Main Forum > General Computer Support

System Restore points silently disappear

(1/16) > >>

Steevo:
This is a window 7 x64 system.

I had a piece of malware on this system, which I was able to kill.
So that was deleted and I feel confident it's not a problem anymore.

I went through the process over at Bleepingcomputer.  They declared it clean.

The problem I have left is system restore was not creating restore points. I found there was no space allocated.

I was able to allocate space on my system drive, and I was able to create points manually, both with system protection and with System Restore Manger v2.
By the next day they were missing.

I found a system backup service was not running, and after I enabled that the system automatically created a restore point associated with windows update.
I also created a couple manually.

The next morning they were still there.  So far so good.
By that evening, there were none again.

I just created one manually with system protection and one with system restore manager. 
I will wager in 24 hours they will both be missing.

I did notice this in the event log

   volsnap              The shadow copies of volume C: were aborted because of an IO failure on volume C:.

That's the only red item in the system log from today.

Can anyone suggest any steps to isolate this issue?
Drive C seems to be working great.  I ran seagate tools on it.  They declared it fine.



Steevo:
Incidentally, I used the tweaking.com repair tool to work on this.  I probably have logs.  Then and now.

Boggin:
I've seen stacks of threads where Win 7 users have lost their restore points after a reboot but not one like you have.

In Event Viewer when you click on that error and then on the blue online help link, does MS give any more info on it.

If it doesn't can you post the Event ID No it has and then perhaps a Google may produce something definite.

Shane may have come across it before and may have an unique fix for it, but he won't be back on the forum until Monday at the earliest.

Steevo:

FWIW, I do not suspect this logged error is the cause of the missing restore points.
But I am grasping at straws right now.



The shadow copies of volume C: were aborted because of an IO failure on volume C:.

https://technet.microsoft.com/en-us/library/f90fc4d0-49fb-4789-9e65-1d12a80cb75e.aspx


--- Quote ---- System

  - Provider

   [ Name]  volsnap
 
  - EventID 14

   [ Qualifiers]  49158
 
   Level 2
 
   Task 0
 
   Keywords 0x80000000000000
 
  - TimeCreated

   [ SystemTime]  2015-08-09T00:03:30.361328900Z
 
   EventRecordID 710371
 
   Channel System
 
   Computer Dell
 
   Security
 

- EventData

   \Device\HarddiskVolumeShadowCopy23
   C:
   C:
   0000000003003000000000000E0006C00B000000010000C002000000000000000000000000000000


--------------------------------------------------------------------------------

Binary data:


In Words

0000: 00000000 00300003 00000000 C006000E
0008: 0000000B C0000001 00000002 00000000
0010: 00000000 00000000   


In Bytes

0000: 00 00 00 00 03 00 30 00   ......0.
0008: 00 00 00 00 0E 00 06 C0   .......À
0010: 0B 00 00 00 01 00 00 C0   .......À
0018: 02 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........


--- End quote ---

Steevo:
Here is the performance monitor warnings section.


--- Quote ---Severity: Informational
Symptom: Missing Events in Event Log
Details: Investigate why 90% (184,800) events were lost during data collection. The settings for Event Tracing for Windows (ETW) maximum buffers and buffer size may not be optimal depending on which data sets are being collected.
Related: Event Tracing for Windows
 
Informational 
 
Symptom: The Security Center has not recorded an anti-virus product.
Cause: The Security Center is unable to identify an active anti-virus application. Either there is no anti-virus product installed or it is not recognized.
Resolution: 1. Verify that an anti-virus product is installed.
 2. If an anti-virus product is installed and functioning configure Security Center to stop monitoring anti-virus status.
Related: Anti-virus
 

--- End quote ---

As to the AV, I have microsoft security essentials, an icon in the notification area, and it is working.
I wonder why perfmon says there is none?

That's very odd.

I just looked in the security center, and it says Microsoft Security Essentials is up to date and virus scanning is on.


Navigation

[0] Message Index

[#] Next page

Go to full version