System Restore error (create restore point), event ID: 8193

[Sven Pran]

While struggling with Applicationn hung problems I have discovered that the
following error has frequently been reported (some 400 times) on my system
since June 11, 2008:

"Failed to create restore point on volume (Process =
C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation;
Descripton = Scheduled Checkpoint; Hr = 0x80070422)."

(The parameters have varied)

I have followed the various tracks Event Viewer suggestions but am no more
the wiser.

Can somebody enlighten me on what is going on and what I can do about it?

(There is no apparent correlation between this error events and the
Applicaction hung events)

Regards Sven

 

[B. Smith]

While struggling with Applicationn hung problems I have discovered that
the following error has frequently been reported (some 400 times) on my
system since June 11, 2008:

"Failed to create restore point on volume (Process =
C:\Windows\system32\rundll32.exe /d
srrstr.dll,ExecuteScheduledSPPCreation; Descripton = Scheduled Checkpoint;
Hr = 0x80070422)."

(The parameters have varied)

I have followed the various tracks Event Viewer suggestions but am no more
the wiser.

Can somebody enlighten me on what is going on and what I can do about it?

(There is no apparent correlation between this error events and the
Applicaction hung events)

Regards Sven

How much free space remains on C drive ?
What is the size of your C drive ?

 

[Peter Foldes]

Sven

You have a malware infection of some sort. That is what it is telling you

Read and decide

http://www.daniweb.com/forums/thread13479.html

 

[Sven Pran]

How much free space remains on C drive ?
179GB

What is the size of your C drive ?

220GB

(In case this information is important I should add that my harddisk is
actually split into two partitions visible by Vista; the C: drive which is
named OS and a D: drive which is named RECOVERY with 5,50 GB free space out
of 9,99 GB.)

Sven

 

[B. Smith]

220GB

(In case this information is important I should add that my harddisk is
actually split into two partitions visible by Vista; the C: drive which is
named OS and a D: drive which is named RECOVERY with 5,50 GB free space
out of 9,99 GB.)

Sven

Click the Start Orb...type system...then click on System in the menu that
appears in the list.
In the window that appears...click System Protection....make sure in
available disk...C has a check mark.

 

[Sven Pran]

That malware infection is in case extremely well hidden, it didn't show up
in any of my protection features during the full scans I did last night.

However I looked up the web-page in your link.

The easiest suggestion to try out first was to go to "Start" > "Control
Panel" > "Administrative Tools" > "Services", but I found no "System Restore
Service" (or similar) at all.

Next I went to "Start" > "Computer" > "Properties" > "System Protection"
where I found three "Available Disks" listed, all of which had "None" for
"Most recent restore point":
RECOVERY (D
OS (C (System)
OS (C (Missing)

Only the last one was checked, and I just don't understand the note
"Missing" or why I have two C: disks at all. Maybe the fact that this third
disk has an icon different from the two others means something?

Can the fact that I have a remote USB disk for backup purposes (Using
Acronis) have anything to do with this, this disk is normally not conneted.

I checked the OS (C (System) disk and clicked "Create" (restore point
right now), this operation was successful both according to a messagebox
showing up and also to "none" for "Most recent restore point" becoming
replaced by a timestamp.

My Event Viewer did not report any problem this time.

So what now? I still feel being in the dark.

regards Sven

 

[B. Smith]

That malware infection is in case extremely well hidden, it didn't show up
in any of my protection features during the full scans I did last night.

However I looked up the web-page in your link.

The easiest suggestion to try out first was to go to "Start" > "Control
Panel" > "Administrative Tools" > "Services", but I found no "System
Restore Service" (or similar) at all.

Next I went to "Start" > "Computer" > "Properties" > "System Protection"
where I found three "Available Disks" listed, all of which had "None" for
"Most recent restore point":
RECOVERY (D
OS (C (System)
OS (C (Missing)

Only the last one was checked, and I just don't understand the note
"Missing" or why I have two C: disks at all. Maybe the fact that this
third disk has an icon different from the two others means something?

Can the fact that I have a remote USB disk for backup purposes (Using
Acronis) have anything to do with this, this disk is normally not
conneted.

I checked the OS (C (System) disk and clicked "Create" (restore point
right now), this operation was successful both according to a messagebox
showing up and also to "none" for "Most recent restore point" becoming
replaced by a timestamp.

My Event Viewer did not report any problem this time.

So what now? I still feel being in the dark.

regards Sven

I think you are on to something.
I don't use acronis...but it has made the usb drive the system restore
drive.
Put a check in the first C drive listing....see if it takes...even after
using the usb backup.

 

[PaulB]

Hi,
Check the box next to C: system. Uncheck the one next to C: missing.
Did you reinstall Vista at anytime?

 

[B. Smith]

Hi,
Check the box next to C: system. Uncheck the one next to C: missing.
Did you reinstall Vista at anytime?

Good one.
keep reading, my next answer will come to you.
2 hours after I post it.

 

[PaulB]

Why be such an @$#. I didn't see your response before I posted or I wouldn't
have. I was in the middle of resposonding when I had to leave for a while.
Sorry, but I'm sure the same answer from two people didn't really hurt.

 

[B. Smith]

Why be such an @$#. I didn't see your response before I posted or I
wouldn't
have. I was in the middle of resposonding when I had to leave for a while.
Sorry, but I'm sure the same answer from two people didn't really hurt.

I have never been an @$#.
I just run into dimwits like you all the time.
I call my dimwit Polly.
You know what you read 10 minutes ago.

 

[Sven Pran]

Hi,
Check the box next to C: system. Uncheck the one next to C: missing.
Did you reinstall Vista at anytime?

I checked the box next to CSystem) before requesting an immediate restore
point.
At this time both boxes were checked, but i did not receive any error
incident report. However, a timestamp was only provided against the
(System), not againat the (Missing).

I have never reinstalled Vista, only had the automatic updates from
Microsoft.

regards Sven

 

[Rick Rogers]

sfc /scannow

System files can't be modified by malware unless the user explicitly allows
it, or misguidedly disables uac - basically meaning that protected system
files that are altered by malware boil back to being the fault of the user,
not the operating system. However, the above command from an elevated
command prompt checks the integrity of the system file set against what it
should be and replaces those that do not match or are corrupted.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com