Yes, there are error and warning events that repeat almost everday. 2 types
of error events from System Restore and one type of warning from VSS. I copy
those 3 types below. I diddn't find anything warning under "system" logs
searching by "restore" and "vss" keywords.
I checked the web on that without any results which would help me with my
level of technical knowledge, so any help is much appreciated
Log Name: Application
Source: System Restore
Date: 2007-10-12 21:55:40
Event ID: 8210
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Kasia-PC
Description:
The scheduled restore point could not be created. Additional information:
(0x800423f4).
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="System Restore" />
<EventID Qualifiers="0">8210</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-10-12T19:55:40.000Z" />
<EventRecordID>9737</EventRecordID>
<Channel>Application</Channel>
<Computer>Kasia-PC</Computer>
<Security />
</System>
<EventData>
<Data>0x800423f4</Data>
<Binary>0000000000000000D200000000000000574C29CE5843BE27E26C1C000000000000000000</Binary>
</EventData>
</Event>
Log Name: Application
Source: System Restore
Date: 2007-10-12 21:55:40
Event ID: 8193
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Kasia-PC
Description:
Failed to create restore point on volume (Process =
C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation;
Descripton = Scheduled Checkpoint; Hr = 0x800423f4).
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="System Restore" />
<EventID Qualifiers="0">8193</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-10-12T19:55:40.000Z" />
<EventRecordID>9736</EventRecordID>
<Channel>Application</Channel>
<Computer>Kasia-PC</Computer>
<Security />
</System>
<EventData>
<Data>C:\Windows\system32\rundll32.exe /d
srrstr.dll,ExecuteScheduledSPPCreation</Data>
<Data>Scheduled Checkpoint</Data>
<Data>0x800423f4</Data>
<Binary>F423048002020000D60100000000000032CA19E58CAF4DCB010000000000000000000000</Binary>
</EventData>
</Event>
Log Name: Application
Source: VSS
Date: 2007-10-12 21:55:39
Event ID: 12290
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: Kasia-PC
Description:
Volume Shadow Copy Service warning: ASR writer Error 0x80070037. hr =
0x00000000.
Operation:
PrepareForBackup event
PrepareForBackup event
Context:
Execution Context: ASR Writer
Execution Context: Writer
Writer Class Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Writer Name: ASR Writer
Writer Instance ID: {97ee6ecb-4fdf-49ef-96ad-2ae645cad48f}
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="VSS" />
<EventID Qualifiers="0">12290</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-10-12T19:55:39.000Z" />
<EventRecordID>9735</EventRecordID>
<Channel>Application</Channel>
<Computer>Kasia-PC</Computer>
<Security />
</System>
<EventData>
<Data>ASR writer Error 0x80070037</Data>
<Data>0x00000000</Data>
<Data>
Operation:
PrepareForBackup event
PrepareForBackup event
Context:
Execution Context: ASR Writer
Execution Context: Writer
Writer Class Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Writer Name: ASR Writer
Writer Instance ID: {97ee6ecb-4fdf-49ef-96ad-2ae645cad48f}</Data>
<Binary>2D20436F64653A20575254415352574330303030303231382D2043616C6C3A20575254415352574330303030303331332D205049443A202030303030303937362D205449443A202030303030363330382D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E5420415554484F524954595C53595354454D20202020202D205369643A2020532D312D352D31382D204572726F723A41535220777269746572204572726F7220307838303037303033372020202020</Binary>
</EventData>
</Event>
