Announcement

Collapse
No announcement yet.

Shadowcopy deleted and now?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Shadowcopy deleted and now?

    I had a virus on a drive that was backuped by Cobian.
    I deleted the virus files manualy. But now Cobian keeps getting back with errors.


    So now I have deleted all shadow copies with vssadmin delete shadows /all

    Will the system created new shadow copies or should I created them manualy?
    I think it will create new ones?

    Below the error repports from Cobian backup

    ========

    "GLOBALROOT\Device\HarddiskVolumeShadowCopy102\Fil es\CMS systemen\Wordpress stuff\700wordpressthemes\meganews\footer.php": Access is denied ERR 2014-06-19 23:02 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress
    ERR 2014-06-20 23:02 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.
    ERR 2014-06-21 23:04 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.
    ERR 2014-06-22 23:03 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.
    ERR 2014-06-23 23:02 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.
    ERR 2014-06-24 23:02 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.
    ERR 2014-06-25 23:04 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.
    ERR 2014-06-26 23:02 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.
    ERR 2014-06-27 23:04 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.
    ERR 2014-06-28 23:02 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.
    ERR 2014-06-29 23:02 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.
    ERR 2014-06-30 23:03 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.
    ERR 2014-07-01 23:02 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.
    ERR 2014-07-02 23:02 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.
    ERR 2014-07-03 23:02 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.

    ============

  • #2
    Re: Shadowcopy deleted and now?

    Still no one?

    Comment


    • #3
      Re: Shadowcopy deleted and now?

      As long as shadow copy is enabled, it should create them on schedule
      Tom Jones
      MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
      PhD, MSc, FIAP, MIITT
      IT Trainer / Consultant
      Ossian Ltd
      Scotland

      ** Remember to give credit where credit is due and leave reputation points where appropriate **

      Comment


      • #4
        Re: Shadowcopy deleted and now?

        If it hasn't created new ShadowCopies after 2 weeks then I would create a manual one and then disable SC, reboot and re-enable it.

        Check Event Viewer for any errors.
        1 1 was a racehorse.
        2 2 was 1 2.
        1 1 1 1 race 1 day,
        2 2 1 1 2

        Comment


        • #5
          Re: Shadowcopy deleted and now?

          Everything seem doing what it suppose to do. The only thing is Combian reporting errors everyday! And in fact I don;t know why? So what can I do about this?

          ERR 2014-07-16 23:02 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.
          ERR 2014-07-17 23:02 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.
          ERR 2014-07-18 23:02 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.
          ERR 2014-07-19 23:02 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.
          ERR 2014-07-20 23:02 Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.

          Comment


          • #6
            Re: Shadowcopy deleted and now?

            What is said in the Event Viewer logs?
            1 1 was a racehorse.
            2 2 was 1 2.
            1 1 1 1 race 1 day,
            2 2 1 1 2

            Comment


            • #7
              Re: Shadowcopy deleted and now?

              Cobian events

              Error while creating the Volume Shadow Copy snapshot: The creation of a shadow copy is already in progress.

              and

              Cobian Guid should contain 32 digits with 4 dashes (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx).

              Comment


              • #8
                Re: Shadowcopy deleted and now?

                Is there some config file in Cobain (which I am not familiar with) which has not reset itself or perhaps needs to be re-created?

                Are you certain the malware has been completely removed?
                A recent poll suggests that 6 out of 7 dwarfs are not happy

                Comment


                • #9
                  Re: Shadowcopy deleted and now?

                  Have you contacted Cobian support?

                  Comment


                  • #10
                    Re: Shadowcopy deleted and now?

                    Errors in daily mail


                    Event Source Event ID Last Occurence Total Occurences
                    MSExchangeIS 9702 1-8-2014 5:03:12 10
                    ESE 2007 1-8-2014 5:03:06 10
                    VSS 8194 1-8-2014 5:03:02 66
                    PowerShell 32784 1-8-2014 3:09:44 4
                    WinRM 138 1-8-2014 3:09:42 4
                    GetEngineFiles 6019 1-8-2014 3:09:35 3
                    GetEngineFiles 6012 1-8-2014 3:09:33 3
                    GetEngineFiles 2109 1-8-2014 2:00:20 2
                    Active Server Pages 5 1-8-2014 1:27:34 1
                    Cobian Backup Gravity VSC Requester 0 1-8-2014 1:02:39 2
                    GetEngineFiles 6020 31-7-2014 20:10:08 8
                    GetEngineFiles 6014 31-7-2014 20:10:05 8
                    Disk 11 31-7-2014 12:00:09 3
                    MSExchangeSA 9331 31-7-2014 6:08:20 1
                    MSExchangeSA 9360 31-7-2014 6:08:20 1

                    Comment


                    • #11
                      Re: Shadowcopy deleted and now?

                      And in event viewer:

                      event 8230
                      Volume Shadow Copy Service error: Failed resolving account spsearch with status 1376. Check connection to domain controller and VssAccessControl registry key.

                      event 8224
                      The VSS service is shutting down due to idle timeout.

                      Comment


                      • #12
                        Re: Shadowcopy deleted and now?

                        Originally posted by snhnic View Post
                        And in event viewer:

                        event 8230
                        Volume Shadow Copy Service error: Failed resolving account spsearch with status 1376. Check connection to domain controller and VssAccessControl registry key.

                        event 8224
                        The VSS service is shutting down due to idle timeout.
                        Does no one ever check TechNet for event log errors anymore

                        http://support.microsoft.com/kb/2537096

                        or the Microsoft Forums??

                        http://social.technet.microsoft.com/...businessserver

                        Comment


                        • #13
                          Re: Shadowcopy deleted and now?

                          Off cource I did search! And yes I found this before. Did another search and found something to update sharepoint to solve problems. Without deleting

                          http://blogs.technet.com/b/sbs/archi...-2010-sp1.aspx

                          SPFARM and SPSEARCH accounts

                          But apparently that did not solve things!
                          Last edited by snhnic; 1st August 2014, 15:23.

                          Comment


                          • #14
                            Re: Shadowcopy deleted and now?

                            Have you tried re-registering the VSS writers?
                            TIA

                            Steven Teiger [SBS-MVP(2003-2009)]
                            http://www.wintra.co.il/
                            sigpic
                            Iím honoured to have been selected for the SMB 150 list for 2013. This is the third time in succession (no logo available for 2011) that I have been honoured with this award.

                            We donít stop playing because we grow old, we grow old because we stop playing.

                            Comment


                            • #15
                              Re: Shadowcopy deleted and now?

                              Keep safe Steven.
                              1 1 was a racehorse.
                              2 2 was 1 2.
                              1 1 1 1 race 1 day,
                              2 2 1 1 2

                              Comment

                              Working...
                              X