Printable View
This is a continuation of my earlier _RESTORE post. My _RESTORE folder is increasing in size daily and has already gone up another 300 MB. I have recently been using the program evidence elimator quite frequently and i'm wondering if perhaps it is making backups of the files it deletes and somehow saving them in the _RESTORE directory. Is this a possiblilty or am i way off?
First off there isn't a need to make multiple post's about the same thing. Sorry to sound like a ***** about it, but you should have posted this in the other thread you created. Second, like I've stated to you, it will continue growing. That's what it does, with everything that happen's on your PC and every file change, deletion, etc, it will change. You can if you want delete restore point's and some data you feel you don't need. However, this isn't recommended because you MIGHT at a certain time want to refer back to a different period.
If I was concerned about what content might be found on my computer, the 1st thing I would turn off is the restore function.
Otherwise you are just creating a library of evidence not eliminated...?? :)
Spyder32 is quite correct, in WindowsME it just keeps growing, as it creates a new recovery point each time you boot up.
I would not have thought that Evidence Eliminator would have any influence on it, but I must admit that I do not know that product. Assuming that it is just like most other housekeeping tools, it will only be cleaning temporary files, MRUs and the like which system restore would not restore anyway.
It may have a restore function within itself though, so you need to look at its settings to see if it has been set to make backups. The file will most probably be in its own folder.
:)
This is just a question. I don't know if it will help or not because I keep restore off. But, if you turn it off it deletes the restore points right. When you turn it back on does it run through your whole system and make new restore points for everything and would it cut out the garbage if you turn it off then turn it back on. Or is it garbage when it saves all the deletions and stuff?
how do i turn off the restore function
For Windows XP: Right Click on 'My Computer' and click on 'Properties'Quote:
Click on the 'System Restore' Tab
Place a check in the box next to "Turn off System Restore on all Drives"
For Windows ME: Right Click on 'My Computer' and click on 'Properties'
Click on the 'Performance' Tab and Click the 'File System' Button
In the box that pops-up titled "File System Properties" click the
'Troubleshooting' tab. Place a check in the box next to "Disable
System Restore"
I've known and used Evidence Eliminator. It is a good and thorough product although the System Restore feature is seperate and logs all system activity.
As Spyder32 said
So, if your concerned about your privacy, DISABLE IT.Quote:
it will continue growing. That's what it does, with everything that happen's on your PC and every file change, deletion, etc, it will change.
NOTE: There is also a problem with virus' infecting the plethora of system files stored in the _Restore directory on Windows ME/XP Machines. Since the system files are inside of archives, many antivirus scanners cannot remove the infected system files without deleting the entire archive file. Which corrupts your restore point. Another reason to DISABLE IT.
neta1o. I went to do what you instructed but when i came to the troubleshooting tab and went to click the disable system resore box i found it already checked
what should i do know because all i really want to do is get rid of the _RESTORE folder safely and quickly
Nihil,
I have not used evedence eliminator since i had 98. It is supposed to cover all your online tracks, temp internet files/cookies/dat files/regestry entries/Last accessed/typed url's/swap file/free space, etc. I'm not sure how it fares up against something like Encase but it did stop my hdd from filling up. It always seemed to fill up no matter how much i deleted manualy.
jinxy: That's why you disable it. Because (like previously stated) it create's new data and a new restore point at bootup.Quote:
It always seemed to fill up no matter how much i deleted manualy.
I nas talking about win 98 spyder, not xp/me. No System restore on 98, lol
Ohh right, si. I wasn't reading your post carefully enough to see you put Win98 in it.
I agree jinxy,
I use a couple of tools to keep the garbage build up under control :D
http://www.freedownloadscenter.com/U...ities/Xen.html
That is XEN by Paul Brown..............a nice tool that I have used for some time...............lots more functionality than most of the "tracks hiding" software.
I would warn against the fonts removal option though, particularly on a mature system which you have loaded all sorts of apps onto.
Still worth a look though.
Shadowkingjesse
I would not get rid of the folder, just its contents.
Also empty your recycle bin using Windows, boot into safe mode and run scandisk (auto repair checked) and the defrag.
Then check the size of the _restore folder.
Your response tells me that you have Windows ME and a FAT32 OS. When you disable System Restore there is usually files leftover. The way I get rid of those files is to boot from a dos or 98 bootdisk and go to the root drive C: and 'deltree _restore'Quote:
Originally posted here by shadowkingjesse
neta1o. I went to do what you instructed but when i came to the troubleshooting tab and went to click the disable system resore box i found it already checked
what should i do know because all i really want to do is get rid of the _RESTORE folder safely and quickly
If you don't have a bootdisk, you can visit
http://www.bootdisk.com/
and download the files for one.
NOTE: Even after deleting the _restore directory, the next time you boot into Windows ME the folder will be re-created. Although, this time there shouldn't be anything in it, assuming you correctly disabled System Restore.
Neta1o
You are quite right, but I was leaving the DOS bit until last :)
If he gets XEN as I suggested, and runs the "major clean up option", it will give him the option to delete all system restore files. He should then run Winfile and delete the "temp" subfolder in _restore.
That should leave him with an empty folder.
I would still run scandisk then defrag in safe mode, just in case the FAT tables are corrupted?
The reason I say this is that Windows Explorer is reporting a 16 Gb file and his anti spyware software is scanning .cpy files that he cannot detect either in explorer or winfile. That seems a little strange?
I have checked this machine and it has a _restore file on both drives, and both of them are empty. Which is probably a good job as my total HDD space is only slightly over a half of his _Restore folder :D
Cheers