Restore point help

[Justagyrle]

My restore points always disappear (I know there are posts like this on here already, but I didn't see one that helped me.).

System protection is on and it's set disk space usage is at 5% (14.25 GB) <-- which seems huge in my opinion.

What I've done so far:
1: DiskCheck- no problem
2: SFC scan - no integrity problems
3: Turned on Windows Backup in “Services” and set to “automatic” (same with Volume Shadow Copy)
4: Turned off SR, restarted computer, turned SR back on (also tried restarting after I turned SR back on)
5: Tried creating manual restore points... always disappear
6: Tried using a script to automatically add one every day... still disappear


What I get from Eventlog/Event Viewer:
Event 14: "The shadow copies of volume C: were aborted because of an IO failure on volume C:."


Other things you may need to know:
-As far as I know, I don't use a dual-boot, just Windows 7
-I don't have a separate driver, so I can't back-up anything


Any ideas?

 

[JMH]

You certainly have done some self help problem solving. Well done.

I would suggest you again run Check Disk -

http://www.sevenforums.com/tutorials/433-disk-check.html

Some links for you to peruse. { in no particular order.}

http://www.sevenforums.com/tutorials/67114-system-restore-point-create-system-startup.html

http://www.sevenforums.com/tutorials/700-system-restore.html

Restore Points (Windows)

System Restore "restore points" are missing or deleted

System Restore: frequently asked questions

Windows 7 System Restore, is not creating automatic restore points - Microsoft Answers

 

[Justagyrle]

Thanks! I always try to do some self diagnosing/solving before asking.

I ran ChkDsk again (this time I checked off both options -automatically fix file system errors AND scan for and attempt recover of bad sectors). It didn't fix my restore point problem, but it made my computer start-up like a champ! If people are having a problem with a slow start-up, maybe you could suggest checking off both options when doing a ChkDsk.


But alas, none of these suggestion seem to help me. I tried them all again and the restore points keep disappearing. Any other ideas?

 

[whs]

Not sure what your problem may be. But in the meantime, you may want to do imaging to protect yourself. Free Macrium and free Paragon would be excellent options. Here is a tutorial for Macrium: http://www.sevenforums.com/tutorials/73828-imaging-free-macrium.html?ltr=I

You may also want to check whether the shadowstorage is really allocated. The cmd command is: vssadmin list shadowstorage

 

[boohbah]

Out of interest ,do you have UAC turned off, if so turn it on and try again

 

[Justagyrle]

@WHS thanks for the Macrium option. What exactly should I be looking for when checking vssadmin list shadowstorage?


@Boohbah Yes UAC is turned on.

 

[whs]

When you do the vssadmin, it will show you Used, Allocated and Maximum. Look for the Maximum.

 

[Justagyrle]

This is what I got:
Used- 0
Allocated- 0
Maximum- 14.25GB (5%)

 

[whs]

So at least now we know that shadowstorage was correctly defines - but not used.

1. A question: Did you move any parts of the system to another drive or partition?

2. Check in services whether Microsoft shadow copy provider is set to "Manual" - which would be the correct setting.

 

[Justagyrle]

1: No I didn't move anything to another drive or partition.
2: Yes, it's set to manual.


OK, I did a little experiment (I wanted to see when the restore points were disappearing):
I created a manual restore point. I immediately checked to see if system restore recorded the point. It did. Well, I was in the middle of doing something, so I decided I'd reboot when I was finished (I assumed the reboot would be what triggered it). I went to check SR again before rebooting (about 20-30mins later) and the point was gone. The computer was never shut off or rebooted and I didn't change anything in the meantime (nothing edited, nothing downloaded, nothing updated). I wonder what's triggering the deletion of these points? They're presumably only retained for about 25min.

This has got to be a clue. No idea how that clue fits into the puzzle, but it seems poignant.

 

[whs]

Hmm, that is interesting. As a first check I suggest you disable all startup programs, make a restore point and do nothing for 30 minutes. Then check whether the restore point has disappeared.

If yes, we can rule out the startup programs as culprits. If no, we have to investigate them one by one.

Btw: What is your AV program. The AV programs often throw monkey wrenches into the system.

 

[Justagyrle]

Just tried disabling all start-up programs, etc.... the restore point still didn't stick around.

I have ESET antivirus.

 

[whs]

That is too bad since it will now be difficult to track. I have to think about that. But now it is after midnight in my neck of the woods. Will follow-up tomorrow.

 

[karlsnooks]

justagryle,

Are you double-booting? Is Win7 the only os on this computer?

Run a FULL SCAN using the Microsoft Standalone System Sweeper. This will not be a 20 minute operation, but rather will take a couple of hours. The end result is what counts.

PUT SYSTEM SWEEPER ON A USB STICK


System Sweeper, https://connect.microsoft.com/systemsweeper, allows you to start an infected PC and perform an offline scan to identify and remove viruses, rootkits and other advanced malware. System Sweeper is a free standalone, bootable malware and virus remover from Microsoft.

Safety Scanner, Microsoft Safety Scanner - Remove Spyware, Malware, Viruses Free, is free, downloadable, provides on-demand scanning and helps remove viruses, spyware, and other malicious software. It works with your existing antivirus software.

If the target computer has a working internet connection, then you may prefer to use the Safety Scanner.


Download System Sweeper (about 576 kB):
https://connect.microsoft.com/systemsweeper

Insert 256 MB or larger USB stick into a usb port.

Run the downloaded program--mssstool64.exe or mssstool32.exe

Choose the option to install to USB.
Caution: The install program will format the usb stick.

The install program will download about 200 mB more.

After the install is finished, leave the stick in the usb slot.

Run the program you downloaded once again.

This 2nd run, and any subsequent runs, will download the very latest anti-virus definitions (about 60 mB).

To keep System Sweeper up-to-date, simply reinsert the usb stick and run the installation program again.

The initial, full scan by System Sweeper can easily take a couple of hours, but subsequent quick scans will take only a few minutes.

Remember, your computer is being very thoroughly checked for all types of malware.

The results of System Sweeper will be in:
\Windows\Standalone System Sweeper\Support as a file with a LOG extension. You can view this file with Notepad.

 

[Justagyrle]

Other things you may need to know:
-As far as I know, I don't use a dual-boot, just Windows 7

I have a antivirus that I trust (ESET Nod32) and an anti-malware software, so I'm not sure that a virus (or anything of the like) is the issue.... and I clicked the link and it said it was for if you're having issues booting the computer and/or in lieu of an antivirus (which aren't problems I have)... but I guess I can give it a go, I'm kind of willing to try anything.

 

[kado897]

There is a thread here from Microsoft Answers that talks about them being lost on reboot. It may help. Windows 7 deletes all system restore points on reboot - Microsoft Answers

 

[Justagyrle]

Thanks, but it doesn't happen on reboot (and I've tried those steps already).

1:
OK, I did a little experiment (I wanted to see when the restore points were disappearing):
I created a manual restore point. I immediately checked to see if system restore recorded the point. It did. Well, I was in the middle of doing something, so I decided I'd reboot when I was finished (I assumed the reboot would be what triggered it). I went to check SR again before rebooting (about 20-30mins later) and the point was gone. The computer was never shut off or rebooted and I didn't change anything in the meantime (nothing edited, nothing downloaded, nothing updated). I wonder what's triggering the deletion of these points? They're presumably only retained for about 25min.

 

[kado897]

No problem. It was just a thought. The only thing I know which gets rid of RPs that efficiently is a heavy defrag and you don't have that situation here either.

 

[whs]

I am still really puzzled by your problem. There must be some process running in the interim that wipes those guys out. Have a look whether there is any odd scheduled task that could be doing that.

Type schtasks into an elevated Command Prompt and hit Enter. Then sift thru the list whether you can spot any possible culprit. Look for title and time schedule. You can skip all that are N/A or Disabled.

 

[karlsnooks]

justagyrie,

Until you run a STANDALONE program such as Microsoft Standalone System Sweeper (full scan), then we will not know whether your computer is infected.