cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Veritas.com
Support

Recent Microsoft Security Updates & VSS Failures

Clif_Godfrey
Level 3
Partner

‎01-17-2013 12:35 PM

All,

     I applied all of the microsoft security updates for December 2012 and January 2013 to my systems yesterday morning.   WIth last nights backups I have noted that about 3 of the 10 systems to which the patches apply have started having some VSS errors:

=============================================================================================================

Log Name:      Application
Source:        VSS
Date:          1/17/2013 1:00:09 AM
Event ID:      22
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      SYSTEM.domain.local
Description:
Volume Shadow Copy Service error: A critical component required by the Volume Shadow Copy service is not registered. This might happened if an error occurred during Windows setup or during installation of a Shadow Copy provider. The error returned from CoCreateInstance on class with CLSID {06d8e136-56f6-4048-93fb-a5943e949375} and Name SW_PROV is [0x80040154, Class not registered
].

Operation:
   Obtain a callable interface for this provider
   List interfaces for all providers supporting this context
   Check If Volume Is Supported by Provider
   Add a Volume to a Shadow Copy Set

Context:
   Provider ID: {5fdb6ef5-6ead-4610-995b-401c88626115}
   Class ID: {06d8e136-56f6-4048-93fb-a5943e949375}
   Snapshot Context: 4194304
   Snapshot Context: 4194304
   Execution Context: Coordinator
   Provider ID: {00000000-0000-0000-0000-000000000000}
   Volume Name: \\?\Volume{cc4e1e2e-3884-11e0-85e4-806e6f6e6963}\
   Execution Context: Coordinator
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">22</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-01-17T06:00:09.000000000Z" />
    <EventRecordID>2549332</EventRecordID>
    <Channel>Application</Channel>
    <Computer>MSYSTEM.domain.local
/Computer>
    <Security />
  </System>
  <EventData>
    <Data>{06d8e136-56f6-4048-93fb-a5943e949375}</Data>
    <Data>SW_PROV</Data>
    <Data>0x80040154, Class not registered
</Data>
    <Data>

Operation:
   Obtain a callable interface for this provider
   List interfaces for all providers supporting this context
   Check If Volume Is Supported by Provider
   Add a Volume to a Shadow Copy Set

Context:
   Provider ID: {5fdb6ef5-6ead-4610-995b-401c88626115}
   Class ID: {06d8e136-56f6-4048-93fb-a5943e949375}
   Snapshot Context: 4194304
   Snapshot Context: 4194304
   Execution Context: Coordinator
   Provider ID: {00000000-0000-0000-0000-000000000000}
   Volume Name: \\?\Volume{cc4e1e2e-3884-11e0-85e4-806e6f6e6963}\
   Execution Context: Coordinator</Data>
    <Binary>2D20436F64653A20434F52534F46544330303030303038302D2043616C6C3A20434F52534F46544330303030303036352D205049443A202030303030333034342D205449443A202030303030333439322D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820</Binary>
  </EventData>
</Event>

 

==================================================================================================

Log Name:      Application
Source:        VSS
Date:          1/17/2013 1:00:09 AM
Event ID:      12292
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      SYSTEM.domain.local

Description:
Volume Shadow Copy Service error: Error creating the Shadow Copy Provider COM class with CLSID {06d8e136-56f6-4048-93fb-a5943e949375} [0x80040154, Class not registered
].

Operation:
   Obtain a callable interface for this provider
   List interfaces for all providers supporting this context
   Check If Volume Is Supported by Provider
   Add a Volume to a Shadow Copy Set

Context:
   Provider ID: {5fdb6ef5-6ead-4610-995b-401c88626115}
   Class ID: {06d8e136-56f6-4048-93fb-a5943e949375}
   Snapshot Context: 4194304
   Snapshot Context: 4194304
   Execution Context: Coordinator
   Provider ID: {00000000-0000-0000-0000-000000000000}
   Volume Name: \\?\Volume{cc4e1e2e-3884-11e0-85e4-806e6f6e6963}\
   Execution Context: Coordinator
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">12292</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-01-17T06:00:09.000000000Z" />
    <EventRecordID>2549333</EventRecordID>
    <Channel>Application</Channel>
    <Computer>SYSTEM.domain.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>{06d8e136-56f6-4048-93fb-a5943e949375}</Data>
    <Data>0x80040154, Class not registered
</Data>
    <Data>

Operation:
   Obtain a callable interface for this provider
   List interfaces for all providers supporting this context
   Check If Volume Is Supported by Provider
   Add a Volume to a Shadow Copy Set

Context:
   Provider ID: {5fdb6ef5-6ead-4610-995b-401c88626115}
   Class ID: {06d8e136-56f6-4048-93fb-a5943e949375}
   Snapshot Context: 4194304
   Snapshot Context: 4194304
   Execution Context: Coordinator
   Provider ID: {00000000-0000-0000-0000-000000000000}
   Volume Name: \\?\Volume{cc4e1e2e-3884-11e0-85e4-806e6f6e6963}\
   Execution Context: Coordinator</Data>
    <Binary>2D20436F64653A20434F52534F46544330303030303038372D2043616C6C3A20434F52534F46544330303030303036352D205049443A202030303030333034342D205449443A202030303030333439322D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820</Binary>
  </EventData>
</Event>

================================================================================================================

Log Name:      Application
Source:        VSS
Date:          1/17/2013 1:00:09 AM
Event ID:      22
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      system.company.local
Description:
Volume Shadow Copy Service error: A critical component required by the Volume Shadow Copy service is not registered. This might happened if an error occurred during Windows setup or during installation of a Shadow Copy provider. The error returned from CoCreateInstance on class with CLSID {06d8e136-56f6-4048-93fb-a5943e949375} and Name SW_PROV is [0x80040154, Class not registered
].

Operation:
   Obtain a callable interface for this provider
   Add a Volume to a Shadow Copy Set

Context:
   Provider ID: {5fdb6ef5-6ead-4610-995b-401c88626115}
   Class ID: {06d8e136-56f6-4048-93fb-a5943e949375}
   Snapshot Context: 4194304
   Execution Context: Coordinator
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">22</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-01-17T06:00:09.000000000Z" />
    <EventRecordID>2549336</EventRecordID>
    <Channel>Application</Channel>
    <Computer>SYSTEM.company.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>{06d8e136-56f6-4048-93fb-a5943e949375}</Data>
    <Data>SW_PROV</Data>
    <Data>0x80040154, Class not registered
</Data>
    <Data>

Operation:
   Obtain a callable interface for this provider
   Add a Volume to a Shadow Copy Set

Context:
   Provider ID: {5fdb6ef5-6ead-4610-995b-401c88626115}
   Class ID: {06d8e136-56f6-4048-93fb-a5943e949375}
   Snapshot Context: 4194304
   Execution Context: Coordinator</Data>
    <Binary>2D20436F64653A20434F52534F46544330303030303038302D2043616C6C3A20434F52534F46544330303030303036352D205049443A202030303030333034342D205449443A202030303030333439322D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820</Binary>
  </EventData>
</Event>

=========================================================================================================

Log Name:      Application
Source:        VSS
Date:          1/17/2013 1:00:09 AM
Event ID:      12292
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      SYSTEM.company.local
Description:
Volume Shadow Copy Service error: Error creating the Shadow Copy Provider COM class with CLSID {06d8e136-56f6-4048-93fb-a5943e949375} [0x80040154, Class not registered
].

Operation:
   Obtain a callable interface for this provider
   Add a Volume to a Shadow Copy Set

Context:
   Provider ID: {5fdb6ef5-6ead-4610-995b-401c88626115}
   Class ID: {06d8e136-56f6-4048-93fb-a5943e949375}
   Snapshot Context: 4194304
   Execution Context: Coordinator
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">12292</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-01-17T06:00:09.000000000Z" />
    <EventRecordID>2549337</EventRecordID>
    <Channel>Application</Channel>
    <Computer>SYSTEM.company.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>{06d8e136-56f6-4048-93fb-a5943e949375}</Data>
    <Data>0x80040154, Class not registered
</Data>
    <Data>

Operation:
   Obtain a callable interface for this provider
   Add a Volume to a Shadow Copy Set

Context:
   Provider ID: {5fdb6ef5-6ead-4610-995b-401c88626115}
   Class ID: {06d8e136-56f6-4048-93fb-a5943e949375}
   Snapshot Context: 4194304
   Execution Context: Coordinator</Data>
    <Binary>2D20436F64653A20434F52534F46544330303030303038372D2043616C6C3A20434F52534F46544330303030303036352D205049443A202030303030333034342D205449443A202030303030333439322D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820</Binary>
  </EventData>
</Event>

=======================================================================================================================

Was just wondering if anyone else may have run into this after the recent patches before I beging the arduous task of installing each patch one by one then running a test backup to try to figure out which one is causing the issue.

 

Thanks

CLif

 

0 Kudos
2 REPLIES 2

Backup_Exec1
Level 6
Employee Accredited Certified

‎01-17-2013 02:23 PM

Hi

 

After applying these patches I presume you have restarted the server once.

Thanks

0 Kudos

pkh
Moderator
Moderator
   VIP    Certified

‎01-17-2013 05:13 PM

Volume Shadow Copy Service error: A critical component required by the Volume Shadow Copy service is not registered. This might happened if an error occurred during Windows setup or during installation of a Shadow Copy provider. The error returned from CoCreateInstance on class with CLSID {06d8e136-56f6-4048-93fb-a5943e949375} and Name SW_PROV is [0x80040154, Class not registered

It is more a Microsoft problem rather than BE.  You can try to re-register the VSS dll's if you are using Server 2003.  In a command prompt, run the following commands.

cd /d %windir%\system32

net stop vss
net stop swprv
regsvr32 ole32.dll
regsvr32 oleaut32.dll
regsvr32 /i eventcls.dll
regsvr32 vss_ps.dll
vssvc /register
regsvr32 /i swprv.dll
regsvr32 es.dll
regsvr32 stdprov.dll
regsvr32 vssui.dll
regsvr32 msxml.dll
regsvr32 msxml3.dll
regsvr32 msxml4.dll
 
DO NOT RE-REGISTER THE DLL's IF YOU ARE USING SERVER 2008.
0 Kudos