Re: System restore has been turned off by group policy error

Dear all,

Sorry to have used highjackthis. Please consider that post not made.

Dear steve L Umbach:

I already tried this, and what it basically tells me is that i cant make any
changes, nor am i allowed to delete (with the admin account) these two keys.

Maybe i should have been more specific, i actually have 3 problems( of which
i believe are related to each other):

1. If i click with right mouse button on any shortcut point towards a .exe
file somewhere in the system, explorer.exe crashes and restarts itself.
2. I cannot access my pc from the network (all of a sudden), and get the
error : ACCESS is denied.
3. This is the system restore problem as explained in other posts. Believe
me i have tried safe mode, i have tried multiple software solutions for
spyware/malware( ewido, Adware SE, Windiows Defender) and antivrus such as
trendmicro cillin and MCafee anti-virus. ALl of them found nothing.

Sorry i was a bit desperate last night, so i made a very unorganised post.

I hope there is someone out there who can help.

And steve i will surely post this on the newgroup u proposed, thanks alot.

Nabeel


"Steven L Umbach" wrote:

See the article below on the registry setting that disable access to system
restore and if you find the key while logged on as an administrator try
changing the settings to 0 while booted into Safe mode and rebooting. Also
try your malware detection and removal tools in Safe Mode. You may also want
to post in the Microsoft.public.security.virus newsgroup where it is best to
post such questions.

Steve

http://www.winguides.com/registry/display.php/1273/

System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows
NT\SystemRestore]
Value Name: DisableConfig, DisableSR
Data Type: REG_DWORD (DWORD Value)
Value Data: (1 = enable restriction)



"Nabeel" <Nabeel@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:09DC8319-3984-49DC-8F07-6E34771696EA@xxxxxxxxxxxxxxxx
Hi guys,

I am really desperate, as i spent the last 5 hours on the net searching
for
answer and have used multiple removal tools for multiple worms and adaware
thingies.

My problem is that somehow i get this message when i try to do a system
restore. I tried editting the registery values of disablesr etc, but they
tell me that the values cannot be stored , due to the fact that other
processess are using these values.

I have heard on multiple sites that this is a worm of some sort, but i
need
to get rid of it asap. A side error that it is causing that evreytime i
try
to access this pc from a network pc, it gives me the error : ACCESS IS
DENIED. I have a feeling that both things are connceted to each other.

please please pelase help as i am going crazy here and DONT want to doa
reinstall.

thanks in advance,
Nabeel



.