Blue screen - VSS and CAPI2 errors in event log

I have Vista Professional and recently started getting a blue screen
of death every day or two. It almost always happens over night or
sometimes during the day when the computer is idle (although it did
happen once when I was in the middle of typing an email). It might
have started after I added an upgraded video card but I think it was
actually before that.

Windows Application log usually (but not always) shows the following
error 5-10 minutes before the crash:

Event ID: 8194
Source: VSS
Volume Shadow Copy Service error: Unexpected error querying for the
IVssWriterCallback interface. hr = 0x80070005. This is often caused
by incorrect security settings in either the writer or requestor
process.

Also usually (but not always) see this event error after the VSS
error:

Event ID: 11
CAPI2
Failed extract of third-party root list from auto update cab at:
<http://www.download.windowsupdate.co...ate/v3/static/
trustedr/en/authrootstl.cab> with error: A required certificate is not
within its validity period when verifying against the current system
clock or the timestamp in the signed file.

Here is what I've already tried:

1. Updated the video driver,
2. Rolled back the video driver to an earlier version
3. Ran http://driveragent.com to scan for out of date drivers and
updated all devices that had newer drivers available.
4. Disconnected all USB devices (just had monitor, PS2 keyboard and
PS2 mouse connected)
5. Disabled the Volume Shadow Copy service
6. Turned off System Protection
7. Scanned for viruses using Avast, AVG Free, Kaspersky Antivirus and
Trend Housecall (nothing found)
8. Ran CCleaner to delete all temporary files and fix errors
9. Ran system file checker SFC /SCANNOW
10. Defragmented hard drive
11. Ran Windows error-checking (it found errors and fixed them)
12. Scanned for Spyware using Spybot and AdAware 2007 (only tracking
cookies were found).

I did each of these things one at a time and after each one a blue
screen happened within a day or two.

I read somewhere that a recent Windows Update causes this problem and
that SP1 fixes it. I cannot figure out which update it might be and
SP1 does not appear to be avalable yet.

Any suggestions?

Thanks much in advance.

Tom Esker

On Jan 21, 11:31*am, tes...@interdyne.com wrote:
> I have Vista Professional and recently started getting a blue screen
> of death every day or two. *It almost always happens over night or
> sometimes during the day when the computer is idle (although it did
> happen once when I was in the middle of typing an email). * It might
> have started after I added an upgraded video card but I think it was
> actually before that.
>
> Windows Application log usually (but not always) shows the following
> error 5-10 minutes before the crash:
>
> Event ID: 8194
> Source: VSS
> Volume Shadow Copy Service error: Unexpected error querying for the
> IVssWriterCallback interface. *hr = 0x80070005. This is often caused
> by incorrect security settings in either the writer or requestor
> process.
>
> Also usually (but not always) see this event error after the VSS
> error:
>
> Event ID: 11
> CAPI2
> Failed extract of third-party root list from auto update cab at:
> <http://www.download.windowsupdate.co...ate/v3/static/
> trustedr/en/authrootstl.cab> with error: A required certificate is not
> within its validity period when verifying against the current system
> clock or the timestamp in the signed file.
>
> Here is what I've already tried:
>
> 1. Updated the video driver,
> 2. Rolled back the video driver to an earlier version
> 3. Ranhttp://driveragent.comto scan for out of date drivers and
> updated all devices that had newer drivers available.
> 4. Disconnected all USB devices (just had monitor, PS2 *keyboard and
> PS2 mouse connected)
> 5. Disabled the Volume Shadow Copy service
> 6. Turned off System Protection
> 7. Scanned for viruses using Avast, AVG Free, Kaspersky Antivirus and
> Trend Housecall (nothing found)
> 8. Ran CCleaner to delete all temporary files and fix errors
> 9. Ran system file checker SFC /SCANNOW
> 10. Defragmented hard drive
> 11. Ran Windows error-checking (it found errors and fixed them)
> 12. Scanned for Spyware using Spybot and AdAware 2007 (only tracking
> cookies were found).
>
> I did each of these things one at a time and after each one a blue
> screen happened within a day or two.
>
> I read somewhere that a recent Windows Update causes this problem and
> that SP1 fixes it. *I cannot figure out which update it might be and
> SP1 does not appear to be avalable yet.
>
> Any suggestions?
>
> Thanks much in advance.
>
> Tom Esker

Oh I forgot to mention, the blue screen messages vary - but here are
the last two that I got:

STOP: 0X0000008E (0X80000003, 0X82057AD2, 0X9D569C40, 0X00000000)

and on another occasion:

IRQ_NOT_LESS_THAN_OR_EQUAL_TO

(if that's any help)

Thanks

Tom Esker

On Jan 21, 1:28*pm, tes...@interdyne.com wrote:
> On Jan 21, 11:31*am, tes...@interdyne.com wrote:
>
>
>
>
>
> > I have Vista Professional and recently started getting a blue screen
> > of death every day or two. *It almost always happens over night or
> > sometimes during the day when the computer is idle (although it did
> > happen once when I was in the middle of typing an email). * It might
> > have started after I added an upgraded video card but I think it was
> > actually before that.
>
> > Windows Application log usually (but not always) shows the following
> > error 5-10 minutes before the crash:
>
> > Event ID: 8194
> > Source: VSS
> > Volume Shadow Copy Service error: Unexpected error querying for the
> > IVssWriterCallback interface. *hr = 0x80070005. This is often caused
> > by incorrect security settings in either the writer or requestor
> > process.
>
> > Also usually (but not always) see this event error after the VSS
> > error:
>
> > Event ID: 11
> > CAPI2
> > Failed extract of third-party root list from auto update cab at:
> > <http://www.download.windowsupdate.co...ate/v3/static/
> > trustedr/en/authrootstl.cab> with error: A required certificate is not
> > within its validity period when verifying against the current system
> > clock or the timestamp in the signed file.
>
> > Here is what I've already tried:
>
> > 1. Updated the video driver,
> > 2. Rolled back the video driver to an earlier version
> > 3. Ranhttp://driveragent.comtoscan for out of date drivers and
> > updated all devices that had newer drivers available.
> > 4. Disconnected all USB devices (just had monitor, PS2 *keyboard and
> > PS2 mouse connected)
> > 5. Disabled the Volume Shadow Copy service
> > 6. Turned off System Protection
> > 7. Scanned for viruses using Avast, AVG Free, Kaspersky Antivirus and
> > Trend Housecall (nothing found)
> > 8. Ran CCleaner to delete all temporary files and fix errors
> > 9. Ran system file checker SFC /SCANNOW
> > 10. Defragmented hard drive
> > 11. Ran Windows error-checking (it found errors and fixed them)
> > 12. Scanned for Spyware using Spybot and AdAware 2007 (only tracking
> > cookies were found).
>
> > I did each of these things one at a time and after each one a blue
> > screen happened within a day or two.
>
> > I read somewhere that a recent Windows Update causes this problem and
> > that SP1 fixes it. *I cannot figure out which update it might be and
> > SP1 does not appear to be avalable yet.
>
> > Any suggestions?
>
> > Thanks much in advance.
>
> >Tom Esker
>
> Oh I forgot to mention, the blue screen messages vary - but here are
> the last two that I got:
>
> STOP: 0X0000008E (0X80000003, 0X82057AD2, 0X9D569C40, 0X00000000)
>
> and on another occasion:
>
> IRQ_NOT_LESS_THAN_OR_EQUAL_TO
>
> (if that's any help)
>
> Thanks
>
> Tom Esker- Hide quoted text -
>
> - Show quoted text -

Also, Since doing this post I removed the nvidia GeForce video card
that I added around the time the blue screens started and my computer
blue screened again within 12 hours. Under "Problems and Solutions" I
found:

Problem signature
Problem Event Name: BlueScreen
OS Version: 6.0.6000.2.0.0.256.6
Locale ID: 1033

Files that help describe the problem (some files may no longer be
available)
Mini012108-02.dmp
sysdata.xml
Version.txt

View a temporary copy of these files
Warning: If a virus or other security threat caused the problem,
opening a copy of the files could harm your computer.

Extra information about the problem
BCCode: a
BCP1: 66DBFFF2
BCP2: 00000002
BCP3: 00000000
BCP4: 820BA3BF
OS Version: 6_0_6000
Service Pack: 0_0
Product: 256_1
*********************************

When I click on "View a temporary copy of these files" and look at the
XML file there it is very long so I hate to post it here but maybe
someone could tell me what to look for?

Thanks

Tom Esker

Hello,
I would like to add a comment. I believe that this may be caused by the
Mozy or MozyHome backup software. I tracked down these same events (VSS,
Event 8194, IVssWriterCallback, 0x80070005) and discovered they were
being generated by the MozyHome backup software I have installed
(v1.8.6.21 by the way). I am using Vista 32-bit Ultimate, 4GB RAM, Core2
Duo CPU, 750GB hard drive. If anyone has a solution, please reply. I
have just emailed the Mozy support staff about it.

If it is more generally related to a mis-configuration of VSS, and
there is some registry settings, NTFS/Security/ACL setting that is
incorrect, etc... then please post about that as well. I am really
seeking a solution to this because I get so many errors in my Event Logs
and it is cluttering them.


--
LuckMan212
Posted via http://www.vistaheads.com

Hello,
I would like to add a comment. I believe that this may be caused by the
Mozy or MozyHome backup software. I tracked down these same events (VSS,
Event 8194, IVssWriterCallback, 0x80070005) and discovered they were
being generated by the MozyHome backup software I have installed
(v1.8.6.21 by the way). I am using Vista 32-bit Ultimate, 4GB RAM, Core2
Duo CPU, 750GB hard drive. If anyone has a solution, please reply. I
have just emailed the Mozy support staff about it.

If it is more generally related to a mis-configuration of VSS, and
there is some registry settings, NTFS/Security/ACL setting that is
incorrect, etc... then please post about that as well. I am really
seeking a solution to this because I get so many errors in my Event Logs
and it is cluttering them.


--
LuckMan212