Windows 10: Warning about File System Filter 'wcifs' - what is THAT ????

Page 1 of 3 123 LastLast

  1. Posts : 101
    Dual-boot Win 7 & 10, both Pro 64-bit
       26 Feb 2017 #1

    Warning about File System Filter 'wcifs' - what is THAT ????


    Have yet another new Warning on startups of Win 10 Pro 64-bit. When will these stop?
    This one is:
    File System Filter 'wcifs' (Version 10.0, ‎2016‎-‎09‎-‎15T11:42:03.000000000Z) failed to attach to volume '\Device\HarddiskVolumeShadowCopy10'. The filter returned a non-standard final status of 0xC000000D. This filter and/or its supporting applications should handle this condition. If this condition persists, contact the vendor.
    In the list of these Warnings in Event Viewer, sometimes the "HarddiskVolumeShadowCopy10" number is different. I also see 6, 7 and 8 in the list.
    So, what is this and can I get some sleep now?
    Also, should TenForums start a new sub-forum captioned "Yet Another EventViewer Issue" ?
    Thanks.
      My ComputerSystem Spec


  2. Posts : 101
    Dual-boot Win 7 & 10, both Pro 64-bit
    Thread Starter
       26 Feb 2017 #2

    By the way - this is the complete Warning in EventViewer:
    Log Name: System
    Source: Microsoft-Windows-FilterManager
    Date: 2/26/2017 10:05:49 AM
    Event ID: 4
    Task Category: None
    Level: Warning
    Keywords:
    User: SYSTEM
    Computer: DESKTOP-3OLB09N
    Description:
    File System Filter 'wcifs' (Version 10.0, ‎2016‎-‎09‎-‎15T11:42:03.000000000Z) failed to attach to volume '\Device\HarddiskVolumeShadowCopy10'. The filter returned a non-standard final status of 0xC000000D. This filter and/or its supporting applications should handle this condition. If this condition persists, contact the vendor.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Microsoft-Windows-FilterManager" Guid="{F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}" />
    <EventID>4</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2017-02-26T15:05:49.868225700Z" />
    <EventRecordID>7974</EventRecordID>
    <Correlation />
    <Execution ProcessID="5072" ThreadID="6164" />
    <Channel>System</Channel>
    <Computer>DESKTOP-3OLB09N</Computer>
    <Security UserID="S-1-5-18" />
    </System>
    <EventData>
    <Data Name="FinalStatus">0xc000000d</Data>
    <Data Name="DeviceVersionMajor">10</Data>
    <Data Name="DeviceVersionMinor">0</Data>
    <Data Name="DeviceNameLength">5</Data>
    <Data Name="DeviceName">wcifs</Data>
    <Data Name="DeviceTime">2016-09-15T11:42:03.000000000Z</Data>
    <Data Name="ExtraStringLength">34</Data>
    <Data Name="ExtraString">\Device\HarddiskVolumeShadowCopy10</Data>
    </EventData>
    </Event>
      My ComputerSystem Spec

  3.    27 Feb 2017 #3

    I'm encountering the same issue. It's happening a lot for one of my end users.

    I have read that it could be a virus, malware, an application or service that is causing issues, etc...

    I'm still looking for an answer so I'm looking forward to seeing what is possible solutions are posted.
      My ComputerSystem Spec


  4. Posts : 101
    Dual-boot Win 7 & 10, both Pro 64-bit
    Thread Starter
       27 Feb 2017 #4

    Techteam - FYI, my Win 10 Pro 64-bit is basically unused. I've added almost no applications other than TeamViewer and LogMeIn Free. Not even Office yet. But maybe some updates for the Intel drivers like IntelProSet for the NIC card.
    And whatever I added has been there for months, since way before these new errors started popping up.
    But if you find anything specific, please come back here and share with us.
    Thanks.
      My ComputerSystem Spec

  5.    27 Feb 2017 #5

    Been doing some more digging on this site and noticing A LOT more posts. Apparently this might be a bug in Windows 10 from an upgrade/update. Since installing Windows 10 usually installs the latest updates, it makes sense that you would continue to see the error after a clean boot.

    But, as requested, I will post any relevant findings
      My ComputerSystem Spec


  6. Posts : 159
    Microsoft Windows 10 Pro 64-bit Version 1803
       10 Mar 2017 #6

    I have same issue.


    File System Filter 'wcifs' (Version 10.0, ‎2016‎-‎09‎-‎15T11:42:03.000000000Z) failed to attach to volume '\Device\HarddiskVolumeShadowCopy22'. The filter returned a non-standard final status of 0xC000000D. This filter and/or its supporting applications should handle this condition. If this condition persists, contact the vendor


    It has something to do with system restore as I am searching for a fix also.
    Last edited by DrSysop; 10 Mar 2017 at 01:26.
      My ComputerSystem Spec


  7. Posts : 159
    Microsoft Windows 10 Pro 64-bit Version 1803
       10 Mar 2017 #7

    UPDATE:

    One of your restore points are bad. What I did to fix this do the following

    Open command prompt in administrator mode by type CMD in the search box, right click CMD program and open as administrator
    2. Type this command vssadmin delete shadows /for=c: /all and hit enter
    3. Choose Y on the confirmation and hit enter. A message will display showing how many VSS copies deleted.

    After that go into system restore create a new restore point as your old ones will be deleted & no more problems.
      My ComputerSystem Spec

  8.    10 Mar 2017 #8

    Did that and this is the result:

    C:\WINDOWS\system32>vssadmin delete shadows /for=c: /allvssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool(C) Copyright 2001-2013 Microsoft Corp.Error: Snapshots were found, but they were outside of your allowed context. Try removing them with thebackup application which created them.

    Thoughts?
      My ComputerSystem Spec


  9. Posts : 159
    Microsoft Windows 10 Pro 64-bit Version 1803
       10 Mar 2017 #9

    techteam said: View Post
    Did that and this is the result:
    C:\WINDOWS\system32>vssadmin delete shadows /for=c: /allvssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool(C) Copyright 2001-2013 Microsoft Corp.Error: Snapshots were found, but they were outside of your allowed context. Try removing them with thebackup application which created them.

    Thoughts?
    Do you use a 3rd party restore program like roxio back on track? Try turning off system restore reboot pc then try above & if that not work you have a software possibly making restore points. & uninstall any 3rd party programs making restore points also unless you are using them then i would leave it & get support from that software help forum.
      My ComputerSystem Spec


  10. Posts : 16
    Windows 10 Pro 64-bit
       17 May 2017 #10

    DrSysop said: View Post
    Do you use a 3rd party restore program like roxio back on track? Try turning off system restore reboot pc then try above & if that not work you have a software possibly making restore points. & uninstall any 3rd party programs making restore points also unless you are using them then i would leave it & get support from that software help forum.
    done the command have no third party restore software, got the following Error: Either the specified volume was not found or it is not a local volume.
      My ComputerSystem Spec


 
Page 1 of 3 123 LastLast

Related Threads
Hi, When I run the error checking tool in windows for my SSD I always end up with this error in event viewer. Error checking found no problems and even system file checker didn't found any problems. I think it started after I installed Malwarebytes...
Greets, Everything was running fine until Win10 decided to upgrade itself about two weeks ago. After the upgrade I tried to launch Jasc Paintshop Pro and after a spinning circle nothing happened. Tried launching it with different compatibility...
This has happened twice so far, both were the exact same scenario: I have a monitor and a TV, so I set the Extended display option so I can work on the monitor, but have Netflix up on the TV. When I'm done working, I'll just turn off the...
How to Block or Unblock Legacy File System Filter Drivers in Windows 10 Starting in Windows 10 version 1607, administrators and driver developers can use a registry setting to block legacy file system filter drivers. Legacy file system filter...
Event Viewer TDI filter warning in Performance & Maintenance
Hello, I am receiving this error in Event Viewer: A TDI filter (\Driver\adgnetworktdidrv) was detected. This filter has not been certified by Microsoft and may cause system instability. I'm not sure what this means. Is it something that can be...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 13:41.
Find Us