Tweaking.com Support Forums
Main Forum => General Computer Support => Topic started by: Journstyx on August 29, 2015, 12:49:59 pm
-
Hello all,
I run Windows 7 (64 bit).
Since about 3 weeks I'm getting Blue Screens Of Death. When trying to restore to a previous point, using the Windows program it gave a pop up referring to a not properly functioning Volume Shadow Storage (error code: 0X8004231F). I looked around the internet and came across Restore Point Creator. I installed the program and the first time I ran it I was able to create restore points. After another BSOD, it started giving messages that 'a program crash that shouldn't happen on a proper working Windows installation did occur' and than it would open my browser. That opened up Tom's page with a message what could be the problem and I should install Windows Repair 3.4.3. I've done so and after installing, ran the program. I followed all the steps, including the step that creates a Registry backup. By default it runs fallback backup. After adjusting the settings and chosing VSS_7-8-2008_2012_64.exe to have Volume Shadow Storage do the backup it comes back with a message 'failed'. It says 'VSS-7-8, etc' isn't running. Check Log_VSS.txt to view any errors. I looked at the topics on Volume Shadow and came across a lot of different issues. Since I'm not a big computer wizard, I'm not sure waht to do. I'm sure there are logs that I could include in my messages, but I first need to know where to look and find them. I appreciate your help. As the above refers to a log_vss. txt where do I find this? What other logs can I include for you guys to take a look at? The BSOD had several different causes; one of them being MyFilter.sys issues. In short I hope there's some of you out there that can help me get started in solving the problems and guide me through the process. I look forward to your input. Journstyx
-
log_vss. txt will be in the registry backup folder for each backup made/ attempted.....Unless you have changed the location you will find them at C:\RegBackup
-
Can you download BlueScreenView and post its reports http://www.nirsoft.net/utils/blue_screen_view.html
Some more that may help with VSS -
http://blogs.technet.com/b/askcore/archive/2012/04/29/how-to-vss-tracing.aspx
https://msdn.microsoft.com/en-us/library/windows/desktop/dd765233(v=vs.85).aspx
Shane won't be back until at least Monday to help you with this problem.
-
Hello all, thanks for the first feedback. I'll check your suggestions asap and hope to post some results . Journstyx
-
Windows Vista - 2.99 Meg RAM- MSI Laptop - Pentium 2 Dual T2410 2.0GHz
Yesterday I had a problem of Free Disc Space mysteriously disappearing.
So I bought Windows Repair Pro and ran it in Safe Mode. I ran only 13 of the repair items as recommended by Spybot.
Now I still have my original problem but I cannot work around it as I can no longer create a restore point and therefore cannot do a Disc Cleanup which I have been doing every few days for weeks.
Having bought the Pro edition I selected the 2 options to run after I did the 2nd Repair run.
The Pro Disc Cleanup inclusion promises a lot but I can't actually get it to do anything.
When I emailed Shane he said to do a full repair in safe mode. Sect 5 will not create a restore point so that is not an option.
Finally I gave up and did a restore of the registry back-up but I still cant create a restore point or do a disc cleanup.
I need help please.
Regards
-
Windows Vista - 2.99 Meg RAM- MSI Laptop - Pentium 2 Dual T2410 2.0GHz
Yesterday I had a problem of Free Disc Space mysteriously disappearing.
So I bought Windows Repair Pro and ran it in Safe Mode. I ran only 13 of the repair items as recommended by Spybot.
Now I still have my original problem but I cannot work around it as I can no longer create a restore point and therefore cannot do a Disc Cleanup which I have been doing every few days for weeks.
Having bought the Pro edition I selected the 2 options to run after I did the 2nd Repair run.
The Pro Disc Cleanup inclusion promises a lot but I can't actually get it to do anything.
When I emailed Shane he said to do a full repair in safe mode. Sect 5 will not create a restore point so that is not an option.
Finally I gave up and did a restore of the registry back-up but I still cant create a restore point or do a disc cleanup.
I need help please.
Regards
It's best to open your own thread for your problems as the cause is different to the OP's because of his BSODs and different solutions will be required.
It's standard forum practice to open your own thread rather than hijack someone else's to avoid confusion as to the advice given and for who.
-
Hello Boggin, Samson and all,
Here's the Blue Screen Views file. It's strange that this latest BSOD log is dated August 12th, but I've experienced it various times after this date. Anyway..here's the file:
081215-66050-01.dmp 12-8-2015 17:33:01 PAGE_FAULT_IN_NONPAGED_AREA 0x00000050 fffff8a1`2833e689 00000000`00000000 fffff880`011ea678 00000000`00000005 ntoskrnl.exe ntoskrnl.exe+748c0 NT Kernel & System Microsoft® Windows® Operating System Microsoft Corporation 6.1.7601.18933 (win7sp1_gdr.150715-0600) x64 ntoskrnl.exe+748c0 C:\windows\Minidump\081215-66050-01.dmp 4 15 7601 280.440 12-8-2015 17:47:50
Details:
Not sure how to copy the window below in the overview of Blue Screen View. There's several display options, but how do I copy those and paste them here?
P.S. I also ran a program called Who Crashed. This program also reported August 12th as last BSOD, but it specifically named MPFilter,sys as the culprit module:
Its details:
crash dump file: C:\windows\Minidump\081215-66050-01.dmp
This was probably caused by the following module: mpfilter.sys (0xFFFFF880011EA678)
Bugcheck code: 0x50 (0xFFFFF8A12833E689, 0x0, 0xFFFFF880011EA678, 0x5)
Error: PAGE_FAULT_IN_NONPAGED_AREA
file path: C:\windows\system32\drivers\mpfilter.sys
product: Microsoft Malware Protection
company: Microsoft Corporation
description: Microsoft antimalware file system filter driver
Bug check description: This indicates that invalid system memory has been referenced.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time.
I've also found the Regbackup files. Do you want me to include its latest findings in here as well?
Look forward to your input.
Journstyx
-
Attach the most recent log_vss. txt file if VSS is still failing, this will give Shane an idea of what is going on there. He will probably get back to you on the BSOD crashes too.
-
Thanks Samson. I've attached the log_vss.txt file. I'll await further feedback. Regards, Journstyx.
-
Thanks Samson. I've attached the log_vss.txt file. I'll await further feedback. Regards, Journstyx.
I have seen this error from VSS (using Macrium Reflect) on a friend's machine. Here is what Macrium said about it.
"The windows snapshot component VSS will fail if a disk with a non standard sector size is attached to your system, even if this disk is either being backed up or used to store the image files. This can be an internal disk or one connected by USB or eSata."
Run 'System Information' ('All Programs' > 'Accessories' > 'System Tools' > 'System Information').
Expand the Components->Storage->Disks node, and scroll down the list of disks, looking for any that have a Bytes/Sector value not equal to 512.
Instructions above are for XP, but should be similar location in Win 7.
-
Hello samson, I've got 2 external harddisks connected that can't be switched off. I'll check your suggestion to see what it says. Maybe disconnecting the 2 harddisks and then try Vss again? I believe I already tried this, but I'll follow your instructions first. I'll report back soon. Journstyx.
-
Hello Samson, needed to do some digging as my program is in Dutch, but I found what you were referring to.
There are 4 USB related disks/usb storage devices that don't have the bytes/sector value of 512: see attached jpegs. What should I do next?
-
Those look like multi card readers. is that right?
How about the 2 external harddisks, can you find them and check Bytes/ Sector for each.
-
Hello Samson,
That's correct about the multicard readers. The 2 external hard disks attached have the Bytes/Sector 512.
What should I do next?
Journstyx
-
I had hoped that would have shown us the reason for the error, clearly not. :sad:
Sit tight, Shane will be around either later today or tomorrow and he will be able to give some more help.
At least by doing all the above he will now have more info to work with :wink:
He can also look into your BSOD crashes too.
-
Thanks Samson for your help sofar. It's much appreciated. I'll await feedback from Shane. Thanks! Journstyx
-
Hello all,
Any suggestions yet, as what I can do next? I appreciate your input.
Reagrds, Journstyx
-
Shane is a busy guy, but he'll get back to you.
-
Hello all,
I'm still in the dark as to the BSOD and restore points. I appreciate hearing from Shane to see if he can help me out. Please advise,
Journstyx
-
Hello all,
I'm still in the dark as to the BSOD and restore points. I appreciate hearing from Shane to see if he can help me out. Please advise,
Journstyx
hmmm so lets see on your restore point issue can you run in an elevated admin command prompt vssadmin list providers
and vssadmin list writers
i need to know what both of those commands say.
shoot while at it vssadmin list shadows /for=c:
here this will show me the usage the allocation and the maximum of the storage:
vssadmin list shadowstorage /on=c:
now here is the big command to delete all your shadows at once instead of using disk cleanup.
vssadmin delete shadows /for=c:
now if these shadow copies are getting out of hand and causing issues i want to really know the writers and providers.
let me know
thanks,
Julian
-
Hello Julian,
Thanks for getting back to me. I'm including a screen shot and results from the following:
vssadmin list providers
vssadmin list writers
vssadmin list shadows /for=c:
vssadmin list shadowstorage /on=c:
I haven't done the delete one yet, so you can see the results first.
Look forward to hearing from you again.
Journstyx
-
Turn off system restore then turn it back on your writers are gone.
-
Hi, Samson,
The use of the program of sys res creator, would be the cause in the first instant. I suppose, the issue is a memory related. Using of third party programs, without knowing what it does to the page system file may be the point to look at.
Normally chkdsk /f/r would be ideal in case of BSOD from the disk ,in the command prompt.
-
Hello Julian,
I need to do that later tonight when I get back.
Do I need to exercise the vssadmin delete shadows /for=c: first and then turn off and on System Restore?
What do I do after this? Try creating a new restore point?
Journstyx
-
Hello Julian,
I need to do that later tonight when I get back.
Do I need to exercise the vssadmin delete shadows /for=c: first and then turn off and on System Restore?
What do I do after this? Try creating a new restore point?
Journstyx
you could and after yes create a restore point.
-
Hello Julian,
Did vssadmin delete shadows /for=c:. The reponse: no items found for this query (image 1)
Then disabled system restore and subsequently turned it on again (image 3)
Tried making a restore point, but received an error again (image 4)
Do I need to adjust the size of usage for the disc (image 5)
Anything else I can try?
Journstyx
-
P.S. I suddenly noticed that Image 5 shows the properties for the external hard disk, so I've included new image (6) that shows the internal C drive. Anything that I need to adjust?
Should the current usage state something instead of 0 bytes?
Journstyx
-
Hmm can't read the error can you translate that also run the vssadmin list writers command again
-
The vssadmin list writers shows the following (image 7)
The error message reads:
Restore point could not be made.
A component of the Volume Shadow Copy-service encountered an unexpected error. Check the logs for the application for more information (0x80042302).
Try again.
Journstyx
-
The vssadmin list writers shows the following (image 7)
The error message reads:
Restore point could not be made.
A component of the Volume Shadow Copy-service encountered an unexpected error. Check the logs for the application for more information (0x80042302).
Try again.
Journstyx
Thank you I know that error ha Give me a moment to create you a reg file
-
I'm still here...just gone 00:40, so I'm 9 hours ahead in time:)
-
okay so backup reg first then merge this reg key then open up services and restart com+ event system and restart volume shadow copy service then try running the vssadmin list writers
-
Hi Julian,
This part you need to guide me through:
How do I back up reg
How do I merge
How to open up services and restart com+event system
Journstyx
-
now backing up: open windows repair under step 5 in the tabs it should be backup click the backup under option 1. now to merge the reg file: right click the reg file i uploaded and you should see merge option. now to restart the services: in the start menu type in "services" highlight com+ event system right click on that service and hit restart then go to volume shadow copy and right click and hit restart
-
restart whole system don't restart the services lol. forgot that there are other dependencies restarting whole system would be the fastest way instead of just the services
-
when you do the vssadmin list writers command it should no longer be blank you should see around 9 writers on there. if it shows writers then i want you to try and make a restore point.
-
Hi Julian,
I was just starting to look for the Dutch equivalent for services, but no need for that now. I'll restart whole system and run vssadmin list writers.
Should have some results shortly.
-
Hi Julian,
It looked promising...see image 9.
Then it says.. internal error.
Or should I have restarted Volume Shadow Copy first?
-
Hi Julian,
It looked promising...see image 9.
Then it says.. internal error.
Or should I have restarted Volume Shadow Copy first?
dang it! okay open regedit go to this key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\EventClasses\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000} and right click and hit export zip it up and post so i can view the keys....
-
OK, there's nothing after eventclass\, so I right clicked eventclass and exported the file. It's attached. Is that what you needed?
-
are you serious?! damn okay lets see what this does... here merge this reg file if all else fails we can restore to the backup you made.
-
OK, should I restart after the merge?
-
yes
-
OK, I'm back..it now shows the key you wanted...I've attached it.
-
type in vssadmin list writers in cmd if it shows writers then make a restore point.
-
That's better...there's 10 writers listed. Will now try and create a restore point.
-
Damn.... get another error message:
Translated:
There's insufficient storage to create a storagefile for Shadowcopies or related info (0x8004231F). Try again.
I suppose the storage settings can be altered?
-
hmmmm could be that..... vssamin not enough storage....(thinking out loud lol) Permissions can also be it as well mainly file permission... got it! so turn off and on system restore in the system protection tab on system properties. try creating a restore point if it fails then i want you to run the windows repair program run all the repairs just in case lol but i believe this actually is narrowed down to being permission related.
-
No luck...followed the instructions but the same error pops up when trying to create a restore point. I'll run the complete Windows repair program in safety mode tomorrow. I'm turning in...it's 3am!
Thanks for all the help and efforts sofar. With a little luck we may get it to work soon.
I'm back online tomorrow.
Journstyx
-
No luck...followed the instructions but the same error pops up when trying to create a restore point. I'll run the complete Windows repair program in safety mode tomorrow. I'm turning in...it's 3am!
Thanks for all the help and efforts sofar. With a little luck we may get it to work soon.
I'm back online tomorrow.
Journstyx
alright get some sleep we've accomplished a lot so far! i'll be back online tomorrow.
-
Hello Julian, I just ran Windows Repair in Safe mode.
Step 1: switched off power completely then restarted
Step 2: Pre-Scan. Done. No Issues
Repair Parse Points. Found a couple. Repaired them and solved.
Repair Environment variables: not done
Step 3: Ran 'see if check disk is needed. No errors found
Step 4: System file check. Some damaged files have been found that could not be repaired. Do you want to see the log?
Step 5: Backup: not done. Did that yesterday
So...let me know what's next.
Journstyx
-
Now go to the repair tab and run those repairs
-
Do I need to run them all ( I assume repairs fro Windows 8 or 10 are not necessary) ?
-
Wr detects your os and skips repairs that don't apply to that os
-
Right, ran the repair program (except for unhide non system files), and restarted.
What's next?
-
make a restore point
-
Unfortunately..again the oX8004231F error. Not enough storage available for creating storagefile for Shadowcopies.
-
Need to get some sleep. It's 3am again. I'll be back checking in tomorrow. Any suggestions. You thought it could be permission related. Or do I need to adjust some settings to create enough storage? Thanks again for the continued support.
-
Is there any logs that you need to verify things? I noticed during repairs that it mentioned missing certain keys.
-
Hi,
Try this link. It shows solution to your problem. It is a storage problem altogether. I would wish Julian to see this and then advise the thread owner. storage problem in recovery mode.
Hi, Julian, the link is here
https://bitsandbytesofict.wordpress.com/2014/02/22/how-to-repair-windows-8-1-image-based-backup-on-gpt-disks-volume-shadow-copy-service-error-0x8004231f/
-
Thanks Jraju....I'm very curious what Julian thinks. I assuem this applies to Windows 7 as well.
Julina...let me know what you think and what the next step could be.
Journstyx
-
Uuum not sure if that applies to you. This is talking about uefi and gpt partitions on Windows 8
-
OK, I'm not that tech savvy. I've checked the page but can't really decide if its applicable to my situation.
Let me know if you have any further suggestions. Thanks!
-
Hello Julian, I'm plagued with numerous BSOD the last hour. At least 6 occured all stating mpfilter.sys as the culprit. Haven't had a BSOD for awhile, but it messes up trying to figure out the restore point issue. So I guess I need to look at this as well in order to at least be able to be online continiously instead of all these interruptions. Any suggstions or do I need to start a new topic on this? Please advise. Journstyx.
-
Hmmm if you have Microsoft security essentials uninstall it and 're install it. But first have you made sure you don't have any malware?
-
Ill run my anti malware programs, then uninstall and re-install the Microsoft Essentials. By the way....I came across an article on the net with exactly this issue which was down to having a program called My Lockbox installed: the driver caused the BSOD problem. I'll double check this as well, as I have My Lockbox installed and the version is rather old. I'll be back online tomorrow. Journstyx
-
ah ha! my lockbox! Wow I've totally forgot about that issue with my lockbox.
-
OK, just before getting to sleep; ran anti malware. 6 threats found (all Pop.Optional. Spigot) in the various browsers. Have uninstalled ME and installed it again. Will be back tomorrow. Journstyx
-
OK, it seems my BSOD are gone and it was indeed My Lockbox's drivers causing the issue....so what else can be done about the restore points? Any further suggestions?
-
You said you had 10 writers I think 9 should be the normal amount can you post what vssadmin list writers. Gives back to you
-
It's 9 again (see image 9 writers). Before running Windows Repair it showed 10 (image 9 also included).
-
Hmmm have you tried the beta repair system restore?
-
Hello Julina, I assume its part of Windows Repair 3.5? (I'm not at home right now, hence the question). I'll check it out when I get back hoem anmd let you know.
Journstyx.
-
I must have been not quite awake judging from my grammar below (lol).
Anyway I've run Beta Repair. Is the log called Windows Repair Log? I assume you want to take a look at this?
-
Lol should be in the log folder.
-
I've included the file. Get the impression it doesn't tell us much, or am I wrong?
-
showed me it ran the permissions :cheesy: hmmm now lets see im wondering if you change the size of your shadow copy
vssadmin resize shadowstorage /for=c: /on=c: /maxsize=10%
-
Done.
-
create a restore point. i feel like by the time i have this fixed ill know how to speak dutch lol...
-
Again no luck... same 0x8004231f error keeps coming back up.
P.S. I'm created the restore point using Windows itself; should I use restore point creator instead?
-
try it out let me know
-
No luck. see error message.
-
that would be malware....need to clean up your computer what program did you use to fix your system restore in the first post you made. i would recommend uninstalling that program.
-
I believe there was a program called Single Click Restore Point, that I tried after Windows itself couldn't create restore points anymore. A few days later I came across Tweaking.com and Create Restore Point. I uninstalled Single Click Restore Point. As suggsted I ran malware bytes the other day and nothing came up except for the ..Spigot.. issues in some of my browsers. Could it be that there's some remnants from Single Click Restore Point that mess with everything?
-
Need to logout and get some sleep :smiley: Please advise what else I can try..I'll check in again tomorrow (for me that's later today:) :smiley:
-
Yeah run malware bytes and run adwcleaner
-
I don't know if you've done this with MBAM but for it to remove PuPs and PuMs you need to go into Settings/Detection and Protection and use the dropdowns to change to treat these as malware.
I favour AdwCleaner and Junkware Removal Tool but neither MBAM or those two may see remnants of Single Click as unwanted.
The link for JRT is lower down the AdwCleaner page. http://www.bleepingcomputer.com/download/adwcleaner/
As Windows Uninstall always leaves remnants, you may be better off reinstalling Single Click then use an Uninstaller program like IObit Uninstaller which has a deep clean facility to remove all remnants which will then eliminate that as a possible cause, should you think it could have some bearing.
http://www.iobit.com/en/advanceduninstaller.php
When the actual blue IObit window comes up with Run which has the small EULA check box, ensure you uncheck the box to the right of it to exclude the installation of Advanced System Care.
I normally download this from MajorGeeks but they only have the v5.0 Beta.
-
Thanks Julian and Boggin!
I've downloaded the various programs and will run them when I get home. I'll let you know the results.
-
Guys, hmmmmmm.... performed a bunch of your suggestions.
1. Reinstalled Single Click Restore Point...couldn't make it install (see image error 1)
2. Installed IOBit which couldn't find anything regarding Single Click Restore Point
3. Installed Junkware Removal Tool...Ran the program but it came up with the same error when trying to create a restore point (see image error 2): 0x8004231f
4. Installed AdwCleaner...came up with logs for folders, files, browsers, etc. I assume you like to see the logs and help me figure them out?
Please advise.
-
I was wanting you to reinstall Single Click from source and not try reinstate it from a restore point.
Prior to executing a chosen restore point, when you click on Scan on for affected programs, it would normally tell you that you may have to reinstall some for them to work.
I forgot about JRT creating a restore point first - sorry.
AdwCleaner is pretty trustworthy when it comes to removing stuff it lists in its report, but if it listed anything in the lower pane after the scan - anything of that you can uncheck so that it doesn't remove it and its report should reflect those items being deselected - but yes, post its report.
Did MBAM find anything ?
-
Hello Boggin. I did install Single Click Restore from source. Can't get it to properly install. The error keeps poppin' up.
What's your second sentence referring to..scan on for affected programs...would that be an option in Restore Point Creator?
I will post the AdwCleaner posts along with the findings from MBAM...probably takes a little while.
-
OK...here are the results. First MBAM..only 2 threats (browser related) (see first image)
2nd is AdwCleaner log....tell me what you see please
-
Yes, the Scan for affected programs is a box you would check before deciding which restore point to use so as to see what won't be kept or which programs that would be part restored, but would need to reinstalled for them to be fully functional.
Did MBAM remove Spigot as I would have expected to have seen it in the AdwCleaner report ?
Without going back through the thread, I don't know if Julian has already posted this Spigot removal help link, but disregard the use of HitmanPro as that is a paid for program. http://www.malwareremovalguides.info/spigot-pup-optional-spigot-removal-guide/
A program that I've come across recently which found an item that AdwCleaner didn't, is https://www.avast.com/browser-cleanup and is why I like to compliment AdwCleaner with a scan with JRT afterwards.
AdwCleaner will be doing you a favour by removing AVG Secure Search as that has often stopped a browser from working.
If you want DriverToolkit back after the cleaning then you will need to reinstall it, but I've found these type of programs are best used just as a guide to see what is available to update and not what you need to update.
If everything is working fine, then stay with the drivers you have.
It's possible that you picked up Spigot with either the DriverToolkit program or whatever that ParetoLogic one is - I've never liked that name but can't remember why.
What program does ParetoLogic refer to - it isn't a tune up program, is it ?
While AdwCleaner has identified keys on my system that it didn't fully identify for me to understand, I've allowed it to go ahead and remove, as it has always been a trustworthy program.
What error are you getting when trying to install Single Click ?
Have you tried its install while in Safe Mode with Networking should it be something on your computer that is disrupting its reinstall ?
-
Ok, here we go:
MBAM removed the Spigot
I'll have AVG secure search removed
Driver toolkit seems indeed nice as a guide. Often programs like that don't even install the latest drivers and cuase problems; so I'll remove it.
Pareto Logic in this case is the program Xoftspy antivirus. Must admit I had it when I ran XP on an old computer. Since there are bettrer programs out there I'll uninstall/delete it as well
Finally the error with Single Click Restore Point is just that small image (image error one) after starting the program. I'll try to re-install in safe mode and see what it does...I did get it to work once, but I guess various restore point programs conflict with each other.
I'll get back with some more feedback.
-
I wouldn't have expected AdwCleaner to snag an AV program as a PuP.
It may have fully uninstalled it for you but check to see if it has a folder in All Programs and that it includes an Uninstaller as AV program remnants can cause problems when you install a different one.
How did you end up with AVG Secure Search if you've been using that AV program ?
Run that Avast Browser Tool as a final check for your browsers.
-
No idea how AVG was installed...probably came packaged with another program.
Ran Avast Browser cleanup and got rid of Wondershare Video Converter, Bigiet toolbar button, Contribute toolbar, iSkysoft video converter.
Will try to reinstall Single Click Restore Point in safe mode and see what happens
-
help! Im now stuck in safe mode and can't get windows to start properly. please advise!
-
OK, I think i'm back. did a restore using tweaking windows repair. It seems the more you fool around the worse it gets. need to get some sleep. hopefully you guys have some more suggestions tomorrow. Thanks sofar!
-
How did you boot up into Safe Mode in the first place ?
To revert to a normal boot from Safe Mode other than Safe Mode with Command Prompt, from Start type msconfig and press enter, then under the Boot tab uncheck any of the lower boxes under Safe Mode then uncheck the Safe Mode box.
To revert from Safe Mode with Command Prompt, enter shutdown /r
From what Avast found, it sounds like you've picked up a lot of crap along the way - don't you ever look for check boxes that will include unwanted bundled software before hitting the Next or Install button ?
-
I went into safe mode through Windows Repair then tried to install Single Click Restore Point (which failed and gave the same error). Will load that screenshot later today. It seems this program messed with the settings. I decided after this to shut down the machine. Restarting it, immediately went into safe mode. I tried several times shutting down completely and restart but the safe mode kept coming up. I then tried 'Last known good configuration' but again to no avail. Eventually I thought of the backup in Windows repair. That worked.
As to the rubbish Avast found: I'm usually careful as to what I download and install and always check for boxes that can be checked/unchecked, but apparently picked up quite a few bits and pieces.
-
Well now you know how to get into and out of Safe Mode using msconfig.
Sometimes programs that you download don't mention anything about bundled software and you end up with it anyway, but that Avast tool is a recent addition to my armoury and it found something on one of my laptops that AdwCleaner missed.
-
Thanks for the suggestion. It's indeed a great additional program to add to the 'toolbox'.
As we're in between this and solving the restore point issue, let me ask you if the following programs make sense/are useful as well:
ccleaner
Microsoft fix it
Microsoft Toolkit
-
I use CCleaner at the end of each session to clear the temp file cache and sometimes to check my Startup programs, but that's about as far as it goes for me.
I use IObit Uninstaller so there is no need for me to use the registry cleaner to clean out any program residue and while CCleaner is an intelligent cleaner, it's generally best left alone.
Here are some tips to using CCleaner - http://www.howtogeek.com/113382/how-to-use-ccleaner-like-a-pro-9-tips-tricks/
I don't really have a need for MS Toolkit but quite often look for a MS Fixit for a given problem, but they don't always work.
-
Thanks for the information. I hope Julian can give some more input/thoughts about the restore point issue. You'd think that if it states there's not enough space, you would be able to increase that and solve it. But then again it's never that simple, is it ?
-
This is quite a long thread to go back through but I was wondering if Julian has suggested using Extended Disk Cleanup to remove the Volume Shadow Copies or if he has a command that will do that and then perhaps a defrag - but don't go running anything else for this unless he advises it.
http://www.sevenforums.com/tutorials/76383-disk-cleanup-extended.html
-
Thanks. I don't recall doing that, but like you said I'll await Julian's input before doing anything else. I appreciate all the efforts you guys are putting into this!
-
The vssadmin command will delete shadow copies
-
Shall I run that command again and then try all steps in Windows Repair to set new shadow copies?
-
okay just to make sure your volume shadow copy is set to manual and your COM+ Event System is set to automatic correct? and yes run the command for deleting shadow copies sorry for the late response been busy at work the past couple of days.
-
Hello, been a busy few days and won't be able to run command and then start windows repair (all steps). I hope to be able to do that tomorrow (thursday).
P.S. Volume Shadow Copy is set to manual and COM+ Even System is set to automatic. I'll report back asap.
-
hmmm im trying to figure out what is causing your issue on restore points.
-
Have you covered the Paging File being set to Windows auto manage or any 3rd party defragging programs installed ?
-
Hello, not sure what you mean by "Paging File being set to Windows auto manage"? To my knowledge I have no 3rd party defragging program installed.
-
Sorry - I was thinking of something else regarding the Paging File.
You could have a look in Task Scheduler initially to see if they are at default settings and then see if changing one to a more immediate event would give them a kick.
http://www.howtogeek.com/howto/windows-vista/change-how-often-system-restore-creates-restore-points-in-windows-vista/
-
vssadmin delete shadows /all
nuke em all lol.... next i want you to export this reg key i wanna see it
“HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Providers”
Edit: the reason why i need that key is because i was re looking at all the steps and i saw the pic you uploaded of JRT which dawned light on something that i over looked error 0X8004241f mean's this VDS_E_PROVIDER_CACHE_CORRUPT or easy terms The cache for a provider is corrupt. I want to see that reg key and if need be im gonna make a bat file to register certain dll's that pertain to this.
-
OK. I ran the command vssadmin delete shadows /all. Came back with 'no items found for this query' (see image 1). Hmmmm.
Next the reg key: see image 2 and 3.
-
Boggin...I took a look at Task Scheduler... followed the steps on the webpage you referred to...where it states that triggers can be edited....I can't.. that whole section is greyed out instead of having a white background and being able to edit (see image 4). So i've changed nothing, just wanted to to have a look, but does that tell us something (the fact that I can't change anything) ?
-
Yes, it tells me that it is time to factory reset the machine and forget about why it has happened, unless Julian can do something with that registry key.
I think given how long you have been at this, I would probably have done this myself by now.
Failing restore points in Win 7 has been a bane for a while now without MS ever coming up with a fix for it.
-
turn of system restore via the gui option then turn it back on then type this in then try to create a restore point
vssadmin resize shadowstorage /for=c: /on=c: /maxsize=20%
-
Turning system restore off and on. Do you get to that through msconfig? The only systemrecovery I come across is in the tab support programs but can't switch anything off there.
-
Turning system restore off and on. Do you get to that through msconfig? The only systemrecovery I come across is in the tab support programs but can't switch anything off there.
open the start menu and where is says computer right click hit properties then on the left pane of the system menu you will see system protection click that then select your localdisk that has windows installed after that is highlighted hit configure then click on the bubble dot that says turn off system protection hit apply. now click on the bubble dot that says restore system settings and previous versions of files then hit apply and click ok. now after that is finished open cmd and type in vssadmin resize shadowstorage /for=c: /on=c: /maxsize=20%
when that is done it will say
successfully resized the shadow copy storage association
next open up a admin powershell and type in
Checkpoint-Computer -Description test
-
Thanks Julian. I'll try this later today when I get back home and report back.
-
OK, done the VSS admin command and the powershell command. The results are reflected in Image 1 and 2. The powershell command starts off well (green lines + text and stating it's creating a restore point, after 4% is states what is shown in image 2.
-
Wonder if that last one could be related to the Task Scheduler ?
Can you check its status in services.msc - it should be showing as Started and Auto.
-
Yes, Task scheduler states 'started' and 'automatic
-
open cmd and type in
wmic service list brief
-
Done...it's a long list. I'll print screen the results (Image 4-8)
-
Run this batch file it will 're register the dlls some of them won't 're register no worries ignore them and try making a restore point again after you run the batch file with this command.
Checkpoint-Computer -Description test
-
Thanks Julian. I ran the batch. It did indeed give some issues with not being able to re-register all dll's. Anyway I ran the checkpoint command, but it gave the following error (see image 1). Translated it says 'checkpoint-computer is not recognized as an internal or external command, program or batch file' .
-
Oops lol in powershell not cmd sorry I did not. Clarify that. :shy:
Checkpoint-Computer -Description test
-
Unfortunately.... apparently same error as before (see image 1). It runs smoothly till about 8% and then comes up with the error.