Hi,
On a Windows 2008 R2 we get a Windows Backup error while backupping System State (event id: 5, error code: '2155347997').
We tried *ALL* solutions found on Internet regarding the same issue (and we also applied the suggested hotfix KB2807849) but without success. So we DIGGED INTO VSS to see what is happening.
***1) First we saw that an USB printer had a problem and this resulted inhundreds of entries in the following registry keys:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StillImage\DeviceNameStore\Canon MF6500 Series #100010]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StillImage\DeviceNameStore\Canon MF6500 Series #100011]
...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StillImage\DeviceNameStore\{6BDD1FC6-810F-11D0-BEC7-08002BE2092F}\79590]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StillImage\DeviceNameStore\{6BDD1FC6-810F-11D0-BEC7-08002BE2092F}\79591]
...
***2) We completely removed ALL drivers/devices related to that printer (now the DeviceNameStore is empty and
pnputil -e returns no driver related to the printer)
***3) Using process monitor we saw that during vssadmin list writers the system is searching for the DLLs related to that printer AND SEEMS CAUGHT IN AN ENDLESS LOOP: this is an excerpt of the scan:
09:56:34,5205954 svchost.exe 324 RegSetValue HKLM\System\CurrentControlSet\services\VSS\Diag\System Writer\IDENTIFY (Enter) SUCCESS
...
...
09:57:18,2310377 svchost.exe 324 QueryDirectory C:\Windows\System32\spool\drivers\color\cnz005.icc NO SUCH FILE Filter: cnz005.icc
09:57:18,2312877 svchost.exe 324 QueryDirectory C:\Windows\System32\spool\drivers\color\cnf6500m.icc NO SUCH FILE Filter: cnf6500m.icc
09:57:18,2314854 svchost.exe 324 QueryDirectory C:\Windows\System32\cncmfp20.ini NO SUCH FILE Filter: cncmfp20.ini
09:57:18,2316416 svchost.exe 324 QueryDirectory C:\Windows\System32\cnclsi20.dll NO SUCH FILE Filter: cnclsi20.dll
09:57:18,2318288 svchost.exe 324 QueryDirectory C:\Windows\System32\cnclsd20.dll NO SUCH FILE Filter: cnclsd20.dll
09:57:18,2319893 svchost.exe 324 QueryDirectory C:\Windows\System32\cnclsc20.dll NO SUCH FILE Filter: cnclsc20.dll
09:57:18,2321452 svchost.exe 324 QueryDirectory C:\Windows\System32\cnclst20.dll NO SUCH FILE Filter: cnclst20.dll
09:57:18,2323013 svchost.exe 324 QueryDirectory C:\Windows\System32\cnclsu20.dll NO SUCH FILE Filter: cnclsu20.dll
09:57:18,2326240 svchost.exe 324 QueryDirectory C:\Windows\System32\cncilsc.dll NO SUCH FILE Filter: cncilsc.dll
09:57:18,2332784 svchost.exe 324 CreateFile C:\Windows\twain_32\mf6500 NAME NOT FOUND
09:57:18,2333842 svchost.exe 324 CreateFile C:\Windows\twain_32\mf6500 NAME NOT FOUND
09:57:18,2353696 svchost.exe 324 QueryDirectory C:\Windows\System32\spool\drivers\color\cnz005.icc NO SUCH FILE Filter: cnz005.icc
09:57:18,2356209 svchost.exe 324 QueryDirectory C:\Windows\System32\spool\drivers\color\cnf6500m.icc NO SUCH FILE Filter: cnf6500m.icc
09:57:18,2358377 svchost.exe 324 QueryDirectory C:\Windows\System32\cncmfp20.ini NO SUCH FILE Filter: cncmfp20.ini
09:57:18,2359974 svchost.exe 324 QueryDirectory C:\Windows\System32\cnclsi20.dll NO SUCH FILE Filter: cnclsi20.dll
09:57:18,2361536 svchost.exe 324 QueryDirectory C:\Windows\System32\cnclsd20.dll NO SUCH FILE Filter: cnclsd20.dll
09:57:18,2363098 svchost.exe 324 QueryDirectory C:\Windows\System32\cnclsc20.dll NO SUCH FILE Filter: cnclsc20.dll
09:57:18,2364758 svchost.exe 324 QueryDirectory C:\Windows\System32\cnclst20.dll NO SUCH FILE Filter: cnclst20.dll
09:57:18,2366307 svchost.exe 324 QueryDirectory C:\Windows\System32\cnclsu20.dll NO SUCH FILE Filter: cnclsu20.dll
09:57:18,2369765 svchost.exe 324 QueryDirectory C:\Windows\System32\cncilsc.dll NO SUCH FILE Filter: cncilsc.dll
09:57:18,2376014 svchost.exe 324 CreateFile C:\Windows\twain_32\mf6500 NAME NOT FOUND
09:57:18,2377065 svchost.exe 324 CreateFile C:\Windows\twain_32\mf6500 NAME NOT FOUND
09:57:18,2397129 svchost.exe 324 QueryDirectory C:\Windows\System32\spool\drivers\color\cnz005.icc NO SUCH FILE Filter: cnz005.icc
...
... and so on
.... THE SAME FILES REPEATED HUNDREDS OF TIMES!!!! ...
It seems that somewhere there is a catalog of system files which still contains the references to the (same) files used by the hundreds of devices that WERE present in the DeviceNameStore (see point ***1 above, but now it is empty), and the System Writer continues to search/enumerate those files and fails.
How can I fix it ? Is there a way to "reset" the System Writer and "rebuild" (???) the correct files that it should backup? (in order to complete a successfull system state backup)
Can you help me?
Thank you in advance.