Welcome to Smokey's Security Forums.
Guests have only limited access to the board and it's features, please consider registering to gain full access!
Registration is free and it only takes a few moments to complete.

Smokey's Security Forums

Please login or register.

Login with username, password and session length
Advanced search  

News:

According to hundreds of reports posted in the past 48 hours on Russian forums and blogs, there's a new computer worm currently spreading and infecting users on ICQ.

New ICQ Worm Infects Thousands of Users

Multilingual OTL (OldTimer ListIt) Log Analysis * Multilingual OTL Tutorials * OTL Downloads * Malware Removal * Microsoft Security Info & Alert Center * Official Jetico Inc. Support Forums

Share this topic on FacebookShare this topic on MySpaceShare this topic on Del.icio.usShare this topic on DiggShare this topic on RedditShare this topic on StumbleUponShare this topic on TwitterAuthorTopic: Windows "System Restore"  (Read 607 times)

0 Members and 1 Guest are viewing this topic.

Jetico

  • Jetico Support Engineer
  • *
  • Offline Offline
  • Posts: 684
Re: Windows "System Restore"
« Reply #7 on: February 04, 2010, 04:09:24 AM »
All the warnings are done before starting the process.
During the process BCWipe may report some errors - to avoid this, please configure BCWipe to use the log file
and set the option "Skip error notifications". Then all the error messages will be sent to the log file,
instead of the screen.

JTW555

  • Member
  • *
  • Offline Offline
  • Posts: 5
Re: Windows "System Restore"
« Reply #6 on: February 04, 2010, 12:21:30 AM »
Another question about this feature.  Does it warn you about this right before you run BCwipe or does it do it sometime in the middle after it is been running a while?  Same with other warning it may give, do they all happen at the beginning or also during the middle of a wipe?

Reason I ask is because I would like running a wipe while I'm away from my computer and obviously won't be able to answer these boxes while gone.

cpuproTopic starter

  • Full Member
  • **
  • Offline Offline
  • Posts: 11
Re: Re: Windows "System Restore"
« Reply #5 on: February 03, 2010, 05:59:50 AM »
Unfortunately BCWipe cannot define whether a copy of a special file exists in Restore Point or not.
It just detects existence of Restore Point.

Probably in some future version we will implement such advanced intelligence, but right now we do not know how to do so.

But BCWipe always gives the opportunity to wipe without turning System Restore off (i.e. deleting Restore Points).


Thank you for the feedback it gives me information for working with this going forward.

Jetico

  • Jetico Support Engineer
  • *
  • Offline Offline
  • Posts: 684
Re: Windows "System Restore"
« Reply #4 on: February 03, 2010, 04:50:30 AM »
Unfortunately BCWipe cannot define whether a copy of a special file exists in Restore Point or not.
It just detects existence of Restore Point.

Probably in some future version we will implement such advanced intelligence, but right now we do not know how to do so.

But BCWipe always gives the opportunity to wipe without turning System Restore off (i.e. deleting Restore Points).

cpuproTopic starter

  • Full Member
  • **
  • Offline Offline
  • Posts: 11
Re: Windows "System Restore"
« Reply #3 on: January 29, 2010, 03:18:17 PM »
Let me be more specific, I will try to explain this.

If you accept the "turn off system restore" what happens is that it DELETES all previous restore points.

I asked this because of an example that I did. Win7 Ultimate x64, I did a manual "system restore" for these tests. Went into "system restore" saw the manual restore point that I did. I then did "delete with wiping" on a file and the notice came up "do you want to turn system restore off", which I did. When "system restore" was turned off by BC Wipe and the file was wiped I went back into Windows 7 "system restore" and ALL restore points were gone, specifically the manual one I did just prior to this.

In my opinion if it is deleting all of the restore points you have no where to "roll back" the system to if you install something that isn't working, NO restore points to work with.

I would like a better understanding of what this is about, if I didn't have another way of restoring, WHS, I would be in trouble if something happened. I "delete with wiping" numerous times during the day, this message to turn off "system restore" is present so in essence I never have anything to restore to.

More Details - When I did the "system restore" in Win7 I checked to make sure it was there and functional. I then went out to another computer and the file that I brought over to "wipe" was something that had never been on this computer, ever. It was a document from 1989 that I had so I know it was never on the computer. The backup that I made on Win7 didn't have this file so when I brought this file over, "wiped" it and per BC Wipe turned off "system restore" it deleted the previous Win7 system restore that I had, it didn't have the file that I brought over to it, why did it delete the previous restore?

From Windows 7 - "Restore points are saved until the disk space System Restore reserves is filled up. As new restore points are created, old ones are deleted. If you turn off system protection (the feature that creates restore points) on a disk, all restore points are deleted from that disk. When you turn system protection back on, new restore points are created."

Jetico

  • Jetico Support Engineer
  • *
  • Offline Offline
  • Posts: 684
Re: Windows "System Restore"
« Reply #2 on: January 29, 2010, 08:06:56 AM »
Such option isn't implemented in BCWipe for security reasons.
If you are wiping file without turning off the System Restore, so-called "shadow copy" of the file will remain in system.
We feel it our duty to remind regularly about information leakage with SR turned on.
There is a good saying: "better safe than sorry".

cpuproTopic starter

  • Full Member
  • **
  • Offline Offline
  • Posts: 11
Windows "System Restore"
« Reply #1 on: January 28, 2010, 05:22:39 PM »
I have this notification come up a lot for turning "off" the System Restore. I do not want to turn off the System Restore. Is there somewhere that I can tell the application that I don't want to turn off System Restore so that I don't get this message?

 

* Permissions
You can't post new topics.
You can't post replies.
You can't post attachments.
You can't modify your posts.
BBCode Enabled
Smilies Enabled
[img] Enabled
HTML Disabled


Except where otherwise stated, all content © 2006 - 2010 Smokey Services™ -- All rights reserved
Design of all board graphics, banners and images by Emma aka Tinker - © 2006 - 2010 Smokey Services™ -- All rights reserved
Smokey's Security Forums is member AQMRB - Alliance of Qualified Malware Removal Boards™, an organisation of Approved Qualified Malware Removal Help & Support Boards
Member ASAP - Alliance of Security Analysis Professionals™

    

  

Smokey's provide fully qualified OTL (OldTimer ListIt) Log Analysis & Malware Removal services in English, German and Spanish language