File System Filter 'wcifs' EVENT ID 4

Thank you, fdegrove. I have just tried that "sc sdset" fix but it did not seem to fix the "'wcifs' EVENT ID 4" problem for me.

The code you provided looked familiar so I looked through some Win10 fixes I tried about a year ago. Found it here as a specific fix for Event 513 CAPI2 Errors: Fix Event 513 CAPI2 Errors During Windows Backup — Justworks | Office 365 - Exchange - SharePoint - Hyper-V - Azure

I recall that when I used that before, it did fix the CAPi2 error; I don't recall wcifs errors back then.

Right now, though, it does not appear to have affected the current "'wcifs' EVENT ID 4" problem which still manifests if I create a test restore point. Too bad because I really wanted this to work.

Any thoughts?
Thanks

Hi,

I do not use "System Restore" personally but I'll try to figure out what else I did to get all of my PC's error free.
Basically, if VSS works OK then "System Restore" should too.
The errors are all related to whom has access to what really.

I'll dig further into this, gents.

To be clear, I did not actually do a "System Restore" (I only do them when absolutely necessary.)

I merely used "Control Panel >> System >> System Protection" to create a test restore point as I am pretty sure that doing so makes use of VSS. The restore point creation completed without flagging an error. However, in the Event Viewer, there were 4 new Event ID 4 "wcifs" events raised during the retore point creation.

Any further thoughts?
Thanks

On every install i've done, I get the Event Id 513 'Capi2', but I've never had it's fix .... address/fix the Event Id 4 'wcifs'. Only way I've been able to get rid of the Event Id 4 'wcifs', is to delete the wcifs.md file from the System Volume Information folder ... I do use System Restore to create a restore points.

Hi,

stormseye said:

To be clear, I did not actually do a "System Restore" (I only do them when absolutely necessary.)

I merely used "Control Panel >> System >> System Protection" to create a test restore point as I am pretty sure that doing so makes use of VSS. The restore point creation completed without flagging an error. However, in the Event Viewer, there were 4 new Event ID 4 "wcifs" events raised during the retore point creation.

Do you see any DCOM errors in EV ?

If so, do try to resolve these too.

My point is, five machines, 9 W10 installs and not a single error. It can be done and I'm by no way a software guy..

Cheers,

I have the same problem. Anyone found a solution to this?
File System Filter 'wcifs' (Version 10.0, ‎2016‎-‎09‎-‎15T11:42:03.000000000Z) failed to attach to volume '\Device\HarddiskVolumeShadowCopy4430'. The filter returned a non-standard final status of 0xC000000D. This filter and/or its supporting applications should handle this condition. If this condition persists, contact the vendor.

Count me in for having this same problem also. I think I noticed it about the same time this thread was started.It seems there is no permanent solution for this problem, so I subscribed to this thread but otherwise stopped my research.The error doesn't seem to affect the integrity of my system since I can do image backups with 2 programs (Macirum Reflect & Acronis True Image) successfully and also create a restore point successfully.It's been 10 days or more, so I may be incorrect, but my takeaway of all the posts within this thread is that it is a Microsoft problem which Microsoft will have to address.

John M said:

Count me in for having this same problem also. I think I noticed it about the same time this thread was started.It seems there is no permanent solution for this problem, so I subscribed to this thread but otherwise stopped my research.The error doesn't seem to affect the integrity of my system since I can do image backups with 2 programs (Macirum Reflect & Acronis True Image) successfully and also create a restore point successfully.It's been 10 days or more, so I may be incorrect, but my takeaway of all the posts within this thread is that it is a Microsoft problem which Microsoft will have to address.

My system is quite unstable and hangs from now and then, I suspected this warning to have something to do with it. But it could of course be some other issue.

Like I said, my reading about this error notice is that it doesn't seem severe enough to cause system instability (it's just annoying to those of us who pay attention to the Event Viewer activity). Just to be sure my remembrance is correct, I recommend you read through the entire thread.If you agree with me that this thread merely pertains to annoying Event ID messages, and not to threats to the system's stability, I'd suggest you start a new thread and the people here (who are more competent than me ) will be more than happy to help you out.

I miss system restore so much Today got a more or less forced driver update, it didn't go well. Only way to roll back is restoring an image. What a miserable situation.