Video Screencast Help
Give us your opinion and win with Symantec! Please help us by taking this survey to tell us about your experience with Symantec Connect, so that we can continue to grow and improve.  Take the survey.

Recent Microsoft Security Updates & VSS Failures

Created: 17 Jan 2013 | 2 comments
Clif Godfrey's picture

All,

     I applied all of the microsoft security updates for December 2012 and January 2013 to my systems yesterday morning.   WIth last nights backups I have noted that about 3 of the 10 systems to which the patches apply have started having some VSS errors:

=============================================================================================================

Log Name:      Application
Source:        VSS
Date:          1/17/2013 1:00:09 AM
Event ID:      22
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      SYSTEM.domain.local
Description:
Volume Shadow Copy Service error: A critical component required by the Volume Shadow Copy service is not registered. This might happened if an error occurred during Windows setup or during installation of a Shadow Copy provider. The error returned from CoCreateInstance on class with CLSID {06d8e136-56f6-4048-93fb-a5943e949375} and Name SW_PROV is [0x80040154, Class not registered
].

Operation:
   Obtain a callable interface for this provider
   List interfaces for all providers supporting this context
   Check If Volume Is Supported by Provider
   Add a Volume to a Shadow Copy Set

Context:
   Provider ID: {5fdb6ef5-6ead-4610-995b-401c88626115}
   Class ID: {06d8e136-56f6-4048-93fb-a5943e949375}
   Snapshot Context: 4194304
   Snapshot Context: 4194304
   Execution Context: Coordinator
   Provider ID: {00000000-0000-0000-0000-000000000000}
   Volume Name: \\?\Volume{cc4e1e2e-3884-11e0-85e4-806e6f6e6963}\
   Execution Context: Coordinator
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">22</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-01-17T06:00:09.000000000Z" />
    <EventRecordID>2549332</EventRecordID>
    <Channel>Application</Channel>
    <Computer>MSYSTEM.domain.local
/Computer>
    <Security />
  </System>
  <EventData>
    <Data>{06d8e136-56f6-4048-93fb-a5943e949375}</Data>
    <Data>SW_PROV</Data>
    <Data>0x80040154, Class not registered
</Data>
    <Data>

Operation:
   Obtain a callable interface for this provider
   List interfaces for all providers supporting this context
   Check If Volume Is Supported by Provider
   Add a Volume to a Shadow Copy Set

Context:
   Provider ID: {5fdb6ef5-6ead-4610-995b-401c88626115}
   Class ID: {06d8e136-56f6-4048-93fb-a5943e949375}
   Snapshot Context: 4194304
   Snapshot Context: 4194304
   Execution Context: Coordinator
   Provider ID: {00000000-0000-0000-0000-000000000000}
   Volume Name: \\?\Volume{cc4e1e2e-3884-11e0-85e4-806e6f6e6963}\
   Execution Context: Coordinator</Data>
    <Binary>2D20436F64653A20434F52534F46544330303030303038302D2043616C6C3A20434F52534F46544330303030303036352D205049443A202030303030333034342D205449443A202030303030333439322D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820</Binary>
  </EventData>
</Event>

==================================================================================================

Log Name:      Application
Source:        VSS
Date:          1/17/2013 1:00:09 AM
Event ID:      12292
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      SYSTEM.domain.local

Description:
Volume Shadow Copy Service error: Error creating the Shadow Copy Provider COM class with CLSID {06d8e136-56f6-4048-93fb-a5943e949375} [0x80040154, Class not registered
].

Operation:
   Obtain a callable interface for this provider
   List interfaces for all providers supporting this context
   Check If Volume Is Supported by Provider
   Add a Volume to a Shadow Copy Set

Context:
   Provider ID: {5fdb6ef5-6ead-4610-995b-401c88626115}
   Class ID: {06d8e136-56f6-4048-93fb-a5943e949375}
   Snapshot Context: 4194304
   Snapshot Context: 4194304
   Execution Context: Coordinator
   Provider ID: {00000000-0000-0000-0000-000000000000}
   Volume Name: \\?\Volume{cc4e1e2e-3884-11e0-85e4-806e6f6e6963}\
   Execution Context: Coordinator
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">12292</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-01-17T06:00:09.000000000Z" />
    <EventRecordID>2549333</EventRecordID>
    <Channel>Application</Channel>
    <Computer>SYSTEM.domain.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>{06d8e136-56f6-4048-93fb-a5943e949375}</Data>
    <Data>0x80040154, Class not registered
</Data>
    <Data>

Operation:
   Obtain a callable interface for this provider
   List interfaces for all providers supporting this context
   Check If Volume Is Supported by Provider
   Add a Volume to a Shadow Copy Set

Context:
   Provider ID: {5fdb6ef5-6ead-4610-995b-401c88626115}
   Class ID: {06d8e136-56f6-4048-93fb-a5943e949375}
   Snapshot Context: 4194304
   Snapshot Context: 4194304
   Execution Context: Coordinator
   Provider ID: {00000000-0000-0000-0000-000000000000}
   Volume Name: \\?\Volume{cc4e1e2e-3884-11e0-85e4-806e6f6e6963}\
   Execution Context: Coordinator</Data>
    <Binary>2D20436F64653A20434F52534F46544330303030303038372D2043616C6C3A20434F52534F46544330303030303036352D205049443A202030303030333034342D205449443A202030303030333439322D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820</Binary>
  </EventData>
</Event>

================================================================================================================

Log Name:      Application
Source:        VSS
Date:          1/17/2013 1:00:09 AM
Event ID:      22
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      system.company.local
Description:
Volume Shadow Copy Service error: A critical component required by the Volume Shadow Copy service is not registered. This might happened if an error occurred during Windows setup or during installation of a Shadow Copy provider. The error returned from CoCreateInstance on class with CLSID {06d8e136-56f6-4048-93fb-a5943e949375} and Name SW_PROV is [0x80040154, Class not registered
].

Operation:
   Obtain a callable interface for this provider
   Add a Volume to a Shadow Copy Set

Context:
   Provider ID: {5fdb6ef5-6ead-4610-995b-401c88626115}
   Class ID: {06d8e136-56f6-4048-93fb-a5943e949375}
   Snapshot Context: 4194304
   Execution Context: Coordinator
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">22</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-01-17T06:00:09.000000000Z" />
    <EventRecordID>2549336</EventRecordID>
    <Channel>Application</Channel>
    <Computer>SYSTEM.company.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>{06d8e136-56f6-4048-93fb-a5943e949375}</Data>
    <Data>SW_PROV</Data>
    <Data>0x80040154, Class not registered
</Data>
    <Data>

Operation:
   Obtain a callable interface for this provider
   Add a Volume to a Shadow Copy Set

Context:
   Provider ID: {5fdb6ef5-6ead-4610-995b-401c88626115}
   Class ID: {06d8e136-56f6-4048-93fb-a5943e949375}
   Snapshot Context: 4194304
   Execution Context: Coordinator</Data>
    <Binary>2D20436F64653A20434F52534F46544330303030303038302D2043616C6C3A20434F52534F46544330303030303036352D205049443A202030303030333034342D205449443A202030303030333439322D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820</Binary>
  </EventData>
</Event>

=========================================================================================================

Log Name:      Application
Source:        VSS
Date:          1/17/2013 1:00:09 AM
Event ID:      12292
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      SYSTEM.company.local
Description:
Volume Shadow Copy Service error: Error creating the Shadow Copy Provider COM class with CLSID {06d8e136-56f6-4048-93fb-a5943e949375} [0x80040154, Class not registered
].

Operation:
   Obtain a callable interface for this provider
   Add a Volume to a Shadow Copy Set

Context:
   Provider ID: {5fdb6ef5-6ead-4610-995b-401c88626115}
   Class ID: {06d8e136-56f6-4048-93fb-a5943e949375}
   Snapshot Context: 4194304
   Execution Context: Coordinator
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">12292</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-01-17T06:00:09.000000000Z" />
    <EventRecordID>2549337</EventRecordID>
    <Channel>Application</Channel>
    <Computer>SYSTEM.company.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>{06d8e136-56f6-4048-93fb-a5943e949375}</Data>
    <Data>0x80040154, Class not registered
</Data>
    <Data>

Operation:
   Obtain a callable interface for this provider
   Add a Volume to a Shadow Copy Set

Context:
   Provider ID: {5fdb6ef5-6ead-4610-995b-401c88626115}
   Class ID: {06d8e136-56f6-4048-93fb-a5943e949375}
   Snapshot Context: 4194304
   Execution Context: Coordinator</Data>
    <Binary>2D20436F64653A20434F52534F46544330303030303038372D2043616C6C3A20434F52534F46544330303030303036352D205049443A202030303030333034342D205449443A202030303030333439322D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820</Binary>
  </EventData>
</Event>

=======================================================================================================================

Was just wondering if anyone else may have run into this after the recent patches before I beging the arduous task of installing each patch one by one then running a test backup to try to figure out which one is causing the issue.

Thanks

CLif

Discussion Filed Under:

Comments 2 CommentsJump to latest comment

Backup_Exec's picture

Hi

After applying these patches I presume you have restarted the server once.

Thanks

Sameer

Don't forget to give a "Thumbs Up" or Mark as "Solution" if someones advice has helped you.

pkh's picture

Volume Shadow Copy Service error: A critical component required by the Volume Shadow Copy service is not registered. This might happened if an error occurred during Windows setup or during installation of a Shadow Copy provider. The error returned from CoCreateInstance on class with CLSID {06d8e136-56f6-4048-93fb-a5943e949375} and Name SW_PROV is [0x80040154, Class not registered

It is more a Microsoft problem rather than BE.  You can try to re-register the VSS dll's if you are using Server 2003.  In a command prompt, run the following commands.

cd /d %windir%\system32

net stop vss
net stop swprv
regsvr32 ole32.dll
regsvr32 oleaut32.dll
regsvr32 /i eventcls.dll
regsvr32 vss_ps.dll
vssvc /register
regsvr32 /i swprv.dll
regsvr32 es.dll
regsvr32 stdprov.dll
regsvr32 vssui.dll
regsvr32 msxml.dll
regsvr32 msxml3.dll
regsvr32 msxml4.dll
 
DO NOT RE-REGISTER THE DLL's IF YOU ARE USING SERVER 2008.