No system restore points

[Alfons]

Hello,

On my notebook I don't have any restore points. Of course I haven't
turned it off in my Control Panel, System, System Restore. I have 1
harddisk, with 2 partitions (drive C: and D, both are on
'monitoring'. I have 8 GB free on drive C: and 6 GB on drive D:, so
enough free space I think.

With Disk CleanUp, I "removed all but the most recent restore point".

Now I created a restore point manually. No problem. I still had it
after approx. one hour, but after a few hours it was gone again!

Has anyone any suggestion why my restore points disappear? Maybe a
virusscanner (I use McAfee Virusscan v4.5.1 SP1) or virusses or
spyware are causing the problem?

Thanks,

Alfons van Zwol
The Netherlands

 

[River_Rat]

There are several causes for this, see if one of these fits the bill.
Windows System Restore Utility Quits and All Restore Points Are Deleted
http://support.microsoft.com/default.aspx?scid=kb;en-us;812119

How to troubleshoot the System Restore tool in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;302796

The System Restore Utility May Be Suspended on a System Drive Even Though
There Is Enough Disk Space
http://support.microsoft.com/default.aspx?scid=kb;en-us;299904

System Restore "restore points" are missing or deleted
http://support.microsoft.com/default.aspx?scid=kb;en-us;301224

 

[Bert Kinney]

Hi Alfons,

Lets take a look at the Event Viewer for any errors.
Go to Start - Run and type eventvwr.msc and press enter.
Click the Source tab to sort by name, and then look for "sr" or
"srservice." Double-click each of these services, and then evaluate
the event description for any indication of the cause of the problem.
Post the EventID and Source for any errors.

System Restore Failures to restore
http://home.earthlink.net/~mvp_bert/html/srfail.html

 

[Gerry Cornell]

Have a look at the advice here:
http://home.earthlink.net/~mvp_bert/index.html

You only need to enable System Restore on a partition where your Windows
operating system resides.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.

http://dts-l.org/goodpost.htm

~~~~~~~~~~~~~~~~~~~~~~~~

 

[Alfons]

Hi Alfons,

Lets take a look at the Event Viewer for any errors.
Go to Start - Run and type eventvwr.msc and press enter.
Click the Source tab to sort by name, and then look for "sr" or
"srservice." Double-click each of these services, and then evaluate
the event description for any indication of the cause of the problem.
Post the EventID and Source for any errors.

System Restore Failures to restore
http://home.earthlink.net/~mvp_bert/html/srfail.html

Dear Bert,

Thanks for your tip. The Event Viewer was an eye opener for me. This
is the error message I get:

Event Type: Error
Event Source: sr
Event Category: None
Event ID: 1
Date: 8-3-2005
Time: 13:28:26
User: N/A
Computer: ALFONS45
Description:
The System Restore filter encountered the unexpected error
'0xC0000010' while processing the file 'cur_proj.bat' on the volume
'vstor2-3'. It has stopped monitoring the volume.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 04 00 4e 00 ......N.
0008: 00 00 00 00 01 00 00 c0 .......À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

When I saw 'cur_proj.bat' a bell rang (is that a proper English
saying?). This file is not on drive C: or D:, but on drive Z:! Z: is a
mounted drive of a VMware image file (*.vmdk) on drive D:. I am using
VMware workstation 4.0 to run DOS inside XP. Sometimes I mount this
drive (with a mount utility of VMware) to transfer files. This drive
has 500 MB of free space. But the size of the image file is 13 MB and
will dynamically inflate.

The function GetDriveType() from SDK (I am using Visual Studio 6.0,
see http://msdn.microsoft.com/ for more info) gives for drive C:, D:
and Z: "DRIVE_FIXED" as a return type. So System Restore thinks drive
Z: is a normal Fixed Disk and wants to make a restore point for Z: as
well I think. But in Control Panel, System, System Restore I only see
C: and D:. So there is a discrepancy I think. I am not able to disable
drive Z:, but SR tries to make a restore point for it. This all is
just a theory of mine.

So the cause is the mounted VMware drive. The work around is not to
mount the drive anymore. But I think there should be a solution for
it. I think Microsoft should be informed about this problem, since
there is more software which claim drive letters.

Bert, can you still let me know what error '0xC0000010' is? And do you
have any contacts with Microsoft to tell them this problem (since you
are an MVP)?

Yours,
Alfons

PS Is there a way to remove my e-mail address from these messages? I
am afraid of receiving loads of s pam.

 

[Bert Kinney]

Hi Alfons,

<comments inline>

Dear Bert,

Thanks for your tip. The Event Viewer was an eye opener
for me. This
is the error message I get:

Event Type: Error
Event Source: sr
Event Category: None
Event ID: 1
Date: 8-3-2005
Time: 13:28:26
User: N/A
Computer: ALFONS45
Description:
The System Restore filter encountered the unexpected error
'0xC0000010' while processing the file 'cur_proj.bat' on
the volume 'vstor2-3'. It has stopped monitoring the volume.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 04 00 4e 00 ......N.
0008: 00 00 00 00 01 00 00 c0 .......À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

When I saw 'cur_proj.bat' a bell rang (is that a proper English
saying?).

Close enough!

< This file is not on drive C: or D:, but on drive Z:! Z: is a

mounted drive of a VMware image file (*.vmdk) on drive D:.

So technically it is on the D: drive. Tell System Restore to stop
monitoring D:.
Create a restore point and try restoring to it as a test.

< I am using VMware workstation 4.0 to run DOS inside XP. Sometimes I
mount this

drive (with a mount utility of VMware) to transfer files. This drive
has 500 MB of free space. But the size of the image file is 13 MB
and
will dynamically inflate.

The function GetDriveType() from SDK (I am using Visual
Studio 6.0, see http://msdn.microsoft.com/ for more info) gives for
drive C:, D: and Z: "DRIVE_FIXED" as a return type. So System
Restore
thinks drive Z: is a normal Fixed Disk and wants to make a restore
point for Z: as well I think. But in Control Panel, System, System
Restore I only see C: and D:. So there is a discrepancy I think. I
am not
able to disable drive Z:, but SR tries to make a restore point for
it.
This all is just a theory of mine.

So the cause is the mounted VMware drive. The work around
is not to mount the drive anymore. But I think there should be a
solution for it. I think Microsoft should be informed about this
problem, since there is more software which claim drive letters.

Bert, can you still let me know what error '0xC0000010' is?

I can't find any documentation on that error message.

And do you have any contacts with Microsoft to tell them this
problem (since you are an MVP)?

I will see what i can do.

Yours,
Alfons

PS Is there a way to remove my e-mail address from these messages? I
am afraid of receiving loads of s pam.

Don't use your real email address.

 

[Torgeir Bakken \(MVP\)]

I can't find any documentation on that error message.

Hi

# for hex 0xc0000010 / decimal -1073741808 :
STATUS_INVALID_DEVICE_REQUEST
# The specified request is not a valid operation for the
# target device.


The above is from the command line tool err.exe from Microsoft.
It is listed as an Exchange tool, but it works fine on WinXP.

Error Code Lookup
http://www.microsoft.com/downloads/...99-7bb8-4208-b7fc-09e02a13696c&displaylang=en

May 24, 2004. Determine error values from decimal and hexadecimal
error codes in Microsoft Windows operating systems.

 

[Bert Kinney]

Hi Torgeir,

Thanks.

I saw that referenced in a kb article but didn't find it relevant to
problem.

If he's using the Updater in VMWare that will remove all restore
points.
Configuring Hard Disk Storage in a Virtual Machine
http://www.vmware.com/support/ws45/doc/disks_config_ws.html

 

[Bert Kinney]

Hi Alfons,

If you are using the Updater in VMWare that will remove all restore
points.
Configuring Hard Disk Storage in a Virtual Machine
http://www.vmware.com/support/ws45/doc/disks_config_ws.html

Also, you will want to make sure not to change or move any files that
are being monitored by System Restore while booted to the mounted
drive. This will cause restore points to be come damaged and not
function. As I stated earlier, stop monitoring the D: drive and keep
any file transfers to that drive while booted to the mounted drive.

 

[Al]

Dear Bert,

This updater program you mentioned, I am not using it (as far as I
know). I think it is a program to upgrade your image file. Since I
never used an old version of VMware, I don't have to upgrade. Btw, I
am using VMware 4.5, not 4.0 as I thought before.

But I have new information. After I create a restore point, I mount
the drive & unmount it again: nothing happens. But if I save e.g. the
batch file cur_proj.bat on the mounted drive, I get the previously
mentioned Error in the Event Viewer immediately after saving the file!
So if I mount and do a write action to the mounted drive, I get the
Error and I also lose the restore point. Reading from the drive don't
give any problem, since I had the batch file already open for a couple
of minutes.

But I am not sure now if this write action is a VMware problem or a
system restore problem, since other VMware products (the updater)
disable System Restore. I think I will post a message there as well.

Yours,

Alfons

 

[Bert Kinney]

Hi Al,

Stop letting System Restore monitor the D: drive and perform the same
test.

What exactly does cur_proj.bat do?

 

[Al]

Sorry Bert,

I forgot to tell you, that I did the test with monitoring drive D:
disabled. So unfortunately that is no solution.

The batch file 'cur_proj.bat' is a simple batch file. It contains just
a line with "cd <sub-dir>", to go to the directory of the current
project. I create this batch file automatically by a program I made in
Visual C++. But my program is not the cause: I also get the error if I
open and save the file in Notepad.

Yours,

Alfons

 

[Guest]

I think I have just experienced the same type of problem...no restore points.
Event Viewer lists: "The System Restore filter encountered the unexpected
error '0xC000009A' while processing the file 'ArcD6.tmp' on the volume
'HarddiskVolume1'. It has stopped monitoring the volume." I see that
ERR.exe lists the Supported Operating Systems as Windows 2000 Service Pack 3
and Windows Server 2003, so i assumed it would not run on xp. Right ? Would
'0xC000009A' be about the same as '0xC0000010' ?
I have no idea what 'ArcD6.tmp' is, but I'm certain that I did have a USB
drive plugged in at the time. It generally is recognized as a "Removable
Disk" and is assigned "G:". Could that have been the problem? I see where
you suggested that
Alfons should tell systems restore to stop monitoring D:, should i do that
for G: and if so, how? Also, do you know if there is any way to 'find' all
my saved restore points or are they all gone now? Thanks.

Hi Alfons,

Lets take a look at the Event Viewer for any errors.
Go to Start - Run and type eventvwr.msc and press enter.
Click the Source tab to sort by name, and then look for "sr" or
"srservice." Double-click each of these services, and then evaluate
the event description for any indication of the cause of the problem.
Post the EventID and Source for any errors.

System Restore Failures to restore
http://home.earthlink.net/~mvp_bert/html/srfail.html

--
Regards,
Bert Kinney [MS-MVP DTS]
http://dts-l.org/

Hello,

On my notebook I don't have any restore points. Of course
I haven't turned it off in my Control Panel, System,
System Restore. I have 1 harddisk, with 2 partitions
(drive C: and D, both are on 'monitoring'. I have 8 GB
free on drive C: and 6 GB on drive D:, so enough free
space I think.

With Disk CleanUp, I "removed all but the most recent
restore point".

Now I created a restore point manually. No problem. I
still had it after approx. one hour, but after a few
hours it was gone again!

Has anyone any suggestion why my restore points
disappear? Maybe a virusscanner (I use McAfee Virusscan
v4.5.1 SP1) or virusses or spyware are causing the
problem?

Thanks,

Alfons van Zwol
The Netherlands

 

[Bert Kinney]

Hi Scott,

I think I have just experienced the same type of
problem...no restore points. Event Viewer lists: "The
System Restore filter encountered the unexpected error
'0xC000009A' while processing the file 'ArcD6.tmp' on the
volume 'HarddiskVolume1'. It has stopped monitoring the volume."

Go to Start - Search - All files and folders and do a search for
ArcD6.tmp
Make sure to expand "More advanced option" and put a check next to the
first three options before doing the search.
Search the removable drive also.
Make note of the location (path) of the file.

< I see that ERR.exe lists the Supported

Operating Systems as Windows 2000 Service Pack 3 and
Windows Server 2003, so i assumed it would not run on xp.
Right ? Would '0xC000009A' be about the same as '0xC0000010' ?

I have no idea what 'ArcD6.tmp' is, but I'm certain that
I did have a USB drive plugged in at the time. It
generally is recognized as a "Removable Disk" and is
assigned "G:". Could that have been the problem? I see
where you suggested that
Alfons should tell systems restore to stop monitoring D:,
should i do that for G: and if so, how?

Yes, disable all but C:\ Let me know if G:\ is being monitored!
Disable a monitored drive
http://bertk.mvps.org/html/drivedisable.html

Also, do you know if there is any way to 'find' all my saved restore
points or are they all gone now?

Once there gone there's no getting them back.