System Restore question

Discussion in 'backup, imaging & disk mgmt' started by JRCATES, Aug 28, 2006.

Thread Status:
Not open for further replies.
  1. JRCATES

    JRCATES Registered Member

    Joined:
    Apr 7, 2005
    Posts:
    1,203
    Location:
    USA
    OK, this is probably pretty basic, but I don't know the answer, so hopefully somebody can clue me in here.

    Windows XP's Sytem Restore feature can "restore a computer to an earlier time". But my question is....IF...Sytem Restore is used, does that affect "Definition Updates" for anti-virus, anti-trojan, anti-spyware, etc. type programs? In other words, definition updates that have been made SINCE the time you're restoring your computer back to....are these affected? Whether it is two days or two months, are the security software programs definitions still in tact?

    Thanks
     
  2. Tommy

    Tommy Registered Member

    Joined:
    Dec 24, 2002
    Posts:
    1,169
    Location:
    Buenos Aires - Munic
    No, the internal Windows System Restore referes only to the OS Hardcore as drivers, Registry, etc.

    The following are restored when you use System Restore to restore your system to a previous time using a restore point:
    - Registry
    - Profiles (local only—roaming user profiles not impacted by restore)
    - COM+ DB
    - WFP.dll cache
    - WMI DB
    - IIS Metabase
    - Files type which are monitored by System Restore as specified in the SDK available from http://msdn.microsoft.com/library/en-us/sr/sr/

    The following are not restored by System Restore:
    - DRM settings
    - Passwords in the SAM hive.
    - WPA settings (Windows authentication information is not restored)
    - Specific directories/files listed in the Monitored File Extensions list in the System Restore section of the Platform SDK e.g. 'My Documents' folder.
    - Any file types not monitored by System Restore like personal data files e.g. .doc, .jpg, .txt etc.
    - Items listed in both Filesnottobackup and KeysnottoRestore (hklm->system->controlset001->control->backuprestore->filesnottobackup and keysnottorestore) in the registry.
    - User-created data stored in the user profile
    - Contents of redirected folders
     
  3. ErikAlbert

    ErikAlbert Registered Member

    Joined:
    Jun 16, 2005
    Posts:
    9,455
    Windows XP's System Restore works only inside Windows. If you have a BSOD and you can't boot in Windows anymore, Windows System Restore won't be able to help you.
     
  4. JRCATES

    JRCATES Registered Member

    Joined:
    Apr 7, 2005
    Posts:
    1,203
    Location:
    USA
    OK, Thanks Tommy. So using the system restore function doesn't "undo" any AV, AS, and/or AT type program's "definition database" updates then, correct?
     
  5. pvsurfer

    pvsurfer Registered Member

    Joined:
    Sep 1, 2004
    Posts:
    1,400
    Location:
    California - USA
    You have to understand that like most Windows-included utilities, System Restore is a minimalist system. That's why so many of us here have opted for 3rd party alternatives, such as EAZ-fix (and its 'twin', Rollback Rx), FirstDefense-ISR, RestoreIT, etc. ;)
     
  6. Tommy

    Tommy Registered Member

    Joined:
    Dec 24, 2002
    Posts:
    1,169
    Location:
    Buenos Aires - Munic
    Correct!
     
Loading...
Thread Status:
Not open for further replies.