System state backup fails with error code 2155348237

[Eli]

Windows server 2008
Member server with Exchange 2007 SP1 on it.
I’m trying to backup system state to a different hard drive
In command prompt:
C:\Windows\system32>wbadmin start systemstatebackup -backupTarget:E:
wbadmin 1.0 - Backup command-line tool
(C) Copyright 2004 Microsoft Corp.

Starting System State Backup [9/26/2008 4:00 PM]
Retrieving volume information...

This would backup the system state from volume(s) Local Disk(C:) to E:.
Do you want to start the backup operation?
[Y] Yes [N] No y

Creating the shadow copy of volumes requested for backup.
Found (0) files
Found (1777) files
Found (8210) files

Summary of backup:
------------------

Backup of system state failed [9/26/2008 4:01 PM]

Log of files successfully backed up
'C:\Windows\Logs\WindowsServerBackup\SystemStateBackup 26-09-2008
16-00-54.log'

Log of files for which backup failed
'C:\Windows\Logs\WindowsServerBackup\SystemStateBackup_Error 26-09-2008
16-00-54
..log'

Enumeration of the files failed.
The filename, directory name, or volume label syntax is incorrect.

C:\Windows\system32>

The logs are empty

In event viewer:
Please note that event was at logged at 04:01 pm same time as I ran the job,
but in event viewer details it has time of 08:00 pm=??????

Backup started at '9/26/2008 8:00:54 PM' failed with following error code
'2155348237' (Enumeration of the files failed.). Please rerun backup once
issue is resolved.
Details of event log
- System
- Provider
[ Name] Microsoft-Windows-Backup
[ Guid] {1db28f2e-8f80-4027-8c5a-a11f7f10f62d}

EventID 517

Version 0

Level 2

Task 0

Opcode 0

Keywords 0x8000000000000000

- TimeCreated
[ SystemTime] 2008-09-26T20:01:34.408Z

EventRecordID 102682

Correlation

- Execution
[ ProcessID] 2624
[ ThreadID] 4124

Channel Application

Computer EX.domain.local

- Security
[ UserID] S-1-5-18

- EventData
BackupTime 2008-09-26T20:00:54.471Z
ErrorCode 2155348237
ErrorMessage %%2155348237


Any one has any ideas how to fix it?

[Meinolf Weber]

Hello Eli,

Check out this one:
http://technet.microsoft.com/en-us/l.../cc734395.aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Windows server 2008
> Member server with Exchange 2007 SP1 on it.
> I'm trying to backup system state to a different hard drive
> In command prompt:
> C:\Windows\system32>wbadmin start systemstatebackup -backupTarget:E:
> wbadmin 1.0 - Backup command-line tool
> (C) Copyright 2004 Microsoft Corp.
> Starting System State Backup [9/26/2008 4:00 PM]
> Retrieving volume information...
> This would backup the system state from volume(s) Local Disk(C:) to
> E:.
> Do you want to start the backup operation?
> [Y] Yes [N] No y
> Creating the shadow copy of volumes requested for backup.
> Found (0) files
> Found (1777) files
> Found (8210) files
> Summary of backup:
> ------------------
> Backup of system state failed [9/26/2008 4:01 PM]
>
> Log of files successfully backed up
> 'C:\Windows\Logs\WindowsServerBackup\SystemStateBackup 26-09-2008
> 16-00-54.log'
>
> Log of files for which backup failed
> 'C:\Windows\Logs\WindowsServerBackup\SystemStateBackup_Error
> 26-09-2008
> 16-00-54
> .log'
> Enumeration of the files failed.
> The filename, directory name, or volume label syntax is incorrect.
> C:\Windows\system32>
>
> The logs are empty
>
> In event viewer: Please note that event was at logged at 04:01 pm
> same time as I ran the job, but in event viewer details it has time of
> 08:00 pm=??????
>
> Backup started at '9/26/2008 8:00:54 PM' failed with following error
> code
> '2155348237' (Enumeration of the files failed.). Please rerun backup
> once
> issue is resolved.
> Details of event log
> - System
> - Provider
> [ Name] Microsoft-Windows-Backup
> [ Guid] {1db28f2e-8f80-4027-8c5a-a11f7f10f62d}
> EventID 517
>
> Version 0
>
> Level 2
>
> Task 0
>
> Opcode 0
>
> Keywords 0x8000000000000000
>
> - TimeCreated
> [ SystemTime] 2008-09-26T20:01:34.408Z
> EventRecordID 102682
>
> Correlation
>
> - Execution
> [ ProcessID] 2624
> [ ThreadID] 4124
> Channel Application
>
> Computer EX.domain.local
>
> - Security
> [ UserID] S-1-5-18
> - EventData
> BackupTime 2008-09-26T20:00:54.471Z
> ErrorCode 2155348237
> ErrorMessage %%2155348237
> Any one has any ideas how to fix it?
>

[George Yin]

Hello,

May I know if you are running any anti-virus or third-party tools on the
system?

We have seen the same issue when Trend Micro is installed on the system. If
this is the case, you may need to uninstall the Trend Micro and contact
Trend Micro to see if they have any updates on this.

The background is that:

Backup utilizes the VSS to take the snapshot of the volume and then pulls
off the data from the snapshot. If the snapshot contains any invalid path
(directory or file), the VSS will fail. Take the Trend Micro as an example.
You may find a directory named "\Program Files(x86)\trend micro\client
server security agent\..\", here the "\..\" is not supported and will cause
the VSS query process fail.

So please also check this information if you have installed any other
third-party tools or applications. We have also seen this error happened,
if some Intel applications are installed and that may create a directory
"\\" like the path "Program Files (x86)\\Intel". This path "\\" is also not
supported here.

Besides, you can try running the chkdsk to see if any disk error exists as
this may also cause some potential problems.

Sincerely,
George Yin
Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[Rene Schrock]

Hello George,

George Yin(MSFT) wrote:

> We have seen the same issue when Trend Micro is installed on the system. If
> this is the case, you may need to uninstall the Trend Micro and contact
> Trend Micro to see if they have any updates on this.
>

you are right with Trend Micro. We have the same error as Eli.

In our case Trend Micro Worry-Free Business Security 5.0 build 1307 whichinstalls the Client/Server Security Agent 15.0.1307 on Windows 2008 is
causing the problem.

After uninstalling the Client/Server Security Agent the problem disappeared.

Thanks
René

[George Yin]

Hello,

I am just writing to see how everything is going. If you have any updates
or need any further assistance on this issue, please feel free to let me
know. I am glad to be of assistance.

Sincerely,
George Yin
Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[Milenko]

Hi everybody.

I´m experiencing a similar problem with 2 different Servers ( both W2003 SP2, Backing up with NTBackup to Sony AIT-drive, Trend Micro Worry Free installed ) where the problems started after upgrading to Worry Free. In my case both Servers simply switch off during or right at the end of the backupjob.
After reading this post i am even more convinced it is a problem with the TM security agent and vss. I will focus on disabling vss in the backup job and disabling/uninstalling the security agent and keep you informed on the results.

Best regards,

Milenko

[Meinolf Weber [MVP-DS]]

Hello Milenko,

You are replying to an roundabout 3 month old posting. Better create your
own with the error description and your system setup/configuration. Also
what you have tried to solve the problem.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi everybody.
>
> I´m experiencing a similar problem with 2 different Servers ( both
> W2003 SP2, Backing up with NTBackup to Sony AIT-drive, Trend Micro
> Worry
> Free installed ) where the problems started after upgrading to Worry
> Free. In my case both Servers simply switch off during or right at the
> end of the backupjob.
> After reading this post i am even more convinced it is a problem with
> the TM security agent and vss. I will focus on disabling vss in the
> backup job and disabling/uninstalling the security agent and keep you
> informed on the results.
> Best regards,
>
> Milenko
>
> http://forums.techarena.in
>

[RSP]

Hello,

If the snapshot contains any invalid path
(directory or file), the VSS will fail.

... here the "\..\" is not supported and will cause
the VSS query process fail.

Wait a moment! The path specifications you detail are perfectly valid. VSS should support it; it is the culprit here. Don't try and fob it off on "third-party software".