Windows 10: Macrium Reflect Backup Failures Solved

Page 7 of 21 FirstFirst ... 5678917 ... LastLast

  1. Posts : 11,234
    W10Prox64
       27 Aug 2016 #61

    @DavidY - thanks so much for your efforts....looks like something may have been accomplished?

    Not to confuse things, but I just came across this, and can't remember if we tried it or not?

    Click image for larger version. 

Name:	fix-vss-problems.PNG 
Views:	20 
Size:	25.8 KB 
ID:	98436
    (Rather than re-read 6 pages, I thought I'd ask...)
      My ComputerSystem Spec

  2.    27 Aug 2016 #62

    simrick Yes, Fix VSS was tried, had no apparent effect, alas, alack.
      My ComputerSystem Spec

  3.    27 Aug 2016 #63

    =DavidY;791394]Ah so something we've done has perhaps changed (I hesitate to say 'fixed') that then?

    Could you post the latest RKILL output as text in the same way you did before (in [code][/code] tags) please?
    Code:
    Rkill 2.8.4 by Lawrence Abrams (Grinler)
    http://www.bleepingcomputer.com/
    Copyright 2008-2016 BleepingComputer.com
    More Information about Rkill can be found at this link:
     http://www.bleepingcomputer.com/forums/topic308364.html
    
    Program started at: 08/27/2016 08:11:09 AM in x64 mode.
    Windows Version: Windows 10 Home 
    
    Checking for Windows services to stop:
    
     * No malware services found to stop.
    
    Checking for processes to terminate:
    
     * No malware processes found to kill.
    
    Checking Registry for malware related settings:
    
     * No issues found in the Registry.
    
    Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
    
    Performing miscellaneous checks:
    
     * Windows Defender Disabled
    
       [HKLM\SOFTWARE\Policies\Microsoft\Windows Defender]
       "DisableAntiSpyware" = dword:00000001
    
     * Reparse Point/Junctions Found (Most likely legitimate)!
    
         * C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 => C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\INetCache\IE [Dir]
    
    Checking Windows Service Integrity: 
    
     * gagp30kx [Missing Service]
     * IEEtwCollectorService [Missing Service]
     * IoQos [Missing Service]
     * nv_agp [Missing Service]
     * TimeBroker [Missing Service]
     * uagp35 [Missing Service]
     * uliagpkx [Missing Service]
     * WcsPlugInService [Missing Service]
     * wpcfltr [Missing Service]
     * WSService [Missing Service]
    
     * agp440 [Missing ImagePath]
     * WMPNetworkSvc [Missing ImagePath]
    
     * AJRouter => %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted [Incorrect ImagePath]
     * WpnService => %systemroot%\system32\svchost.exe -k netsvcs [Incorrect ImagePath]
    
     * vmicrdv => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]
     * vmicvss => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]
    
    Searching for Missing Digital Signatures: 
    
     * No issues found.
    
    Checking HOSTS File: 
    
     * HOSTS file entries found: 
    
      127.0.0.1       localhost
      0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly
      0.0.0.0 tracking.opencandy.com.s3.amazonaws.com
      0.0.0.0 media.opencandy.com
      0.0.0.0 cdn.opencandy.com
      0.0.0.0 tracking.opencandy.com
      0.0.0.0 api.opencandy.com
      0.0.0.0 api.recommendedsw.com
      0.0.0.0 installer.betterinstaller.com
      0.0.0.0 installer.filebulldog.com
      0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net
      0.0.0.0 inno.bisrv.com
      0.0.0.0 nsis.bisrv.com
      0.0.0.0 cdn.file2desktop.com
      0.0.0.0 cdn.goateastcach.us
      0.0.0.0 cdn.guttastatdk.us
      0.0.0.0 cdn.inskinmedia.com
      0.0.0.0 cdn.insta.oibundles2.com
      0.0.0.0 cdn.insta.playbryte.com
      0.0.0.0 cdn.llogetfastcach.us
    
      20 out of 36 HOSTS entries shown.
      Please review HOSTS file for further entries.
    
    Program finished at: 08/27/2016 08:11:44 AM
    Execution time: 0 hours(s), 0 minute(s), and 34 seconds(s)


    This is also interesting because it does show an actual link on the file.

    You'll note that
    Code:
    C:\WINDOWS\WinSxS\x86_microsoft-windows-s..icingstack-cmitrust_31bf3856ad364e35_10.0.14393.0_none_145e7a4159d239dd\cmitrust.dll
    is linked to
    Code:
    C:\WINDOWS\WinSxS\x86_microsoft-windows-s..icingstack-cmitrust_31bf3856ad364e35_10.0.14393.82_none_397264147e08b82f\cmitrust.dll
    (if I typed that right.)

    What happens if you try the same command on the next one on the original RKILL list:
    Code:
    findlinks.exe -accepteula "C:\WINDOWS\WinSxS\x86_microsoft-windows-s..ingstack-base-extra_31bf3856ad364e35_10.0.14393.0_none_f05abb1521a8c58e\bcdeditai.dll"
    Click image for larger version. 

Name:	Links_Found_2.jpg 
Views:	4 
Size:	140.4 KB 
ID:	98456


    I could never get the hang of the 's's that looked like 'f's..
    ╪ (I will leave it to you to decipher...).
      My ComputerSystem Spec

  4.    27 Aug 2016 #64

    Not Myself said: View Post
    Code:
    Rkill 2.8.4 by Lawrence Abrams (Grinler)
     * Reparse Point/Junctions Found (Most likely legitimate)!
    
         * C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 => C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\INetCache\IE [Dir]
    So all those Reparse points with <Unknown Target> have now gone.
    This would be a good thing if Macrium actually worked now... What happens if you try it?
    (I'm not 100% hopeful to be honest!)
      My ComputerSystem Spec

  5.    27 Aug 2016 #65

    DavidY said: View Post
    So all those Reparse points with <Unknown Target> have now gone.
    This would be a good thing if Macrium actually worked now... What happens if you try it?
    (I'm not 100% hopeful to be honest!)
    I was going to tell you to see my reply #57, on the previous page, but first I reran the Macrium VSS repair function, and then tried a backup; that failed as expected. (Restore Point continues to fail with the same error as seen the first time I tried it and found it to be corrupted.)

    However, and I have no idea what, if anything it means, the Macrium log error report is rather different from that shown in #57:

    Click image for larger version. 

Name:	New_VSS_Error.jpg 
Views:	4 
Size:	68.5 KB 
ID:	98469

    After posting that, I returned to Macrium to close it, where I found that it provides a link to the Windows Event Viewer; here is a compound image of that report, as the scroll feature of Snagit, although indicating that it was working, did not:

    Click image for larger version. 

Name:	Event View.jpg 
Views:	20 
Size:	69.6 KB 
ID:	98475
      My ComputerSystem Spec

  6.    27 Aug 2016 #66

    Somehow I thought you might say that.

    It still might be useful to see the results of these - most of the answers were cut off in the earlier screenshot so I've added a bit which should hopefully put them into a text file called vsschecks.txt
    Me said: View Post
    Edit: Some more commands to try and report back on:
    Code:
    vssadmin list shadowstorage >>%userprofile%\documents\vssChecks.txt
    vssadmin list shadows >>%userprofile%\documents\vssChecks.txt
    vssadmin list writers >>%userprofile%\documents\vssChecks.txt
    vssadmin list providers >>%userprofile%\documents\vssChecks.txt
    Edit: just saw the screenshot you added - 'catastrophic failure' doesn't sound good (if perhaps over-dramatic).
      My ComputerSystem Spec

  7.    27 Aug 2016 #67

    DavidY said: View Post
    Somehow I thought you might say that.

    It still might be useful to see the results of these - most of the answers were cut off in the earlier screenshot so I've added a bit which should hopefully put them into a text file called vsschecks.txt


    Edit: just saw the screenshot you added - 'catastrophic failure' doesn't sound good (if perhaps over-dramatic).
    I tried all four entries, and none of them reported anything; perhaps this was a catastrophic failure.
      My ComputerSystem Spec

  8.    27 Aug 2016 #68

    Not Myself said: View Post
    I tried all four entries, and none of them reported anything; perhaps this was a catastrophic failure.
    Ah I wasn't quite clear - those commands should have created a text file called vsschecks.txt in your Documents folder. Assuming that worked, could you paste the contents of the file here, in a Code box, please?

    Edit: Also I found something else online which suggests checking the status of the system volume. From an elevated command prompt try these commands and post a screenshot of what came back.
    Code:
    diskpart
    list volume
    Then look for the volume with "System" in the Info column, "FAT32" in the Fs column, and a size of 100MB.
    Suppose it is volume 2 - replace as necessary in the commands below.
    Code:
    select volume 2
    detail volume
    exit
    Last edited by DavidY; 27 Aug 2016 at 15:59.
      My ComputerSystem Spec


  9. Posts : 11,234
    W10Prox64
       27 Aug 2016 #69

    Not Myself said: View Post
    I was going to tell you to see my reply #57, on the previous page, but first I reran the Macrium VSS repair function, and then tried a backup; that failed as expected. (Restore Point continues to fail with the same error as seen the first time I tried it and found it to be corrupted.)

    However, and I have no idea what, if anything it means, the Macrium log error report is rather different from that shown in #57:

    Click image for larger version. 

Name:	New_VSS_Error.jpg 
Views:	4 
Size:	68.5 KB 
ID:	98469
    A search on that error code and text brings up a conflict between Macrium and other imaging software (either existing or previously installed, ShadowProtect from StorageCraft in particular):

    VSS fails due to disks with a non-standard sector size - KnowledgeBase - Macrium Reflect Knowledgebase

    VSS fails due to modification by 3rd party software - KnowledgeBase - Macrium Reflect Knowledgebase

    VSS Error: 0x8004230F - KnowledgeBase - Macrium Reflect Knowledgebase

    VSSFix
    If you have not been able to fix your issue using one of the articles linked above please download one of the below programs to fix your problem:
    VSSfix 32bit - download
    VSSfix 64bit - download
      My ComputerSystem Spec

  10.    27 Aug 2016 #70

    simrick said: View Post
    A search on that error code and text brings up a conflict between Macrium and other imaging software (either existing or previously installed, ShadowProtect from StorageCraft in particular):

    VSS fails due to modification by 3rd party software - KnowledgeBase - Macrium Reflect Knowledgebase
    I think we checked that one in the Registry a couple of pages back. Also post #59 shows the vssadmin list providers screenshot and it looks the same as the required registry settings.

    I did see the vss fix download but I assumed it was the same a the 'Fix VSS Errors' function in Macrium itself. On the other hand it might be worth trying everything at this point.
      My ComputerSystem Spec


 
Page 7 of 21 FirstFirst ... 5678917 ... LastLast

Related Threads
Backup & Restore Backup and Restore with Macrium Reflect in Tutorials
How to Create and Restore a System Image Backup with Macrium Reflect To begin I quote myself from the Macrium viBoot tutorial: This tutorial will show you the basics of Macrium Reflect, how to create backup images and restore them. We will...
I thought I'd share something which just caught me out with Macrium Reflect Free. The Win10 upgrade seemed to cause Macrium to change the scope of what it backed up, and effectively exclude a partition form being backed up. My old laptop which I...
I run Macrium reflect free & create an image every week but have always assumed it created a new image (due to my choosing full backup every time) but had used a small 1TB HD for backup so didn't notice anything amiss. Recently I began using a 4TB...
I'm using macrium reflect free V6 6.1.1225 and there is a new version 6.1.1311 will my old backups work if I update it ? also which is better uninstall macrium and download the new version or just update ?
I have two backup tasks that appear in the "scheduled backups" tab, and they run on schedule, but they don't appear in the "backup definition files" tab. This happened due to an uninstall and reinstall. How can I get them back into the "backup...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 03:02.
Find Us