Windows update has caused error0x80042318 in system restore/protection

[avi312]

ok after doing this : Windows Anytime Upgrade couldn't create a restore point?? - Windows 7 Forums (if u read from page 1-2)

i have figured the problem is something to do with windows updates, ive got no idea which update is causing this problem. does anybody know any windows updates that could possibly cause sytem restore/ the vss writers to stop functioning properly????
appericate the help

 

[NoelDP]

Please run teh following commands in an Elevated Command Prompt window, and post the results.

NET START VSS
SC QC VSS
SC QUERYEX VSS
VSSADMIN LIST WRITERS


Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

 

[avi312]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>NET START VSS
The Volume Shadow Copy service is starting.
The Volume Shadow Copy service was started successfully.


C:\Windows\system32>SC QC VSS
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: VSS
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\vssvc.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Volume Shadow Copy
DEPENDENCIES : RPCSS
SERVICE_START_NAME : LocalSystem

C:\Windows\system32>SC QUERYEX VSS

SERVICE_NAME: VSS
TYPE : 10 WIN32_OWN_PROCESS
STATE : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 6460
FLAGS :

C:\Windows\system32>VSSADMIN LIST WRITERS
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2005 Microsoft Corp.

Done that

 

[avi312]

should i reinstall windows and just disable windows update??

 

[NoelDP]

The last command didn't complete, did it actually generate anything??
Please run that one again, and post the results (it can take a minute to produce output)

 

[NoelDP]

Please also run the following command, and post the results.

REG QUERY "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\WMI Writer"

 

[NoelDP]

..... and also the following commands

NET START SWPRV
SC QC SWPRV
SC QUERYS SWPRV

 

[avi312]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>NET START VSS
The requested service has already been started.

More help is available by typing NET HELPMSG 2182.


C:\Windows\system32>SC QC VSS
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: VSS
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\vssvc.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Volume Shadow Copy
DEPENDENCIES : RPCSS
SERVICE_START_NAME : LocalSystem

C:\Windows\system32>SC QUERYEX VSS

SERVICE_NAME: VSS
TYPE : 10 WIN32_OWN_PROCESS
STATE : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 3508
FLAGS :

C:\Windows\system32>VSSADMIN LIST WRITERS
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2005 Microsoft Corp.


C:\Windows\system32>
This is all that is generated after 5 minutes...

 

[avi312]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>REG QUERY "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\
VSS\Diag\WMI Writer"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\WMI Writer
IDENTIFY (Enter) REG_BINARY 480000000000000032211A84CFE1CD01F4030000A8
0E0000E8030000010000000100000000000000000000000000000000000000000000000000000000
0000000000000000000000
IDENTIFY (Leave) REG_BINARY 480000000000000053452184CFE1CD01F4030000A8
0E0000E8030000000000000100000000000000000000000000000000000000000000000000000000
0000000000000000000000


C:\Windows\system32>

This was the : REG QUERY "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\WMI Writer" command

 

[NoelDP]

Please run teh following commands, and post the results.

NET START SWPRV
SC QC SWPRV
SC QUERYEX SWPRV
REG QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{56BE716B-2F76-4dfa-8702-67AE10044F0B}
REG QUERY HKLM\SOFTWARE\Classes\AppID\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}
REG QUERY HKLM\SOFTWARE\Classes\CLSID\{573bdf38-df23-427f-acb8-a67abd702698}

 

[avi312]

sorry for the late reply and appreciate your patience, had a powercut in local area... anyway heres the reuslts:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>NET START SWPRV
The Microsoft Software Shadow Copy Provider service is starting.
The Microsoft Software Shadow Copy Provider service was started successfully.


C:\Windows\system32>SC QC SWPRV
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: SWPRV
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\System32\svchost.exe -k swprv
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Microsoft Software Shadow Copy Provider
DEPENDENCIES : RPCSS
SERVICE_START_NAME : LocalSystem

C:\Windows\system32>SC QUERYS SWPRV

ERROR: Unrecognized command

DESCRIPTION:
SC is a command line program used for communicating with the
Service Control Manager and services.
USAGE:
sc <server> [command] [service name] <option1> <option2>...


The option <server> has the form "\\ServerName"
Further help on commands can be obtained by typing: "sc [command]"
Commands:
query-----------Queries the status for a service, or
enumerates the status for types of services.
queryex---------Queries the extended status for a service, or
enumerates the status for types of services.
start-----------Starts a service.
pause-----------Sends a PAUSE control request to a service.
interrogate-----Sends an INTERROGATE control request to a service.
continue--------Sends a CONTINUE control request to a service.
stop------------Sends a STOP request to a service.
config----------Changes the configuration of a service (persistent).
description-----Changes the description of a service.
failure---------Changes the actions taken by a service upon failure.
failureflag-----Changes the failure actions flag of a service.
sidtype---------Changes the service SID type of a service.
privs-----------Changes the required privileges of a service.
qc--------------Queries the configuration information for a service.
qdescription----Queries the description for a service.
qfailure--------Queries the actions taken by a service upon failure.
qfailureflag----Queries the failure actions flag of a service.
qsidtype--------Queries the service SID type of a service.
qprivs----------Queries the required privileges of a service.
qtriggerinfo----Queries the trigger parameters of a service.
qpreferrednode--Queries the preferred NUMA node of a service.
delete----------Deletes a service (from the registry).
create----------Creates a service. (adds it to the registry).
control---------Sends a control to a service.
sdshow----------Displays a service's security descriptor.
sdset-----------Sets a service's security descriptor.
showsid---------Displays the service SID string corresponding to an ar
bitrary name.
triggerinfo-----Configures the trigger parameters of a service.
preferrednode---Sets the preferred NUMA node of a service.
GetDisplayName--Gets the DisplayName for a service.
GetKeyName------Gets the ServiceKeyName for a service.
EnumDepend------Enumerates Service Dependencies.

The following commands don't require a service name:
sc <server> <command> <option>
boot------------(ok | bad) Indicates whether the last boot should
be saved as the last-known-good boot configuration
Lock------------Locks the Service Database
QueryLock-------Queries the LockStatus for the SCManager Database
EXAMPLE:
sc start MyService

Would you like to see help for the QUERY and QUERYEX commands? [ y | n ]:
R

C:\Windows\system32>EG QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{56BE716B
-2F76-4dfa-8702-67AE10044F0B}
'EG' is not recognized as an internal or external command,
operable program or batch file.

C:\Windows\system32>REG QUERY HKLM\SOFTWARE\Classes\AppID\{FAF53CC4-BD73-4E36-83
F1-2B23F46E513E}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}

(Default) REG_SZ VssEvent
DllSurrogate REG_SZ


C:\Windows\system32>REG QUERY HKLM\SOFTWARE\Classes\CLSID\{573bdf38-df23-427f-ac
b8-a67abd702698}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{573bdf38-df23-427f-acb8-a67abd702698}

(Default) REG_SZ VssModuleKeeper

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{573bdf38-df23-427f-acb8-a67abd702698}
\InprocServer32

C:\Windows\system32>

 

[NoelDP]

The typo was my fault - sorry about that!
we need to run then all again (I've corrected the typo now) to get sensible results.

Again - sorry ;(

 

[avi312]

no probs hold on

 

[avi312]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>NET START SWPRV
The requested service has already been started.

More help is available by typing NET HELPMSG 2182.


C:\Windows\system32>SC QC SWPRV
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: SWPRV
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\System32\svchost.exe -k swprv
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Microsoft Software Shadow Copy Provider
DEPENDENCIES : RPCSS
SERVICE_START_NAME : LocalSystem

C:\Windows\system32>SC QUERYEX SWPRV

SERVICE_NAME: SWPRV
TYPE : 10 WIN32_OWN_PROCESS
STATE : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 6440
FLAGS :

C:\Windows\system32>REG QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{56BE716
B-2F76-4dfa-8702-67AE10044F0B}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{56BE716B-2F76-4dfa-8702-67AE10044F0B}

(Default) REG_SZ Volume Shadow Copy Service
LocalService REG_SZ VSS
LaunchPermission REG_BINARY 01000480600000006C000000000000001400000002
004C0003000000000018000100000001020000000000052000000027020000000014000100000001
01000000000005120000000000180001000000010200000000000520000000200200000101000000
00000512000000010100000000000512000000


C:\Windows\system32>REG QUERY HKLM\SOFTWARE\Classes\AppID\{FAF53CC4-BD73-4E36-83
F1-2B23F46E513E}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}

(Default) REG_SZ VssEvent
DllSurrogate REG_SZ


C:\Windows\system32>REG QUERY HKLM\SOFTWARE\Classes\CLSID\{573bdf38-df23-427f-ac
b8-a67abd702698}

 

[NoelDP]

Hmmm - Please run the following command and post the results

REG QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\Subscriptions

 

[avi312]

thanks for the quick reply man... heres the results
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\Aviraj>REG QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c
409cc-ae86-11d1-b616-00805fc79216}\Subscriptions

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805
fc79216}\Subscriptions\{F98C5003-16F4-4E33-BCA4-E92F4742AD27}-{00000000-0000-000
0-0000-000000000000}-{00000000-0000-0000-0000-000000000000}

C:\Users\Aviraj>

 

[NoelDP]

Too quick!
I left the recurse switch off, which means that we didn't get to see the underlying data....

REG QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\Subscriptions /S

I need another cup of coffee!

 

[avi312]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\Aviraj>REG QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c
409cc-ae86-11d1-b616-00805fc79216}\Subscriptions

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805
fc79216}\Subscriptions\{F98C5003-16F4-4E33-BCA4-E92F4742AD27}-{00000000-0000-000
0-0000-000000000000}-{00000000-0000-0000-0000-000000000000}

C:\Users\Aviraj>REG QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c
409cc-ae86-11d1-b616-00805fc79216}\Subscriptions /S

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805
fc79216}\Subscriptions\{F98C5003-16F4-4E33-BCA4-E92F4742AD27}-{00000000-0000-000
0-0000-000000000000}-{00000000-0000-0000-0000-000000000000}
Active REG_DWORD 0x1
SubscriptionID REG_SZ {F98C5003-16F4-4E33-BCA4-E92F4742AD27}
SubscriptionName REG_SZ Watson Subscription to SENS NetAliveNoQOCInfo
Event
PublisherID REG_SZ {F98C5003-16F4-4E33-BCA4-E92F4742AD27}
EventClassID REG_SZ {D5978620-5B9F-11D1-8DD2-00AA004ABD5E}
MethodName REG_SZ ConnectionMadeNoQOCInfo
SubscriberCLSID REG_SZ {6CF90891-3E04-4092-B96C-28E071EEEACB}
PerUser REG_DWORD 0x0
OwnerSID REG_SZ S-1-5-18
Enabled REG_DWORD 0x0
InterfaceID REG_SZ {D597BAB1-5B9F-11D1-8DD2-00AA004ABD5E}
EventClassPartitionID REG_SZ {00000000-0000-0000-0000-000000000000}
EventClassApplicationID REG_SZ {00000000-0000-0000-0000-000000000000}
SubscriberPartitionID REG_SZ {00000000-0000-0000-0000-000000000000}
SubscriberApplicationID REG_SZ {00000000-0000-0000-0000-000000000000}


C:\Users\Aviraj>

 

[NoelDP]

That looks normal to me - at least, it's the same as mine on one machine

Try this - you'll have to do each line separately rather than as a block, since it expects a response from the first command, and it can't be entered automatically.

net stop winmgmt
regsvr32 wmiutils.dll
net start winmgmt

then reboot, and run
vssadmin list writers

again

 

[avi312]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\Aviraj>net stop winmgmt
The following services are dependent on the Windows Management Instrumentation s
ervice.
Stopping the Windows Management Instrumentation service will also stop these ser
vices.

Security Center
IP Helper
Intel(R) Rapid Storage Technology

Do you want to continue this operation? (Y/N) [N]: y
The Security Center service is stopping.
The Security Center service was stopped successfully.

The IP Helper service is stopping.
The IP Helper service was stopped successfully.

The Intel(R) Rapid Storage Technology service is stopping..
The Intel(R) Rapid Storage Technology service was stopped successfully.

The Windows Management Instrumentation service is stopping...
The Windows Management Instrumentation service was stopped successfully.


C:\Users\Aviraj>resvr32 wmiutils.dll
'resvr32' is not recognized as an internal or external command,
operable program or batch file.

C:\Users\Aviraj>regsvr32 wmiutils.dll

C:\Users\Aviraj>net start winmgmt
The requested service has already been started.

More help is available by typing NET HELPMSG 2182.


C:\Users\Aviraj>

1. done a typo error first time...
2. got something about registry suceeded something like that
3. about to reboot now, after windows updates finishes