System Restore question

OK, this is probably pretty basic, but I don't know the answer, so hopefully somebody can clue me in here.

Windows XP's Sytem Restore feature can "restore a computer to an earlier time". But my question is....IF...Sytem Restore is used, does that affect "Definition Updates" for anti-virus, anti-trojan, anti-spyware, etc. type programs? In other words, definition updates that have been made SINCE the time you're restoring your computer back to....are these affected? Whether it is two days or two months, are the security software programs definitions still in tact?

Thanks

 

No, the internal Windows System Restore referes only to the OS Hardcore as drivers, Registry, etc.

The following are restored when you use System Restore to restore your system to a previous time using a restore point:
- Registry
- Profiles (local only—roaming user profiles not impacted by restore)
- COM+ DB
- WFP.dll cache
- WMI DB
- IIS Metabase
- Files type which are monitored by System Restore as specified in the SDK available from http://msdn.microsoft.com/library/en-us/sr/sr/

The following are not restored by System Restore:
- DRM settings
- Passwords in the SAM hive.
- WPA settings (Windows authentication information is not restored)
- Specific directories/files listed in the Monitored File Extensions list in the System Restore section of the Platform SDK e.g. 'My Documents' folder.
- Any file types not monitored by System Restore like personal data files e.g. .doc, .jpg, .txt etc.
- Items listed in both Filesnottobackup and KeysnottoRestore (hklm->system->controlset001->control->backuprestore->filesnottobackup and keysnottorestore) in the registry.
- User-created data stored in the user profile
- Contents of redirected folders

 

Windows XP's System Restore works only inside Windows. If you have a BSOD and you can't boot in Windows anymore, Windows System Restore won't be able to help you.

 

OK, Thanks Tommy. So using the system restore function doesn't "undo" any AV, AS, and/or AT type program's "definition database" updates then, correct?

 

You have to understand that like most Windows-included utilities, System Restore is a minimalist system. That's why so many of us here have opted for 3rd party alternatives, such as EAZ-fix (and its 'twin', Rollback Rx), FirstDefense-ISR, RestoreIT, etc.

 

Correct!