B5CA-0000B43698D6}

BackWeb lite: Interface( (IBackWebDialerSettings)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{12473FC4-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface( (IBackWebStory)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{9DB46424-FF61-11D0-9951-444553540000}

BackWeb lite: Interface( (IBackWebStoryField)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{5B1E13A0-004B-11D1-9951-444553540000}

BackWeb lite: Interface( (IBackWebAlertSettings)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{72B62B40-17D1-11D1-96A7-F8E906C10000}

BackWeb lite: Interface( (IBackWebPlayer)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{8028B940-4932-11D1-9951-444553540000}

BackWeb lite: Interface( (IBackWebChannelDownloadServices)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{9132E380-DC21-11D0-A875-0000B43699FC}

BackWeb lite: Interface( (IBackWebInfoPakDownloadServices)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{2DE07D90-DC04-11D0-A875-0000B43699FC}

BackWeb lite: Interface( (IBackWebDirectoryEntry)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{0C6E0440-0B50-11D1-9951-444553540000}

BackWeb lite: Interface( (IBackWebDirectoryEntryCollection)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{5DF6CE40-0B50-11D1-9951-444553540000}

BackWeb lite: Interface( (IBackWebChannel4_2)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{025632A0-BCEC-11D1-8B35-00609761C47A}

BackWeb lite: Interface( (IBackWebChannelTableNotifications)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{2F523082-5A0B-11D0-9B9C-444553540000}

BackWeb lite: Interface( (IBackWebDirectoryNotifications)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{41CEBDC0-32C1-11D1-9951-444553540000}

BackWeb lite: Interface( (IBackWebGeneralSettings2)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{E01AD640-F87D-11D0-9A50-00AA004812C2}

BackWeb lite: Interface( (IBackWebDisplaySettings4_2)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{001B3F20-D866-11D1-8B4C-00609761C47A}

BackWeb lite: Interface( (IBackWebCommunications)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{BAD37BC0-2231-11D1-9951-444553540000}

BackWeb lite: Interface( (IBackWebInfoPakFile)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{3AF78A74-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface( (IBackWebOpenInfoPakFile)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{3AF78A77-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface( (IBackWebFileAccessViaDir)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{608FE360-6FB2-11D1-A885-0000B43699FC}

BackWeb lite: Interface( (IBackWebFileAccess)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{3AF78A6E-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface( (IBackWebInfoPakFilesCollection)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{3AF78A71-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface( (IBackWebAllStoryCollection)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{9DB46423-FF61-11D0-9951-444553540000}

BackWeb lite: Interface( (IBackWeb4)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{740904E0-0BFB-11D1-9951-444553540000}

BackWeb lite: Interface( (IBackWebInfoPak4_2)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{610141C2-7701-11D1-B042-004095903824}

BackWeb lite: Interface( (IBackWebSetupNotifications)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{2F099AF0-6329-11D0-A866-0000B43699FC}

BackWeb lite: Interface( (IBackWebStoryTableNotifications)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{44230BC0-3105-11D1-9951-444553540000}

BackWeb lite: Interface( (IBackWebChannelCollection4)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{BCD0C200-69C1-11D1-8AF8-00609761C47A}

BackWeb lite: Interface( (IBackWebStoryCollection)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{9DB46422-FF61-11D0-9951-444553540000}

BackWeb lite: Interface( (IBackWebDirectory)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{15030BC0-0B52-11D1-9951-444553540000}

BackWeb lite: Interface( (IBackWebChannel4)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{AEE96320-2131-11D1-9951-444553540000}

BackWeb lite: Interface( (IBackWebItemDownloadServices)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{93BF8F00-DBE8-11D0-A875-0000B43699FC}

BackWeb lite: Interface( (IBackWebChannel2)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{9647FB70-DC0F-11D0-A875-0000B43699FC}

BackWeb lite: Interface( (IBackWebFilterSettings)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{C8CEEEE0-17D6-11D1-96A7-F8E906C10000}

BackWeb lite: Interface( (IBackWebSetup4)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{3667E7B0-4F28-11D1-8ADB-00609761C47A}

BackWeb lite: Interface( (IBackWebStoryFieldCollection)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{1D91D9E0-004B-11D1-9951-444553540000}

BackWeb lite: Interface( (IBackWeb2)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{23F43240-F78D-11D0-9A50-00AA004812C2}

BackWeb lite: Interface( (IBackWebDisplaySettings)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{12473FC6-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface( (IBackWebDownloadTimeConstraintCollection)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{0D1F7C84-8123-11D0-B5CA-0000B43698D6}

BackWeb lite: Interface( (IBackWebGeneralSettings)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{12473FC3-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface( (IBackWebAllInfoPakCollection)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{8131F530-649E-11D0-A866-0000B43699FC}

BackWeb lite: Interface( (IBackWebChannelVariableCollection)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{A4BC67F0-6C90-11D0-A866-0000B43699FC}

BackWeb lite: Interface( (IBackWebInfoPakCollection)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{EB1FFFC1-5688-11D0-A865-0000B43699FC}

BackWeb lite: Interface( (IBackWeb)) (Registry key)
HKEY_CLASSES_ROOT\Interface\{53FCF355-5323-11D0-A864-0000B43699FC}

BackWeb lite: User settings (Registry key)
HKEY_CURRENT_USER\Software\BackWeb

eAcceleration: Setup info (File)
setup.inf

Internet Explorer: Data source object exploit (Registry change)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\01004=W=3

MS Media Player: Client ID (Registry change)
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\Settings\Client ID=

WildTangent: Global settings (Registry key)
HKEY_LOCAL_MACHINE\Software\WildTangent

Adobe Acrobat Reader 4: Recent file #1 (Registry change)
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\4.0\AdobeViewer\avpRecentFile1=

Adobe Acrobat Reader 4: Recent file #2 (Registry change)
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\4.0\AdobeViewer\avpRecentFile2=

Adobe Acrobat Reader 4: Recent file #3 (Registry change)
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\4.0\AdobeViewer\avpRecentFile3=

Adobe Acrobat Reader 4: Recent file #4 (Registry change)
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\4.0\AdobeViewer\avpRecentFile4=

Common Dialogs: History( (86 files)) (Registry key)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU

Internet Explorer: AutoComplete data( (1 files)) (Registry key)
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\SPW

Internet Explorer: Cookies( (15 cookies)) (Directory)
C:\WINDOWS\Cookies

Internet Explorer: Download directory (Registry change)
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download Directory=

Internet Explorer: Temporary internet files( (17 entries)) (Empty cache)

Internet Explorer: URL history #1( (1 files)) (Registry key)
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs

Internet Explorer: User agent (Registry change)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent=Mozilla/4.0 (compatible; MSIE; Win32)

Log: Activity: OEWABLog.txt (Backup file)
C:\WINDOWS\OEWABLog.txt

Log: Activity: Sti_Trace.log (Backup file)
C:\WINDOWS\Sti_Trace.log

Log: IE: brndlog.txt (Backup file)
C:\WINDOWS\brndlog.txt

Log: Install: Active Setup Log.txt (Backup file)
C:\WINDOWS\Active Setup Log.txt

Log: Install: setupapi.log (Backup file)
C:\WINDOWS\setupapi.log

Log: Install: wmsetup.log (Backup file)
C:\WINDOWS\wmsetup.log

Log: Shutdown: System\wbem\logs\mofcomp.log (Backup file)
C:\WINDOWS\System\wbem\logs\mofcomp.log

Log: Shutdown: System\wbem\logs\wbemcore.log (Backup file)
C:\WINDOWS\System\wbem\logs\wbemcore.log

Log: Shutdown: System\wbem\logs\wbemess.log (Backup file)
C:\WINDOWS\System\wbem\logs\wbemess.log

Log: Shutdown: System\wbem\logs\winmgmt.log (Backup file)
C:\WINDOWS\System\wbem\logs\winmgmt.log

MS Direct3D: Most recent application (Registry change)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Direct3D\MostRecentApplication\Name=

MS DirectDraw: Most recent application (Registry change)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name=

MS Frontpage: Recent file list( (1 files)) (Registry key)
HKEY_CURRENT_USER\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Recent File List

MS Frontpage: Recent page list( (5 files)) (Registry key)
HKEY_CURRENT_USER\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Recent Page List

MS Frontpage: Recent web list( (1 files)) (Registry key)
HKEY_CURRENT_USER\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Recent Web List

MS Media Player: Application data file( ()) (File)
Microsoft\Media Index\wmplibrary_v_0_12.db

MS Media Player: Application data file( ()) (File)
Microsoft\Media Player\ActivePlaylist.dat

MS Media Player: Recent file list( (5 files)) (Registry key)
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\RecentFileList

MS Office 9.0: Access recent file( (11 files)) (Registry key)
HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Access\Settings

MS Office 9.0: Internet history (Registry value)
HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Common\Internet\UseRWHlinkNavigation

MS Office 9.0: Internet history (Registry value)
HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Common\Internet\LocationOfComponents

MS Office 9.0: Recently used files( (54 files)) (Directory)
C:\WINDOWS\Application Data\Microsoft\Office\Recent\

MS Regedit: Recent open key (Registry change)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit\LastKey=

MS Wordpad: Recent file list( (4 files)) (Registry key)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Recent File List

Windows Explorer: File search history( (25 files)) (Registry key)
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1}\FilesNamedMRU

Windows Explorer: Last visited history( (19 files)) (Registry key)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU

Windows Explorer: Program run history( (2 entries)) (Registry key)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU

Windows Explorer: Recently opened files( (2 links)) (Directory)
C:\WINDOWS\Recent

Windows Explorer: Stream history( (201 files)) (Registry key)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU

Windows Explorer: Text in files search history( (3 files)) (Registry key)
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1}\ContainingTextMRU

Windows Explorer: User Assistant history files( (501 files)) (Registry key)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count

Windows Explorer: User Assistant history IE( (215 files)) (Registry key)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{5E6AB780-7743-11CF-A12B-00AA004AE837}\Count

Windows: Install locations( (6 files)) (Registry key)
HKEY_CURRENT_USER\InstallLocationsMRU

WinZip: Number of times run (Registry change)
HKEY_CURRENT_USER\Software\Nico Mak Computing\WinZip\rrs\Opened=

WinZip: Recent created file list( (2 files)) (Registry key)
HKEY_CURRENT_USER\Software\Nico Mak Computing\WinZip\filemenu


--- Spybot-S&D version: 1.1 rel 4 ---
2003-01-08 Includes\plugin-ignore.ini
2003-01-08 Includes\Cookies.sbi
2003-01-08 Includes\Dialer.sbi
2003-01-08 Includes\Hijackers.sbi
2003-01-08 Includes\Keyloggers.sbi
2003-01-08 Includes\Malware.sbi
2003-01-08 Includes\Security.sbi
2003-01-08 Includes\Spybots.sbi
2003-01-08 Includes\Tracks.uti
2003-01-08 Includes\Trojans.sbi

 

[Rollin' Rog]

Mostly registry and usage tracking cleaning. Nothing that I can see that really involved running processes. Can't say why it made a difference.

I haven't heard of too many nightmares from successfully using system restore, they either work or don't work, I suppose the real danger is crashing or hanging in the middle of the actual restore, but you may have already tested that scenario. Still it's probably good to have a few to choose from. And I do believe it has an "undo" feature if you don't like the results.

 

[mtbird]

Rog....
I would think that having backweb installed would be an issue. If it is accessing in the background, then you wouldn't get the idle time to create restore points. Possible ??


Debe