1) Windows Event Viewer VSS Error Messages 2) Safely Shut Down Ext USB Hard Drive after uisng FFS

Get help for specific problems
Posts: 55
Joined: 5 Aug 2006

gdhm

Hi Zenju :),

ONLY WHEN YOU HAVE TIME, please can you advise me.

1) Windows Event Viewer VSS Error Messages
When I open FFS and run my configurations the backup always works fine but (as today) I occasionally get VSS Windows Event Viewer Error. (SEE BELOW for one today)

It definitely is in response to running FFS because having noticed it today, I cleared all event logs. Then ran FFS. No error occurred UNTIL I ran my configurations:

I experimented and found the trigger (for THIS occasion) I had inadvertently left Firefox open and its settings were being copied by FFS. The Error is written when Syncing.

It is also important to mention I have "Copy Locked Files" ticked

My question Zenju. Is there a way, or a registry setting or whatever I can change to prevent these messages occurring when FFS (I assume does what it needed to do to be able to copy locked files without impacting adversely on anything else. Please forgive my assumption I am not knowledgable on VSS although I looked it up and tried to find a solution without bothering you).

I recall you have suggested not using "Copy Locked Files" as not always needed, but I am keen to copy all files if I can, so if I do a complete recover from a FFS backup it will mirror what was there before exactly is possible (including locked files (which MAY be important).


Windows Event Viewer ERROR Details

Log Name: Application
Source: VSS
Event ID: 8194
Level: Error
User: N/A

Message Details are:

Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
. This is often caused by incorrect security settings in either the writer or requestor process.

Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {4b2066fe-62e7-4753-b220-9db8d20101ae}

-------

2) Safely Shut Down Ext USB Hard Drive after using FFS

Many FFS versions ago I used to be able to do my FFS Backups to my external USB Hard Drive and when finished and the Drive had COMPLETELY finished all its writing, I could 99% of the time safely Shutdown & Power down the drive afterwards.

However, for quite some versions now, I ALWAYS get the dreaded Windows message after doing my FFS backups "The device is currently in use . Close any .....".
I click on OK and the drive seems to read/write again for a few seconds and when that has completed, I can 99% of the time safely Shutdown/power down my Ext USB Hard Drive.

The failure to shut down first time nowadays, seems to be linked with explorer.exe (handles?) on the Ext. USB drive(my previous investigations seem to point to that anyway). May I ask Zenju whether you have any idea if something in FFS is not releasing these handles or, do you think it may be something like Avast! or Windows updates etc.that have caused this change.
I have noted if I open FFS but do NO backups and shut it, then I can safely shutdown so it seems only if backups are actually run that something does not release afterwards.

The WARNING not (error) message is always something like
Log Name: System
Source: Kernel-PnP
Event ID: 225
Level: Warning

The application System with process id 4 stopped the removal or ejection for the device USB\VID_0BC2&PID_3008\2GEXEZSK.

Thank you so much Zenju
User avatar
Site Admin
Posts: 7282
Joined: 9 Dec 2007

Zenju

> 1) Windows Event Viewer VSS Error Messages

I don't think there is a bug or incorrect VSS usage by FFS, OTOH all info regarding this error seems to indicate that this may be caused by some local configuration problem, but almost certainly can be ignored.

Concerning a backup of FireFox settings, if you exlude "*\parent.lock", you should be able to synchronize without any other locked files remaining that would need VSS in first place.

> 2) Safely Shut Down Ext USB Hard Drive after using FFS

If the problem persists after FFS was closed then it cannot be caused by FFS leaking handles. Even if FFS were leaking handles (which is highly unlikely due to C++'s RAII idiom), the OS would clean up during process exit anyway.
It might help to use a tool like "unlocker" on the USB volume to see if it can find some process that is still using it.
Posts: 55
Joined: 5 Aug 2006

gdhm

Thanks Zenju :)

1) Yes a local configuration issue is what I found blurb on but have no idea what.
I have noticed Window 7 (x64) and my system do not like one of my USB ScanDisk Flash sticks often causing a Kernal-PnP Warning message but nothing ever goes wrong. It always safely removes but still I often get an error message
This will remain a total mystery but I agree I am sure nothing of concern.

2)I am sure it is not FFS leaking handles Zenju, sorry if I implied that as not intended. I have never seen FFS blamed it always closes cleanly and Unlock has NEVER suggested it has an open handles.
If I find anything it is Explorer.exe still running for each of my partitions on the Ext. USB Drive. The thing I don't understand is why it would have opened. All I do is power on the Ext. USB Hard Drive. Run FFS, do my 12 config backups to a secondary internal drive, Ext. USB hared Drive and one SanDisk Flash pen drive. I then close FFS and empty the Windows Recycle bin. I then safely remove the USB Flash Drive first - No problem I am told I can safely remove the device. I then try to safely remove Ext USB Hard Drive and most times I get the "The device is currently in use . Close any .....". I THINK at this stage a Kernal-PnP WARNING message is written to the windows Event Viewer (The application System with process id 4 stopped the removal or ejection for the device USB\VID_0BC2&PID_3008\2GEXEZSK).

When I merely click OK on the message to close it, the Ext USB Drive usually wakes up for 15 seconds (I assume it is NOW releasing whatever was still running BUT I DON"T KNOW WHY, because all I did was is click OK on the message box, NOTHING ELSE. After the 15 secs of activity, I then try to Safely remove the Ext USB HD and it 99% of the time works.

Only other observation I have found is, if I do not try to Safely Remove (because I have forgotten and not used) and try 30 mins or later it usually safely Removes first attempt. Very curious.

I have spent hours and hours on many occasions trying to work out what is going on. As with 1) above it will remain a total Mystery and once again is not an issue. I recently started using "USB Disk Ejector" to close the Ext USB Drive as it succeeds first time as it has a setting which I use
Labelled "If any programs have been launched from the Drive: (they haven't not, but anyway)
3 options are
a) Do Nothing (gets same results as Windows Safely Remove)
b) Ask the program to close (WHICH I USE AND 99% time works first time but still still causes the Kernal-PnP Warning message
c) Force the Program to close (I do not use)

NO idea what program can be running as the Ext USB Drive is a Data and file storage only drive ONLY and I never run any programs or .exe files form it. I AM However suspicious Avast! Antivirus MAY have something to do with the issue, as it often runs seemingly checking things. Maybe it has left something open and fails to close it.

ANYWAY ZENJU :) MANY THANKS for your reply and time. I won't bother you further on these quite minor issues.

Regards Dave