Macrium Reflect Backup Failures

Page 7 of 21 FirstFirst ... 5678917 ... LastLast
  1. simrick's Avatar
    Posts : 16,108
    W10Prox64
       #61

    @DavidY - thanks so much for your efforts....looks like something may have been accomplished? :)

    Not to confuse things, but I just came across this, and can't remember if we tried it or not?

    Macrium Reflect Backup  Failures-fix-vss-problems.png
    (Rather than re-read 6 pages, I thought I'd ask...)
      My Computer


  2. Posts : 620
    Windows 10 Pro (20H2)
    Thread Starter
       #62

    simrick Yes, Fix VSS was tried, had no apparent effect, alas, alack.
      My Computer


  3. Posts : 620
    Windows 10 Pro (20H2)
    Thread Starter
       #63

    =DavidY;791394]Ah so something we've done has perhaps changed (I hesitate to say 'fixed') that then?

    Could you post the latest RKILL output as text in the same way you did before (in [code][/code] tags) please?
    Code:
    Rkill 2.8.4 by Lawrence Abrams (Grinler)
    http://www.bleepingcomputer.com/
    Copyright 2008-2016 BleepingComputer.com
    More Information about Rkill can be found at this link:
     http://www.bleepingcomputer.com/forums/topic308364.html
    
    Program started at: 08/27/2016 08:11:09 AM in x64 mode.
    Windows Version: Windows 10 Home 
    
    Checking for Windows services to stop:
    
     * No malware services found to stop.
    
    Checking for processes to terminate:
    
     * No malware processes found to kill.
    
    Checking Registry for malware related settings:
    
     * No issues found in the Registry.
    
    Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
    
    Performing miscellaneous checks:
    
     * Windows Defender Disabled
    
       [HKLM\SOFTWARE\Policies\Microsoft\Windows Defender]
       "DisableAntiSpyware" = dword:00000001
    
     * Reparse Point/Junctions Found (Most likely legitimate)!
    
         * C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 => C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\INetCache\IE [Dir]
    
    Checking Windows Service Integrity: 
    
     * gagp30kx [Missing Service]
     * IEEtwCollectorService [Missing Service]
     * IoQos [Missing Service]
     * nv_agp [Missing Service]
     * TimeBroker [Missing Service]
     * uagp35 [Missing Service]
     * uliagpkx [Missing Service]
     * WcsPlugInService [Missing Service]
     * wpcfltr [Missing Service]
     * WSService [Missing Service]
    
     * agp440 [Missing ImagePath]
     * WMPNetworkSvc [Missing ImagePath]
    
     * AJRouter => %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted [Incorrect ImagePath]
     * WpnService => %systemroot%\system32\svchost.exe -k netsvcs [Incorrect ImagePath]
    
     * vmicrdv => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]
     * vmicvss => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]
    
    Searching for Missing Digital Signatures: 
    
     * No issues found.
    
    Checking HOSTS File: 
    
     * HOSTS file entries found: 
    
      127.0.0.1       localhost
      0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly
      0.0.0.0 tracking.opencandy.com.s3.amazonaws.com
      0.0.0.0 media.opencandy.com
      0.0.0.0 cdn.opencandy.com
      0.0.0.0 tracking.opencandy.com
      0.0.0.0 api.opencandy.com
      0.0.0.0 api.recommendedsw.com
      0.0.0.0 installer.betterinstaller.com
      0.0.0.0 installer.filebulldog.com
      0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net
      0.0.0.0 inno.bisrv.com
      0.0.0.0 nsis.bisrv.com
      0.0.0.0 cdn.file2desktop.com
      0.0.0.0 cdn.goateastcach.us
      0.0.0.0 cdn.guttastatdk.us
      0.0.0.0 cdn.inskinmedia.com
      0.0.0.0 cdn.insta.oibundles2.com
      0.0.0.0 cdn.insta.playbryte.com
      0.0.0.0 cdn.llogetfastcach.us
    
      20 out of 36 HOSTS entries shown.
      Please review HOSTS file for further entries.
    
    Program finished at: 08/27/2016 08:11:44 AM
    Execution time: 0 hours(s), 0 minute(s), and 34 seconds(s)


    This is also interesting because it does show an actual link on the file.

    You'll note that
    Code:
    C:\WINDOWS\WinSxS\x86_microsoft-windows-s..icingstack-cmitrust_31bf3856ad364e35_10.0.14393.0_none_145e7a4159d239dd\cmitrust.dll
    is linked to
    Code:
    C:\WINDOWS\WinSxS\x86_microsoft-windows-s..icingstack-cmitrust_31bf3856ad364e35_10.0.14393.82_none_397264147e08b82f\cmitrust.dll
    (if I typed that right.)

    What happens if you try the same command on the next one on the original RKILL list:
    Code:
    findlinks.exe -accepteula "C:\WINDOWS\WinSxS\x86_microsoft-windows-s..ingstack-base-extra_31bf3856ad364e35_10.0.14393.0_none_f05abb1521a8c58e\bcdeditai.dll"
    Macrium Reflect Backup  Failures-links_found_2.jpg


    I could never get the hang of the 's's that looked like 'f's..
    ╪ (I will leave it to you to decipher...).
      My Computer


  4. Posts : 1,520
    Windows 10 Pro (32-bit) 16299.15
       #64

    Not Myself said:
    Code:
    Rkill 2.8.4 by Lawrence Abrams (Grinler)
     * Reparse Point/Junctions Found (Most likely legitimate)!
    
         * C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 => C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\INetCache\IE [Dir]
    So all those Reparse points with <Unknown Target> have now gone.
    This would be a good thing if Macrium actually worked now... What happens if you try it?
    (I'm not 100% hopeful to be honest!)
      My Computer


  5. Posts : 620
    Windows 10 Pro (20H2)
    Thread Starter
       #65

    DavidY said:
    So all those Reparse points with <Unknown Target> have now gone.
    This would be a good thing if Macrium actually worked now... What happens if you try it?
    (I'm not 100% hopeful to be honest!)
    I was going to tell you to see my reply #57, on the previous page, but first I reran the Macrium VSS repair function, and then tried a backup; that failed as expected. (Restore Point continues to fail with the same error as seen the first time I tried it and found it to be corrupted.)

    However, and I have no idea what, if anything it means, the Macrium log error report is rather different from that shown in #57:

    Macrium Reflect Backup  Failures-new_vss_error.jpg

    After posting that, I returned to Macrium to close it, where I found that it provides a link to the Windows Event Viewer; here is a compound image of that report, as the scroll feature of Snagit, although indicating that it was working, did not:

    Macrium Reflect Backup  Failures-event-view.jpg
      My Computer


  6. Posts : 1,520
    Windows 10 Pro (32-bit) 16299.15
       #66

    Somehow I thought you might say that.

    It still might be useful to see the results of these - most of the answers were cut off in the earlier screenshot so I've added a bit which should hopefully put them into a text file called vsschecks.txt
    Me said:
    Edit: Some more commands to try and report back on:
    Code:
    vssadmin list shadowstorage >>%userprofile%\documents\vssChecks.txt
    vssadmin list shadows >>%userprofile%\documents\vssChecks.txt
    vssadmin list writers >>%userprofile%\documents\vssChecks.txt
    vssadmin list providers >>%userprofile%\documents\vssChecks.txt
    Edit: just saw the screenshot you added - 'catastrophic failure' doesn't sound good (if perhaps over-dramatic).
      My Computer


  7. Posts : 620
    Windows 10 Pro (20H2)
    Thread Starter
       #67

    DavidY said:
    Somehow I thought you might say that.

    It still might be useful to see the results of these - most of the answers were cut off in the earlier screenshot so I've added a bit which should hopefully put them into a text file called vsschecks.txt


    Edit: just saw the screenshot you added - 'catastrophic failure' doesn't sound good (if perhaps over-dramatic).
    I tried all four entries, and none of them reported anything; perhaps this was a catastrophic failure.
      My Computer


  8. Posts : 1,520
    Windows 10 Pro (32-bit) 16299.15
       #68

    Not Myself said:
    I tried all four entries, and none of them reported anything; perhaps this was a catastrophic failure.
    Ah I wasn't quite clear - those commands should have created a text file called vsschecks.txt in your Documents folder. Assuming that worked, could you paste the contents of the file here, in a Code box, please?

    Edit: Also I found something else online which suggests checking the status of the system volume. From an elevated command prompt try these commands and post a screenshot of what came back.
    Code:
    diskpart
    list volume
    Then look for the volume with "System" in the Info column, "FAT32" in the Fs column, and a size of 100MB.
    Suppose it is volume 2 - replace as necessary in the commands below.
    Code:
    select volume 2
    detail volume
    exit
    Last edited by DavidY; 27 Aug 2016 at 15:59.
      My Computer

  9. simrick's Avatar
    Posts : 16,108
    W10Prox64
       #69

    Not Myself said:
    I was going to tell you to see my reply #57, on the previous page, but first I reran the Macrium VSS repair function, and then tried a backup; that failed as expected. (Restore Point continues to fail with the same error as seen the first time I tried it and found it to be corrupted.)

    However, and I have no idea what, if anything it means, the Macrium log error report is rather different from that shown in #57:

    Macrium Reflect Backup  Failures-new_vss_error.jpg
    A search on that error code and text brings up a conflict between Macrium and other imaging software (either existing or previously installed, ShadowProtect from StorageCraft in particular):

    VSS fails due to disks with a non-standard sector size - KnowledgeBase - Macrium Reflect Knowledgebase

    VSS fails due to modification by 3rd party software - KnowledgeBase - Macrium Reflect Knowledgebase

    VSS Error: 0x8004230F - KnowledgeBase - Macrium Reflect Knowledgebase

    VSSFix
    If you have not been able to fix your issue using one of the articles linked above please download one of the below programs to fix your problem:
    VSSfix 32bit - download
    VSSfix 64bit - download
      My Computer


  10. Posts : 1,520
    Windows 10 Pro (32-bit) 16299.15
       #70

    simrick said:
    A search on that error code and text brings up a conflict between Macrium and other imaging software (either existing or previously installed, ShadowProtect from StorageCraft in particular):

    VSS fails due to modification by 3rd party software - KnowledgeBase - Macrium Reflect Knowledgebase
    I think we checked that one in the Registry a couple of pages back. Also post #59 shows the vssadmin list providers screenshot and it looks the same as the required registry settings.

    I did see the vss fix download but I assumed it was the same a the 'Fix VSS Errors' function in Macrium itself. On the other hand it might be worth trying everything at this point.
      My Computer


 
Page 7 of 21 FirstFirst ... 5678917 ... LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 18:26.
Find Us




Windows 10 Forums