Yes, there are error and warning events that repeat almost everday. 2 types
of error events from System Restore and one type of warning from VSS. I copy
those 3 types below. I diddn't find anything warning under "system" logs
searching by "restore" and "vss" keywords.
I checked the web on that without any results which would help me with my
level of technical knowledge, so any help is much appreciated
Log Name: Application
Source: System Restore
Date: 2007-10-12 21:55:40
Event ID: 8210
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Kasia-PC
Description:
The scheduled restore point could not be created. Additional information:
(0x800423f4).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="System Restore" />
<EventID Qualifiers="0">8210</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-10-12T19:55:40.000Z" />
<EventRecordID>9737</EventRecordID>
<Channel>Application</Channel>
<Computer>Kasia-PC</Computer>
<Security />
</System>
<EventData>
<Data>0x800423f4</Data>
<Binary>0000000000000000D200000000000000574C29CE58 43BE27E26C1C000000000000000000</Binary>
</EventData>
</Event>
Log Name: Application
Source: System Restore
Date: 2007-10-12 21:55:40
Event ID: 8193
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Kasia-PC
Description:
Failed to create restore point on volume (Process =
C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation;
Descripton = Scheduled Checkpoint; Hr = 0x800423f4).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="System Restore" />
<EventID Qualifiers="0">8193</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-10-12T19:55:40.000Z" />
<EventRecordID>9736</EventRecordID>
<Channel>Application</Channel>
<Computer>Kasia-PC</Computer>
<Security />
</System>
<EventData>
<Data>C:\Windows\system32\rundll32.exe /d
srrstr.dll,ExecuteScheduledSPPCreation</Data>
<Data>Scheduled Checkpoint</Data>
<Data>0x800423f4</Data>
<Binary>F423048002020000D60100000000000032CA19E58C AF4DCB010000000000000000000000</Binary>
</EventData>
</Event>
Log Name: Application
Source: VSS
Date: 2007-10-12 21:55:39
Event ID: 12290
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: Kasia-PC
Description:
Volume Shadow Copy Service warning: ASR writer Error 0x80070037. hr =
0x00000000.
Operation:
PrepareForBackup event
PrepareForBackup event
Context:
Execution Context: ASR Writer
Execution Context: Writer
Writer Class Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Writer Name: ASR Writer
Writer Instance ID: {97ee6ecb-4fdf-49ef-96ad-2ae645cad48f}
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="VSS" />
<EventID Qualifiers="0">12290</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-10-12T19:55:39.000Z" />
<EventRecordID>9735</EventRecordID>
<Channel>Application</Channel>
<Computer>Kasia-PC</Computer>
<Security />
</System>
<EventData>
<Data>ASR writer Error 0x80070037</Data>
<Data>0x00000000</Data>
<Data>
Operation:
PrepareForBackup event
PrepareForBackup event
Context:
Execution Context: ASR Writer
Execution Context: Writer
Writer Class Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Writer Name: ASR Writer
Writer Instance ID: {97ee6ecb-4fdf-49ef-96ad-2ae645cad48f}</Data>
<Binary>2D20436F64653A2057525441535257433030303030 3231382D2043616C6C3A205752544153525743303030303033 31332D205049443A202030303030303937362D205449443A20 2030303030363330382D20434D443A2020433A5C57696E646F 77735C73797374656D33325C76737376632E6578652020202D 20557365723A204E5420415554484F524954595C5359535445 4D20202020202D205369643A2020532D312D352D31382D2045 72726F723A41535220777269746572204572726F7220307838 303037303033372020202020</Binary>
</EventData>
</Event>
--
/daissy
"MICHAEL" wrote:
> * daissy:
> > I checked the task scheduler and it is both set to automatic and started, so
> > the reason must be somewhere else.
>
> Type or copy/paste "eventvwr.msc" into the search bar, press enter.
>
> Look under Windows Logs>Application, see if you can find any "Warning"
> or "Error" that says "System Restore". Especially, the !Error events. Those
> could be preceded by other warnings, maybe for "VSS".
>
> While you're there, look under Windows>System, too.
>
> This may help narrow the problem down.
>
>
>
> -Michael
>
>