Over 1 million tech questions and answers.

Help w/ Event 1000 (sysmain fault), Event 55 (corrupt Volume Shadow Copy) + more

Q: Help w/ Event 1000 (sysmain fault), Event 55 (corrupt Volume Shadow Copy) + more

Hi, all. I have been trying to figure out a serious of issues that my PC has been having. It's possible they were caused by poorly seated RAM, but the RAM seems to check out now. There is a whole slew of details on the case here: TechNet with a lot more information that will be of help, including posted evtx files. I have always gotten great help here, though, and am in dire need of a second opinion, so I thought I would check with this forum's experts.Here is the basic gist, although there is a ton more detail on the other link:Since building this machine, I've had frequent BSODs, often seemingly-related to middle of the night MSE updates, or possibly other windows updates. These always required a System Restore to recover from, as Windows was unbootable. Often it said the Restore failed, but it seemed to resolved the bootability issue at least.I have removed MSE and reseated some RAM that initially tested poorly, but which now seems to be passing MemTest no problem.I still have a series of issues that occur, and the one that was causing noticeable issues was SuperFetch causing sysmain.dll to fault (Event 1000, posted below) on every boot and periodically throughout the day. I have disabled SuperFetch, which stopped the issue from happening every boot, but it still happens occasionally, so it seems SuperFetch is but one trigger.The other most common error I have is Event 55 (posted below), possibly related to Windows Backup and/or System Restore, which seems to indicate that I am having a problem with Volume Shadow Copying (also see Events 13 and 8293 below).I also have frequent Event 1001 (posted below) issues like this one, with many different Event Names.There is a history of the investigation at the link above that provides a lot more information, including a filtered clip of the events from last night which show a lot of interesting things.Any help or guidance would be massively appreciated! Thanks in advance!Event 1000, Application Error:
Faulting application name: svchost.exe_SysMain, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: sysmain.dll, version: 6.1.7600.16385, time stamp: 0x4a5be07e
Exception code: 0xc0000005
Fault offset: 0x000000000002bd02
Faulting process id: 0x214
Faulting application start time: 0x01cba8ab6f925e25
Faulting application path: C:\Windows\System32\svchost.exe
Faulting module path: c:\windows\system32\sysmain.dll
Report Id: a5c442f4-14af-11e0-a543-6cf049e0cfc7Event 55, NTFS:
The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume \Device\HarddiskVolumeShadowCopy9.
Event 13, VSS:Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x80070422, The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
]

Operation:
Subscribing Writer

Context:
Writer Class Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}
Writer Name: WMI Writer
Writer Instance ID: {c0db0500-3f4a-439c-981f-602b9b7d1d3a}Event 8193, VSS:Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80070422, The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
.

Operation:
Subscribing Writer

Context:
Writer Class Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}
Writer Name: WMI Writer
Writer Instance ID: {c0db0500-3f4a-439c-981f-602b9b7d1d3a}Event 1001, Windows Error Reporting:
Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Read other answers
RELEVANCY SCORE 200
Preferred Solution: Help w/ Event 1000 (sysmain fault), Event 55 (corrupt Volume Shadow Copy) + more

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 126.8

I continue to receive the VSS error Event ID 32 and 8193. When this happens, my computer freezes then goes to blue screen where I see IRQL_NOT_LESS_OR_EQUAL along with other information. There is no pattern when this happens. It is extremely random.

I am running Vista Ultimate 64bit Service Pack 1. I am also running a 3rd party backup, Carbonite. Please let me know if more information on my system will help. I do not recall having this problem prior to service pack 1.

EVENT PROPERTIES - EVENT 8193
Log Name: Application
Source: VSS
Date: 6/2/2008 3:25:23 PM
Event ID: 8193Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Office-PC
Description:
Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80040154.
Operation:
Instantiating VSS server
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="VSS" />
<EventID Qualifiers="0">8193</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2008-06-02T22:25:23.000Z" />
<EventRecordID>49304</EventRecordID>
<Channel>Application</Channel>
<Computer>Office-PC</Computer>
<Security />
</System>
<EventData>
<Data>CoCreateInstance</Data>
<Data>0x80040154</Data>
<Data>
Operation:
Instant... Read more

A:Volume Shadow Copy Service (VSS) error Event ID 32 & 8193

I too am having the same problem with no solution on Google so far

Any help would be greatly appreciated!
 

Read other 3 answers
RELEVANCY SCORE 125.2

Hi -
 
This error is occurring on my PC:
 
"Volume Shadow Copy Service warning: VSS was denied access to the root of volume \\?\Volume{8614580f-bb64-11e2-8ac0-78e3b5b077a1}\. Denying administrators from accessing volume roots can cause many unexpected failures, and will prevent VSS from functioning properly.  Check security on the volume, and try the operation again.
Operation:
   Removing auto-release shadow copies
   Loading provider
Context:
   Execution Context: System Provider"
 
Here is my question:  I used the MiniTool Partition Wizard program to partition my hard drive into a Windows drive (C:) and a Data drive (J:).  When I look at the System Restore Protection Settings in Control Panel, it says that protection is "ON" for both drives.  How do I determine which drive is having the problem?  I'm guessing it's the C: drive, but I can't figure out how to determine which drive corresponds with the alphanumeric string listed in the error code.
 
I found this Microsoft help page:  https://technet.microsoft.com/en-us/library/8029af8b-d3df-4093-80b8-938b10d6babd.aspx
 
Should I run the solution on both drives, or only the C: drive?
 
I'm currently running Win7 Home Premium with SP1 - 64-bit - all Windows updates are current.  Win10 is preparing itself to upgrade, and I wanted to get this error corrected beforehand.
 
Thanks for any help you can offer.  If you need any oth... Read more

A:Question about Event ID 12348 Volume Shadow Copy Service Operations

Well...the Windows partition files...are the concern here, I think.
 
But it's simple enough to check on both partitions...one will be C:, one will be J:.  It's probably wise to check both, IMO.
 
VSS is important when it comes to backing up the system.
 
Louis

Read other 32 answers
RELEVANCY SCORE 104.4

Please explain what these mean and what I should do about them.
Thank you.
 
"Volume Shadow Copy Service warning: VSS was denied access to the root of volume \\?\Volume{5df71403-3de7-11e0-b7b9-20cf30d23a29}\. Denying administrators from accessing volume roots can cause many unexpected failures, and will prevent VSS from functioning properly.  Check security on the volume, and try the operation again. "
 
"The oldest shadow copy of volume C: was deleted to keep disk space usage for shadow copies of volume C: below the user defined limit."

A:Please explain meaning of "Shadow Copy" event messages

See Resolve section at http://technet.microsoft.com/en-us/library/dd364979(v=ws.10).aspx .
 
<<The oldest shadow copy of volume C: was deleted to keep disk space usage for shadow copies of volume...>>
 
See all postx at http://answers.microsoft.com/en-us/windows/forum/windows_7-system/on-windows-7-error-the-oldest-copy-of-volume-c-was/667f82c8-9733-4099-bfae-75e31b0aa2a7 .
 
Louis

Read other 3 answers
RELEVANCY SCORE 101.2

Have found the following error in the Event Viewer relating to VSS, ID 8194 when made back up the system Windows 8.1 partition to an image file with OneKey recovery Lenovo program :
Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
This is often caused by incorrect security settings in either the writer or requestor process.
Operation:
Gathering Writer Data
Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID:{7382df8f-c426-4940-a8bf-24d4ee707cf3}
I would appreciate some advices how to fix it.
Thanks and best regards,
Ewa

Read other answers
RELEVANCY SCORE 101.2

Hi,

My computer runs for all practical purposes I guess but I can certainly feel that there is good reason for all event log errors while working on my windows 7. For example, the blue screen of death appears once every 3-4 months, or earlier today the computer just started getting really slow (given my 8GB memory this raaarely happens), or "windows explorer" would randomly crash (however, when this does happen it usually happens just once during a session then it restarts and it's fine so it's not preventing me from using my computer it's just...something's wrong and it shouldn't be and I want to fix it! )...I have rows and columns of event log errors such as event ID 1000, event ID 80, 1001, 1002, and much more but since addressing all of them at once will probably invade the entire forum, I prefer to address them perhaps in little bundles so I don't annoy the experts and exploit the resources.
Also, I have a feeling that once I start fixing some of them, many others will disappear automatically. I'm sorry if my post is a bit vague but this is my first time here so please be patient with me and just tell me whatever information you need from me to narrow things down and I will do that.

I have provided a link to a few of my event logs to OneDrive which I appropriately labeled to make it easier to distinguish which one is which.

http://1drv.ms/12mlhJJ

Thank you so much in advance.

A:Event log swarm! Including event ID's 1000, 80, 11, 1001+2, etc...

Hello and welcome Allen mate just to try a few rather obvious bits and pieces and to start eliminating stuff run these the first two in safe mode if you have to then the malwares as long as the machine keeps running.

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

http://www.sevenforums.com/tutorials/433-disk-check.html < use the /f and /r options in Option2 if necessary

http://www.superantispyware.com/

http://www.malwarebytes.org/products/malwarebytes_free/

http://www.bleepingcomputer.com/download/adwcleaner/

download from bleeping computer ? delete any rubbishthese find.

I must say it is refreshing to find that a member has included the system specs for a change - well done!

Read other 3 answers
RELEVANCY SCORE 90

Faulting application name: taskeng.exe, version: 6.1.7601.17514, time stamp: 0x4ce79d2c
Faulting module name: svrltmgr.dll, version: 0.0.0.0, time stamp: 0x584f2bca
Exception code: 0xc0000005
Fault offset: 0x000000000021f7d3
Faulting process id: 0x1860
Faulting application start time: 0x01d29e6dedebd9b9
Faulting application path: C:\Windows\system32\taskeng.exe
Faulting module path: C:\Windows\winipbin\svrltmgr.dll
Report Id: e0417759-0a61-11e7-9c07-0050569f7630

Task Scheduler crashes and the program closes. Need help

Read other answers
RELEVANCY SCORE 86.8

Alright, started getting the 1001 BugCheck crash with Event 41 Kernel-Power BSOD a few times not long ago, widely spaced out incidents (it will lock up, make a very weird repetitive noise through my stereo speakers and will also get black and white bars across the screen before the blue screen turns up and asks for restart option choice). And Event 4 k57nd60a has been ongoing for as long as I can remember.

Any ideas?
Event 1001, BugCheck
The computer has rebooted from a bugcheck. The bugcheck was: 0x0000003b (0x00000000c0000005, 0xfffff8800646843a, 0xfffff880028c5a10, 0x0000000000000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 041312-18205-01.

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-04-13T14:05:58.000000000Z" />
<EventRecordID>39029</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>M... Read more

A:Event 1001 BugCheck Event 41 Kernel-Power Event 4 k57nd60a

Memory exception but we need to examine the DMP files to find out why.

We do need the DMP file as it contains the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible.

If you are overclocking STOP
We could also use some system information, which you can get easily by running msinfo32.
To do that go to start>run>type msinfo32>enter

When it is finished running go to file>save>name it and upload to us here.
You may be able to get the DMP files without crashing by booting into safe mode (F8) with networking.

To enable us to assist you with your computer's BSOD symptoms, upload the contents of your "\Windows\Minidump" folder.

The procedure:





Quote:
* Copy the contents of \Windows\Minidump to another (temporary) location somewhere on your machine.
* Zip up the copy.
* Attach the ZIP archive to your post using the "paperclip" (file attachments) button.
*If the files are too large please upload them to a file sharing service like "Rapidshare" and put a link to them in your reply.


To ensure minidumps are enabled:





Quote:
* Go to Start, in the Search Box type: sysdm.cpl, press Enter.
* Under the Advanced tab, click on the Startup and Recovery Settings... button.
* Ensure that Automatically restart is unchecked.
* Under the Write Debugging Information header select Small memory dump (256 kB) in the dropdown box (the 256kb ... Read more

Read other 9 answers
RELEVANCY SCORE 86.4

Dell Inspiron Laptop 5558 , Win 8.1, I7, 6GB RAM, 1 TB HDD

Event view shows the error below and also a WMI error event 24. I can provide detail on this error if needed. Disk management shows all partitions on the disk are healthy. What should I do to fix these errors?
MFT Error:
System

- Provider

[ Name] Ntfs

[ Guid] {DD70BC80-EF44-421B-8AC3-CD31DA613A4E}

EventID 55

Version 0

Level 2

Task 0

Opcode 0

Keywords 0x8000000000000000

EventRecordID 545416

Correlation

- Execution

[ ProcessID] 4

[ ThreadID] 2888


Channel System

- Security

[ UserID] S-1-5-18

- EventData

DriveName OS

DeviceName \Device\HarddiskVolumeShadowCopy5

CorruptionState 0x0

HeaderFlags 0x922

Severity Critical

Origin File System Driver

Verb Bad FRS

Description The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x4000000000bd7. The name of the file is "<unable to determine file name>".

Signature 0xa3d8fca0

Outcome Read Only Volume

SampleLength 0

SampleData


SourceFile 0x6

SourceLine 152

SourceTag 337

CallStack Ntfs+0x15cfc4, Ntfs+0xcd4be, Ntfs+0xcd694, Ntfs+0xadd08, Ntfs+0xc7d31, Ntfs+0x9fbcf, Ntfs+0x118131, Ntfs+0x12ce39, Ntfs+0x81090, Ntfs+0xe4c4, ntoskrnl+0x7471f, ntoskrnl+0x67074, ntoskrnl+0x1543c6

Read other answers
RELEVANCY SCORE 86.4

Dell Inspiron Laptop 5558 , Win 8.1, I7, 6GB RAM, 1 TB HDD

Event view shows the error below and also a WMI error event 24. I can provide detail on this error if needed. Disk management shows all partitions on the disk are healthy. What should I do to fix these errors?
MFT Error:
System

- Provider

[ Name] Ntfs

[ Guid] {DD70BC80-EF44-421B-8AC3-CD31DA613A4E}

EventID 55

Version 0

Level 2

Task 0

Opcode 0

Keywords 0x8000000000000000

EventRecordID 545416

Correlation

- Execution

[ ProcessID] 4

[ ThreadID] 2888


Channel System

- Security

[ UserID] S-1-5-18

- EventData

DriveName OS

DeviceName \Device\HarddiskVolumeShadowCopy5

CorruptionState 0x0

HeaderFlags 0x922

Severity Critical

Origin File System Driver

Verb Bad FRS

Description The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x4000000000bd7. The name of the file is "<unable to determine file name>".

Signature 0xa3d8fca0

Outcome Read Only Volume

SampleLength 0

SampleData


SourceFile 0x6

SourceLine 152

SourceTag 337

CallStack Ntfs+0x15cfc4, Ntfs+0xcd4be, Ntfs+0xcd694, Ntfs+0xadd08, Ntfs+0xc7d31, Ntfs+0x9fbcf, Ntfs+0x118131, Ntfs+0x12ce39, Ntfs+0x81090, Ntfs+0xe4c4, ntoskrnl+0x7471f, ntoskrnl+0x67074, ntoskrnl+0x1543c6

A:master file table (mft) contains a corrupt file Event ID 55 and WMI error event 24

Hi. . .

Run chkdsk /r from a CMD prompt screen.

Answer "Y" to the question; re-boot the system.

Chkdsk will run upon startup.

Regards. . .

jcgriff2

EDIT: Paste chkdsk results into your next post. You can find the results in the Event Viewer - Application log. Do a find on "chkdsk" to find the entry.

Are you experiencing actual system problems or did you just come upon this entry and assumed it is an error of some kind?

Read other 16 answers
RELEVANCY SCORE 83.6

Hey everyone. I recently coded a little game to test my knowledge of networking, everything was fine, both the client and the server ran fine within the IDE. The problems arose when i created the executables.
I can connect to the server from the client just fine, but when the main loop messages begin to send, either the client or the server crashes. Now i'm pretty sure this has nothing to do with my code, as i said the programs run fine within the IDE.
When the programs crash the temporary error log that is created contains the following information:

Well.. I was just about to post what was contained, but windows has decided to stop creating logs, lovely!

When i check the Event Viewer i see this error message:

Faulting application netshot_client.exe, version 0.0.0.0, faulting module netshot_client.exe, version 0.0.0.0, fault address 0x001cf777.

Or if the server crashes:

Faulting application netshot_server.exe, version 0.0.0.0, faulting module netshot_server.exe, version 0.0.0.0, fault address 0x001bffbd.

I've tried everything i can think of, Removing possible conflicting programs, removing shell extensions, spyware, virus and malware scans, winsock fixes, sfc /scannow, the list goes on and on. I have been trying to fix this problem for the past nine hours. This is my last hope, so to speak!

Any help you guys can offer is greatly appreciated!
Now if you'll excuse me, i'm going to bed!

Read other answers
RELEVANCY SCORE 82.8

Hi,

I keep noticing event viewer produces an

Event 36, volsnap - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

I am really really curious as to what causes this error. There appears to be little knowledge on this error around the forums yet a lot of people complain about this error. The usual advise is to 'increase your shadow copy storage limit, but in my case the current usage is never no where near my setting of 10GB when the error occurs. I have tried absolutely everything to diagnose this message so far with absolutely no success. Any idea what this message is all about?

The only things I can conclude so far:
This error has occurred over multiple windows 7 installations/hardware configurations so I am fairly certain I cant blame anything hardware/windows 7 corruption related.

The error seems to have started to occur more frequently (but not the sole cause) since setting up MyDefrag to run on a regular daily basis.

I assume the error is related to the attempt that Windows 7 makes to run a system restore point/shadowcopy (one of the same????) automatically (not the ones made when installing/uninstalling software/updates).

Sometimes after Event 36 (but not always) the reported Current Usage under System Protection settings reads 0!

Is this error related to when something interrupts Windows 7 automatic attempt at a system restore point i.e. running Mydefrag/breathing on keyboard?

Where doe... Read more

A:What causes Event 36, volsnap - Shadow copies failed....

Have you tried this? (chkdsk /r)

Source&#58; VolSnap Event ID&#58; 36 &#40;Windows Operating System 5.2.3790.1830&#41; - Technet Events And Errors Message Center&#58; Message Details

Read other 2 answers
RELEVANCY SCORE 82.4

Hi,
Could you please explain what that means?
It appears in 2-3 hours after running.
Log Name:      Application
Source:        .NET Runtime
Date:          5/7/2019 6:50:04 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      PC-IT
Description:
Application: dya150gr.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.Runtime.InteropServices.SEHException
Stack:
   at SimCorp.IMS.Framework.Data.DataManager`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].SimCorp.IMS.Framework.Data.IVolatileDataManager<TData>.IsChangeRelevant(SimCorp.IMS.Framework.Data.DatabaseChange)
   at SimCorp.IMS.Framework.Data.DataChangeEventSource`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].OnDatabaseChanged(System.Collections.Generic.IList`1<SimCorp.IMS.Framework.Data.DatabaseChange>)
   at SimCorp.IMS.Framework.WeakDelegate.DoInvoke(System.Object, System.Object[])
   at SimCorp.IMS.Framework.WeakDelegate.Invoke(System.Object[])
   at SimCorp.IMS.Framework.WeakReferenceEvent.DoEvent(System.Object[])
   at SimCorp.IMS.F... Read more

Read other answers
RELEVANCY SCORE 82.4

My computer gives me this message error signature iexplore.exe szAppVer:8.0.6..1.18702 szModName.hungAPP when I look at more info...it gives me event 1000. It tell me to help protect your computer windows has to close this program...anyone know how I can fix this? I also get another window pop up that says Internet explorer has encountered a problem and has to close. so they both close me down when I get on the internet. can anyone help me fix this please...I have run ccleaner..anti spyware. the free mcAfee scan...disc clean up...It is still there...also is there a good free register cleaner? thanks in advance for any help.....this is sooo agrevating....
 

Read other answers
RELEVANCY SCORE 82.4

Ever since installing IE7, I get periodic crashes in IE, and in the application log it's always:

Event ID: 1000

Faulting application iexplore.exe, version 7.0.5730.11, faulting module ntdll.dll, version 5.1.2600.2180, fault address 0x00031c6b.

The fault address changes, and once I saw one for module mshtmled.dll, but it's usually ntdll.dll that is flagged.

Anyone have any words of wisdom on this issue?
 

Read other answers
RELEVANCY SCORE 82.4

I've installed a fresh copy of W8/W8.1 on three systems and have resolved all the usual Event Log Errors that have been identified on this Forum. However, I have a new problem on the third system that I need help identifying a solution. The system is a Q9550 processor running on a GA-EP45-UD3P MB with 8GB of Mushkin C5 Ram and an OCZ SSD for a boot drive. For some reason the system has started to boot up OK and then after ~10 seconds the screen goes Blue and then the W8.1 screen rebuilds and all is well. I assume that the blue screen event is related to the Explorer.exe error?! Other than the event log entry and the initial blue screen the system works OK. I have included screen prints of the Event Log. Hopefully, someone can give me a hint on what the heck is going on that causes this problem.

A:Explorer.exe Event ID:1000

Try running DISM.
DISM - Fixing Component Store Corruption in Windows 8

Read other 7 answers
RELEVANCY SCORE 82.4

Good morning,
I am having a problem with my pc giving me a winword error on boot up or when using Word. When checking my log it is logging in as error 1000. I have reinstalled office, still having the same problem. Use Windows XP Prof, Micro Office 2000. I ran a hijack log which is shown below. Does anyone have any ideas? This isn't a big issue but an irritating one. Thanks in advance for your assistance.

razorsmom

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:15:45 AM, on 7/15/2008
Platform: Windows 2003 SP2 (WinNT 5.02.3790)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
C:\Program Files (x86)\Raxco\PerfectDisk\PDAgent.exe
C:\WINDOWS\SysWOW64\PSIService.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_S10IC2.EXE
C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files (x86)\Calendarscope\cs.exe
C:\WINDOWS\SysWOW64\ctfmon.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files (x86)\Raxco\PerfectDisk\PDEngine.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files (x86)\ASUS\AI Suite\AiNap\AiNa... Read more

Read other answers
RELEVANCY SCORE 82.4

Thanks for any help.

Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 5603
Date: 28/11/2006
Time: 17:57:33
User: USER-2F62D3344E\user
Computer: USER-2F62D3344E
Description:
A provider, OffProv11, has been registered in the WMI namespace, Root\MSAPPS11, but did not specify the HostingModel property. This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

A:What's this event in event viewer? (event source WinMgmt)

http://support.microsoft.com/default...b;en-us;891642
this might help

Read other 1 answers
RELEVANCY SCORE 82.4

I have hundreds of these errors for event id's 1026,1049 and 1059, I have searched and cannot find anything remotely associated with these errors or the cause of them:

The description for Event ID 1026 from source Internet Explorer cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
 
If the event originated on another computer, the display information had to be saved with the event.
 
There all have the same information and event log online help does not "help" , any ideas?

A:Event ID 1026 ,Event ID 1049 and Event ID 1059

I think Iv'e answered my own question:
 
http://msdn.microsoft.com/en-us/library/dd565636(v=vs.85).aspx error 1059
http://msdn.microsoft.com/en-us/library/dd565650(v=vs.85).aspx error 1049
http://msdn.microsoft.com/en-us/library/dd565667(v=vs.85).aspx error 102
Would someone be able to check this is correct?
 
thanks very much

Read other 3 answers
RELEVANCY SCORE 81.6

I found this under Windows Log in Computer managemant. This error occurs after every reboot.
"The file system structire on the disk is corrupt and unusable. Please run the chkdsk utility on the volume \Device\Harddisk\VolumeShadowCopy1"
I get this for copy 1, 2, 3, 7,etc. Is this in my setup or have I left something off? I did some searching but found nothing that matched up as I have it.

A:Disk Corrupt Shadow Volume????

Delete a shadow copy: File and Storage Services

Read other 4 answers
RELEVANCY SCORE 81.6

Having problems with VSC - Volume Shadow Copy in Windows 7 Ultimate. Receive message ("Windows could not start the Volume Shadow Copy service on Local Computer. Error3: The system cannot find the path specified.) Also my backup and restore will not work. Generally the same message. Cannot pinpoint when this started but was probably after installing updates to windows 7. 5/15/2014

A:Volume Shadow Copy

Go to Start > Search then type vssvc.exe it should be found in C:\Windows\System32 folder, if it is found in some other location, copy and paste it into the System32 folder, see if the error is resolved.

Also check that the volume shadow service is running, and set to Automatic. To check that the service is running, in the search box, type compmgmt.msc , once in Computer Management go down to Services then check the Volume Shadow service.

If it is not found at all, go back to Start > Search at type cmd.exe right click on it, then choose Run as Administrator, in the command prompt type sfc /scannow this will restore any missing or corrupt system files.

Read other 6 answers
RELEVANCY SCORE 81.6

It's been a few days since I was able to restore my rig after a faulty SSHD and I've just about worked out all the bugs except for this one....

The Volume Shadow Copy service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

There's a TON of them. Any ideas on how to fix this? Is it important? Can I live without it?

Read other answers
RELEVANCY SCORE 81.6

I wonder if I should use volume shadow copy on my PC. Is it necessary? Is it typical that it creates many problems?

A:Volume shadow copy necessary?

useful if you or other people mess files up regularly. Here's some reading:
What you should know about Volume Shadow Copy/System Restore in Windows 7 & Vista (FAQ) | Trying To Be Helpful

Read other 9 answers
RELEVANCY SCORE 81.6

Hi guys, trust everyone had a good Xmas...

Over the holdiays, I ran a scheduled check on all my hardware....i.e., spring clean/full service....

I found that my main workstation (Win 7 Pro 32bit) had ceased backing up on my Win Home Server since 10th Dec. Checked out other systems & their backups, & no problems found, they are still backing up daily (Vista Bus,Win 7 Pro 32bit & Win 7 Ult 64bit).

On checking with the MS WHS forum, found that VSS must be enabled, so checked mine out....& found that it had stopped. Restarted service & did a manual backup at that time which was successful.

However, the automatic daily backup is still failing & on checking, found that the VSS service is stopped again.

No new programs have been installed since 10th Dec, so any idea as to what may cause this service to be repeatedly stopped?

Read other answers
RELEVANCY SCORE 81.6

hi, guys
when downloading all the 200 and more updates after a fresh install of win7,

in services, MUST the service (volume shadow copy) be STARTED, to help download all updates yes/no ????
thanks for your time, bluesfloyd.

A:(volume shadow copy)

No - that has nothing to do with downloads. A volume shadow is a restore point.

Read other 1 answers
RELEVANCY SCORE 81.6

Explorer.exe crashes from time to time. The crash seems random, but I think it happens when I open explorer or the control panel. It happens intermittently, so it's hard to tell. I get two different event ID 1000 in the logs. One error indicates the
faulting module as ntdll.dll and the other as DUI70.dll. Here's a link to the dump files:
http://1drv.ms/1yScTvQ I don't know how to analyze the dump files. Please help me, thank you! System Information:
http://1drv.ms/15puFOb
"Log Name:      Application
Source:        Application Error
Date:          11/22/2014 2:53:40 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      COMPUTER
Description:
Faulting application name: Explorer.EXE, version: 6.1.7601.17567, time stamp: 0x4d672ee4
Faulting module name: DUI70.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdf25
Exception code: 0xc0000005
Fault offset: 0x0000000000001098
Faulting process id: 0x6d4
Faulting application start time: 0x01d0069509c3cb8f
Faulting application path: C:\Windows\Explorer.EXE
Faulting module path: C:\Windows\system32\DUI70.dll
Report Id: a3068706-7289-11e4-bfb8-6c626d45a41"
"... Read more

A:Event ID 1000, Explorer.exe, Crashes

Hi,
Sorry for my dilatory reply. According to these analyze results, this problem indeed caused by duser.dll which belongs to Windows DirectUI Engine.
To resolve this problem, firstly, try to run Sfc /scannow command to fix system componments for test.
If no use, it would be better to access Windows Recoveroy mode to make system repair.
In addition, generally speaking, system dll file won't have problem, have you installed any app in your system that may harm to system file before this problem occures? If that it is, please try to uninstall it for test.
Roger Lu
TechNet Community Support

Read other 8 answers
RELEVANCY SCORE 81.6

Windows 8.1 Acer 64 Bit
Notepad crashes when I try to use - page setup or printing
Other programs also crash when trying to print.
I have 2 of these new. They worked fine until the first few minutes connected online. I can reset to original acer config ant they work fine until it connects to the internet.
Log Name:      Application
Source:        Application Error
Date:          7/19/2016 12:06:41 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:     
Description:
Faulting application name: notepad.exe, version: 6.3.9600.16384, time stamp: 0x5215ef3b
Faulting module name: ntdll.dll, version: 6.3.9600.16408, time stamp: 0x523d5305
Exception code: 0xc0000374
Fault offset: 0x00000000000f387c
Faulting process id: 0x890
Faulting application start time: 0x01d1e1dfe07ca5b6
Faulting application path: C:\WINDOWS\system32\notepad.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: 2905f12b-4dd3-11e6-825d-f80f41b81325
Faulting package full name:
Faulting package-relative application ID:
Event Xml:
<Event xmlns="
  <System>
    <Provider Name="Application Error" />
&... Read more

Read other answers
RELEVANCY SCORE 81.6

Hi, I've been playing several games on Windows 7 and most of them randomly crash without explanation. I run Windows 7 Enterprise 32 bit, Service pack 1. I've discovered it's an Application error 1000 in Windows log. Here's the info:
 
+ System
    - Provider
      [ Name] Application Error
    - EventID 1000
      [ Qualifiers] 0
      Level 2       Task 100       Keywords 0x80000000000000     - TimeCreated
      [ SystemTime] 2015-08-23T02:13:55.000000000Z
      EventRecordID 7152       Channel Application       Computer       Security
- EventData
      Napoleon.exe       1.0.0.0       4b7c008a       Napoleon.exe       1.0.0.0       4b7c008a       c0000005       0012a0ab       384       01d0dd3dbbc765f3       E:\Napoleon Total War\Napoleon Total War\Napoleon.exe       E:\Napoleon Total War\Napoleon Total War\Napoleon.exe      
9a9c6e48-493c-11e5-82fd-d8cb8a1d798c

 
 
It is really annoying and I don't know what to do. I have updated all drivers, installed the latest ones, scanned for viruses and malware but nothing seems to help. 
Scanning through the event log, I've discovered Appl... Read more

A:Event 1000, Application error

IMO...application hangs are (generally) the result of bad coding in the program.
 
I have a video-edit program that I've used for years...that really is the only program that ever hangs on any of my systems.  I just close the program via Task Manager and reopen it.
 
Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post. 
Louis

Read other 2 answers
RELEVANCY SCORE 81.6

I keep getting the following application ID 1000 errror and can't figure out what is causing it. Any ideas?

Faulting application name: explorer.exe, version: 6.3.9600.17667, time stamp: 0x54c6f7c2
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x0000000000000000
Faulting process id: 0x15a0
Faulting application start time: 0x01d11a833670a477
Faulting application path: C:\Windows\system32\explorer.exe
Faulting module path: unknown
Report Id: 654b1a1f-87c2-11e5-8152-00155d6f910d
Faulting package full name: 
Faulting package-relative application ID: 

Read other answers
RELEVANCY SCORE 81.6

I received the below message on one of my computers. I have looked and done research online but haven't been able to determine a cause.

Log: System
Type: Informational
Event: 1000
Source: Save Dump

"The computer has rebooted from a bugcheck. The bugcheck was:
0x0000008e (0xe0000001, 0xba338925, 0x9668e454, 0x00000000).
A full dump was not saved."
 

Read other answers
RELEVANCY SCORE 81.6

hi everybody any help will be so appreciated:
i got the below error in my event viewer while running application needs the COMS .

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 9/4/2012
Time: 8:39:33 AM
User: N/A
Computer:
Description:
Faulting application dllhost.exe, version 5.2.3790.3959, faulting module kernel32.dll, version 5.2.3790.4480, fault address 0x0000bef7.

For more information, see Help and Support Center at
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 64 6c 6c ure dll
0018: 68 6f 73 74 2e 65 78 65 host.exe
0020: 20 35 2e 32 2e 33 37 39 5.2.379
0028: 30 2e 33 39 35 39 20 69 0.3959 i
0030: 6e 20 6b 65 72 6e 65 6c n kernel
0038: 33 32 2e 64 6c 6c 20 35 32.dll 5
0040: 2e 32 2e 33 37 39 30 2e .2.3790.
0048: 34 34 38 30 20 61 74 20 4480 at
0050: 6f 66 66 73 65 74 20 30 offset 0
0058: 30 30 30 62 65 66 37 000bef7

A:Application Error Event ID 1000

Are you having an actual system problem like an app crash/hang or just concerned about the Event Viewer entry itself?

Read other 4 answers
RELEVANCY SCORE 81.6

I am suddenly getting an error when I try to open Word. I have MS Office 2000 installed on a Windows XP SP2 machine. It has been working fine for over a year, nothing new has been installed. Now when I try to open word I get an error saying there was an application error and word will have to shut down. Windows says it is sending the error message to MS. A check of the error message to MS says the Code is 0xc0000005.
When I check the Application Event log I get an Application Error with Event ID of 1000. The error states:

Faulting application winword.exe, version 9.0.0.8943, faulting module winword.exe, version 9.0.0.8943, fault address 0x003f2868.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
I have checked the MS web site for code of 0xc0000005 and it says to turn off compatibility mode, (it was not enabled) and to rename normal.dot to oldnormal.dot. There was no normal.dot to be found on the system.
I have tried to run an MS Office repair, and have tried to uninstall/reinstall MS Office 2000. I have also downloaded all the latest updates. No help. Any ideas out there?
Thank in advance,
Ron
 

A:Event ID: 1000 in Word 2000

Read other 7 answers
RELEVANCY SCORE 81.6

For the past two months or so I have been getting this error along with a couple of freezes.

Log Name: Application
Source: Application Error
Date: 5/21/2016 12:49:52 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Wills-PC
Description:
Faulting application name: dwm.exe, version: 10.0.10586.0, time stamp: 0x5632d756
Faulting module name: combase.dll, version: 10.0.10586.103, time stamp: 0x56a849ab
Exception code: 0xc0000005
Fault offset: 0x0000000000067e3c
Faulting process id: 0x41c
Faulting application start time: 0x01d1b316f02a4796
Faulting application path: C:\WINDOWS\system32\dwm.exe
Faulting module path: C:\WINDOWS\system32\combase.dll
Report Id: 1d102b22-f4d4-493e-9e56-58f00b1244b9
Faulting package full name:
Faulting package-relative application ID:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2016-05-21T04:49:52.057878100Z" />
<EventRecordID>16843</EventRecordID>
<Channel>Application</Channel>
<Computer>Wills-PC</Computer>
<Security />
</System>
<Even... Read more

Read other answers
RELEVANCY SCORE 81.6

Hi techguys/dolls

So am getting the same event viewer errors when running win7 or win8
Star Citizen (Game) crashes

Here are the screenshots:

Win 8.1

Win7

How to interpret these findings?
Tried: Brand New Install Win7 Home, Updated all drivers, + windows updates
HDD chkdsk, sfc /scannow, memtest86+
GPU fan 70%, fans turbo, GPU stress tests - ALL Passed

What is causing these crashes? Could well be Star Citizen Game bugs,

Does my issue mean some hardware failure like PSU/GPU ?
( as getting same error on both OS)

No other issues/conflicts or crashing app's

The similiarity in the errors is quite staggering, even prosaic
But what does it mean?
and can I handle the truth neo

Is the answer staring me right in the face?

C'mon lads give it your best shot
Prize for solving this one -- 72hrs spent on it
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz, Intel64 Family 6 Model 60 Stepping 3
Processor Count: 8
RAM: 16325 Mb
Graphics Card: NVIDIA GeForce GTX 970, -1 Mb
Hard Drives: C: Total - 143996 MB, Free - 67838 MB; D: Total - 100194 MB, Free - 99130 MB; R: Total - 4095 MB, Free - 4048 MB;
Motherboard: ASUSTeK COMPUTER INC., MAXIMUS VII RANGER
Antivirus: AVG AntiVirus Free Edition 2015, Updated and Enabled
 

A:SC Crash Event:1000 (same error on win:7'8 )

wow I got a diff fault offset .. can these be analysed?
can I have some help to create mini-dumps or crash dumps
I know nothing about it
 

Read other 1 answers
RELEVANCY SCORE 80.8

The only info I can find on it is how it works hand-in-hand with W2k3servers, but I need help understanding what it can do just with a local XP machine.

Read other answers
RELEVANCY SCORE 80.8

I keep having issues with Carbonite backup: it locks up my Outlook pst so I can't open it. Carbonite's response is my Volume Shadow Copy is corrupt/malfunctioning and that I should re-install Windows.

I have noticed that when I turn on my computer VSS is never on; I always have to start it. Even when I set "startup type" to automatic, it eventually reverts back to manual.

Is this normal? Is it typical for most people to have VSS on or off?

Win 7 64bit
Office 2013

A:Should Volume Shadow Copy be running?

The default setting is manual. It will be started as needed. On one machine it's currently running, my other machine it's not.

Read other 8 answers
RELEVANCY SCORE 80.8

Therefore system restore doesn't work, good job I use Roll back RX, but it's still annoying. Tried manually starting VSS service but it says access denied, and all its asscoiated services are enabled. It also says file not found. I've never deleted anything like that off my system and it's not as if it's asking for a missing DLL? I would restore back to an earlier date but...well you see my problem! Rollback was only bought when I realised system restore wasn't working... I could live without it but it's always nice to know your new operating system functions the way it should. I have had problem after problem with Vista... Anyhow, some advice would be great. Thanks.
 

Read other answers
RELEVANCY SCORE 80.8

hello,

I am evaluating a new program which is to be considered comparable to Norton Ghost or Acronis True Image except it is billed to be extraordinarily fast.I think I may have a problem because the new program posted a message that volume shadow service is not supported on drive C. as a result it started the backup in "archive mode."

This mode is no quicker than it was previously so I assume the speedy version requires the volume shadow copy service.

I am running windows Pro XP SP3 with four gig of RAM and a 1.8 gauge dual core processor.the software is from Horizon DataSys and is called Drive Cloner RX. I have been using their program Rollback RX which had an earlier version of the cloning program built in.

I know nothing about volume shadow copy but the articles on Google really didn't shed any light from the perspective of a nerd. any and all help would be much appreciated.
 

A:question regarding volume shadow copy

The "shadow copy" is used for a simulation of the files that are in use and can't be copied. The shadow is the condition that the file was in before it was called into use, which is what prevents it from being copied directly.

The "volume shadow copy" comprises the files that can be copied and the pre-call condition of the files that can't be copied when ntbackup is invoked on a volume.

...more or less; a very simplified version.

I use BootIt Next Generation. I prefer "rock solid" much more than speed.
 

Read other 2 answers
RELEVANCY SCORE 80.8

" A Volume Shadow copy service component encountered an unexpected error. 0x80042302"

Will not allow system restore with above explanation. I am logged in as administrator; unable to connect to internet
 

A:Volume Shadow Copy Service

This Link may help you:
http://www.wiki-errors.com/wiki-errors.php?wiki=0X80042302
 

Read other 1 answers
RELEVANCY SCORE 80.8

Hello,
Following ongoing and never ending battle with house member installing numerous software hijacks to control my laptop. (I know I sound paranoid but if you only knew). Anyway, when I try system restore it is not available and says the volume shadow copy isn't working. Any ideas?

A:Volume shadow copy error

Seems been having a lot of issues lately, as far as possible keylogger would need a malware expert to run software tools on your laptop.
For System restore again you can try this.

From (Admin) Command Prompt copy and paste this and press Enter sfc /scannow

Same command prompt copy and paste this

dism /online /cleanup-image /restorehealth

Again run sfc /scannow

Reboot Laptop and try system restore. Not sure if any possible infection may be causing this also as i am not a malware expert to say.

Read other 17 answers
RELEVANCY SCORE 80.8

If I go into the properties of any folder or file, and then to the Restore Previous Versions tab, I have several snapshots to choose from. I thought this was a feature of the Volume Shadow Copy service
( Shadow Copy - Wikipedia, the free encyclopedia )

however, when I look at my list of services, via services.msc, the "volume shadow copy" service is set to Manual start, and is currently Stopped. If it's not running, how is it I have these "previous versions" snapshots? I assumed if the service isn't running, there would be no snapshots being captured.

I'm not complaining, only curious to learn. Can someone clarify please? TIA

A:Question about volume shadow copy

Shadow copy is not running all the time. It is controlled by the task scheduler. A picture is taken about once a week. You can go back to any picture. If it is not time for the picture it is off. The task scheduler turns it on

(same in Windows 7)
System Restore - disk space - Vista Forums

and

System Protection - Change Disk Space Usage

Read other 5 answers
RELEVANCY SCORE 80.8

I have used and configured Volume Shadow Copy at work on my servers, but now I'd like to use it at home on my Windows XP Sp2 desktop and it occurs to me that the tabs aren't there. I've noted this before but now I figure I should pursue this to it's conclusion.

I know that XP Sp2 has VSS, and I've seen the services, even started them to see if that would make any difference, but I still have no Shadow Copies tab in the root drive properties box on any drive letter, which is where it is on my W2K3 servers...

Can anybody tell me decisively why this is? If it has the services then why can I not configure Shadow Copies on my XP Workstation? Is it only there to provide consistent backup to 3rd party programs?

That would seem unnecessarily restrictive when there is no real need...
 

Read other answers
RELEVANCY SCORE 80.8

Hi There,
Can some one help us to resolve volume shadow copy problem.We are getting the below error during online backup.

Volume Shadow Copy Service warning: VSS was denied access to the root of volume \?\Volume{149aa994-24a9-11e3-a1d6-60a44cafd32d}. Denying administrators from accessing volume roots can cause many unexpected failures, and will prevent VSS from functioning properly.
Check security on the volume, and try the operation again.
We have followed-

Event ID 12348 ? Volume Shadow Copy Service Operations
Still getting the same error.
Please help us.
Thanks,
Kalyan

Read other answers
RELEVANCY SCORE 80.8

Hello, i have a question about this. What exactly is it? what does it do? after a restart it asked me to install it, well i dont know what it is. Google didnt give me much results explaining it. Im on vista 64 Thank you for your time

Read other answers
RELEVANCY SCORE 80.8

The only info I can find on it is how it works hand-in-hand with W2k3servers, but I need help understanding what it can do just with a local XP machine.

Read other answers
RELEVANCY SCORE 80.8

What is Volume shadow copy service and should i be worried about it? Abotu the same time this started Mcafee started going crazy and when i uninstalled it to try to fix it now it won't reinstall, the scan always fails and nothig happens. Now i can't even log onto the mcafee website to do anything because nothing happens when i click logon. Last time this happened was when i tried the beta for IE8 and i ended up doin a reinstall of everything. I would like to fix it without doin that now because it is a pain. any help is appreciated.

A:volume copy shadow service?

hi you need to use mcafee removal tool to completely remove your copy
http://service.mcafee.com/FAQDocument.aspx?id=TS100507
heree is some info on vscs http://www.microsoft.com/windows/win...adow-copy.aspx more info here
http://www.google.co.uk/search?hl=en...py+vista&meta=

Read other 3 answers