System Restore

Every time I try using system restore it loads half way
and then freezes

I just have to End task.

Can anyone help.

Thanks.

Are you saying that when performing a restore it loads part way and then
freezes or is the problem that you cannot access the system restore GUI
(rstrui.exe)? If the latter do other programs also freeze when opening? When
did this problem start and what changes did you make to your system around
that time?

If your problem is in opening rstrui.exe you might want to try replacing your
current copy of this file with a new copy from the Win Me cab set.

Rstrui.exe is contained in WIN_17.CAB of the Win Me cab set and can be
replaced by booting to Safe Mode and using MSConfig | General | Extract File
and following the prompts. The "cab" files are in the Win9x folder on the Win
Me CD and normally also in either Windows\Options\Cabs or
Windows\Options\Install. See MS KB 265371 - "How to Extract and Replace a
Protected File in Windows Me" (http://support.microsoft.com?kbid=265371) for
details of how to extract files from the cab set.

Rstrui.exe belongs in the windows\system\restore folder.
--
Mike Maltby MS-MVP



Craig wrote:

Every time I try using system restore it loads half way
and then freezes

I just have to End task.

Can anyone help.

Thanks.

Some times my internet freezes and I have to disconnect
and dial again but all other program on C: are fine. The
reason I want to restore is I had a CWS trojan, the one
that wipes your Media player out. I have fixed this with
CWshredder. I also had problems with another CWS trojan, I
think it was the latest one and I had to get this program
from this German web site to fix it. when I had this in my
system Adware 6.0 was bringing up files from
C:/_Restore/xxxx.cpy (not acurate) but could not delete
them.

Do you think this could have something to do with it?


-----Original Message-----
Are you saying that when performing a restore it loads
part way and then
freezes or is the problem that you cannot access the
system restore GUI
(rstrui.exe)? If the latter do other programs also
freeze when opening? When
did this problem start and what changes did you make to
your system around
that time?

If your problem is in opening rstrui.exe you might want
to try replacing your
current copy of this file with a new copy from the Win Me
cab set.

Rstrui.exe is contained in WIN_17.CAB of the Win Me cab
set and can be
replaced by booting to Safe Mode and using MSConfig |
General | Extract File
and following the prompts. The "cab" files are in the
Win9x folder on the Win
Me CD and normally also in either Windows\Options\Cabs or
Windows\Options\Install. See MS KB 265371 - "How to
Extract and Replace a
Protected File in Windows Me"
(http://support.microsoft.com?kbid=265371) for
details of how to extract files from the cab set.

Rstrui.exe belongs in the windows\system\restore folder.
--
Mike Maltby MS-MVP



Craig wrote:

Every time I try using system restore it loads half way
and then freezes

I just have to End task.

Can anyone help.

Thanks.

.

I am still unsure as to whether you are saying that rstrui.exe is freezing or
the actual restore. Which is it? If the former then have you tried replacing
rstrui.exe with a new copy as I suggested in my earlier post?

As for AdAware detecting malware in files in the C:\_RESTORE\TEMP or other
folder.. This is to be expected following cleaning an infection and these
files are harmless in their present location.

What is important is to remember not to restore back to a time when the system
was infected however there is no reason not to use SR to roll your system back
to the state it was in before infection even if the C;\_RESTORE folder
contains infected files since those files will not have been present on the
system at the time the checkpoint was created and will therefore not be used
in the restore. Once you've rolled your system back to a good checkpoint and
are no longer infected you can then reset system restore and flush the
_RESTORE archive including any infected files and create a new good
checkpoint.

I suspect that your connection problems are down to problems resulting from
your CWS infection.
--
Mike Maltby MS-MVP




wrote:

Some times my internet freezes and I have to disconnect
and dial again but all other program on C: are fine. The
reason I want to restore is I had a CWS trojan, the one
that wipes your Media player out. I have fixed this with
CWshredder. I also had problems with another CWS trojan, I
think it was the latest one and I had to get this program
from this German web site to fix it. when I had this in my
system Adware 6.0 was bringing up files from
C:/_Restore/xxxx.cpy (not acurate) but could not delete
them.

Do you think this could have something to do with it?

The rstrui.exe opens fine, it's half way through the
restore when it freezes.

-----Original Message-----
I am still unsure as to whether you are saying that
rstrui.exe is freezing or
the actual restore. Which is it? If the former then
have you tried replacing
rstrui.exe with a new copy as I suggested in my earlier
post?

As for AdAware detecting malware in files in the
C:\_RESTORE\TEMP or other
folder.. This is to be expected following cleaning an
infection and these
files are harmless in their present location.

What is important is to remember not to restore back to a
time when the system
was infected however there is no reason not to use SR to
roll your system back
to the state it was in before infection even if the
C;\_RESTORE folder
contains infected files since those files will not have
been present on the
system at the time the checkpoint was created and will
therefore not be used
in the restore. Once you've rolled your system back to a
good checkpoint and
are no longer infected you can then reset system restore
and flush the
_RESTORE archive including any infected files and create
a new good
checkpoint.

I suspect that your connection problems are down to
problems resulting from
your CWS infection.
--
Mike Maltby MS-MVP





wrote:

Some times my internet freezes and I have to disconnect
and dial again but all other program on C: are fine. The
reason I want to restore is I had a CWS trojan, the one
that wipes your Media player out. I have fixed this with
CWshredder. I also had problems with another CWS
trojan, I
think it was the latest one and I had to get this
program
from this German web site to fix it. when I had this in
my
system Adware 6.0 was bringing up files from
C:/_Restore/xxxx.cpy (not acurate) but could not delete
them.

Do you think this could have something to do with it?

.

Ah, then it sounds as if the problem is that you didn't have the 290700 patch
for system restore installed when you created the checkpoint you are using.

What is the version of the file smgr.dll in the windows\system folder? If not
4.90.0.3003 then that could be the cause of the problem and you need to
download and install the 290700 patch for system restore. The easiest way to
do this is from the link in the associated KB article (KB290700 - "Checkpoints
that you create after September 8, 2001 do not restore your computer"
(http://support.microsoft.com?kbid=290700)).

It is also possible that at one stage you did install this patch but have
subsequently reinstalled Win Me over itself using the Win Me CD. Doing this
causes the original, broken, version of smgr.dll to be reinstalled.

If this problem is a result of your having reinstalled Win Me over itself may
I recommend you to download and use the Belarc Advisor
(http://www.belarc.com/free_download.html) which will help you in identifying
which other patches also need to be reinstalled.
--
Mike Maltby MS-MVP




wrote:

The rstrui.exe opens fine, it's half way through the
restore when it freezes.