Event ID 55 NTFS on Shadow Copies

Hello Experts, for past couple of weeks i am having this issue on our server. It all started after a Server Reboot. I ran CHKDSK as well CHKNTFS which returned with no errors.


The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume \Device\HarddiskVolumeShadowCopy69.

System

  - Provider

   [ Name]  Ntfs
 
  - EventID 55

   [ Qualifiers]  49156
 
   Level 2
 
   Task 2
 
   Keywords 0x80000000000000
 
  - TimeCreated

   [ SystemTime]  2013-09-02T02:15:16.304Z
 
   EventRecordID 501968
 
   Channel System
 
   Computer ----DC1----
 
   Security
 

- EventData

   
   \Device\HarddiskVolumeShadowCopy69
LVL 2
Satheesh AgatheeswaranIT ManagerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

ZenVenkyArchitectCommented:
Go to c:\windows\System32\Drivers and check the version of NTFS.sys file if you have older file than this KB then update it and reboot the server.

http://support.microsoft.com/kb/2525064
0
Seth SimmonsSr. Systems AdministratorCommented:
try vssadmin list shadows and find the guid for shadowcopy69 (as listed above)
the guid will be a long hex number in curly brackets {}

if you have a backup of your data then delete the old shadow copy
vssadmin delete shadows /shadow={guid}

put the guid there in that line and see if the error goes away
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Satheesh AgatheeswaranIT ManagerAuthor Commented:
Hi seth2740

I tried to delete the shadowcopy69 but it saying
Error: Shadow copy ID { } not found

But when i list the shadows the shadowcopy69 still exists
0
Newly released Acronis True Image 2019

In announcing the release of the 15th Anniversary Edition of Acronis True Image 2019, the company revealed that its artificial intelligence-based anti-ransomware technology – stopped more than 200,000 ransomware attacks on 150,000 customers last year.

Seth SimmonsSr. Systems AdministratorCommented:
did you put the guid in the brackets?
0
Satheesh AgatheeswaranIT ManagerAuthor Commented:
yes i did
0
Satheesh AgatheeswaranIT ManagerAuthor Commented:
This is the error which i am getting while trying to delete the shadow
0
Sushil SonawaneCommented:
The first thing your can safely ignore these event. You can delete the volume shadows copies trough vssadmin command line refer below link :

http://technet.microsoft.com/en-us/library/cc788026.aspx


Or

Delete through windows explore. It is store in system volume information folder. These folder is hide state you have to unhide the folder.

Refer below link :

http://www.symantec.com/business/support/index?page=content&id=TECH83223
0
Satheesh AgatheeswaranIT ManagerAuthor Commented:
Thank you Sush1l84, unfortunately either of your suggestion didn't work for me.

My Scenario:
When i list the shadowcopies (Shadowcopy69) does exists but while i delete it, it saying it cannot find Shadowcopy69. I am bit confused and no clue how to proceed further
shadow2.png
0
Satheesh AgatheeswaranIT ManagerAuthor Commented:
Thank you friends, got this issue fixed. I restarted the Virtual Disk Service and errors are not appearing anymore
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.