Resgistry setting for System Restore cache re-enablement

  • Thread starter Thread starter David H. Lipman
  • Start date Start date
D

David H. Lipman

The Spy/Delf Trojan, a password stealing Trojan, sets the following...

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srservice
Start=dword:00000004

Which disables the System Restore cache.

What should the DWORD be set to re-enable the System Restore cache >
What are all the options for the "start" key ?
 
The default value is 2 for Automatic. 3 is Manual and 4 is disabled. I don't know what a value of 1 does, as that isn't exposed by the GUI.
 
From: "Doug Knox MS-MVP" <[email protected]>

| The default value is 2 for Automatic. 3 is Manual and 4 is disabled. I don't know what a
| value of 1 does, as that isn't exposed by the GUI. --
| Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
| Win 95/98/Me/XP Tweaks and Fixes
| http://www.dougknox.com
| --------------------------------
| Per user Group Policy Restrictions for XP Home and XP Pro
| http://www.dougknox.com/xp/utils/xp_securityconsole.htm
| --------------------------------
| Please reply only to the newsgroup so all may benefit.
| Unsolicited e-mail is not answered.
|
|

Thanx Doug !
 
Back
Top