Warning about File System Filter 'wcifs' - what is THAT ????

Page 1 of 3 123 LastLast

  1. Posts : 318
    Dual-boot Win 7 & 10, both Pro 64-bit, now with a Hyper-V VM of Win 11
       #1

    Warning about File System Filter 'wcifs' - what is THAT ????


    Have yet another new Warning on startups of Win 10 Pro 64-bit. When will these stop?
    This one is:
    File System Filter 'wcifs' (Version 10.0, ‎2016‎-‎09‎-‎15T11:42:03.000000000Z) failed to attach to volume '\Device\HarddiskVolumeShadowCopy10'. The filter returned a non-standard final status of 0xC000000D. This filter and/or its supporting applications should handle this condition. If this condition persists, contact the vendor.
    In the list of these Warnings in Event Viewer, sometimes the "HarddiskVolumeShadowCopy10" number is different. I also see 6, 7 and 8 in the list.
    So, what is this and can I get some sleep now?
    Also, should TenForums start a new sub-forum captioned "Yet Another EventViewer Issue" ?
    Thanks.
      My Computer


  2. Posts : 318
    Dual-boot Win 7 & 10, both Pro 64-bit, now with a Hyper-V VM of Win 11
    Thread Starter
       #2

    By the way - this is the complete Warning in EventViewer:
    Log Name: System
    Source: Microsoft-Windows-FilterManager
    Date: 2/26/2017 10:05:49 AM
    Event ID: 4
    Task Category: None
    Level: Warning
    Keywords:
    User: SYSTEM
    Computer: DESKTOP-3OLB09N
    Description:
    File System Filter 'wcifs' (Version 10.0, ‎2016‎-‎09‎-‎15T11:42:03.000000000Z) failed to attach to volume '\Device\HarddiskVolumeShadowCopy10'. The filter returned a non-standard final status of 0xC000000D. This filter and/or its supporting applications should handle this condition. If this condition persists, contact the vendor.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Microsoft-Windows-FilterManager" Guid="{F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}" />
    <EventID>4</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2017-02-26T15:05:49.868225700Z" />
    <EventRecordID>7974</EventRecordID>
    <Correlation />
    <Execution ProcessID="5072" ThreadID="6164" />
    <Channel>System</Channel>
    <Computer>DESKTOP-3OLB09N</Computer>
    <Security UserID="S-1-5-18" />
    </System>
    <EventData>
    <Data Name="FinalStatus">0xc000000d</Data>
    <Data Name="DeviceVersionMajor">10</Data>
    <Data Name="DeviceVersionMinor">0</Data>
    <Data Name="DeviceNameLength">5</Data>
    <Data Name="DeviceName">wcifs</Data>
    <Data Name="DeviceTime">2016-09-15T11:42:03.000000000Z</Data>
    <Data Name="ExtraStringLength">34</Data>
    <Data Name="ExtraString">\Device\HarddiskVolumeShadowCopy10</Data>
    </EventData>
    </Event>
      My Computer


  3. Posts : 3
    Windows 10 Pro
       #3

    I'm encountering the same issue. It's happening a lot for one of my end users.

    I have read that it could be a virus, malware, an application or service that is causing issues, etc...

    I'm still looking for an answer so I'm looking forward to seeing what is possible solutions are posted.
      My Computer


  4. Posts : 318
    Dual-boot Win 7 & 10, both Pro 64-bit, now with a Hyper-V VM of Win 11
    Thread Starter
       #4

    Techteam - FYI, my Win 10 Pro 64-bit is basically unused. I've added almost no applications other than TeamViewer and LogMeIn Free. Not even Office yet. But maybe some updates for the Intel drivers like IntelProSet for the NIC card.
    And whatever I added has been there for months, since way before these new errors started popping up.
    But if you find anything specific, please come back here and share with us.
    Thanks.
      My Computer


  5. Posts : 3
    Windows 10 Pro
       #5

    Been doing some more digging on this site and noticing A LOT more posts. Apparently this might be a bug in Windows 10 from an upgrade/update. Since installing Windows 10 usually installs the latest updates, it makes sense that you would continue to see the error after a clean boot.

    But, as requested, I will post any relevant findings
      My Computer


  6. Posts : 224
    Microsoft Windows 10 Pro 64-bit Version 21H2 (10.019044))
       #6

    I have same issue.


    File System Filter 'wcifs' (Version 10.0, ‎2016‎-‎09‎-‎15T11:42:03.000000000Z) failed to attach to volume '\Device\HarddiskVolumeShadowCopy22'. The filter returned a non-standard final status of 0xC000000D. This filter and/or its supporting applications should handle this condition. If this condition persists, contact the vendor


    It has something to do with system restore as I am searching for a fix also.
    Last edited by DrSysop; 10 Mar 2017 at 01:26.
      My Computer


  7. Posts : 224
    Microsoft Windows 10 Pro 64-bit Version 21H2 (10.019044))
       #7

    UPDATE:

    One of your restore points are bad. What I did to fix this do the following

    Open command prompt in administrator mode by type CMD in the search box, right click CMD program and open as administrator
    2. Type this command vssadmin delete shadows /for=c: /all and hit enter
    3. Choose Y on the confirmation and hit enter. A message will display showing how many VSS copies deleted.

    After that go into system restore create a new restore point as your old ones will be deleted & no more problems.
      My Computer


  8. Posts : 3
    Windows 10 Pro
       #8

    Did that and this is the result:

    C:\WINDOWS\system32>vssadmin delete shadows /for=c: /allvssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool(C) Copyright 2001-2013 Microsoft Corp.Error: Snapshots were found, but they were outside of your allowed context. Try removing them with thebackup application which created them.

    Thoughts?
      My Computer


  9. Posts : 224
    Microsoft Windows 10 Pro 64-bit Version 21H2 (10.019044))
       #9

    techteam said:
    Did that and this is the result:
    C:\WINDOWS\system32>vssadmin delete shadows /for=c: /allvssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool(C) Copyright 2001-2013 Microsoft Corp.Error: Snapshots were found, but they were outside of your allowed context. Try removing them with thebackup application which created them.

    Thoughts?
    Do you use a 3rd party restore program like roxio back on track? Try turning off system restore reboot pc then try above & if that not work you have a software possibly making restore points. & uninstall any 3rd party programs making restore points also unless you are using them then i would leave it & get support from that software help forum.
      My Computer


  10. Posts : 17
    Windows 10 Pro 64-bit
       #10

    DrSysop said:
    Do you use a 3rd party restore program like roxio back on track? Try turning off system restore reboot pc then try above & if that not work you have a software possibly making restore points. & uninstall any 3rd party programs making restore points also unless you are using them then i would leave it & get support from that software help forum.
    done the command have no third party restore software, got the following Error: Either the specified volume was not found or it is not a local volume.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 15:04.
Find Us




Windows 10 Forums