?
Solved

VSS Error 8193 - Windows 7, The specified service does not exist as an installed service.

Posted on 2009-12-19
2
Medium Priority
?
6,084 Views
Last Modified: 2012-05-08
Hi

I have been having trouble getting the windows 7 backup utility to work.  At first I had an error and had to reimport the wbengine reg key.

Now I am  geting  the following errors.

*******************************

Log Name:      Application
Source:        VSS
Date:          19/12/2009 15:18:01
Event ID:      8193
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Anthony-PC
Description:
Volume Shadow Copy Service error: Unexpected error calling routine  OpenService (shSCManager, 'VSS', SERVICE_QUERY_STATUS).  hr = 0x80070424, The specified service does not exist as an installed service.
.

Operation:
   Initialize For Backup
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">8193</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-12-19T15:18:01.000000000Z" />
    <EventRecordID>4520</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Anthony-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data> OpenService (shSCManager, 'VSS', SERVICE_QUERY_STATUS)</Data>
    <Data>0x80070424, The specified service does not exist as an installed service.
</Data>
    <Data>

Operation:
   Initialize For Backup</Data>
    <Binary>2D20436F64653A20205452435452434330303030313835352D2043616C6C3A2042554543584D4C4330303030323636302D205049443A202030303030343837362D205449443A202030303030303136382D20434D443A202022433A5C57696E646F77735C73797374656D33325C7762656E67696E652E657865222020202020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820</Binary>
  </EventData>
</Event>

*************************************************

Log Name:      Application
Source:        VSS
Date:          19/12/2009 15:18:01
Event ID:      13
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Anthony-PC
Description:
Volume Shadow Copy Service information: The COM Server with CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} and name IVssCoordinatorEx2 cannot be started. [0x80070424, The specified service does not exist as an installed service.
]

Operation:
   Instantiating VSS server
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">13</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-12-19T15:18:01.000000000Z" />
    <EventRecordID>4521</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Anthony-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>{e579ab5f-1cc4-44b4-bed9-de0991ff0623}</Data>
    <Data>IVssCoordinatorEx2</Data>
    <Data>0x80070424, The specified service does not exist as an installed service.
</Data>
    <Data>

Operation:
   Instantiating VSS server</Data>
    <Binary>2D20436F64653A2042554543584D4C4330303030343338362D2043616C6C3A2042554543584D4C4330303030343336312D205049443A202030303030343837362D205449443A202030303030353036342D20434D443A202022433A5C57696E646F77735C73797374656D33325C7762656E67696E652E657865222020202020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820</Binary>
  </EventData>
</Event>

******************************************************

Log Name:      Application
Source:        VSS
Date:          19/12/2009 15:18:01
Event ID:      8193
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Anthony-PC
Description:
Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance.  hr = 0x80070424, The specified service does not exist as an installed service.
.

Operation:
   Instantiating VSS server
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">8193</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-12-19T15:18:01.000000000Z" />
    <EventRecordID>4522</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Anthony-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>CoCreateInstance</Data>
    <Data>0x80070424, The specified service does not exist as an installed service.
</Data>
    <Data>

Operation:
   Instantiating VSS server</Data>
    <Binary>2D20436F64653A2042554543584D4C4330303030343339322D2043616C6C3A2042554543584D4C4330303030343336312D205049443A202030303030343837362D205449443A202030303030353036342D20434D443A202022433A5C57696E646F77735C73797374656D33325C7762656E67696E652E657865222020202020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820</Binary>
  </EventData>
</Event>

*********************

I cannot see VSS in the services list.  I am also using hardware RAID if that makes a difference.  Any help appreciated.

0
Comment
Question by:antalp71
2 Comments
 
LVL 16

Accepted Solution

by:
cantoris earned 2000 total points
ID: 26088726
VSS refers to the Service called "Volume Shadow Copy".  On my PC this is set to Manual.  Can you see it?  If so, can you start it?

If not, I would next try     sfc /scannow

Otherwise, you could try hacking in registry keys from a good system.  I've attached mine (Windows 7 Ultimate x86).
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS]
"DisplayName"="@%systemroot%\\system32\\vssvc.exe,-102"
"ImagePath"=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f,00,6f,00,\
  74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,76,\
  00,73,00,73,00,76,00,63,00,2e,00,65,00,78,00,65,00,00,00
"Description"="@%systemroot%\\system32\\vssvc.exe,-101"
"ObjectName"="LocalSystem"
"ErrorControl"=dword:00000001
"Start"=dword:00000003
"Type"=dword:00000010
"DependOnService"=hex(7):52,00,50,00,43,00,53,00,53,00,00,00,00,00
"ServiceSidType"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\SPP]
"SppGetSnapshots (Enter)"=hex:40,00,00,00,00,00,00,00,f2,70,4e,d9,33,7f,ca,01,\
  60,0d,00,00,b4,01,00,00,d2,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"SppGetSnapshots (Leave)"=hex:40,00,00,00,00,00,00,00,53,d2,50,d9,33,7f,ca,01,\
  60,0d,00,00,b4,01,00,00,d2,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"SppEnumGroups (Enter)"=hex:40,00,00,00,00,00,00,00,53,d2,50,d9,33,7f,ca,01,60,\
  0d,00,00,b4,01,00,00,d1,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"SppEnumGroups (Leave)"=hex:40,00,00,00,00,00,00,00,b3,33,53,d9,33,7f,ca,01,60,\
  0d,00,00,b4,01,00,00,d1,07,00,00,01,00,00,00,00,00,00,00,01,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"SppCreate (Enter)"=hex:40,00,00,00,00,00,00,00,e1,33,4f,3e,dc,7d,ca,01,e0,17,\
  00,00,8c,14,00,00,d0,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"SppGatherWriterMetadata (Enter)"=hex:40,00,00,00,00,00,00,00,02,58,56,3e,dc,\
  7d,ca,01,e0,17,00,00,8c,14,00,00,d3,07,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00
"SppGatherWriterMetadata (Leave)"=hex:40,00,00,00,00,00,00,00,39,f4,fc,49,dc,\
  7d,ca,01,e0,17,00,00,8c,14,00,00,d3,07,00,00,01,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00
"SppAddInterestingComponents (Enter)"=hex:40,00,00,00,00,00,00,00,39,f4,fc,49,\
  dc,7d,ca,01,e0,17,00,00,8c,14,00,00,d4,07,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00
"SppAddInterestingComponents (Leave)"=hex:40,00,00,00,00,00,00,00,99,55,ff,49,\
  dc,7d,ca,01,e0,17,00,00,8c,14,00,00,d4,07,00,00,01,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00
"SppCreate (Leave)"=hex:40,00,00,00,00,00,00,00,1b,5e,4c,4d,dc,7d,ca,01,e0,17,\
  00,00,8c,14,00,00,d0,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\SystemRestore]
"SrCreateRp (Enter)"=hex:40,00,00,00,00,00,00,00,60,ae,45,3e,dc,7d,ca,01,54,09,\
  00,00,d0,16,00,00,d5,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"SrCreateRp (Leave)"=hex:40,00,00,00,00,00,00,00,7b,bf,4e,4d,dc,7d,ca,01,54,09,\
  00,00,d0,16,00,00,d5,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\ASR Writer]
"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,83,dd,5f,3e,dc,7d,ca,01,3c,17,\
  00,00,44,17,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,25,87,70,3e,dc,7d,ca,01,3c,17,\
  00,00,44,17,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\BITS Writer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\COM+ REGDB Writer]
"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,83,dd,5f,3e,dc,7d,ca,01,3c,17,\
  00,00,88,17,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,43,a0,64,3e,dc,7d,ca,01,3c,17,\
  00,00,88,17,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,81,5d,44,4a,dc,7d,ca,01,3c,\
  17,00,00,44,17,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,63,44,50,4a,dc,7d,ca,01,3c,\
  17,00,00,44,17,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,63,44,50,4a,dc,\
  7d,ca,01,3c,17,00,00,44,17,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\
  00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,\
  00
"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,83,68,57,4a,dc,7d,ca,01,3c,17,\
  00,00,44,17,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,83,68,57,4a,dc,7d,ca,01,3c,17,\
  00,00,44,17,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,2c,33,a1,4a,dc,7d,ca,01,\
  3c,17,00,00,54,04,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,91,aa,c9,4a,dc,7d,ca,01,\
  3c,17,00,00,54,04,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,91,\
  aa,c9,4a,dc,7d,ca,01,3c,17,00,00,54,04,00,00,02,00,00,00,01,00,00,00,01,00,\
  00,00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,\
  00,00,00,00,00
"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,78,b2,0e,4b,dc,7d,ca,01,3c,17,00,\
  00,60,04,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,a4,d5,b8,90,\
  98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,d9,13,11,4b,dc,7d,ca,01,3c,17,00,\
  00,60,04,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,a4,d5,b8,90,\
  98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,d9,13,\
  11,4b,dc,7d,ca,01,3c,17,00,00,60,04,00,00,03,00,00,00,01,00,00,00,02,00,00,\
  00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,\
  00,00,00,00
"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,d9,13,11,4b,dc,7d,ca,\
  01,3c,17,00,00,60,17,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,db,20,51,4d,dc,7d,ca,01,3c,17,00,00,\
  60,04,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,a4,d5,b8,90,98,\
  24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,db,20,51,4d,dc,7d,ca,\
  01,3c,17,00,00,60,17,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,db,20,51,4d,dc,7d,ca,01,3c,17,00,00,\
  60,04,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,a4,d5,b8,90,98,\
  24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\
  00,db,20,51,4d,dc,7d,ca,01,3c,17,00,00,60,04,00,00,04,00,00,00,01,00,00,00,\
  03,00,00,00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,\
  00,00,00,00,00,00,00
"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,ea,ee,ec,4e,dc,7d,ca,01,3c,\
  17,00,00,54,04,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,4b,50,ef,4e,dc,7d,ca,01,3c,\
  17,00,00,54,04,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\
  00,00,4b,50,ef,4e,dc,7d,ca,01,3c,17,00,00,54,04,00,00,05,00,00,00,01,00,00,\
  00,04,00,00,00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,\
  00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,7d,d0,e8,53,dc,7d,ca,01,\
  3c,17,00,00,14,11,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Leave)"=hex:40,00,00,00,00,00,00,00,7d,d0,e8,53,dc,7d,ca,01,\
  3c,17,00,00,14,11,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\Lovelace]
"OPEN_VOLUME_HANDLE (Enter)"=hex:40,00,00,00,00,00,00,00,c9,47,a2,4b,dc,7d,ca,\
  01,3c,17,00,00,38,0c,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"OPEN_VOLUME_HANDLE (Leave)"=hex:40,00,00,00,00,00,00,00,5e,30,57,4c,dc,7d,ca,\
  01,3c,17,00,00,38,0c,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:40,00,00,00,00,00,00,00,5e,30,57,4c,dc,7d,\
  ca,01,3c,17,00,00,38,0c,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\
  00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:40,00,00,00,00,00,00,00,70,88,ef,4c,dc,7d,\
  ca,01,3c,17,00,00,38,0c,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"IOCTL_RELEASE (Enter)"=hex:40,00,00,00,00,00,00,00,70,88,ef,4c,dc,7d,ca,01,3c,\
  17,00,00,38,0c,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"IOCTL_RELEASE (Leave)"=hex:40,00,00,00,00,00,00,00,70,88,ef,4c,dc,7d,ca,01,3c,\
  17,00,00,38,0c,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\Lovelace(__?_Volume{b634abac-5730-11dc-b75c-806e6f6e6963}_)]
"OPEN_VOLUME_HANDLE (Enter)"=hex:40,00,00,00,00,00,00,00,c9,47,a2,4b,dc,7d,ca,\
  01,3c,17,00,00,ac,0b,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"OPEN_VOLUME_HANDLE (Leave)"=hex:40,00,00,00,00,00,00,00,5e,30,57,4c,dc,7d,ca,\
  01,3c,17,00,00,ac,0b,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:40,00,00,00,00,00,00,00,5e,30,57,4c,dc,7d,\
  ca,01,3c,17,00,00,ac,0b,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\
  00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:40,00,00,00,00,00,00,00,70,88,ef,4c,dc,7d,\
  ca,01,3c,17,00,00,ac,0b,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"IOCTL_RELEASE (Enter)"=hex:40,00,00,00,00,00,00,00,70,88,ef,4c,dc,7d,ca,01,3c,\
  17,00,00,ac,0b,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"IOCTL_RELEASE (Leave)"=hex:40,00,00,00,00,00,00,00,70,88,ef,4c,dc,7d,ca,01,3c,\
  17,00,00,ac,0b,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\MSSearch Service Writer]
"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,83,dd,5f,3e,dc,7d,ca,01,14,0b,\
  00,00,90,16,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,43,a0,64,3e,dc,7d,ca,01,14,0b,\
  00,00,90,16,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,81,5d,44,4a,dc,7d,ca,01,14,\
  0b,00,00,90,16,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,42,20,49,4a,dc,7d,ca,01,14,\
  0b,00,00,90,16,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,42,20,49,4a,dc,\
  7d,ca,01,14,0b,00,00,90,16,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\
  00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,\
  00
"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,83,68,57,4a,dc,7d,ca,01,14,0b,\
  00,00,90,16,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,e4,c9,59,4a,dc,7d,ca,01,14,0b,\
  00,00,90,16,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,cc,d1,9e,4a,dc,7d,ca,01,\
  14,0b,00,00,90,16,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,f1,0b,cc,4a,dc,7d,ca,01,\
  14,0b,00,00,90,16,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,f1,\
  0b,cc,4a,dc,7d,ca,01,14,0b,00,00,90,16,00,00,02,00,00,00,01,00,00,00,01,00,\
  00,00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,\
  00,00,00,00,00
"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,d9,13,11,4b,dc,7d,ca,01,14,0b,00,\
  00,90,16,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,a4,d5,b8,90,\
  98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,d9,13,11,4b,dc,7d,ca,01,14,0b,00,\
  00,90,16,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,a4,d5,b8,90,\
  98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,d9,13,\
  11,4b,dc,7d,ca,01,14,0b,00,00,90,16,00,00,03,00,00,00,01,00,00,00,02,00,00,\
  00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,\
  00,00,00,00
"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,d9,13,11,4b,dc,7d,ca,\
  01,14,0b,00,00,20,12,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,db,20,51,4d,dc,7d,ca,01,14,0b,00,00,\
  90,16,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,a4,d5,b8,90,98,\
  24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,db,20,51,4d,dc,7d,ca,\
  01,14,0b,00,00,20,12,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,db,20,51,4d,dc,7d,ca,01,14,0b,00,00,\
  90,16,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,a4,d5,b8,90,98,\
  24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\
  00,db,20,51,4d,dc,7d,ca,01,14,0b,00,00,90,16,00,00,04,00,00,00,01,00,00,00,\
  03,00,00,00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,\
  00,00,00,00,00,00,00
"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,4b,50,ef,4e,dc,7d,ca,01,14,\
  0b,00,00,90,16,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,a2,08,e9,51,dc,7d,ca,01,14,\
  0b,00,00,90,16,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\
  00,00,a2,08,e9,51,dc,7d,ca,01,14,0b,00,00,90,16,00,00,05,00,00,00,01,00,00,\
  00,04,00,00,00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,\
  00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,7d,d0,e8,53,dc,7d,ca,01,\
  14,0b,00,00,5c,14,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Leave)"=hex:40,00,00,00,00,00,00,00,7d,d0,e8,53,dc,7d,ca,01,\
  14,0b,00,00,5c,14,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\Registry Writer]
"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,83,dd,5f,3e,dc,7d,ca,01,3c,17,\
  00,00,7c,08,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,a4,01,67,3e,dc,7d,ca,01,3c,17,\
  00,00,7c,08,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,81,5d,44,4a,dc,7d,ca,01,3c,\
  17,00,00,7c,08,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,a2,81,4b,4a,dc,7d,ca,01,3c,\
  17,00,00,7c,08,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,a2,81,4b,4a,dc,\
  7d,ca,01,3c,17,00,00,7c,08,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\
  00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,\
  00
"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,83,68,57,4a,dc,7d,ca,01,3c,17,\
  00,00,80,04,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,83,68,57,4a,dc,7d,ca,01,3c,17,\
  00,00,80,04,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,cc,d1,9e,4a,dc,7d,ca,01,\
  3c,17,00,00,14,11,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,91,aa,c9,4a,dc,7d,ca,01,\
  3c,17,00,00,14,11,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,91,\
  aa,c9,4a,dc,7d,ca,01,3c,17,00,00,14,11,00,00,02,00,00,00,01,00,00,00,01,00,\
  00,00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,\
  00,00,00,00,00
"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,5a,99,1a,4b,dc,7d,ca,01,3c,17,00,\
  00,54,04,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,a4,d5,b8,90,\
  98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,a9,23,9b,4b,dc,7d,ca,01,3c,17,00,\
  00,54,04,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,a4,d5,b8,90,\
  98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,a9,23,\
  9b,4b,dc,7d,ca,01,3c,17,00,00,54,04,00,00,03,00,00,00,01,00,00,00,02,00,00,\
  00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,\
  00,00,00,00
"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,69,e6,9f,4b,dc,7d,ca,\
  01,3c,17,00,00,70,10,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,db,20,51,4d,dc,7d,ca,01,3c,17,00,00,\
  60,04,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,a4,d5,b8,90,98,\
  24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,db,20,51,4d,dc,7d,ca,\
  01,3c,17,00,00,70,10,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,db,20,51,4d,dc,7d,ca,01,3c,17,00,00,\
  60,04,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,a4,d5,b8,90,98,\
  24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\
  00,db,20,51,4d,dc,7d,ca,01,3c,17,00,00,60,04,00,00,04,00,00,00,01,00,00,00,\
  03,00,00,00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,\
  00,00,00,00,00,00,00
"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,4b,50,ef,4e,dc,7d,ca,01,3c,\
  17,00,00,60,04,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,4b,50,ef,4e,dc,7d,ca,01,3c,\
  17,00,00,60,04,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\
  00,00,4b,50,ef,4e,dc,7d,ca,01,3c,17,00,00,60,04,00,00,05,00,00,00,01,00,00,\
  00,04,00,00,00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,\
  00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,7d,d0,e8,53,dc,7d,ca,01,\
  3c,17,00,00,14,11,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Leave)"=hex:40,00,00,00,00,00,00,00,7d,d0,e8,53,dc,7d,ca,01,\
  3c,17,00,00,14,11,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\Shadow Copy Optimization Writer]
"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,83,dd,5f,3e,dc,7d,ca,01,3c,17,\
  00,00,80,04,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,43,a0,64,3e,dc,7d,ca,01,3c,17,\
  00,00,80,04,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,81,5d,44,4a,dc,7d,ca,01,3c,\
  17,00,00,80,04,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,02,e3,4d,4a,dc,7d,ca,01,3c,\
  17,00,00,80,04,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,02,e3,4d,4a,dc,\
  7d,ca,01,3c,17,00,00,80,04,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\
  00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,\
  00
"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,83,68,57,4a,dc,7d,ca,01,3c,17,\
  00,00,7c,08,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,e4,c9,59,4a,dc,7d,ca,01,3c,17,\
  00,00,7c,08,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,ad,b8,aa,4a,dc,7d,ca,01,\
  3c,17,00,00,50,04,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,51,6d,ce,4a,dc,7d,ca,01,\
  3c,17,00,00,50,04,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,51,\
  6d,ce,4a,dc,7d,ca,01,3c,17,00,00,50,04,00,00,02,00,00,00,01,00,00,00,01,00,\
  00,00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,\
  00,00,00,00,00
"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,53,78,e1,4a,dc,7d,ca,01,3c,17,00,\
  00,60,04,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,a4,d5,b8,90,\
  98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,53,78,e1,4a,dc,7d,ca,01,3c,17,00,\
  00,60,04,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,a4,d5,b8,90,\
  98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,53,78,\
  e1,4a,dc,7d,ca,01,3c,17,00,00,60,04,00,00,03,00,00,00,01,00,00,00,02,00,00,\
  00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,\
  00,00,00,00
"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,53,78,e1,4a,dc,7d,ca,\
  01,3c,17,00,00,fc,01,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,db,20,51,4d,dc,7d,ca,01,3c,17,00,00,\
  60,04,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,a4,d5,b8,90,98,\
  24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,db,20,51,4d,dc,7d,ca,\
  01,3c,17,00,00,fc,01,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,db,20,51,4d,dc,7d,ca,01,3c,17,00,00,\
  60,04,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,a4,d5,b8,90,98,\
  24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\
  00,db,20,51,4d,dc,7d,ca,01,3c,17,00,00,60,04,00,00,04,00,00,00,01,00,00,00,\
  03,00,00,00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,\
  00,00,00,00,00,00,00
"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,ea,ee,ec,4e,dc,7d,ca,01,3c,\
  17,00,00,50,04,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,21,83,df,51,dc,7d,ca,01,3c,\
  17,00,00,50,04,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\
  00,00,21,83,df,51,dc,7d,ca,01,3c,17,00,00,50,04,00,00,05,00,00,00,01,00,00,\
  00,04,00,00,00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,\
  00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,7d,d0,e8,53,dc,7d,ca,01,\
  3c,17,00,00,14,11,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Leave)"=hex:40,00,00,00,00,00,00,00,7d,d0,e8,53,dc,7d,ca,01,\
  3c,17,00,00,14,11,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\SwProvider_{b5946137-7b9f-4925-af80-51abd60b20d5}]
"PROVIDER_BEGINPREPARE (Enter)"=hex:40,00,00,00,00,00,00,00,7f,52,31,4a,dc,7d,\
  ca,01,3c,17,00,00,44,17,00,00,01,04,00,00,01,00,00,00,00,00,00,00,00,00,00,\
  00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PROVIDER_BEGINPREPARE (Leave)"=hex:40,00,00,00,00,00,00,00,a0,76,38,4a,dc,7d,\
  ca,01,3c,17,00,00,44,17,00,00,01,04,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PROVIDER_ENDPREPARE (Enter)"=hex:40,00,00,00,00,00,00,00,25,12,68,4a,dc,7d,ca,\
  01,3c,17,00,00,38,0c,00,00,02,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PROVIDER_ENDPREPARE (Leave)"=hex:40,00,00,00,00,00,00,00,2a,28,8e,4a,dc,7d,ca,\
  01,3c,17,00,00,38,0c,00,00,02,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PROVIDER_PRECOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,69,e6,9f,4b,dc,7d,ca,\
  01,3c,17,00,00,38,0c,00,00,03,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PROVIDER_PRECOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,c9,47,a2,4b,dc,7d,ca,\
  01,3c,17,00,00,38,0c,00,00,03,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PROVIDER_COMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,70,88,ef,4c,dc,7d,ca,01,\
  3c,17,00,00,c8,16,00,00,04,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PROVIDER_COMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,70,88,ef,4c,dc,7d,ca,01,\
  3c,17,00,00,c8,16,00,00,04,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PROVIDER_POSTCOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,70,88,ef,4c,dc,7d,ca,\
  01,3c,17,00,00,38,0c,00,00,05,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PROVIDER_POSTCOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,ba,fc,49,4d,dc,7d,ca,\
  01,3c,17,00,00,38,0c,00,00,05,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PROVIDER_PREFINALCOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,db,20,51,4d,dc,\
  7d,ca,01,3c,17,00,00,38,0c,00,00,06,04,00,00,01,00,00,00,00,00,00,00,00,00,\
  00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,\
  00
"PROVIDER_PREFINALCOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,69,69,e3,4e,dc,\
  7d,ca,01,3c,17,00,00,38,0c,00,00,06,04,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,\
  00
"PROVIDER_POSTFINALCOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,03,6a,eb,51,dc,\
  7d,ca,01,3c,17,00,00,38,0c,00,00,07,04,00,00,01,00,00,00,00,00,00,00,00,00,\
  00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,\
  00
"PROVIDER_POSTFINALCOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,19,59,c0,53,dc,\
  7d,ca,01,3c,17,00,00,38,0c,00,00,07,04,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,\
  00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\System Writer]
"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,83,dd,5f,3e,dc,7d,ca,01,38,05,\
  00,00,68,05,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,fb,3c,a4,44,dc,7d,ca,01,38,05,\
  00,00,68,05,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\VolSnap]
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}DiscoverSnapshots (Enter)"=hex:40,\
  00,00,00,00,00,00,00,72,15,eb,5b,da,7d,ca,01,00,00,00,00,00,00,00,00,20,00,\
  00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}Activate (Enter)"=hex:40,00,00,00,\
  00,00,00,00,72,15,eb,5b,da,7d,ca,01,00,00,00,00,00,00,00,00,08,00,00,00,01,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}ActivateLoop (Enter)"=hex:40,00,\
  00,00,00,00,00,00,72,15,eb,5b,da,7d,ca,01,00,00,00,00,00,00,00,00,1a,00,00,\
  00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}ActivateLoop (Leave)"=hex:40,00,\
  00,00,00,00,00,00,f6,a5,07,5c,da,7d,ca,01,00,00,00,00,00,00,00,00,1b,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}ComputeIgnorableProduct (Enter)"=hex:40,\
  00,00,00,00,00,00,00,b9,34,3f,ab,eb,7e,ca,01,00,00,00,00,00,00,00,00,0c,00,\
  00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}ComputeIgnorableProduct (Leave)"=hex:40,\
  00,00,00,00,00,00,00,2e,a3,84,ab,eb,7e,ca,01,00,00,00,00,00,00,00,00,0d,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}DeleteProcess (Enter)"=hex:40,00,\
  00,00,00,00,00,00,5c,45,37,ab,eb,7e,ca,01,00,00,00,00,00,00,00,00,12,00,00,\
  00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}Activate (Leave)"=hex:40,00,00,00,\
  00,00,00,00,d7,8c,13,5c,da,7d,ca,01,00,00,00,00,00,00,00,00,09,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}DiscoverSnapshots (Leave)"=hex:40,\
  00,00,00,00,00,00,00,d7,8c,13,5c,da,7d,ca,01,00,00,00,00,00,00,00,00,21,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abad-5730-11dc-b75c-806e6f6e6963}DiscoverSnapshots (Enter)"=hex:40,\
  00,00,00,00,00,00,00,37,ee,15,5c,da,7d,ca,01,00,00,00,00,00,00,00,00,20,00,\
  00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abad-5730-11dc-b75c-806e6f6e6963}DiscoverSnapshots (Leave)"=hex:40,\
  00,00,00,00,00,00,00,37,ee,15,5c,da,7d,ca,01,00,00,00,00,00,00,00,00,21,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}SetIgnorable (Enter)"=hex:40,00,\
  00,00,00,00,00,00,ba,fc,49,4d,dc,7d,ca,01,00,00,00,00,00,00,00,00,0a,00,00,\
  00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}SetIgnorable (Leave)"=hex:40,00,\
  00,00,00,00,00,00,28,a0,be,4d,dc,7d,ca,01,00,00,00,00,00,00,00,00,0b,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}AdjustBitmap (Enter)"=hex:40,00,\
  00,00,00,00,00,00,b8,f7,bd,53,dc,7d,ca,01,00,00,00,00,00,00,00,00,04,00,00,\
  00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}ValidateDiffAreaFiles (Enter)"=hex:40,\
  00,00,00,00,00,00,00,61,bf,7f,5d,da,7d,ca,01,00,00,00,00,00,00,00,00,1c,00,\
  00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00
"VolumesSafeForWrite (Enter)"=hex:40,00,00,00,00,00,00,00,61,bf,7f,5d,da,7d,ca,\
  01,00,00,00,00,00,00,00,00,1e,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"VolumesSafeForWrite (Leave)"=hex:40,00,00,00,00,00,00,00,8f,a6,0f,5f,da,7d,ca,\
  01,00,00,00,00,00,00,00,00,1f,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}ValidateDiffAreaFiles (Leave)"=hex:40,\
  00,00,00,00,00,00,00,8f,a6,0f,5f,da,7d,ca,01,00,00,00,00,00,00,00,00,1d,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}AdjustBitmap (Leave)"=hex:40,00,\
  00,00,00,00,00,00,cc,5a,69,54,dc,7d,ca,01,00,00,00,00,00,00,00,00,05,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}DeleteProcess (Leave)"=hex:40,00,\
  00,00,00,00,00,00,b9,34,3f,ab,eb,7e,ca,01,00,00,00,00,00,00,00,00,13,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}PrepareForSnapshot (Enter)"=hex:40,\
  00,00,00,00,00,00,00,07,f9,73,4a,dc,7d,ca,01,b4,16,00,00,a8,17,00,00,00,00,\
  00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}PreExposure (Enter)"=hex:40,00,00,\
  00,00,00,00,00,2a,28,8e,4a,dc,7d,ca,01,b4,16,00,00,a8,17,00,00,02,00,00,00,\
  01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}PreExposure (Leave)"=hex:40,00,00,\
  00,00,00,00,00,2a,28,8e,4a,dc,7d,ca,01,b4,16,00,00,a8,17,00,00,03,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}PrepareForSnapshot (Leave)"=hex:40,\
  00,00,00,00,00,00,00,2a,28,8e,4a,dc,7d,ca,01,b4,16,00,00,a8,17,00,00,01,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}EndCommit (Enter)"=hex:40,00,00,\
  00,00,00,00,00,70,88,ef,4c,dc,7d,ca,01,b4,16,00,00,a8,17,00,00,06,00,00,00,\
  01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00
"Volume{b634abac-5730-11dc-b75c-806e6f6e6963}EndCommit (Leave)"=hex:40,00,00,\
  00,00,00,00,00,ba,fc,49,4d,dc,7d,ca,01,b4,16,00,00,a8,17,00,00,07,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\VssapiPublisher]
"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,62,b9,58,3e,dc,7d,ca,01,e0,17,\
  00,00,28,0b,00,00,e8,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,1c,61,ab,44,dc,7d,ca,01,e0,17,\
  00,00,28,0b,00,00,e8,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,00,d8,3a,4a,dc,7d,ca,01,e0,\
  17,00,00,30,0c,00,00,e9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,63,44,50,4a,dc,7d,ca,01,e0,\
  17,00,00,30,0c,00,00,e9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,63,44,50,4a,dc,7d,ca,01,e0,17,\
  00,00,6c,07,00,00,f9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,e4,c9,59,4a,dc,7d,ca,01,e0,17,\
  00,00,6c,07,00,00,f9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"DOSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,25,12,68,4a,dc,7d,ca,01,e0,17,\
  00,00,8c,14,00,00,0a,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"DOSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,ba,fc,49,4d,dc,7d,ca,01,e0,17,\
  00,00,b0,0c,00,00,0a,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\VssvcPublisher]
"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,8a,89,90,4a,dc,7d,ca,01,\
  3c,17,00,00,38,0c,00,00,ea,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,12,30,d3,4a,dc,7d,ca,01,\
  3c,17,00,00,38,0c,00,00,ea,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,12,30,d3,4a,dc,7d,ca,01,3c,17,00,\
  00,38,0c,00,00,eb,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,a4,d5,b8,90,\
  98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"FREEZE_FRONT (Enter)"=hex:40,00,00,00,00,00,00,00,12,30,d3,4a,dc,7d,ca,01,3c,\
  17,00,00,38,0c,00,00,ec,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"FREEZE_FRONT (Leave)"=hex:40,00,00,00,00,00,00,00,74,9c,e8,4a,dc,7d,ca,01,3c,\
  17,00,00,38,0c,00,00,ec,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"FREEZE_BACK (Enter)"=hex:40,00,00,00,00,00,00,00,74,9c,e8,4a,dc,7d,ca,01,3c,\
  17,00,00,38,0c,00,00,ed,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"FREEZE_BACK (Leave)"=hex:40,00,00,00,00,00,00,00,d7,08,fe,4a,dc,7d,ca,01,3c,\
  17,00,00,38,0c,00,00,ed,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"FREEZE_SYSTEM (Enter)"=hex:40,00,00,00,00,00,00,00,d7,08,fe,4a,dc,7d,ca,01,3c,\
  17,00,00,38,0c,00,00,ee,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"FREEZE_SYSTEM (Leave)"=hex:40,00,00,00,00,00,00,00,d9,13,11,4b,dc,7d,ca,01,3c,\
  17,00,00,38,0c,00,00,ee,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"FREEZE_KTM (Enter)"=hex:40,00,00,00,00,00,00,00,d9,13,11,4b,dc,7d,ca,01,3c,17,\
  00,00,38,0c,00,00,f0,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"FREEZE_KTM (Leave)"=hex:40,00,00,00,00,00,00,00,d9,13,11,4b,dc,7d,ca,01,3c,17,\
  00,00,38,0c,00,00,f0,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"FREEZE_RM (Enter)"=hex:40,00,00,00,00,00,00,00,d9,13,11,4b,dc,7d,ca,01,3c,17,\
  00,00,38,0c,00,00,ef,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"FREEZE_RM (Leave)"=hex:40,00,00,00,00,00,00,00,69,e6,9f,4b,dc,7d,ca,01,3c,17,\
  00,00,38,0c,00,00,ef,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,69,e6,9f,4b,dc,7d,ca,01,3c,17,00,\
  00,38,0c,00,00,eb,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a4,d5,b8,90,\
  98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"THAW_KTM (Enter)"=hex:40,00,00,00,00,00,00,00,ba,fc,49,4d,dc,7d,ca,01,3c,17,\
  00,00,38,0c,00,00,f4,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"THAW_KTM (Leave)"=hex:40,00,00,00,00,00,00,00,ba,fc,49,4d,dc,7d,ca,01,3c,17,\
  00,00,38,0c,00,00,f4,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,ba,fc,49,4d,dc,7d,ca,01,3c,17,00,00,\
  38,0c,00,00,f2,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,a4,d5,b8,90,98,\
  24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,db,20,51,4d,dc,7d,ca,01,3c,17,00,00,\
  38,0c,00,00,f2,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a4,d5,b8,90,98,\
  24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,69,69,e3,4e,dc,7d,ca,01,3c,\
  17,00,00,38,0c,00,00,f5,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,a2,08,e9,51,dc,7d,ca,01,3c,\
  17,00,00,38,0c,00,00,f5,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,5d,ac,e1,53,dc,7d,ca,01,\
  3c,17,00,00,38,0c,00,00,fb,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Leave)"=hex:40,00,00,00,00,00,00,00,7d,d0,e8,53,dc,7d,ca,01,\
  3c,17,00,00,38,0c,00,00,fb,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\WMI Writer]
"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,83,dd,5f,3e,dc,7d,ca,01,e4,03,\
  00,00,44,11,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,e3,3e,62,3e,dc,7d,ca,01,e4,03,\
  00,00,44,11,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,81,5d,44,4a,dc,7d,ca,01,e4,\
  03,00,00,44,11,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,02,e3,4d,4a,dc,7d,ca,01,e4,\
  03,00,00,44,11,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,02,e3,4d,4a,dc,\
  7d,ca,01,e4,03,00,00,44,11,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\
  00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,\
  00
"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,83,68,57,4a,dc,7d,ca,01,e4,03,\
  00,00,2c,06,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,e4,c9,59,4a,dc,7d,ca,01,e4,03,\
  00,00,2c,06,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,a4,d5,b8,\
  90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,6e,7b,af,4a,dc,7d,ca,01,\
  e4,03,00,00,2c,06,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,12,30,d3,4a,dc,7d,ca,01,\
  e4,03,00,00,2c,06,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,12,\
  30,d3,4a,dc,7d,ca,01,e4,03,00,00,2c,06,00,00,02,00,00,00,01,00,00,00,01,00,\
  00,00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,\
  00,00,00,00,00
"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,14,3b,e6,4a,dc,7d,ca,01,e4,03,00,\
  00,44,11,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,a4,d5,b8,90,\
  98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,74,9c,e8,4a,dc,7d,ca,01,e4,03,00,\
  00,44,11,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,a4,d5,b8,90,\
  98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,74,9c,\
  e8,4a,dc,7d,ca,01,e4,03,00,00,44,11,00,00,03,00,00,00,01,00,00,00,02,00,00,\
  00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,\
  00,00,00,00
"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,74,9c,e8,4a,dc,7d,ca,\
  01,e4,03,00,00,5c,10,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,db,20,51,4d,dc,7d,ca,01,e4,03,00,00,\
  d8,17,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,a4,d5,b8,90,98,\
  24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,db,20,51,4d,dc,7d,ca,\
  01,e4,03,00,00,5c,10,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\
  a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,db,20,51,4d,dc,7d,ca,01,e4,03,00,00,\
  d8,17,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,a4,d5,b8,90,98,\
  24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\
  00,db,20,51,4d,dc,7d,ca,01,e4,03,00,00,d8,17,00,00,04,00,00,00,01,00,00,00,\
  03,00,00,00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,\
  00,00,00,00,00,00,00
"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,4b,50,ef,4e,dc,7d,ca,01,e4,\
  03,00,00,d8,17,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,ab,b1,f1,4e,dc,7d,ca,01,e4,\
  03,00,00,d8,17,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,a4,d5,\
  b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\
  00,00,ab,b1,f1,4e,dc,7d,ca,01,e4,03,00,00,d8,17,00,00,05,00,00,00,01,00,00,\
  00,04,00,00,00,00,00,00,00,a4,d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,\
  00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,7d,d0,e8,53,dc,7d,ca,01,\
  e4,03,00,00,d8,17,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Leave)"=hex:40,00,00,00,00,00,00,00,7d,d0,e8,53,dc,7d,ca,01,\
  e4,03,00,00,d8,17,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,a4,\
  d5,b8,90,98,24,9a,43,86,1c,5b,68,38,1f,74,5e,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Providers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Providers\{b5946137-7b9f-4925-af80-51abd60b20d5}]
@="Microsoft Software Shadow Copy provider 1.0"
"Type"=dword:00000001
"Version"="1.0.0.7"
"VersionId"="{00000001-0000-0000-0007-000000000001}"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Providers\{b5946137-7b9f-4925-af80-51abd60b20d5}\CLSID]
@="{65EE1DBA-8FF4-4a58-AC1C-3470EE2F376A}"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Settings]
"MSDEVersionChecking"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Settings\WritersBlockingRevert]
"{2707761B-2324-473D-88EB-EB007A359533}"="DFS-R Writer"
"{D76F5A28-3092-4589-BA48-2958FB88CE29}"="FRS Writer"
"{B2014C9E-8711-4C5C-A5A9-3CF384484757}"="AD Writer"
"{DD846AAA-A1B6-42a8-AAF8-03DCB6114BFD}"="ADAM Writer"
"TornComponentsBlockRevert"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\VssAccessControl]
"NT Authority\\NetworkService"=dword:00000001

Open in new window

0
 

Author Closing Comment

by:antalp71
ID: 31668092
Hi Thanks, you were right but in the end as I had other missing services as well I repaired windows as a whole.  Thank you  
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
IF you are either unfamiliar with rootkits, or want to know more about them, read on ....
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…
Suggested Courses

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question