question

AntonioCeccato-9865 avatar image
0 Votes"
AntonioCeccato-9865 asked LimitlessTechnology-2700 answered

VSS Event ID 12293: 0x8000ffff Catastrophic failure

Hello,

I'm running Windows 10 Pro 19042.1110.
After some weird behaviors I noticed (an MSI installer that wouldn't ever go further than the first preparation window, plus an extreme event today in which, after plugging in a USB SD card reader, multiple devices got disabled/unrecognized including one of my secondary drives), I checked the Event Viewer and found multiple instances of this error:

Volume Shadow Copy Service error: Error calling a routine on a Shadow Copy Provider {b5946137-7b9f-4925-af80-51abd60b20d5}. Routine details IVssSnapshotProvider::IsVolumeSupported() failed with 0x8000ffff [hr = 0x8000ffff, Catastrophic failure].

Operation:
Check If Volume Is Supported by Provider
Add a Volume to a Shadow Copy Set

Context:
Execution Context: Coordinator
Provider ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
Volume Name: \\?\Volume{cc00bf99-eb73-4799-81b2-b311f10d500f}\
Execution Context: Coordinator

\\?\Volume{cc00bf99-eb73-4799-81b2-b311f10d500f}\ is my C: volume.

Once I started reading about VSS, I tried opening "System Protection" or "Create a restore point" and got this error plus a set of three additional errors, identical to the one above, but there was one for each of my drives/volumes (C:, D:, E:).

One major thing I noticed is that "vssadmin list volumes" returns "No items found that satisfy the query". On another working system, this command returns at least the C: volume.

This system has been working fine since April, when I rebuilt it. No major software installations were done lately (apart from Wireguard updates), nor do I use utilities like CCleaner.
I don't have backup software installed, since they seem to be often related to this error.

I already tried DISM, SFC and various other suggestions I found online (like a missing "UpperFilters" registry key) to no avail.
Running a disk check throws an error and logs the same error in the Event Viewer. Running an offline disk check makes no difference.
I also tried enabling VSS debug tracing via registry, but the trace file never showed up.

Update: it also now decided that it doesn't want to shutdown... It looks like it's doing its thing ("shutting down" screen) but then, after a brief black screen, the desktop pops back in and automatic startup applications are started!
The error in event viewer is: volmgr Event ID 45 "The system could not sucessfully load the crash dump driver."

Any suggestions on how to troubleshoot this issue?
Thanks



windows-10-general
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Docs-4663 avatar image
0 Votes"
Docs-4663 answered AntonioCeccato-9865 commented

Run the V2 log collector and post a share link into this thread using one drive, drop box, or google drive:


https://www.windowsq.com/t/bsod-posting-instructions.17/
https://www.windowsq.com/resources/v2-log-collector.8/
https://www.tenforums.com/bsod-crashes-debugging/2198-bsod-posting-instructions.html


.
.
.
.
.
Please remember to vote and to mark the replies as answers if they help.

On the bottom of each post there is:

Propose as answer = answered the question

On the left side of each post: Vote = a helpful post
.
.
.
.
.

· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Docs-4663 avatar image Docs-4663 AntonioCeccato-9865 ·

Some questions:

Which third party software is being used for backup images?

How was KMS installed?

How is KMS is being used.

Could this be malware?

0 Votes 0 ·

I don't have any backup or imaging software installed. I was only mentioning them since I've seen online that they often cause issues like the one I'm experiencing.

I am using a KMS activator script since I had problems activating my license and didn't bother wasting my time on that. It was enabled just after installing Windows, so I don't believe it to be the culprit here.

I am pretty confident that "vssadmin list volumes" returning "no items found" is indicative of the issue. I believe that somehow my volumes "lost their shadow storage configuration", so the shadow copy provider errors out when asked for something it doesn't know about.
I'd like to confirm this hypothesis, but I'm at a loss of options for getting more info than "catastrophic failure"...

0 Votes 0 ·
Show more comments
Docs-4663 avatar image
0 Votes"
Docs-4663 answered

Endless time can be spent troubleshooting systems that have unexpected behavior.
So consider starting with a clean install at times to be an excellent start.

If you still want to troubleshoot then you can run:

https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/
(Please post share links for each text file)

Run administrative command prompt: vssadmin list writers
(post a share link)

Run:
https://www.lifewire.com/free-bootable-antivirus-tools-2625785
(post share links from three different software (they have different databases)

How come Windows Recovery Environment was disabled?

There were many BSOD.

.
.
.
.
.
Please remember to vote and to mark the replies as answers if they help.

On the bottom of each post there is:

Propose as answer = answered the question

On the left side of each post: Vote = a helpful post
.
.
.
.
.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered

Hi there,

I can see the number of issues you are facing, I would recommend you to try the In-place update or the best clean install to sort this out.
If your Windows 10 installation is demonstrating unusual behavior such as built-in apps not working or launching, you can perform a repair upgrade to fix the problem.

https://answers.microsoft.com/en-us/windows/forum/all/how-to-perform-a-repair-upgrade-using-the-windows/35160fbe-9352-4e70-9887-f40096ec3085?auth=1


If an Answer is helpful, please click "Accept Answer" and upvote it : )

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.