Does NIS2008 interfere with windows restore points?

Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.

Hi all

before I upgraded to the latest NIS 2008 from NIS 2008 15.00063(can't remember the exact version number)),I had tried to use the restore point setting on my pc.but it would not work,it kept coming up in Norton alerts log as some file from windows that was attacking Norton,I had quite a few alerts in that file that said a windows file was attacking Norton and Norton shut it out.now this all happened with the old 2008.but it has not happened at all with this version.i'm only asking this if I ever have to use the restore points I may have an answer to any problems that occur.I'm now on XP sp3 before it was sp2.hopefully i'm learning a bit quicker to do these upgrades.i do have the log saved as a text document

actor c:\windows\explorer.exe(pid268)target c:\windows\system32\restore\rstrui.exe unauthorised access reaction stopped

 

a few other targets were \ccsvchost.exe,lucomserver_3_4.exe,symantecshared\ccpd-lc\symlcsvc.exe

so guys what do you think?

cheers mo

ps as i have said my alerts log is now clean and none of this activity has returned

Hi Phil_D

have been reading in another post regarding system restore points.thanks for the tip I have seen the instructions on how to find and change the setting but I don't know about the manual live update?are any of the other entries a need for concern?or is all ok since no other alerts have occurred since the updated version of 2008.

cheers Mo

Hi mo, 

 

It's just good practice to run a manual live update after a System Restore to be sure your updates were not affected by the system restore.

 

When "Protect Norton Product" is enabled, you may see entries in the log viewer about "unauthorized access"  - a rather simplified explanation is that Norton is protecting itself from access by other programs, some as innocent as MS Word.  Generally nothing to worry about in these alert logs unless you see an totally new and unknown program.

 

The Manual Live Update button is located in the lower left corner of the main Norton User Interface Window.

 

Seems like you are still doing a lot of exploring!

 

Best wishes.

Hi Phil_D

I think I will be exploring till the day I die!LOL Computers are amazing,thanks to you guys and reading Norton forums I think they are actually making sense.Thanks for the pointer to the live manual update button.I think its better to ask a question than sit here and be worried by a phantom so I do appreciate your time and advice.

cheers Mo


mo wrote:

Hi Phil_D

I think I will be exploring till the day I die!LOL Computers are amazing,thanks to you guys and reading Norton forums I think they are actually making sense.Thanks for the pointer to the live manual update button.I think its better to ask a question than sit here and be worried by a phantom so I do appreciate your time and advice.

cheers Mo


Exactly.
the machine you are sitting behind should be fun and not a pain in the s$%^
We are all here just to help out 

 

5 Likes

I  know the official instructions say that you can use System Restore by disabling product protection right before attempting to do the restore, but from my experience this won't work. 

 

I try to restore maybe a few times a year, but from my experience all restores will fail even if product protection is disabled and even in Safe Mode.  This happens on multple computers running XP.  The only way I've ever gotten System Restore to work since Symantec implemented their product protection feature is by leaving product protection disabled.  Prior to the product protection feature being implemented I rarely had a problem with System Restore not working.  

 

The only time System Restore has been successful is if I clear out all the restore points and then create a new one with product protection disabled.  If I test immediately after that restore will work, but that's not very useful since the times I want to do a restore are times when I haven't cleared out the points before hand.

 

I think the problem is that with product protection enabled, Restore points tend to get corrupted because files are locked.  Once a restore point is corrupted all future points will be corrupted as well.  Fortunately I don't really use System Restore.

Thanks Morac

I have not needed to do any restore points thus far,it was in the past that I tried it and came across the problem.As I'm learning sometimes something goes array in the great land of the PC,so I thought I had better arm myself with some knowledge of how to use the escape route"system restore".I appreciate your input and have made notes.I hope I wont have to use it but you never know!

cheers Mo

Does symantec have any thoughts on this?

3 Likes

Symantec's official KB article says that it will work if you disable product protection before trying to do the restore. I was just offering some real world examples that counter this.

 

Granted I very rarely do restores so the issue might be better with later version of NIS, but like I said when I did try to do restores, thy failed much more often after installing NIS than before.

 

I haven't yet come across an instance where I "need" to do a system restore, but I have had times where I wanted to do so because a program I installed added a ton of crap to the registry file that wasn't removed after I removed the program about an hour later. None of the restore points on my PC would work which normally means that one of them is corrupted. I ended up having to clean up the registry by hand which took me a lot longer than a system restore would have taken.

 

This page has a fairly extensive lists of problems that can occur with System Restore and how to fix them. It's written for XP SP2, but it should apply to SP3 as well.

 

Message Edited by Morac on 09-06-2008 03:15 AM
[edit: fixed link.]
Message Edited by Allen_K on 09-06-2008 09:13 AM

Hello Morac,

 

Those are interesting observations that you have posted.

 

I, like you very rarely perform a System Restore and generally under the same conditions you outlined, but when I disable product protection I always have success. I am using currently NIS 2008 but the same procedure worked for me with NIS 2007.

 

Thanks for your input!

Norton does not interfere with system restore points, but may prevent a system restore if you have "Protect Norton Product" enabled, which is a good idea to keep enabled.

 

If you want to perform a system restore, check this link for instructions.

 

After you perform a system restore, be sure to turn "Protect Norton Product" back on and perform a manual live update.