hey guys i caught a nasty bug which so far seems to be gone but my system restore cant be shut off so i still cant scan those files im told that scanners wont scan the part that sysrst uses so can anyone tell me how to turn it off any other way
You can try stopping the service first. Start, Run, services.msc (or thru the Administration menu) Double click System Restore Service and set to Disabled. If it's started, you can try and stop it by pressing the Stop button. Restart your computer.
its not there doesnt show anything that has to do with system restore Name Description Status Startup Type Log On As Alerter Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local Service Application Layer Gateway Service Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Windows Firewall. Started Manual Local Service Application Management Provides software installation services such as Assign, Publish, and Remove. Manual Local System ASP.NET State Service Provides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Network Service Automatic Updates Enables the download and installation of Windows updates. If this service is disabled, this computer will not be able to use the Automatic Updates feature or the Windows Update Web site. Started Automatic Local System AVG Anti-Spyware Guard Started Automatic Local System Background Intelligent Transfer Service Transfers data between clients and servers in the background. If BITS is disabled, features such as Windows Update will not work correctly. Started Manual Local System CA ISafe Manual Local System ClipBook Enables ClipBook Viewer to store information and share it with remote computers. If the service is stopped, ClipBook Viewer will not be able to share information with remote computers. If this service is disabled, any services that explicitly depend on it will fail to start. Disabled Local System COM+ Event System Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start. Started Manual Local System COM+ System Application Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. Started Manual Local System Computer Browser Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local System Cryptographic Services Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local System DCOM Server Process Launcher Provides launch functionality for DCOM services. Started Automatic Local System DHCP Client Manages network configuration by registering and updating IP addresses and DNS names. Started Automatic Local System Distributed Link Tracking Client Maintains links between NTFS files within a computer or across computers in a network domain. Started Automatic Local System Distributed Transaction Coordinator Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Network Service DNS Client Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Network Service Error Reporting Service Allows error reporting for services and applictions running in non-standard environments. Started Automatic Local System Event Log Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped. Started Automatic Local System EvtEng Intel Event Trace Manager Started Automatic Local System Fast User Switching Compatibility Provides management for applications that require assistance in a multiple user environment. Manual Local System Help and Support Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local System HTTP SSL This service implements the secure hypertext transfer protocol (HTTPS) for the HTTP service, using the Secure Socket Layer (SSL). If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System Human Interface Device Access Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start. Disabled Local System IMAPI CD-Burning COM Service Manages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will be unable to record CDs. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System Indexing Service Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language. Manual Local System InstallDriver Table Manager Provides support for the Running Object Table for InstallShield Drivers Manual Local System IPSEC Services Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver. Started Automatic Local System LexBce Server Started Automatic Local System Logical Disk Manager Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System Logical Disk Manager Administrative Service Configures hard disk drives and volumes. The service only runs for configuration processes and then stops. Manual Local System Media Center Extender Service Automatic Local Service Media Center Receiver Service Media Center Service for TV and FM broadcast reception Started Automatic Local System Media Center Scheduler Service Started Automatic Local System Messenger Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start. Disabled Local System MHN Multimedia Home Networking (MHN) is a networking platform for Audio Video (AV) streaming applications on IP home networks. MHN enhances AV streaming performance and reliability by ensuring network quality-of-service (QoS) for AV applications by providing mechanisms for admission control, run time monitoring and enforcement, application feedback, and traffic prioritization. Manual Local System MS Software Shadow Copy Provider Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System NBService Nero BackItUp Service is responsible to control all jobs created using Nero BackItUp. These jobs can create backups of selected files/folders/partitions or complete hard disk to hard disk, network drive, CD/DVD or FTP. Manual Local System Net Logon Supports pass-through authentication of account logon events for computers in a domain. Manual Local System NetMeeting Remote Desktop Sharing Enables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet. If this service is stopped, remote desktop sharing will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System Network Connections Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections. Started Manual Local System Network DDE Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers. If this service is stopped, DDE transport and security will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Disabled Local System Network DDE DSDM Manages Dynamic Data Exchange (DDE) network shares. If this service is stopped, DDE network shares will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Disabled Local System Network Location Awareness (NLA) Collects and stores network configuration and location information, and notifies applications when this information changes. Started Manual Local System Network Provisioning Service Manages XML configuration files on a domain basis for automatic network provisioning. Manual Local System NICCONFIGSVC Configure your Internal Network Card power management settings. Started Automatic Local System NT LM Security Support Provider Provides security to remote procedure call (RPC) programs that use transports other than named pipes. Manual Local System PC Tools Spyware Doctor Started Automatic Local System Performance Logs and Alerts Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Network Service Plug and Play Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability. Started Automatic Local System Portable Media Serial Number Service Retrieves the serial number of any portable media player connected to this computer. If this service is stopped, protected content might not be down loaded to the device. Manual Local System Print Spooler Loads files to memory for later printing. Started Automatic Local System Protected Storage Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users. Started Automatic Local System QoS RSVP Provides network signaling and local traffic control setup functionality for QoS-aware programs and control applets. Manual Local System RegSrvc Intel Registry Service Started Automatic Local System Remote Access Auto Connection Manager Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address. Manual Local System Remote Access Connection Manager Creates a network connection. Started Manual Local System Remote Desktop Help Session Manager Manages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the Dependencies tab of the Properties dialog box. Manual Local System Remote Procedure Call (RPC) Provides the endpoint mapper and other miscellaneous RPC services. Started Automatic Network Service Remote Procedure Call (RPC) Locator Manages the RPC name service database. Manual Network Service Remote Registry Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local Service Removable Storage Disabled Local System Routing and Remote Access Offers routing services to businesses in local area and wide area network environments. Disabled Local System Secondary Logon Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local System Security Accounts Manager Stores security information for local user accounts. Started Automatic Local System Security Center Monitors system security settings and configurations. Started Automatic Local System Server Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local System Shell Hardware Detection Provides notifications for AutoPlay hardware events. Started Automatic Local System Smart Card Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local Service Spectrum24 Event Monitor Handles the Spectrum24 NDIS Traffic Started Automatic Local System SSDP Discovery Service Enables discovery of UPnP devices on your home network. Disabled Local Service System Event Notification Tracks system events such as Windows logon, network, and power events. Notifies COM+ Event System subscribers of these events. Started Automatic Local System Task Scheduler Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local System TCP/IP NetBIOS Helper Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution. Started Automatic Local Service Telephony Provides Telephony API (TAPI) support for programs that control telephony devices and IP based voice connections on the local computer and, through the LAN, on servers that are also running the service. Started Manual Local System Telnet Enables a remote user to log on to this computer and run programs, and supports various TCP/IP Telnet clients, including UNIX-based and Windows-based computers. If this service is stopped, remote user access to programs might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Disabled Local System Terminal Services Allows multiple users to be connected interactively to a machine as well as the display of desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server. Started Manual Local System Themes Provides user experience theme management. Started Automatic Local System Trend Micro Central Control Component Manages the Trend Micro PC-cillin Component. Started Automatic Local System Trend Micro Personal Firewall Manages the Trend Micro Personal Firewall. Automatic Local System Trend Micro Proxy Service Manages the Trend Micro tmtdi module. Started Automatic Local System Trend Micro Real-time Service Enables scanning in real time. Started Automatic Local System TrueVector Internet Monitor Monitors internet traffic and generates alerts for disallowed access. Started Automatic Local System TuneUp WinStyler Theme Service Automatic Local System Uninterruptible Power Supply Manages an uninterruptible power supply (UPS) connected to the computer. Manual Local Service Universal Plug and Play Device Host Provides support to host Universal Plug and Play devices. Disabled Local Service Volume Shadow Copy Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System WebClient Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local Service Windows Audio Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local System Windows Defender Service Helps protect users from malicious software, spyware, and other potentially unwanted software Started Automatic Local System Windows Firewall/Internet Connection Sharing (ICS) Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network. Started Automatic Local System Windows Image Acquisition (WIA) Provides image acquisition services for scanners and cameras. Started Automatic Local System Windows Installer Adds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System Windows Management Instrumentation Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local System Windows Management Instrumentation Driver Extensions Provides systems management information to and from drivers. Manual Local System Windows Time Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local System Windows User Mode Driver Framework Enables Windows user mode drivers. Started Automatic Local Service Wireless Zero Configuration Provides automatic configuration for the 802.11 adapters Started Automatic Local System WLANKEEPER Provides Profile Switching Service for SSO Feature Set Started Automatic Local System WMI Performance Adapter Provides performance library information from WMI HiPerf providers. Manual Local System Workstation Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local System
What version of XP do you have? If you have Professional, you can also disable System Restore thru the Group Policy Editor. Go to Start, run type in gpedit.msc Go to Computer Configuration\Administrative Templates\System\System Restore Double click "Turn off System Restore" and set to Enabled. If all else fails, you might just have to set that drive as a slave in another system, set Explorer to see all hidden files, which will show you the System Restore folder where you might be able to delete the files. Some Linux LiveCDs might be able to help you as well...though Knoppix is limited to just reading an NTFS file system, Ubuntu or SUSE might have the capability of deleting files.
well i did it it says its been turned off by group policy so now if i run a scan will it scan those files
It might. Shutting off the restore service usually frees XP's grip on the files so they are not hidden/protected by the OS. All you can do is try.
