Tweaking.com Support Forums

Main Forum => General Computer Support => Topic started by: Steevo on August 08, 2015, 07:39:51 pm

Title: System Restore points silently disappear
Post by: Steevo on August 08, 2015, 07:39:51 pm
This is a window 7 x64 system.

I had a piece of malware on this system, which I was able to kill.
So that was deleted and I feel confident it's not a problem anymore.

I went through the process over at Bleepingcomputer.  They declared it clean.

The problem I have left is system restore was not creating restore points. I found there was no space allocated.

I was able to allocate space on my system drive, and I was able to create points manually, both with system protection and with System Restore Manger v2.
By the next day they were missing.

I found a system backup service was not running, and after I enabled that the system automatically created a restore point associated with windows update.
I also created a couple manually.

The next morning they were still there.  So far so good.
By that evening, there were none again.

I just created one manually with system protection and one with system restore manager. 
I will wager in 24 hours they will both be missing.

I did notice this in the event log

   volsnap              The shadow copies of volume C: were aborted because of an IO failure on volume C:.

That's the only red item in the system log from today.

Can anyone suggest any steps to isolate this issue?
Drive C seems to be working great.  I ran seagate tools on it.  They declared it fine.



Title: Re: System Restore points silently disappear
Post by: Steevo on August 08, 2015, 07:40:59 pm
Incidentally, I used the tweaking.com repair tool to work on this.  I probably have logs.  Then and now.
Title: Re: System Restore points silently disappear
Post by: Boggin on August 09, 2015, 09:50:57 am
I've seen stacks of threads where Win 7 users have lost their restore points after a reboot but not one like you have.

In Event Viewer when you click on that error and then on the blue online help link, does MS give any more info on it.

If it doesn't can you post the Event ID No it has and then perhaps a Google may produce something definite.

Shane may have come across it before and may have an unique fix for it, but he won't be back on the forum until Monday at the earliest.
Title: Re: System Restore points silently disappear
Post by: Steevo on August 09, 2015, 10:07:31 am

FWIW, I do not suspect this logged error is the cause of the missing restore points.
But I am grasping at straws right now.



The shadow copies of volume C: were aborted because of an IO failure on volume C:.

https://technet.microsoft.com/en-us/library/f90fc4d0-49fb-4789-9e65-1d12a80cb75e.aspx

Quote
- System

  - Provider

   [ Name]  volsnap
 
  - EventID 14

   [ Qualifiers]  49158
 
   Level 2
 
   Task 0
 
   Keywords 0x80000000000000
 
  - TimeCreated

   [ SystemTime]  2015-08-09T00:03:30.361328900Z
 
   EventRecordID 710371
 
   Channel System
 
   Computer Dell
 
   Security
 

- EventData

   \Device\HarddiskVolumeShadowCopy23
   C:
   C:
   0000000003003000000000000E0006C00B000000010000C002000000000000000000000000000000


--------------------------------------------------------------------------------

Binary data:


In Words

0000: 00000000 00300003 00000000 C006000E
0008: 0000000B C0000001 00000002 00000000
0010: 00000000 00000000   


In Bytes

0000: 00 00 00 00 03 00 30 00   ......0.
0008: 00 00 00 00 0E 00 06 C0   .......À
0010: 0B 00 00 00 01 00 00 C0   .......À
0018: 02 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........

Title: Re: System Restore points silently disappear
Post by: Steevo on August 09, 2015, 10:14:19 am
Here is the performance monitor warnings section.

Quote
Severity: Informational
Symptom: Missing Events in Event Log
Details: Investigate why 90% (184,800) events were lost during data collection. The settings for Event Tracing for Windows (ETW) maximum buffers and buffer size may not be optimal depending on which data sets are being collected.
Related: Event Tracing for Windows
 
Informational 
 
Symptom: The Security Center has not recorded an anti-virus product.
Cause: The Security Center is unable to identify an active anti-virus application. Either there is no anti-virus product installed or it is not recognized.
Resolution: 1. Verify that an anti-virus product is installed.
 2. If an anti-virus product is installed and functioning configure Security Center to stop monitoring anti-virus status.
Related: Anti-virus
 

As to the AV, I have microsoft security essentials, an icon in the notification area, and it is working.
I wonder why perfmon says there is none?

That's very odd.

I just looked in the security center, and it says Microsoft Security Essentials is up to date and virus scanning is on.


Title: Re: System Restore points silently disappear
Post by: Boggin on August 09, 2015, 10:37:31 am
Perfmon always reports no Av detected so that isn't anything to worry about.

That bit about missing Event logs could be of concern - are there any other Errors recorded with the same or similar date and time stamp as the volsnap one ?

EDIT - Forgot to add that that bit about Verify in the TechNet link and right clicking on the volume doesn't give me that option.
Title: Re: System Restore points silently disappear
Post by: Steevo on August 09, 2015, 10:51:41 am
Nothing that looks suspicious.
I just rebooted and I have a few more errors.
Bad block errors on one of my usb externals.
I just ran chkdsk on it and it came back with no errors. So I just dunno.

A couple service control manager items.

The ScRegSetValueExW call failed for Start with the following error:
Access is denied.

The ScRegSetValueExW call failed for FailureCommand with the following error:
Access is denied.

https://technet.microsoft.com/en-us/library/62512d01-8735-4497-a43d-73fcead605a5.aspx
Title: Re: System Restore points silently disappear
Post by: Boggin on August 09, 2015, 12:16:38 pm
Unless anyone else comes in with any useful suggestions then it's probably best to wait for Shane to pick up your thread.
Title: Re: System Restore points silently disappear
Post by: Steevo on August 10, 2015, 06:49:03 am
At 6:47 am I still have the two restore points I had yesterday.  No, wait. They were from Saturday.  Two days they have survived. 
Title: Re: System Restore points silently disappear
Post by: Boggin on August 10, 2015, 09:36:24 am
It sounds as if it has sorted itself out - I suppose we all need time to get over an infection :D

Try creating some more to see if they also stick.
Title: Re: System Restore points silently disappear
Post by: Julian on August 10, 2015, 10:03:03 am
I'm curious can you run chkdsk  /f /r this will run at next boot and when it finishes look in event viewer and post what it reports. Why i ask is because this summer is a hot one and I've been finding drives left and right failing.
Title: Re: System Restore points silently disappear
Post by: Steevo on August 10, 2015, 11:27:32 am
I ran chkdsk /f on it, and it all came back clean.
I guess I could do it again tonight.

I don't suspect the disk as a problem.
Title: Re: System Restore points silently disappear
Post by: Steevo on August 10, 2015, 11:28:37 am
It sounds as if it has sorted itself out - I suppose we all need time to get over an infection :D

Try creating some more to see if they also stick.
I do not assume that, I have been working on this problem for a month or more.
I still have the two manual restore points.


Title: Re: System Restore points silently disappear
Post by: Shane on August 10, 2015, 11:35:43 am
I/O problem normally means a problem with the disk, can you post the log of the chkdsk you ran? It should be in the event viewer :wink:

Shane
Title: Re: System Restore points silently disappear
Post by: Steevo on August 10, 2015, 12:09:43 pm
I/O problem normally means a problem with the disk, can you post the log of the chkdsk you ran? It should be in the event viewer :wink:

Shane

I had that volsnap error. 
I just looked in windows/system event log. I did a ctrl-l find and I only see a chkdsk error from June, for another drive.

Hmm. I didn't know that chkdsk made a log.  I don't see it. Can you tell me how to find it?

I used the tweaking.com tool and I have logs from that somewhere.

Title: Re: System Restore points silently disappear
Post by: Steevo on August 10, 2015, 12:13:17 pm
I/O problem normally means a problem with the disk, can you post the log of the chkdsk you ran? It should be in the event viewer :wink:

Shane

I had that volsnap error. 
I just looked in windows/system event log. I did a ctrl-l find and I only see a chkdsk error from June, for another drive.

Hmm. I didn't know that chkdsk made a log.  I don't see it. Can you tell me how to find it?
Oh, in application. 
The only chkdsk log of my drive C is dated in June.

I used the tweaking.com tool and I have logs from that somewhere.
Title: Re: System Restore points silently disappear
Post by: Shane on August 10, 2015, 12:46:25 pm
The chkdsk would have to be ran before windows boots because the drive is in use and the scan can take a while since it is checking the sectors as well.

Then when it is done it will put a entry into the event viewer
http://www.sevenforums.com/tutorials/96938-check-disk-chkdsk-read-event-viewer-log.html

Did you do the chkdsk c: /r and it asked you to reboot and the scan ran before windows loaded?

Shane
Title: Re: System Restore points silently disappear
Post by: Steevo on August 10, 2015, 12:53:30 pm
I ran chkdsk again just now and here is the result:

I did not use the /r

Quote

Checking file system on C:
The type of the file system is NTFS.


A disk check has been scheduled.
Windows will now check the disk.                         

CHKDSK is verifying files (stage 1 of 3)...
Cleaning up instance tags for file 0x18d11.
  568576 file records processed.                                          File verification completed.
  1352 large file records processed.                                      0 bad file records processed.                                        2 EA records processed.                                              63 reparse records processed.                                       CHKDSK is verifying indexes (stage 2 of 3)...
  667234 index entries processed.                                         Index verification completed.
  0 unindexed files scanned.                                           0 unindexed files recovered.                                       CHKDSK is verifying security descriptors (stage 3 of 3)...
  568576 file SDs/SIDs processed.                                         Cleaning up 231 unused index entries from index $SII of file 0x9.
Cleaning up 231 unused index entries from index $SDH of file 0x9.
Cleaning up 231 unused security descriptors.
Security descriptor verification completed.
  49330 data files processed.                                            CHKDSK is verifying Usn Journal...
  37590944 USN bytes processed.                                             Usn Journal verification completed.
Windows has made corrections to the file system.

 976657407 KB total disk space.
 367383096 KB in 454150 files.
    228900 KB in 49331 indexes.
         0 KB in bad sectors.
    704835 KB in use by the system.
     65536 KB occupied by the log file.
 608340576 KB available on disk.

      4096 bytes in each allocation unit.
 244164351 total allocation units on disk.
 152085144 allocation units available on disk.

Internal Info:
00 ad 08 00 c4 ae 07 00 f7 41 0e 00 00 00 00 00  .........A......
9f 07 00 00 3f 00 00 00 00 00 00 00 00 00 00 00  ....?...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Windows has finished checking your disk.
Please wait while your computer restarts.


 EventData

   Checking file system on C: The type of the file system is NTFS. A disk check has been scheduled. Windows will now check the disk. CHKDSK is verifying files (stage 1 of 3)... Cleaning up instance tags for file 0x18d11. 568576 file records processed. File verification completed. 1352 large file records processed. 0 bad file records processed. 2 EA records processed. 63 reparse records processed. CHKDSK is verifying indexes (stage 2 of 3)... 667234 index entries processed. Index verification completed. 0 unindexed files scanned. 0 unindexed files recovered. CHKDSK is verifying security descriptors (stage 3 of 3)... 568576 file SDs/SIDs processed. Cleaning up 231 unused index entries from index $SII of file 0x9. Cleaning up 231 unused index entries from index $SDH of file 0x9. Cleaning up 231 unused security descriptors. Security descriptor verification completed. 49330 data files processed. CHKDSK is verifying Usn Journal... 37590944 USN bytes processed. Usn Journal verification completed. Windows has made corrections to the file system. 976657407 KB total disk space. 367383096 KB in 454150 files. 228900 KB in 49331 indexes. 0 KB in bad sectors. 704835 KB in use by the system. 65536 KB occupied by the log file. 608340576 KB available on disk. 4096 bytes in each allocation unit. 244164351 total allocation units on disk. 152085144 allocation units available on disk. Internal Info: 00 ad 08 00 c4 ae 07 00 f7 41 0e 00 00 00 00 00 .........A...... 9f 07 00 00 3f 00 00 00 00 00 00 00 00 00 00 00 ....?........... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ Windows has finished checking your disk. Please wait while your computer restarts. 


Title: Re: System Restore points silently disappear
Post by: Steevo on August 10, 2015, 12:55:42 pm
The two restore points I manually created on Saturday 8/8 are still there.
Woo hoo.
Title: Re: System Restore points silently disappear
Post by: Shane on August 10, 2015, 01:16:59 pm
When you have the time and dont need the system run the chkdsk with the /r

That will make it 5 stages instead of the 3. And will take a while, so do it when you dont need the system and then post the results of it :-)

Shane
Title: Re: System Restore points silently disappear
Post by: Steevo on August 10, 2015, 01:24:52 pm
I'll do that tonight.

The log I posted doesn't look bad.
I think it mostly rules out disk problems causing the missing restore points, no?

Anything else I could try to isolate this issue?
Title: Re: System Restore points silently disappear
Post by: Shane on August 10, 2015, 01:26:40 pm
Nope :-)

I/O errors is either corrupt file system, bad sectors or bad driver. The chkdsk you did only checked the file system but didnt check the rest. So if a volume shadow copy ended up on a bad sector you would get that error but chkdsk wouldn't see it if nothing is on that sector right now. This is why I want to do a bad sector check to be sure. :wink:

Shane
Title: Re: System Restore points silently disappear
Post by: Steevo on August 10, 2015, 02:05:52 pm
I'll do it tonight.
But I doubt this would cause restore points to not be created.
Or to disappear silently.

Can you suggest anything to look into as far as the restore points?
I had one automatically created last week by windows update, and I created several manual ones.
They all disappeared.

BTW, the two restore points I have now, one was manually created, one is created by tweaking.com windows repair. 

Title: Re: System Restore points silently disappear
Post by: Shane on August 11, 2015, 12:00:10 am
Actually windows auto deletes restore points for the simplest of reasons.

This was for XP but still holds true and then some for 7 and so on
https://support.microsoft.com/en-us/kb/301224

Basically anything has a hiccup and windows removes the restore points. MS also lists not a single page on how to repair system restore or what files or services it needs. Really odd actually.

I myself never use system restore, ever. I use my registry backup and then I have my file backup to my external hard drive.

But my process for fixing something is to go through a list and start crossing stuff off. So many times I spent hours on something to find out it was something simple causing it the whole time lol

So I just want to cover all the simple stuff first, then move on to the bigger stuff :-)

Shane
Title: Re: System Restore points silently disappear
Post by: Steevo on August 11, 2015, 08:49:14 am
I ran the disk check overnight and it completed successfully, however when I walked in this morning there was a character mode screen about what had happened.
Things had been fixed.
A message at the bottom that the system would now reboot.

It never did reboot, so I rebooted it.
Unfortunately there is nothing in the log.

So I am going to say the checkdisk ran OK and fixed some things but because it did not write we don't have any details about that.

Darn.

My two restore points are gone right now as well.  Is that because of the chkdsk? 


Title: Re: System Restore points silently disappear
Post by: Shane on August 11, 2015, 11:33:11 am
It sounds like the chkdsk froze up, which happens if it hits a bad sector OR if there is bad memory. Chkdsk uses a lot of memory. I have had chkdsk lock up on me before from it.

So if chkdsk did at least make it to the end then if it found any bad sectors it would have marked them, so you should be able to run chkdsk in read only mode and we can make sure it still says 0 KB in bad sectors.

So just run
chkdsk C:

Also if you havent yet, running a memory test would be a good idea, and we should make sure you have the latest chipset drivers installed as well :-)

Shane
Title: Re: System Restore points silently disappear
Post by: Steevo on August 11, 2015, 11:56:43 am
It did make it to the end and said it was going to reboot, that's where the hang was.

It mentioned fixing things.  Too bad the logs didn't get written.

I'll try it again in read only.

I'll have to make a bootable memtest86 disk, unless you have another suggestion.



Title: Re: System Restore points silently disappear
Post by: Shane on August 11, 2015, 12:12:24 pm
memtest should be good, I actually saved the Microsoft memory tester, it did a good job, not sure why they removed it off their site.

Shane
Title: Re: System Restore points silently disappear
Post by: Steevo on August 11, 2015, 01:34:52 pm
I ran chkdsk on my system drive in read only, and it passed with no errors.
Is your preferred memory test from ms uploaded somewhere? 
Should I use that? I'd like to try it.

Title: Re: System Restore points silently disappear
Post by: Shane on August 11, 2015, 01:48:52 pm
Did the chkdsk show 0 KB in bad sectors at the end of the scan when it was done?

https://technet.microsoft.com/en-us/magazine/2008.09.utilityspotlight.aspx
Which points to
http://www.softpedia.com/progDownload/Microsoft-Windows-Memory-Diagnostic-Download-3648.html

Shane
Title: Re: System Restore points silently disappear
Post by: Steevo on August 11, 2015, 01:51:33 pm

Yes. Seems to be fine.

Quote
Chkdsk was executed in read-only mode on a volume snapshot. 

Checking file system on C:

CHKDSK is verifying files (stage 1 of 3)...
  568576 file records processed.                                          File verification completed.
  1361 large file records processed.                                      0 bad file records processed.                                        2 EA records processed.                                              63 reparse records processed.                                       CHKDSK is verifying indexes (stage 2 of 3)...
  667324 index entries processed.                                         Index verification completed.


CHKDSK is verifying security descriptors (stage 3 of 3)...
  568576 file SDs/SIDs processed.                                         Cleaning up 18 unused index entries from index $SII of file 0x9.
Cleaning up 18 unused index entries from index $SDH of file 0x9.
Cleaning up 18 unused security descriptors.
Security descriptor verification completed.
  49375 data files processed.                                            CHKDSK is verifying Usn Journal...
  33756200 USN bytes processed.                                             Usn Journal verification completed.
Windows has checked the file system and found no problems.

 976657407 KB total disk space.
 370548896 KB in 431464 files.
    219536 KB in 49376 indexes.
    700871 KB in use by the system.
     65536 KB occupied by the log file.
 604087268 KB available on disk.

      4096 bytes in each allocation unit.
 244164351 total allocation units on disk.
 151021817 allocation units available on disk.

Title: Re: System Restore points silently disappear
Post by: Shane on August 11, 2015, 01:55:54 pm
Thats odd, its not even listing the 0kb in bad sectors.

It should like this

Code: [Select]
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Users\Shane>chkdsk c:
The type of the file system is NTFS.

WARNING!  F parameter not specified.
Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3)...
  711680 file records processed.
File verification completed.
  588 large file records processed.
  0 bad file records processed.
  2 EA records processed.
  44 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 3)...
  782782 index entries processed.
Index verification completed.
  0 unindexed files scanned.
  0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 3)...
  711680 file SDs/SIDs processed.
Security descriptor verification completed.
  35552 data files processed.
CHKDSK is verifying Usn Journal...
  34184384 USN bytes processed.
Usn Journal verification completed.
Windows has checked the file system and found no problems.

 233293823 KB total disk space.
 138088888 KB in 222446 files.
     85016 KB in 35553 indexes.
         0 KB in bad sectors.
    821547 KB in use by the system.
     65536 KB occupied by the log file.
  94298372 KB available on disk.

      4096 bytes in each allocation unit.
  58323455 total allocation units on disk.
  23574593 allocation units available on disk.

C:\Users\Shane>

Shane
Title: Re: System Restore points silently disappear
Post by: Steevo on August 11, 2015, 08:05:48 pm
Well, I pasted that from the windows application event log.

Your event log entry for a read only chkdsk differs from that?

Here's the event log from the chkdsk I ran on one of my external usb drives.

Chkdsk was executed in read/write mode. 

Checking file system on G:
Volume dismounted.  All opened handles to this volume are now invalid.
Volume label is 300 GB.

CHKDSK is verifying files (stage 1 of 5)...
  179968 file records processed.                                          File verification completed.
  13 large file records processed.                                      0 bad file records processed.                                        0 EA records processed.                                              0 reparse records processed.                                       CHKDSK is verifying indexes (stage 2 of 5)...
  215404 index entries processed.                                         Index verification completed.


CHKDSK is verifying security descriptors (stage 3 of 5)...
  179968 file SDs/SIDs processed.                                         Security descriptor verification completed.
  17719 data files processed.                                            CHKDSK is verifying Usn Journal...
  708696 USN bytes processed.                                             Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
  179952 files processed.                                                 File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
  50078104 free clusters processed.                                         Free space verification is complete.
Windows has checked the file system and found no problems.

 293033600 KB total disk space.
  92410196 KB in 162016 files.
     55072 KB in 17720 indexes.
    255916 KB in use by the system.
     65536 KB occupied by the log file.
 200312416 KB available on disk.

      4096 bytes in each allocation unit.
  73258400 total allocation units on disk.
  50078104 allocation units available on disk.


Title: Re: System Restore points silently disappear
Post by: Steevo on August 11, 2015, 08:28:13 pm
I have a new automatic restore point created by windows update tonight. Cool.
Title: Re: System Restore points silently disappear
Post by: Boggin on August 12, 2015, 02:08:30 am
Are you using a SSD or a HDD ?
Title: Re: System Restore points silently disappear
Post by: Steevo on August 12, 2015, 06:27:03 am
A 1 tb ordinary hdd.
Title: Re: System Restore points silently disappear
Post by: Shane on August 12, 2015, 06:39:29 am
I just opened a cmd.exe window as administrator and put in
chkdsk c:

when it was done I right click on the cmd.exe window and click select all, then when I right click again it will unselect, that is because it just copied all the text to the clip board and you can paste it :-)

Shane
Title: Re: System Restore points silently disappear
Post by: Steevo on August 12, 2015, 06:47:00 am
I didn't do it that way.
I went to my computer, clicked the disk and rt-clicked properties, and told it to check and repair the disk.
It asked to schedule on restart, I told it to and when I restarted it ran.

The USB 300 gb, I did that one while the system was running, no restart.  No system on that one.
Title: Re: System Restore points silently disappear
Post by: Julian on August 12, 2015, 06:40:04 pm
I didn't do it that way.
I went to my computer, clicked the disk and rt-clicked properties, and told it to check and repair the disk.
It asked to schedule on restart, I told it to and when I restarted it ran.

The USB 300 gb, I did that one while the system was running, no restart.  No system on that one.
that will run chkdsk.exe via explorer.exe instead of via chkdsk.exe and it won't show kb in bad sector that way. ;)
plus it's harder to kill because it can cause explorer to crash in middle of it lol.
Title: Re: System Restore points silently disappear
Post by: Steevo on August 14, 2015, 07:11:47 am
I still have an automatically created restore point from 3 days ago! 
I am going to create a manual one. And watch it.
Title: Re: System Restore points silently disappear
Post by: Steevo on August 14, 2015, 09:14:16 am
I found out why the Microsoft memory test was discontinued, it only tests up to 4 GB.
It gave a message that this was a limitation of that program, not the computer.  So they knew.

I ran memtest86 for a while, it progressed through test 5 and part of 6 before I stopped it. No errors. I have 24 GB of ram.
The test was not exhaustive, but I will let it run overnight tonight.

So I have no memory problems, or no big ones so far.
No disk problems, I think.

Title: Re: System Restore points silently disappear
Post by: Julian on August 16, 2015, 09:33:51 am
Yep Max that windows handles with x86 is 4gb lol so that sounds about right
Title: Re: System Restore points silently disappear
Post by: Steevo on August 16, 2015, 09:47:03 am
Yep Max that windows handles with x86 is 4gb lol so that sounds about right
Well, that's not exactly true.  32 bit windows, yes. 
64 bit windows, not at all true.  64 bit windows is not at all new.

I have windows 7 64 bit and 24 gb of ram. 

Back to the topic:

As of this morning, I have no restore points.
All gone.

So I just don't know.
Title: Re: System Restore points silently disappear
Post by: Julian on August 16, 2015, 04:47:34 pm
X86 is 32 bit so x86 programs are 32 bit Windows mem test is a 32 bit application
Title: Re: System Restore points silently disappear
Post by: Steevo on August 16, 2015, 05:19:55 pm
Which is why I used memtest86, which does not have that limitation.

It works pretty well, I think.
Title: Re: System Restore points silently disappear
Post by: Julian on August 16, 2015, 05:21:51 pm
can you open up cmd and type in
Code: [Select]
vssadmin list shadowstorage and post what it tells you
Title: Re: System Restore points silently disappear
Post by: Julian on August 16, 2015, 05:23:44 pm
can you open up cmd and type in
Code: [Select]
vssadmin list shadowstorage and post what it tells you

also use this command as well and post the results
Code: [Select]
vssadmin list writers
Title: Re: System Restore points silently disappear
Post by: Steevo on August 16, 2015, 05:39:40 pm
Here is the response.
I've never heard of that. This is deep down.


Code: [Select]
C:\Windows\system32>vssadmin list shadowstorage
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2005 Microsoft Corp.

Shadow Copy Storage association
   For volume: (F:)\\?\Volume{512b7507-ef71-11e3-b3eb-0019b91ef004}\
   Shadow Copy Storage volume: (F:)\\?\Volume{512b7507-ef71-11e3-b3eb-0019b91ef0
04}\
   Used Shadow Copy Storage space: 2.141 GB (0%)
   Allocated Shadow Copy Storage space: 4.975 GB (0%)
   Maximum Shadow Copy Storage space: 111.781 GB (12%)

Shadow Copy Storage association
   For volume: (G:)\\?\Volume{adbb1ba6-bff5-11e3-834c-0019b91ef004}\
   Shadow Copy Storage volume: (G:)\\?\Volume{adbb1ba6-bff5-11e3-834c-0019b91ef0
04}\
   Used Shadow Copy Storage space: 502.391 MB (0%)
   Allocated Shadow Copy Storage space: 1.107 GB (0%)
   Maximum Shadow Copy Storage space: 13.973 GB (5%)

Shadow Copy Storage association
   For volume: (C:)\\?\Volume{f63cfb61-baea-11e3-b701-806e6f6e6963}\
   Shadow Copy Storage volume: (C:)\\?\Volume{f63cfb61-baea-11e3-b701-806e6f6e69
63}\
   Used Shadow Copy Storage space: 768.891 MB (0%)
   Allocated Shadow Copy Storage space: 3.06 GB (0%)
   Maximum Shadow Copy Storage space: 93.141 GB (10%)


C:\Windows\system32>

C:\Windows\system32>vssadmin list writers
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2005 Microsoft Corp.

Waiting for responses.
These may be delayed if a shadow copy is being prepared.

Writer name: 'Task Scheduler Writer'
   Writer Id: {d61d61c8-d73a-4eee-8cdd-f6f9786b7124}
   Writer Instance Id: {1bddd48e-5052-49db-9b07-b96f96727e6b}
   State: [1] Stable
   Last error: No error

Writer name: 'VSS Metadata Store Writer'
   Writer Id: {75dfb225-e2e4-4d39-9ac9-ffaff65ddf06}
   Writer Instance Id: {088e7a7d-09a8-4cc6-a609-ad90e75ddc93}
   State: [1] Stable
   Last error: No error

Writer name: 'Performance Counters Writer'
   Writer Id: {0bada1de-01a9-4625-8278-69e735f39dd2}
   Writer Instance Id: {f0086dda-9efc-47c5-8eb6-a944c3d09381}
   State: [1] Stable
   Last error: No error

Writer name: 'ASR Writer'
   Writer Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
   Writer Instance Id: {b2c85219-a35e-4ec7-b24e-955f9d6181df}
   State: [1] Stable
   Last error: No error

Writer name: 'System Writer'
   Writer Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Instance Id: {be633e73-ac1f-44bb-8d3b-be7ad506c141}
   State: [5] Waiting for completion
   Last error: No error

Writer name: 'Registry Writer'
   Writer Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
   Writer Instance Id: {02089769-8662-4ca8-93a4-d208aa4f79dd}
   State: [1] Stable
   Last error: No error

Writer name: 'Shadow Copy Optimization Writer'
   Writer Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
   Writer Instance Id: {74299e55-ee57-48dd-923d-b5a71aa2c88e}
   State: [1] Stable
   Last error: No error

Writer name: 'MSSearch Service Writer'
   Writer Id: {cd3f2362-8bef-46c7-9181-d62844cdc0b2}
   Writer Instance Id: {306478e0-266c-461c-9541-b6fd1e5029fa}
   State: [5] Waiting for completion
   Last error: No error

Writer name: 'COM+ REGDB Writer'
   Writer Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
   Writer Instance Id: {1baa4918-b835-4348-b1a1-e58cc487c07d}
   State: [1] Stable
   Last error: No error

Writer name: 'WMI Writer'
   Writer Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}
   Writer Instance Id: {92e589ee-5362-47da-a564-f801494593ba}
   State: [5] Waiting for completion
   Last error: No error


C:\Windows\system32>
Title: Re: System Restore points silently disappear
Post by: Julian on August 16, 2015, 06:13:43 pm
hmmm can you show me
Code: [Select]
vssadmin list shadows
Title: Re: System Restore points silently disappear
Post by: Julian on August 16, 2015, 06:24:30 pm
Code: [Select]
[quote author=Steevo link=topic=3457.msg25031#msg25031 date=1439771980]

Shadow Copy Storage association
   For volume: (C:)\\?\Volume{f63cfb61-baea-11e3-b701-806e6f6e6963}\
   Shadow Copy Storage volume: (C:)\\?\Volume{f63cfb61-baea-11e3-b701-806e6f6e69
63}\
   Used Shadow Copy Storage space: 768.891 MB (0%)
   Allocated Shadow Copy Storage space: 3.06 GB (0%)
   Maximum Shadow Copy Storage space: 93.141 GB (10%)


[/quote]

the allocated shadow copy has me curious hmmm looks like it's disabled...
Title: Re: System Restore points silently disappear
Post by: Steevo on August 16, 2015, 06:32:19 pm
Volume shadow copy service is enabled but stopped.

Is yours stopped, and is there a config in the box at the bottom?

Title: Re: System Restore points silently disappear
Post by: Julian on August 16, 2015, 06:48:51 pm
hmmm are you comfortable with deleting every restore point on your drive? reason is I'm going to give you a command that will wipe system restore then the next command will set it for a max size of 4%


this code deletes every system restore point on drive c:

Code: [Select]
vssadmin delete shadows /for=c:
this resizes your system restore storage to 4% of your hdd

Code: [Select]
vssadmin resize shadowstorage /for=c: /on=c: /maxsize=4%
Title: Re: System Restore points silently disappear
Post by: Steevo on August 16, 2015, 07:42:30 pm
Yeah, I am comfortable, since I have no restore points older than today.

I'll try it.

Thanks! 
Title: Re: System Restore points silently disappear
Post by: Steevo on August 16, 2015, 07:51:20 pm
hmmm can you show me
Code: [Select]
vssadmin list shadows

Here's the output from vssadmin list shadows

Bit I don't think it's all there.  The cmd window buffer is inadequate.  I increased the buffer to 999 with properties, but it does not seem to have changed, or not enough.

Quote
          Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy14
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

Contents of shadow copy set ID: {3a475558-a60f-4b96-bd02-a06d12105480}
   Contained 2 shadow copies at creation time: 8/5/2015 10:54:40 AM
      Shadow Copy ID: {46ea2c05-a9ae-456a-a606-483fc76b88c1}
         Original Volume: (F:)\\?\Volume{512b7507-ef71-11e3-b3eb-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy15
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

Contents of shadow copy set ID: {e8ede083-2bdc-494c-82aa-cd91e557cfa6}
   Contained 2 shadow copies at creation time: 8/5/2015 10:56:47 AM
      Shadow Copy ID: {ee91497f-899d-46c2-b8d0-924a97236f33}
         Original Volume: (F:)\\?\Volume{512b7507-ef71-11e3-b3eb-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy16
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

Contents of shadow copy set ID: {2ed69b3a-6414-4c02-93d0-9f840dc91095}
   Contained 2 shadow copies at creation time: 8/5/2015 11:01:01 AM
      Shadow Copy ID: {d1314f2f-e485-4818-a9fd-0222562669d1}
         Original Volume: (F:)\\?\Volume{512b7507-ef71-11e3-b3eb-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy17
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

Contents of shadow copy set ID: {1181dffb-5612-4847-8903-7fef401241ef}
   Contained 2 shadow copies at creation time: 8/5/2015 11:15:46 AM
      Shadow Copy ID: {86d31b45-e2b2-420e-833f-6524d9f3bdc2}
         Original Volume: (F:)\\?\Volume{512b7507-ef71-11e3-b3eb-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy18
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

Contents of shadow copy set ID: {53fd7320-be07-4238-bfb2-d8fede478ee1}
   Contained 2 shadow copies at creation time: 8/7/2015 7:11:32 AM
      Shadow Copy ID: {42ca68f5-a4b7-47f7-98d0-42b1cfc26e26}
         Original Volume: (F:)\\?\Volume{512b7507-ef71-11e3-b3eb-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy19
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

Contents of shadow copy set ID: {777bb92e-9997-4d83-a7dd-05df432132f4}
   Contained 2 shadow copies at creation time: 8/7/2015 6:47:44 PM
      Shadow Copy ID: {df332751-22a6-4e84-864f-61268adaed95}
         Original Volume: (F:)\\?\Volume{512b7507-ef71-11e3-b3eb-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy20
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

Contents of shadow copy set ID: {3e0f068b-3e9a-4136-aace-0e894ec4fbfb}
   Contained 3 shadow copies at creation time: 8/8/2015 7:04:47 PM
      Shadow Copy ID: {9de19850-3c81-41ee-a1d5-a129269fdcff}
         Original Volume: (F:)\\?\Volume{512b7507-ef71-11e3-b3eb-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy21
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

      Shadow Copy ID: {e1f58c92-d043-480c-ba48-f3a9f1d08a64}
         Original Volume: (G:)\\?\Volume{adbb1ba6-bff5-11e3-834c-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy42
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

Contents of shadow copy set ID: {09b19487-afd5-4b01-a9e6-1058e02cc1c9}
   Contained 3 shadow copies at creation time: 8/8/2015 7:41:04 PM
      Shadow Copy ID: {45ad9a2c-4732-4f1b-bfd6-1f2fc0e70f74}
         Original Volume: (F:)\\?\Volume{512b7507-ef71-11e3-b3eb-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy22
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

      Shadow Copy ID: {a3656991-251a-4a3b-8f86-a6d135a41c96}
         Original Volume: (G:)\\?\Volume{adbb1ba6-bff5-11e3-834c-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy43
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

Contents of shadow copy set ID: {db5ff384-0f1e-472c-bca0-58a9406c8511}
   Contained 2 shadow copies at creation time: 8/11/2015 8:49:54 AM
      Shadow Copy ID: {e3eacabb-6e12-4647-b8cc-4e5e14b4208e}
         Original Volume: (F:)\\?\Volume{512b7507-ef71-11e3-b3eb-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy23
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

Contents of shadow copy set ID: {59c1dc6c-456e-4115-9f0f-01e483bb1507}
   Contained 3 shadow copies at creation time: 8/14/2015 7:13:02 AM
      Shadow Copy ID: {b081dbc2-be79-43c5-ad99-8ab56353caea}
         Original Volume: (F:)\\?\Volume{512b7507-ef71-11e3-b3eb-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy24
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

      Shadow Copy ID: {8cd1f5c8-f00d-4851-bac6-ff8870de9c0e}
         Original Volume: (G:)\\?\Volume{adbb1ba6-bff5-11e3-834c-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy44
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

Contents of shadow copy set ID: {0bc3e1b6-e33c-46d7-bf4d-bb1850ec0aec}
   Contained 3 shadow copies at creation time: 8/14/2015 7:16:58 AM
      Shadow Copy ID: {9ec3a566-2587-4f12-aa78-f6de31187306}
         Original Volume: (F:)\\?\Volume{512b7507-ef71-11e3-b3eb-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy25
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

      Shadow Copy ID: {054a4fde-c431-47c5-af3f-f078b22412b3}
         Original Volume: (G:)\\?\Volume{adbb1ba6-bff5-11e3-834c-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy45
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

Contents of shadow copy set ID: {8f678d3f-47ea-4d6b-a670-a007ee362f87}
   Contained 3 shadow copies at creation time: 8/15/2015 7:23:59 AM
      Shadow Copy ID: {65492d43-1ae7-429a-b56a-682ee62dec55}
         Original Volume: (F:)\\?\Volume{512b7507-ef71-11e3-b3eb-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy30
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

      Shadow Copy ID: {35c8befe-9ddc-42bd-82d4-bc536218b808}
         Original Volume: (G:)\\?\Volume{adbb1ba6-bff5-11e3-834c-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy46
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

Contents of shadow copy set ID: {2208f3e9-620d-48ec-bc7b-855fccf9ec5e}
   Contained 3 shadow copies at creation time: 8/16/2015 10:01:43 AM
      Shadow Copy ID: {fbfb80c5-98dc-4d6e-80de-0e573f5642c1}
         Original Volume: (F:)\\?\Volume{512b7507-ef71-11e3-b3eb-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy33
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

      Shadow Copy ID: {12803539-b6b8-4759-ab80-3d7818ab83c7}
         Original Volume: (G:)\\?\Volume{adbb1ba6-bff5-11e3-834c-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy47
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

      Shadow Copy ID: {d6eefc55-0115-441d-b4ae-cddcf6b7f2f7}
         Original Volume: (C:)\\?\Volume{f63cfb61-baea-11e3-b701-806e6f6e6963}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy35
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

Contents of shadow copy set ID: {2450b902-0e7f-40a4-b662-dae8de67280c}
   Contained 3 shadow copies at creation time: 8/16/2015 10:13:27 AM
      Shadow Copy ID: {29b304ae-e788-4965-b440-b22dd7076219}
         Original Volume: (F:)\\?\Volume{512b7507-ef71-11e3-b3eb-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy36
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

      Shadow Copy ID: {a0be72bd-f326-4bc4-8c04-0bb94782d641}
         Original Volume: (G:)\\?\Volume{adbb1ba6-bff5-11e3-834c-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy48
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

      Shadow Copy ID: {a93ad438-5a45-4dd4-b1ad-7701ea8b074d}
         Original Volume: (C:)\\?\Volume{f63cfb61-baea-11e3-b701-806e6f6e6963}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy38
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

Contents of shadow copy set ID: {30f72759-6fce-4b48-ba05-4568429c1d8c}
   Contained 3 shadow copies at creation time: 8/16/2015 5:49:46 PM
      Shadow Copy ID: {0be1411c-4822-4b9d-8fd4-04f675b8acdd}
         Original Volume: (F:)\\?\Volume{512b7507-ef71-11e3-b3eb-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy39
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

      Shadow Copy ID: {65f5aa1d-fbb2-4a21-a170-2e495df01a3d}
         Original Volume: (G:)\\?\Volume{adbb1ba6-bff5-11e3-834c-0019b91ef004}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy49
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered

      Shadow Copy ID: {28cdebe8-6833-4ef5-82ef-e401005ba585}
         Original Volume: (C:)\\?\Volume{f63cfb61-baea-11e3-b701-806e6f6e6963}\
         Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy41
         Originating Machine: Dell
         Service Machine: Dell
         Provider: 'Microsoft Software Shadow Copy provider 1.0'
         Type: ClientAccessibleWriters
         Attributes: Persistent, Client-accessible, No auto release, Differentia
l, Auto recovered


C:\Windows\system32>
Title: Re: System Restore points silently disappear
Post by: Julian on August 16, 2015, 08:07:04 pm
wow this is a lot of restore points and they are not showing at all!
Title: Re: System Restore points silently disappear
Post by: Julian on August 16, 2015, 08:07:47 pm
run those 2 commands one at a time start with the delete restore points.
Title: Re: System Restore points silently disappear
Post by: Steevo on August 16, 2015, 10:32:01 pm
OK, done

Quote
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Windows\system32>vssadmin delete shadows /for=c:
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2005 Microsoft Corp.

Do you really want to delete 3 shadow copies (Y/N): [N]? y

Successfully deleted 3 shadow copies.

C:\Windows\system32>
C:\Windows\system32>vssadmin resize shadowstorage /for=c: /on=c: /maxsize=4%
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2005 Microsoft Corp.

Successfully resized the shadow copy storage association

C:\Windows\system32>

Should this solve the problem?  Or will we know later.
Heh.

I just created a manual restore point. We shall see.
If there were a whole bunch and they were not showing, could that have been from past malware?
Title: Re: System Restore points silently disappear
Post by: Julian on August 16, 2015, 10:47:46 pm
have you turned off system restore on drive c: and turned it back on that may be the next option.
Title: Re: System Restore points silently disappear
Post by: Steevo on August 16, 2015, 11:04:44 pm
Not yet. It was set for zero space when I started this process, several months ago.

I'll see what happens in the next couple days.
How the heck do you know about those commands? 
I have been around a long time, and I do use command prompts and cli. 

But I didn't know about those.
I don't know about the inner working of that stuff, very low level.

Title: Re: System Restore points silently disappear
Post by: Julian on August 16, 2015, 11:17:22 pm
self taught on most stuff I know or researched and researched till my eyes bleed lol I'm like Shane when it comes to computer's and fixing "OCD" except I'm more bi-polar ha!
I love to make batch files to do stuff for me so I try to learn how to do what ever I need for that to happen ;) I wish I could program like Shane can my goal right now is to learn powershell scripting and c++. There is a lot of stuff I know but not everything because everyday helping other people on the forums, I learn something new almost everyday.
Title: Re: System Restore points silently disappear
Post by: Julian on August 16, 2015, 11:52:49 pm
my mistake on
wow this is a lot of restore points and they are not showing at all!

If you look at the post that shows all the shadows they are for your other drives as well. now system restore is only drive specific so if your windows os is installed on c: then that would be the drive with all the restore points now if it never showed them and they are there hmmmmm do you have a dual boot set up by chance at all?
Title: Re: System Restore points silently disappear
Post by: Steevo on August 17, 2015, 09:14:59 pm
I do not have a dual boot setup.
This was built new with windows 7 x64.

Incidentally, the restore point I made last night is gone as of this moment.
Heh.

Any more ideas?
Title: Re: System Restore points silently disappear
Post by: Julian on August 17, 2015, 10:24:04 pm
Turn off system restore then turn it back on reboot make a restore point. Is the hdd a sata or pata connection (ide)
Title: Re: System Restore points silently disappear
Post by: Steevo on August 17, 2015, 11:10:36 pm
I'll try it.
The disk is sata, connected to a
Intel(R) ESB2 SATA RAID Controller

Title: Re: System Restore points silently disappear
Post by: Julian on August 17, 2015, 11:34:51 pm
Are your chipset drivers up to date? And do you Have a raid setup? If yes what kind of raid.
Title: Re: System Restore points silently disappear
Post by: Steevo on August 17, 2015, 11:36:19 pm
I'm not using the RAID.
I am pretty sure there are no updates for this thing.
It's old, but dual quad core xeons.
Pretty nice, really.  And paid for.


Title: Re: System Restore points silently disappear
Post by: Steevo on August 18, 2015, 08:00:36 am
I did that, and the restore point I created manually last night is still there.
Title: Re: System Restore points silently disappear
Post by: Julian on August 18, 2015, 09:53:55 am
Woot so far so good keep checking on it and let me know if it disappeared again.
Title: Re: System Restore points silently disappear
Post by: Steevo on August 18, 2015, 09:59:07 am
Well, I don't have high hopes.
Title: Re: System Restore points silently disappear
Post by: Julian on August 18, 2015, 10:03:18 am
My goal is to find a fix for you so you can no longer have this issue and also if need be Shane can add to his repair. And the system restore repair is in beta stages right now i wanna try to get that repair outta beta stage as well  lol...  :cheesy:
Title: Re: System Restore points silently disappear
Post by: Julian on August 18, 2015, 11:25:26 pm
Still got that restore point?
Title: Re: System Restore points silently disappear
Post by: Steevo on August 19, 2015, 12:37:36 am
Yes, to manual ones even after a reboot, and I have another one created today by windows update.
But won't actually know until tomorrow, or the next day.

Title: Re: System Restore points silently disappear
Post by: Julian on August 19, 2015, 01:05:50 am
Yay 😄
Title: Re: System Restore points silently disappear
Post by: Steevo on August 19, 2015, 09:38:55 pm
I still have one automatically created restore point from windows update and two manually created ones.

I wonder how long they will last, or whether I will get anymore automatic ones?

Title: Re: System Restore points silently disappear
Post by: Julian on August 20, 2015, 12:35:46 pm
don't think! lol it will drive you insane! nah just kidding.... from the looks of it it's staying stable and keeping the restore points. just check on it every now and again I think your problem is resolved just let me know if anything new happens ill be there to help you out as much as I can.
 :wink:
Title: Re: System Restore points silently disappear
Post by: Steevo on August 24, 2015, 05:47:01 pm
I have two manual restore points and two from windows update as of right now.
I was away for a few days, so this system was off during that time.
I will be watching it.

Thanks for all your help.  We shall see. 
Title: Re: System Restore points silently disappear
Post by: Steevo on September 01, 2015, 10:01:57 am
I am going to declare this issue resolved. 
I just checked and my restore points are staying around, both the manual ones I created about 2 weeks ago and some windows updates I took.

So I am surprised.  After all this, gee whiz.
You are the guy. 

Steevo
Title: Re: System Restore points silently disappear
Post by: Julian on September 04, 2015, 01:29:12 pm
Sweet I'm glad its solved