Can't find the under-the-hood answers to these questions. Maybe Shawn "brink" sees this an can answer being the SR guru that he is.
[1] I've observed System restore disabled by bad guys (malware). I also happened to see it disabled after an update from 8 to 8.1. I assumed this was "normal" in that it may be too hard for Microsoft to roll back to restore points from 8 when you are at 8.1. If so, do they document that anywhere? If they indeed do this then they surely need to remember to turn it back on when the 8.1 updates are done. If they don't do this, it tells me to look out for the bad guys doing it.
[2] How dependent is SR on which services. Suppose my WMI service has been stopped/crippled and i don't realize it. Does SR depend on WMI? In what way?
[3] Is there a recovery tool to undo someone turning off System Restore and attempt to salvage what is there. I'm assuming the disabling of SR doesn't go around actually scrubbing the data and that it can indirectly be salvaged, albeit at some (hopefully) understood risk.
Thanks,
H.
[1] I've observed System restore disabled by bad guys (malware). I also happened to see it disabled after an update from 8 to 8.1. I assumed this was "normal" in that it may be too hard for Microsoft to roll back to restore points from 8 when you are at 8.1. If so, do they document that anywhere? If they indeed do this then they surely need to remember to turn it back on when the 8.1 updates are done. If they don't do this, it tells me to look out for the bad guys doing it.
[2] How dependent is SR on which services. Suppose my WMI service has been stopped/crippled and i don't realize it. Does SR depend on WMI? In what way?
[3] Is there a recovery tool to undo someone turning off System Restore and attempt to salvage what is there. I'm assuming the disabling of SR doesn't go around actually scrubbing the data and that it can indirectly be salvaged, albeit at some (hopefully) understood risk.
Thanks,
H.
My Computer
System One
-
- OS
- all versions