Missing Quick Launch Bar

[Rusty]

I posted this also on alt.computer.security

Each time I boot up my PC I have to enable the quick launch bar. It
disappears when I shut down.

Also, no restore points appear other than the current day's checkpoint.

I've run out of ideas on how to fix these problems. Are they likely caused
by malaware?

I'm running XP Pro SP2

Cheers,
Ken Russell

[Default User]

On Fri, 23 Mar 2007 0708 +1100, "Rusty" <kenrussell@optus YOUR HAT
home.com.au> wrote:

>I posted this also on alt.computer.security

Thanks for letting us know, noob. Now there isn't any reason to answer your
question here on this group.

Learn how to crosspost and you might actually receive some help next time.

[Arecibo]

Rusty wrote:

> I posted this also on alt.computer.security

Crossposting is a really good idea.

> Each time I boot up my PC I have to enable the quick launch bar. It
> disappears when I shut down.
>
> Also, no restore points appear other than the current day's checkpoint.
>
> I've run out of ideas on how to fix these problems. Are they likely
> caused by malaware?

I don't know - what have you tried?

I'm not sure about System Restore. What happens when you try to create one
manually?

Quick Launch not appearing on re-boot? Try this:

Click Start, Run and type REGEDIT. Navigate to:
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \
Winlogon

In the right-pane, change the value of Userinit to
"C:\WINDOWS\system32\userinit.exe,"

Type the above value exactly as given, including the comma - exclude the
quotes. Also, change the path to userinit.exe appropriately if Windows is
installed in a different drive.

Close Registry Editor and restart Windows. The Quick Launch settings should
be retained now.


--


Arecibo

[Arecibo]

Arecibo wrote:

> Rusty wrote:
>
>> I posted this also on alt.computer.security
>
> Crossposting is a really good idea.
>
>> Each time I boot up my PC I have to enable the quick launch bar. It
>> disappears when I shut down.
>>
>> Also, no restore points appear other than the current day's checkpoint.

Troubleshooting System Restore.

http://support.microsoft.com/kb/302796/en-us

--
Arecibo

[pcbutts1]

Cut and paste everything between the lines and paste it into notepad. Save
the file as quick.reg and save it to the desktop. make sure you change the
save as type.... drop down box to all files. Once saved double click on the
file to merge it into the registry. Reboot.


Begin cut below this line
================================================== =================================
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
"NoSaveSettings"=dword:00000000



================================================== ==================================
End cut above this line

The above will fix the quick launch issue and may also fix the system
restore if it does not then use this one.

Begin cut below this line
================================================== =================================
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows NT\SystemRestore]
"DisableConfig"=dword:00000000
"DisableSR"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
"NoSaveSettings"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr]
"Type"=dword:00000002
"Start"=dword:00000000
"ErrorControl"=dword:00000001
"Tag"=dword:00000004
"ImagePath"=hex(2):53,00,79,00,73,00,74,00,65,00,6 d,00,33,00,32,00,5c,00,44,00,\
52,00,49,00,56,00,45,00,52,00,53,00,5c,00,73,00,72 ,00,2e,00,73,00,79,00,73,\
00,00,00
"DisplayName"="System Restore Filter Driver"
"Group"="FSFilter System Recovery"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr\Parameters]
"FirstRun"=dword:00000000
"DontBackup"=dword:00000000
"MachineGuid"="{EAAFAEEC-4AFE-42BE-83D9-C12FDD4942A6}"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00 ,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01 ,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02 ,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00 ,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00 ,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00 ,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00 ,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr\Enum]
"0"="Root\\LEGACY_SR\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group Policy
Objects\LocalMachine\Software\Policies\Microsoft\W indows NT\SystemRestore]
"DisableSR"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group Policy
Objects\LocalMachine\Software\Policies\Microsoft\W indows NT\SystemRestore]
"DisableConfig"=dword:00000000

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group Policy
Objects\LocalMachine\Software\Policies\Microsoft\W indows NT\SystemRestore]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows NT\SystemRestore]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group Policy
Objects\LocalMachine\Software\Policies\Microsoft\W indows NT\SystemRestore]




================================================== ==================================
End cut above this line


--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell



"Rusty" <kenrussell@optus YOUR HAT home.com.au> wrote in message
news:4602e69e$0$9772$afc38c87@news.optusnet.com.au ...
>I posted this also on alt.computer.security
>
> Each time I boot up my PC I have to enable the quick launch bar. It
> disappears when I shut down.
>
> Also, no restore points appear other than the current day's checkpoint.
>
> I've run out of ideas on how to fix these problems. Are they likely
> caused
> by malaware?
>
> I'm running XP Pro SP2
>
> Cheers,
> Ken Russell
>
>

[Rusty]

Thanks very much for your help!

I tried both suggestions, the first did nothing. Now the restore point from
yesterday is available but it won't allow me to manually create another. So
we have made some progress.

I still have to manually enable the Quick Launch bar every time I boot up.

Any more suggestions will be gratefully received.

Cheers,
Ken Russell

"pcbutts1" <pcbutts1@leythosthestalker.com> wrote in message
news:etv4oa$kvq$1@blackhelicopter.databasix.com...
> Cut and paste everything between the lines and paste it into notepad. Save
> the file as quick.reg and save it to the desktop. make sure you change the
> save as type.... drop down box to all files. Once saved double click on
> the file to merge it into the registry. Reboot.
>
>
> Begin cut below this line
> ================================================== =================================
> Windows Registry Editor Version 5.00
>
> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
> "NoSaveSettings"=dword:00000000
>
>
>
> ================================================== ==================================
> End cut above this line
>
> The above will fix the quick launch issue and may also fix the system
> restore if it does not then use this one.
>
> Begin cut below this line
> ================================================== =================================
> Windows Registry Editor Version 5.00
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows NT\SystemRestore]
> "DisableConfig"=dword:00000000
> "DisableSR"=dword:00000000
>
> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
> "NoSaveSettings"=dword:00000000
>
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr]
> "Type"=dword:00000002
> "Start"=dword:00000000
> "ErrorControl"=dword:00000001
> "Tag"=dword:00000004
> "ImagePath"=hex(2):53,00,79,00,73,00,74,00,65,00,6 d,00,33,00,32,00,5c,00,44,00,\
>
> 52,00,49,00,56,00,45,00,52,00,53,00,5c,00,73,00,72 ,00,2e,00,73,00,79,00,73,\
> 00,00,00
> "DisplayName"="System Restore Filter Driver"
> "Group"="FSFilter System Recovery"
>
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr\Parameters]
> "FirstRun"=dword:00000000
> "DontBackup"=dword:00000000
> "MachineGuid"="{EAAFAEEC-4AFE-42BE-83D9-C12FDD4942A6}"
>
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr\Security]
> "Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00 ,14,00,00,00,30,00,00,00,02,\
>
> 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01 ,00,00,00,00,00,01,00,00,\
>
> 00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02 ,00,01,01,00,00,00,00,00,\
>
> 05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00 ,00,00,00,05,20,00,00,00,\
>
> 20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00 ,00,00,05,0b,00,00,00,00,\
>
> 00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00 ,00,00,23,02,00,00,01,01,\
> 00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00 ,05,12,00,00,00
>
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr\Enum]
> "0"="Root\\LEGACY_SR\\0000"
> "Count"=dword:00000001
> "NextInstance"=dword:00000001
>
> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group Policy
> Objects\LocalMachine\Software\Policies\Microsoft\W indows NT\SystemRestore]
> "DisableSR"=dword:00000000
>
> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group Policy
> Objects\LocalMachine\Software\Policies\Microsoft\W indows NT\SystemRestore]
> "DisableConfig"=dword:00000000
>
> [-HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group Policy
> Objects\LocalMachine\Software\Policies\Microsoft\W indows NT\SystemRestore]
> [-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows NT\SystemRestore]
> [-HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group Policy
> Objects\LocalMachine\Software\Policies\Microsoft\W indows NT\SystemRestore]
>
>
>
>
> ================================================== ==================================
> End cut above this line
>
>
> --
>
> Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
> The list grows. Leythos the stalker http://www.leythosthestalker.com,
> David H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
> Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell
>
>
>
> "Rusty" <kenrussell@optus YOUR HAT home.com.au> wrote in message
> news:4602e69e$0$9772$afc38c87@news.optusnet.com.au ...
>>I posted this also on alt.computer.security
>>
>> Each time I boot up my PC I have to enable the quick launch bar. It
>> disappears when I shut down.
>>
>> Also, no restore points appear other than the current day's checkpoint.
>>
>> I've run out of ideas on how to fix these problems. Are they likely
>> caused
>> by malaware?
>>
>> I'm running XP Pro SP2
>>
>> Cheers,
>> Ken Russell
>>
>>
>
>

[pcbutts1]

Are you getting any errors when trying to create a restore point? Try
disabling SR, reboot, the re-enable it.


--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell



"Rusty" <kenrussell@optus YOUR HAT home.com.au> wrote in message
news:46043284$0$16558$afc38c87@news.optusnet.com.a u...
> Thanks very much for your help!
>
> I tried both suggestions, the first did nothing. Now the restore point
> from yesterday is available but it won't allow me to manually create
> another. So we have made some progress.
>
> I still have to manually enable the Quick Launch bar every time I boot up.
>
> Any more suggestions will be gratefully received.
>
> Cheers,
> Ken Russell
>
> "pcbutts1" <pcbutts1@leythosthestalker.com> wrote in message
> news:etv4oa$kvq$1@blackhelicopter.databasix.com...
>> Cut and paste everything between the lines and paste it into notepad.
>> Save the file as quick.reg and save it to the desktop. make sure you
>> change the save as type.... drop down box to all files. Once saved double
>> click on the file to merge it into the registry. Reboot.
>>
>>
>> Begin cut below this line
>> ================================================== =================================
>> Windows Registry Editor Version 5.00
>>
>> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
>> "NoSaveSettings"=dword:00000000
>>
>>
>>
>> ================================================== ==================================
>> End cut above this line
>>
>> The above will fix the quick launch issue and may also fix the system
>> restore if it does not then use this one.
>>
>> Begin cut below this line
>> ================================================== =================================
>> Windows Registry Editor Version 5.00
>>
>> [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows NT\SystemRestore]
>> "DisableConfig"=dword:00000000
>> "DisableSR"=dword:00000000
>>
>> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
>> "NoSaveSettings"=dword:00000000
>>
>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr]
>> "Type"=dword:00000002
>> "Start"=dword:00000000
>> "ErrorControl"=dword:00000001
>> "Tag"=dword:00000004
>> "ImagePath"=hex(2):53,00,79,00,73,00,74,00,65,00,6 d,00,33,00,32,00,5c,00,44,00,\
>>
>> 52,00,49,00,56,00,45,00,52,00,53,00,5c,00,73,00,72 ,00,2e,00,73,00,79,00,73,\
>> 00,00,00
>> "DisplayName"="System Restore Filter Driver"
>> "Group"="FSFilter System Recovery"
>>
>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr\Parameters]
>> "FirstRun"=dword:00000000
>> "DontBackup"=dword:00000000
>> "MachineGuid"="{EAAFAEEC-4AFE-42BE-83D9-C12FDD4942A6}"
>>
>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr\Security]
>> "Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00 ,14,00,00,00,30,00,00,00,02,\
>>
>> 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01 ,00,00,00,00,00,01,00,00,\
>>
>> 00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02 ,00,01,01,00,00,00,00,00,\
>>
>> 05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00 ,00,00,00,05,20,00,00,00,\
>>
>> 20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00 ,00,00,05,0b,00,00,00,00,\
>>
>> 00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00 ,00,00,23,02,00,00,01,01,\
>> 00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00 ,05,12,00,00,00
>>
>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr\Enum]
>> "0"="Root\\LEGACY_SR\\0000"
>> "Count"=dword:00000001
>> "NextInstance"=dword:00000001
>>
>> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group Policy
>> Objects\LocalMachine\Software\Policies\Microsoft\W indows
>> NT\SystemRestore]
>> "DisableSR"=dword:00000000
>>
>> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group Policy
>> Objects\LocalMachine\Software\Policies\Microsoft\W indows
>> NT\SystemRestore]
>> "DisableConfig"=dword:00000000
>>
>> [-HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group
>> Policy Objects\LocalMachine\Software\Policies\Microsoft\W indows
>> NT\SystemRestore]
>> [-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows
>> NT\SystemRestore]
>> [-HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group
>> Policy Objects\LocalMachine\Software\Policies\Microsoft\W indows
>> NT\SystemRestore]
>>
>>
>>
>>
>> ================================================== ==================================
>> End cut above this line
>>
>>
>> --
>>
>> Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
>> The list grows. Leythos the stalker http://www.leythosthestalker.com,
>> David H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
>> Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell
>>
>>
>>
>> "Rusty" <kenrussell@optus YOUR HAT home.com.au> wrote in message
>> news:4602e69e$0$9772$afc38c87@news.optusnet.com.au ...
>>>I posted this also on alt.computer.security
>>>
>>> Each time I boot up my PC I have to enable the quick launch bar. It
>>> disappears when I shut down.
>>>
>>> Also, no restore points appear other than the current day's checkpoint.
>>>
>>> I've run out of ideas on how to fix these problems. Are they likely
>>> caused
>>> by malaware?
>>>
>>> I'm running XP Pro SP2
>>>
>>> Cheers,
>>> Ken Russell
>>>
>>>
>>
>>
>
>

[Rusty]

That fixed the restore problem! Now if only we can solve the Quick Launch
problem.

Cheers and thanks,
Ken Russell

"pcbutts1" <pcbutts1@leythosthestalker.com> wrote in message
news:eu1e76$l7$1@blackhelicopter.databasix.com...
> Are you getting any errors when trying to create a restore point? Try
> disabling SR, reboot, the re-enable it.
>
>
> --
>
> Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
> The list grows. Leythos the stalker http://www.leythosthestalker.com,
> David H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
> Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell
>
>
>
> "Rusty" <kenrussell@optus YOUR HAT home.com.au> wrote in message
> news:46043284$0$16558$afc38c87@news.optusnet.com.a u...
>> Thanks very much for your help!
>>
>> I tried both suggestions, the first did nothing. Now the restore point
>> from yesterday is available but it won't allow me to manually create
>> another. So we have made some progress.
>>
>> I still have to manually enable the Quick Launch bar every time I boot
>> up.
>>
>> Any more suggestions will be gratefully received.
>>
>> Cheers,
>> Ken Russell
>>
>> "pcbutts1" <pcbutts1@leythosthestalker.com> wrote in message
>> news:etv4oa$kvq$1@blackhelicopter.databasix.com...
>>> Cut and paste everything between the lines and paste it into notepad.
>>> Save the file as quick.reg and save it to the desktop. make sure you
>>> change the save as type.... drop down box to all files. Once saved
>>> double click on the file to merge it into the registry. Reboot.
>>>
>>>
>>> Begin cut below this line
>>> ================================================== =================================
>>> Windows Registry Editor Version 5.00
>>>
>>> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
>>> "NoSaveSettings"=dword:00000000
>>>
>>>
>>>
>>> ================================================== ==================================
>>> End cut above this line
>>>
>>> The above will fix the quick launch issue and may also fix the system
>>> restore if it does not then use this one.
>>>
>>> Begin cut below this line
>>> ================================================== =================================
>>> Windows Registry Editor Version 5.00
>>>
>>> [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows
>>> NT\SystemRestore]
>>> "DisableConfig"=dword:00000000
>>> "DisableSR"=dword:00000000
>>>
>>> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
>>> "NoSaveSettings"=dword:00000000
>>>
>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr]
>>> "Type"=dword:00000002
>>> "Start"=dword:00000000
>>> "ErrorControl"=dword:00000001
>>> "Tag"=dword:00000004
>>> "ImagePath"=hex(2):53,00,79,00,73,00,74,00,65,00,6 d,00,33,00,32,00,5c,00,44,00,\
>>>
>>> 52,00,49,00,56,00,45,00,52,00,53,00,5c,00,73,00,72 ,00,2e,00,73,00,79,00,73,\
>>> 00,00,00
>>> "DisplayName"="System Restore Filter Driver"
>>> "Group"="FSFilter System Recovery"
>>>
>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr\Parameters]
>>> "FirstRun"=dword:00000000
>>> "DontBackup"=dword:00000000
>>> "MachineGuid"="{EAAFAEEC-4AFE-42BE-83D9-C12FDD4942A6}"
>>>
>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr\Security]
>>> "Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00 ,14,00,00,00,30,00,00,00,02,\
>>>
>>> 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01 ,00,00,00,00,00,01,00,00,\
>>>
>>> 00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02 ,00,01,01,00,00,00,00,00,\
>>>
>>> 05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00 ,00,00,00,05,20,00,00,00,\
>>>
>>> 20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00 ,00,00,05,0b,00,00,00,00,\
>>>
>>> 00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00 ,00,00,23,02,00,00,01,01,\
>>> 00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00 ,05,12,00,00,00
>>>
>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr\Enum]
>>> "0"="Root\\LEGACY_SR\\0000"
>>> "Count"=dword:00000001
>>> "NextInstance"=dword:00000001
>>>
>>> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group
>>> Policy Objects\LocalMachine\Software\Policies\Microsoft\W indows
>>> NT\SystemRestore]
>>> "DisableSR"=dword:00000000
>>>
>>> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group
>>> Policy Objects\LocalMachine\Software\Policies\Microsoft\W indows
>>> NT\SystemRestore]
>>> "DisableConfig"=dword:00000000
>>>
>>> [-HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group
>>> Policy Objects\LocalMachine\Software\Policies\Microsoft\W indows
>>> NT\SystemRestore]
>>> [-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows
>>> NT\SystemRestore]
>>> [-HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group
>>> Policy Objects\LocalMachine\Software\Policies\Microsoft\W indows
>>> NT\SystemRestore]
>>>
>>>
>>>
>>>
>>> ================================================== ==================================
>>> End cut above this line
>>>
>>>
>>> --
>>>
>>> Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
>>> The list grows. Leythos the stalker http://www.leythosthestalker.com,
>>> David H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
>>> Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell
>>>
>>>
>>>
>>> "Rusty" <kenrussell@optus YOUR HAT home.com.au> wrote in message
>>> news:4602e69e$0$9772$afc38c87@news.optusnet.com.au ...
>>>>I posted this also on alt.computer.security
>>>>
>>>> Each time I boot up my PC I have to enable the quick launch bar. It
>>>> disappears when I shut down.
>>>>
>>>> Also, no restore points appear other than the current day's checkpoint.
>>>>
>>>> I've run out of ideas on how to fix these problems. Are they likely
>>>> caused
>>>> by malaware?
>>>>
>>>> I'm running XP Pro SP2
>>>>
>>>> Cheers,
>>>> Ken Russell
>>>>
>>>>
>>>
>>>
>>
>>
>
>

[pcbutts1]

This will only work if the path to your system32 folder is
C:\windows\system32 if it is anything else then don't run it, let me know
what the path is and I will change the file.

Cut and paste everything between the lines and paste it into notepad. Save
the file as ql2.reg and save it to the desktop. make sure you change the
save as type.... drop down box to all files. Once saved double click on the
file to merge it into the registry. Reboot.


Begin cut below this line
================================================== =================================
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.ex e,"


================================================== ==================================
End cut above this line

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell



"Rusty" <kenrussell@optus YOUR HAT home.com.au> wrote in message
news:46046157$0$28625$afc38c87@news.optusnet.com.a u...
> That fixed the restore problem! Now if only we can solve the Quick
> Launch problem.
>
> Cheers and thanks,
> Ken Russell
>
> "pcbutts1" <pcbutts1@leythosthestalker.com> wrote in message
> news:eu1e76$l7$1@blackhelicopter.databasix.com...
>> Are you getting any errors when trying to create a restore point? Try
>> disabling SR, reboot, the re-enable it.
>>
>>
>> --
>>
>> Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
>> The list grows. Leythos the stalker http://www.leythosthestalker.com,
>> David H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
>> Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell
>>
>>
>>
>> "Rusty" <kenrussell@optus YOUR HAT home.com.au> wrote in message
>> news:46043284$0$16558$afc38c87@news.optusnet.com.a u...
>>> Thanks very much for your help!
>>>
>>> I tried both suggestions, the first did nothing. Now the restore point
>>> from yesterday is available but it won't allow me to manually create
>>> another. So we have made some progress.
>>>
>>> I still have to manually enable the Quick Launch bar every time I boot
>>> up.
>>>
>>> Any more suggestions will be gratefully received.
>>>
>>> Cheers,
>>> Ken Russell
>>>
>>> "pcbutts1" <pcbutts1@leythosthestalker.com> wrote in message
>>> news:etv4oa$kvq$1@blackhelicopter.databasix.com...
>>>> Cut and paste everything between the lines and paste it into notepad.
>>>> Save the file as quick.reg and save it to the desktop. make sure you
>>>> change the save as type.... drop down box to all files. Once saved
>>>> double click on the file to merge it into the registry. Reboot.
>>>>
>>>>
>>>> Begin cut below this line
>>>> ================================================== =================================
>>>> Windows Registry Editor Version 5.00
>>>>
>>>> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
>>>> "NoSaveSettings"=dword:00000000
>>>>
>>>>
>>>>
>>>> ================================================== ==================================
>>>> End cut above this line
>>>>
>>>> The above will fix the quick launch issue and may also fix the system
>>>> restore if it does not then use this one.
>>>>
>>>> Begin cut below this line
>>>> ================================================== =================================
>>>> Windows Registry Editor Version 5.00
>>>>
>>>> [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows
>>>> NT\SystemRestore]
>>>> "DisableConfig"=dword:00000000
>>>> "DisableSR"=dword:00000000
>>>>
>>>> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
>>>> "NoSaveSettings"=dword:00000000
>>>>
>>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr]
>>>> "Type"=dword:00000002
>>>> "Start"=dword:00000000
>>>> "ErrorControl"=dword:00000001
>>>> "Tag"=dword:00000004
>>>> "ImagePath"=hex(2):53,00,79,00,73,00,74,00,65,00,6 d,00,33,00,32,00,5c,00,44,00,\
>>>>
>>>> 52,00,49,00,56,00,45,00,52,00,53,00,5c,00,73,00,72 ,00,2e,00,73,00,79,00,73,\
>>>> 00,00,00
>>>> "DisplayName"="System Restore Filter Driver"
>>>> "Group"="FSFilter System Recovery"
>>>>
>>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr\Parameters]
>>>> "FirstRun"=dword:00000000
>>>> "DontBackup"=dword:00000000
>>>> "MachineGuid"="{EAAFAEEC-4AFE-42BE-83D9-C12FDD4942A6}"
>>>>
>>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr\Security]
>>>> "Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00 ,14,00,00,00,30,00,00,00,02,\
>>>>
>>>> 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01 ,00,00,00,00,00,01,00,00,\
>>>>
>>>> 00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02 ,00,01,01,00,00,00,00,00,\
>>>>
>>>> 05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00 ,00,00,00,05,20,00,00,00,\
>>>>
>>>> 20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00 ,00,00,05,0b,00,00,00,00,\
>>>>
>>>> 00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00 ,00,00,23,02,00,00,01,01,\
>>>> 00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00 ,05,12,00,00,00
>>>>
>>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr\Enum]
>>>> "0"="Root\\LEGACY_SR\\0000"
>>>> "Count"=dword:00000001
>>>> "NextInstance"=dword:00000001
>>>>
>>>> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group
>>>> Policy Objects\LocalMachine\Software\Policies\Microsoft\W indows
>>>> NT\SystemRestore]
>>>> "DisableSR"=dword:00000000
>>>>
>>>> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group
>>>> Policy Objects\LocalMachine\Software\Policies\Microsoft\W indows
>>>> NT\SystemRestore]
>>>> "DisableConfig"=dword:00000000
>>>>
>>>> [-HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group
>>>> Policy Objects\LocalMachine\Software\Policies\Microsoft\W indows
>>>> NT\SystemRestore]
>>>> [-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows
>>>> NT\SystemRestore]
>>>> [-HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group
>>>> Policy Objects\LocalMachine\Software\Policies\Microsoft\W indows
>>>> NT\SystemRestore]
>>>>
>>>>
>>>>
>>>>
>>>> ================================================== ==================================
>>>> End cut above this line
>>>>
>>>>
>>>> --
>>>>
>>>> Newsgroup Trolls. Read about mine here
>>>> http://www.pcbutts1.com/downloads
>>>> The list grows. Leythos the stalker http://www.leythosthestalker.com,
>>>> David H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
>>>> Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell
>>>>
>>>>
>>>>
>>>> "Rusty" <kenrussell@optus YOUR HAT home.com.au> wrote in message
>>>> news:4602e69e$0$9772$afc38c87@news.optusnet.com.au ...
>>>>>I posted this also on alt.computer.security
>>>>>
>>>>> Each time I boot up my PC I have to enable the quick launch bar. It
>>>>> disappears when I shut down.
>>>>>
>>>>> Also, no restore points appear other than the current day's
>>>>> checkpoint.
>>>>>
>>>>> I've run out of ideas on how to fix these problems. Are they likely
>>>>> caused
>>>>> by malaware?
>>>>>
>>>>> I'm running XP Pro SP2
>>>>>
>>>>> Cheers,
>>>>> Ken Russell
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>

[Rusty]

Did that but no joy :-(

Persistent little problem hey!

Cheers,
Ken Russell

"pcbutts1" <pcbutts1@leythosthestalker.com> wrote in message
news:eu1pr3$19p$1@blackhelicopter.databasix.com...
> This will only work if the path to your system32 folder is
> C:\windows\system32 if it is anything else then don't run it, let me know
> what the path is and I will change the file.
>
> Cut and paste everything between the lines and paste it into notepad. Save
> the file as ql2.reg and save it to the desktop. make sure you change the
> save as type.... drop down box to all files. Once saved double click on
> the file to merge it into the registry. Reboot.
>
>
> Begin cut below this line
> ================================================== =================================
> Windows Registry Editor Version 5.00
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
> "Userinit"="C:\\WINDOWS\\system32\\userinit.ex e,"
>
>
> ================================================== ==================================
> End cut above this line
>
> --
>
> Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
> The list grows. Leythos the stalker http://www.leythosthestalker.com,
> David H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
> Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell
>
>
>
> "Rusty" <kenrussell@optus YOUR HAT home.com.au> wrote in message
> news:46046157$0$28625$afc38c87@news.optusnet.com.a u...
>> That fixed the restore problem! Now if only we can solve the Quick
>> Launch problem.
>>
>> Cheers and thanks,
>> Ken Russell
>>
>> "pcbutts1" <pcbutts1@leythosthestalker.com> wrote in message
>> news:eu1e76$l7$1@blackhelicopter.databasix.com...
>>> Are you getting any errors when trying to create a restore point? Try
>>> disabling SR, reboot, the re-enable it.
>>>
>>>
>>> --
>>>
>>> Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
>>> The list grows. Leythos the stalker http://www.leythosthestalker.com,
>>> David H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
>>> Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell
>>>
>>>
>>>
>>> "Rusty" <kenrussell@optus YOUR HAT home.com.au> wrote in message
>>> news:46043284$0$16558$afc38c87@news.optusnet.com.a u...
>>>> Thanks very much for your help!
>>>>
>>>> I tried both suggestions, the first did nothing. Now the restore point
>>>> from yesterday is available but it won't allow me to manually create
>>>> another. So we have made some progress.
>>>>
>>>> I still have to manually enable the Quick Launch bar every time I boot
>>>> up.
>>>>
>>>> Any more suggestions will be gratefully received.
>>>>
>>>> Cheers,
>>>> Ken Russell
>>>>
>>>> "pcbutts1" <pcbutts1@leythosthestalker.com> wrote in message
>>>> news:etv4oa$kvq$1@blackhelicopter.databasix.com...
>>>>> Cut and paste everything between the lines and paste it into notepad.
>>>>> Save the file as quick.reg and save it to the desktop. make sure you
>>>>> change the save as type.... drop down box to all files. Once saved
>>>>> double click on the file to merge it into the registry. Reboot.
>>>>>
>>>>>
>>>>> Begin cut below this line
>>>>> ================================================== =================================
>>>>> Windows Registry Editor Version 5.00
>>>>>
>>>>> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
>>>>> "NoSaveSettings"=dword:00000000
>>>>>
>>>>>
>>>>>
>>>>> ================================================== ==================================
>>>>> End cut above this line
>>>>>
>>>>> The above will fix the quick launch issue and may also fix the system
>>>>> restore if it does not then use this one.
>>>>>
>>>>> Begin cut below this line
>>>>> ================================================== =================================
>>>>> Windows Registry Editor Version 5.00
>>>>>
>>>>> [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows
>>>>> NT\SystemRestore]
>>>>> "DisableConfig"=dword:00000000
>>>>> "DisableSR"=dword:00000000
>>>>>
>>>>> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
>>>>> "NoSaveSettings"=dword:00000000
>>>>>
>>>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr]
>>>>> "Type"=dword:00000002
>>>>> "Start"=dword:00000000
>>>>> "ErrorControl"=dword:00000001
>>>>> "Tag"=dword:00000004
>>>>> "ImagePath"=hex(2):53,00,79,00,73,00,74,00,65,00,6 d,00,33,00,32,00,5c,00,44,00,\
>>>>>
>>>>> 52,00,49,00,56,00,45,00,52,00,53,00,5c,00,73,00,72 ,00,2e,00,73,00,79,00,73,\
>>>>> 00,00,00
>>>>> "DisplayName"="System Restore Filter Driver"
>>>>> "Group"="FSFilter System Recovery"
>>>>>
>>>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr\Parameters]
>>>>> "FirstRun"=dword:00000000
>>>>> "DontBackup"=dword:00000000
>>>>> "MachineGuid"="{EAAFAEEC-4AFE-42BE-83D9-C12FDD4942A6}"
>>>>>
>>>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr\Security]
>>>>> "Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00 ,14,00,00,00,30,00,00,00,02,\
>>>>>
>>>>> 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01 ,00,00,00,00,00,01,00,00,\
>>>>>
>>>>> 00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02 ,00,01,01,00,00,00,00,00,\
>>>>>
>>>>> 05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00 ,00,00,00,05,20,00,00,00,\
>>>>>
>>>>> 20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00 ,00,00,05,0b,00,00,00,00,\
>>>>>
>>>>> 00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00 ,00,00,23,02,00,00,01,01,\
>>>>> 00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00 ,05,12,00,00,00
>>>>>
>>>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sr\Enum]
>>>>> "0"="Root\\LEGACY_SR\\0000"
>>>>> "Count"=dword:00000001
>>>>> "NextInstance"=dword:00000001
>>>>>
>>>>> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group
>>>>> Policy Objects\LocalMachine\Software\Policies\Microsoft\W indows
>>>>> NT\SystemRestore]
>>>>> "DisableSR"=dword:00000000
>>>>>
>>>>> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group
>>>>> Policy Objects\LocalMachine\Software\Policies\Microsoft\W indows
>>>>> NT\SystemRestore]
>>>>> "DisableConfig"=dword:00000000
>>>>>
>>>>> [-HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group
>>>>> Policy Objects\LocalMachine\Software\Policies\Microsoft\W indows
>>>>> NT\SystemRestore]
>>>>> [-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows
>>>>> NT\SystemRestore]
>>>>> [-HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group
>>>>> Policy Objects\LocalMachine\Software\Policies\Microsoft\W indows
>>>>> NT\SystemRestore]
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> ================================================== ==================================
>>>>> End cut above this line
>>>>>
>>>>>
>>>>> --
>>>>>
>>>>> Newsgroup Trolls. Read about mine here
>>>>> http://www.pcbutts1.com/downloads
>>>>> The list grows. Leythos the stalker http://www.leythosthestalker.com,
>>>>> David H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
>>>>> Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell
>>>>>
>>>>>
>>>>>
>>>>> "Rusty" <kenrussell@optus YOUR HAT home.com.au> wrote in message
>>>>> news:4602e69e$0$9772$afc38c87@news.optusnet.com.au ...
>>>>>>I posted this also on alt.computer.security
>>>>>>
>>>>>> Each time I boot up my PC I have to enable the quick launch bar. It
>>>>>> disappears when I shut down.
>>>>>>
>>>>>> Also, no restore points appear other than the current day's
>>>>>> checkpoint.
>>>>>>
>>>>>> I've run out of ideas on how to fix these problems. Are they likely
>>>>>> caused
>>>>>> by malaware?
>>>>>>
>>>>>> I'm running XP Pro SP2
>>>>>>
>>>>>> Cheers,
>>>>>> Ken Russell
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>