why do my Restore Points keep disappearing?

[sassofalco]

Generally speaking, I like to maintain an "archive" of Restore Points [eg. Windows Updates, self-created Restore Points done when installing new software, etc.] that cover about a month's worth of recent activity.

More recently, I've become really concerned because for some unknown reason, the number of Restore Points in my archives [which I check using CCleaner > Tools > System Restore] seems to be dwindling and /or disappearing, leaving me with just one or two from the most recent restore point creations.

How do I go about ensuring that I maintain a reasonable number of restore points [ideally about 12 to 14 points covering about 4 to 6 weeks worth] in my system?

Restore Points that are no more than 2 to 3 days old, are too close for comfort as far as I'm concerned.

 

[Brink]

Hello Tony,

If you haven't already, you could change the maximum disk space usage amount for system protection to be higher to help store more restore points.

http://www.sevenforums.com/tutorials/335-system-protection-change-disk-space-usage.html

Hope this helps.

 

[sassofalco]

"Lost" Restore Points.

Thanks for getting back so soon Sean. Hope all is well...

OK to the problem.

I had the maximum disk space usage amount already set at 15%, but after the post, pushed it out to 18% [= 18GB] and will monitor things over the next few days [ie. Windows Update Restore Points, etc.]

However, I also note that both the Services of Volume Shadow Copy and Windows Backup are shown as set to Manual in Startup Type.

I understand that the recommended Startup Type for those two Services is Automatic, and if that is the case, a pointer in the right direction to apply the setting, will be much appreciated.

Cheers Mate

 

[Brink]

Manual is the default and should be fine, but changing it to Automatic will be fine as well if wanted. Step 6 in Option One of the tutorial below can help show you how.

http://www.sevenforums.com/tutorials/2495-services-start-disable.html

 

[sassofalco]

Thanks Sean, I'll keep you posted on developments.

Cheers for now... as always, you're a Legend.

 

[Brink]

You're welcome.

 

[Layback Bear]

Just a thought.
Check your free space on the drive.

 

[sassofalco]

Restore points all disappeared yet again

Just a thought.
Check your free space on the drive.

I have a ton of free space on the HD ... but as my heading points out, while doing a check of Restore Points yesterday, I discovered that all had disappeared completely.

A similar check two days ago [via CCleaner [as Admin] > Tools > Restore Points], showed 6 various [Windows Updates & Manually created] Restore points, PLUS the latest greyed out.

The shock of yesterday's discovery is that NOT ONE Restore Point was evident - this situation scares the heck out of me.

Additionally, I have also carried out a myriad of virus, security, spybot and malware scans - nothing found apart from the usual cookies etc.

 

[Brink]

Hey Tony,

Do you have any other utility type programs installed that include a restore point management feature?

Do you dual boot with another OS? If so, then that could be why.

If you turn off system protection, it would also delete all restore points.

The reason why the latest restore point is grayed out in CCleaner is that by default only up to all but the latest restore point can be deleted.

To be safe, I would also recommend to keep an updated system image. It's more reliable than restore points.

http://www.sevenforums.com/tutorials/663-backup-complete-computer-create-image-backup.html

 

[sassofalco]

Hello Shawn,

Thanks for getting back with your advice...

I do have pre-installed software on the laptop called NTI Backup Now 5. Standard Edition and am wondering if it's worthwhile giving that a run?

http://www.nticorp.com/en/us/product/backup_now5.asp

In the meantime, I will study your suggestion carefully, to make sure that I don't stuff up.

Cheers,
Tony

15 minutes short of 6 hours for an NTI backup of one drive = 235GB, and another of 57GB!
Now I think I'll look at your suggested link and see the comparisons.

 

[sassofalco]

System Image Failed

....well, that was 4 hours of nothing (d) as you can see.


So where to now? ... but I'm ready to give a fix a go.

Frustrating ...

 

[sassofalco]

This all looks so wrong

Hey Tony,

Do you have any other utility type programs installed that include a restore point management feature?

Do you dual boot with another OS? If so, then that could be why.

If you turn off system protection, it would also delete all restore points.

The reason why the latest restore point is grayed out in CCleaner is that by default only up to all but the latest restore point can be deleted.

To be safe, I would also recommend to keep an updated system image. It's more reliable than restore points.

http://www.sevenforums.com/tutorials/663-backup-complete-computer-create-image-backup.html

...this is how things look after the NTI Backup...and somehow, it all looks so wrong!

Somehow, my Tony-PC Folder has ended up on the Toshiba External Hard Drive. If I work as the Administrator, can I place it back where it should be? And on that point, I've forgotten where .....advice please to correct.. Note: I have resisted all temptation to eject the Toshiba HD at this stage. What a mess!!

 

[Brink]

Tony,

Your user folder did not get moved. That's just part of the system image backup. From the blue note box at the top of the tutorial. If you like, you can safely delete the E:\WindowsImageBackup folder to delete the failed system image to recover the hard drive space.

drive letter:\WindowsImageBackup\computer name\Backup YYYY-MM-DD HHMMSS


If you like NTI Backup, then you could use that instead. Macrium Reflect Free is another good program.

 

[sassofalco]

2 x Backups failed - Recommended CHKDSK/R run

Hey Tony,

Do you have any other utility type programs installed that include a restore point management feature? No... but CCleaner does monitor and show current restore points available

Do you dual boot with another OS? If so, then that could be why. No

If you turn off system protection, it would also delete all restore points. Always On

The reason why the latest restore point is grayed out in CCleaner is that by default only up to all but the latest restore point can be deleted. Understood

To be safe, I would also recommend to keep an updated system image. It's more reliable than restore points. Noted

http://www.sevenforums.com/tutorials/663-backup-complete-computer-create-image-backup.html

Thanks for the help Shawn,

OK ... the following two different backup attempts describe the problems clearly.



So, in elevated command I ran CHKDSK/R, and then sat back and watched the grass grow. I'm guessing that CHKDSK/R must have scanned the system completely about five [x 5] times over in all, and eventually cleaned out some sectors of 'BAD' files*, before it finally finished after about 8 hours, and rebooted my Laptop. :shock:

All restarted better than it has in days, and there is none of the previously noted instability happening now. However, I will continue to monitor the situation for the time being.

I'm presuming that I should be able to access a log of the CHKDSK/R event, but have been unable to locate it. Advice please.

Cheers, Tony

* not the word used to describe the 'bundles', but I've forgotten the correct name

 

[Brink]

That's great news so far Tony.

See if this may be able to help with the chkdsk log.

http://www.sevenforums.com/tutorials/96938-check-disk-chkdsk-read-event-viewer-log.html

 

[sassofalco]

I am logged in as the Administrator, however, at Windows Log > Application, in the Context Menu - 'Find' is greyed out... :shock:

 

[Brink]

Odd. Close and reopen Event Viewer, and see if Find is still grayed out.

 

[andrew129260]

Everything I read about your issues sound like malware to me. There are some malware that attempts to hide itself by using restore points. The sneakiest ones remove themselves when you are scanning and throw themselves into a restore point, scheduling it to run as boot. So then when the system restarts the threat is restored. It then deletes the rest of the restore points, so that you cannot do one when it decides to trash your system and undo what it did.

**Let's disable system protection on all drives right now, as this will remove all restore points. Even the latest one that typically cannot be removed. Keep it disabled while we look at your machine. This way the malware (if it exists) has no where to go.** <------Please confirm and tell me you have done this step.

I know you have stated that you have ran all kinds of malware scans, but lets give this one a go...

1.) Download herdprotect: (choose the portable version)

Download herdProtect - Free Anti-Malware Platform

2.) Run the scan.

3.) When the scan finishes, save the results per the screenshot below. Then upload the log here.

DO NOT REMOVE ANYTHING YET. I will advise if anything needs removed when I receive the log.

Attached Images

 

[sassofalco]

I'll give that a go, since I've just checked Restore Points via CCleaner, only to discover that all, including some manual 'Safety First' I've created almost on a daily basis over the past few days .... have gone! Not even a grey restore point in sight.

 

[sassofalco]

Please confirm and tell me you have done this step.[/B] See my edited reply

I know you have stated that you have ran all kinds of malware scans, but lets give this one a go...

1.) Download herdprotect: (choose the portable version)

Download herdProtect - Free Anti-Malware Platform

2.) Run the scan. 1st Scan done

3.) When the scan finishes, save the results per the screenshot below. Then upload the log here.

.... will attempt this step here, next reply.

DO NOT REMOVE ANYTHING YET. I will advise if anything needs removed when I receive the log.

Attached Images

....per advice and instructions. Note: As yet I've not gone near the " ? " for settings