1.

Solve : system restore in DOS?

Answer»

I have a virus in my home computer, which does not recognize users or ADMINISTRATOR. It will not allow me to do a system restore.

Is there a DOS command I, (a novice), can use to override administrator and do system restore?Have you tried booting in Safe Mode?

NOTE: Be aware that performing a system restore may not necessarily get rid of the virus.
Not really.
But you can boot in safe mode by hitting F8 before windows starts up. On of the options may be a boot with command prompt. But I don't think that will help much.I have tried in safe mode, safe mode with networking, doing c:\windows\system32\restore\rstrui.exe through both the windows task manager and cmd window, and runnins irestore.exe.

I have no task bar, so I am limited to safe mode options. that is why I am looking for a way to bypass administrator.

is there a cmd for searching the hard drive for a system restore function?Quote from: DadsterJim on March 01, 2009, 05:59:32 PM

I have tried in safe mode, safe mode with networking, doing c:\windows\system32\restore\rstrui.exe through both the windows task manager and cmd window, and runnins irestore.exe.

What is "irestore.exe"?
Are you able to you run "rstrui.exe"? If yes, are you not able to select a restore point?

I do not believe that you can run a system restore without logging on as a user with administrator privileges.
when I try to run rstrui.exe, I get a box telling me I do not have the security priviledges to run system restore.

And I apoligize for mis-typing my earlier response. I tried RUNNING iexplore.exe; and not irestore.exe. Please forgive this slip. I am still trying to learn computer speak.

Again, I need to find a way to bypass admin.

when I open the window that shows users on the computer, it is BLANK. when I try to log in to the admin, it recognizes none of my info.

Let me, at this point, say thank you to those who have responded, and those who may yet respond.You could try using the "runas" command, assuming that the Administrator account (or a user with administrator privileges) has not been deleted or corrupted.

Open a command prompt window and type:

runas /user:%computername%\administrator_or_user_name %systemroot%\system32\restore\rstrui.exe

(Change "administrator_or_user_name" to the Administrator account name or a user with administrator privileges.)

You will then be prompted to enter that account's PASSWORD.

If all goes well, System Restore should start.

If you are running XP and it is on drive C:
At the command line you can do:
Code: [Select]
c:\windows\system32\restore\rstrui.exe

Which you already tried and it did not work?
Oldun; thank you for the link. admin and users not recognized. couldn't get past request for password. Actually, NOTHING would type in when tried to enter a password.

Geek-9pm; you are right. Already tried that command.Please Note: At the prompt to enter the password, whatever you type will NOT display in the window, and the cursor will NOT move, but if you have entered a valid password, the command WILL be accepted and processed.
thank you for that piece of information. I will give it another try.

I was able to install a password by hitting del while turning on computer. although system is not recognizing administrator or users, maybe it will accept password I installed.That was the BIOS password you set, which is on a completely different level then the password system of windows.


Discussion

No Comment Found