Windows 10: Defender prevents system restore

**PiKo** · 25 Dec 2017

Till recently I could use system restore without difficulty. Now I get an error message: System restore didnot complete successfully. System restore could not access a file, probably due to an antivirus programme. (Name of file is not mentioned}
I only use Defender. When I disconnect from internet (safety) and temporarily disable Defender, I am able to do the restore operation successfully.
Has something changed with the most recent Windows version and is there a simpler way to do the restore?
W10 Pro 64 bits; most recent version 1709

**dalchina** · 25 Dec 2017

Hi, Sorry, I've no exact answer to that- hopefully someone who's had cause to use SR in 1709 will reply.

Meanwhile I'll just repeat the comments that have been made numerous times here about System Restore:
- it's not thought to be the most reliable feature- and can let you down just when you need it.
- it has previously been 'broken' for some months as a result of Win 10 development
- it is, as I expect you know, curiously always turned off on any Windows upgrade
- it does not protect everything.

Bottom line- it can be useful when it works, but don't rely on it solely.

Many times people here have said- use disk imaging routinely e.g. Macrium reflect (free). This is much more robust and comprehensive.

Now the downside of that compared to System Restore is that Macrium and other such programs restores an entire partition - data and system files in the case of Windows. System Restore does not affect and nor does it protect data files.

**Layback Bear** · 25 Dec 2017

I have had to turn off App & Browser Control at time to get things to work.

When done turn App & Browser Control back on.

It's located in the Defender Security Center.

Jack

**PiKo** · 26 Dec 2017

dalchina: I fully agree. I make Macrium images say every 1 to 2 months. However, when I test a new app. I create a restore point. When I decide to deinstall such app. I perform a simpler and quicker system restore to remove residues of this app. in the register.

Layback bear: thanks but this did not solve it. Still the error message.

**dalchina** · 26 Dec 2017

A good way to deal with testing such programs-

Use e.g. Revo uninstaller to monitor the installation, then use it to uninstall.
Or use Revo or Geek uninstaller (free) to uninstall the program- these scan for leftovers.

More specific than System Restore which could revert other changes occurring meanwhile.

**cereberus** · 26 Dec 2017

PiKo said:

dalchina: I fully agree. I make Macrium images say every 1 to 2 months. However, when I test a new app. I create a restore point. When I decide to deinstall such app. I perform a simpler and quicker system restore to remove residues of this app. in the register.

Layback bear: thanks but this did not solve it. Still the error message.

Why not create a differential backup before installing app. Then you can revert to exact state before app was installed.

I would not use system restore as a means to uninstall a program anyway - Revo uninstaller is a better solution.

**MeAndMyComputer** · 26 Dec 2017

PiKo said:

Till recently I could use system restore without difficulty. Now I get an error message: System restore didnot complete successfully. System restore could not access a file, probably due to an antivirus programme. (Name of file is not mentioned}
I only use Defender. When I disconnect from internet (safety) and temporarily disable Defender, I am able to do the restore operation successfully. Has something changed with the most recent Windows version and is there a simpler way to do the restore?
W10 Pro 64 bits; most recent version 1709

Since it states "probably due to an antivirus programme" I would consider installing Malwarebytes and see what it reports.
Malwarebytes | Free Cyber Security & Anti-Malware Software
Even though it might not seem to be applicable, I would also run disk cleanup.

**reddice** · 26 Dec 2017

cereberus said:

Why not create a differential backup before installing app. Then you can revert to exact state before app was installed.

I would not use system restore as a means to uninstall a program anyway - Revo uninstaller is a better solution.

That is exactly what I do. Especially with trial software that I don't want to purchase not trying to get away with that as that never removes anything. Actually lately I have been doing more Macrum image stores as even Revo leaves junk behind.

**PiKo** · 27 Dec 2017

MeAndMyComputer said:

Since it states "probably due to an antivirus programme" I would consider installing Malwarebytes and see what it reports.
Malwarebytes | Free Cyber Security & Anti-Malware Software
Even though it might not seem to be applicable, I would also run disk cleanup.

Thanks, but no threats detected with MB. Disk cleanup didn't solve it either.

**PiKo** · 27 Dec 2017

Thanks about the suggestions for Revo Installer and differential backups. I will look to that further.

I solved the issue by going back to a Macrium image, made 3 weeks ago. System restore works again. What caused the issue will probably never be found.

Windows 10: Defender prevents system restore

Defender prevents system restore

Posting Permissions