In message , Tim Meddick
writes:
The Window's service "Volume Shadow Copy" is a built-in service that
enables the operating system to copy files that would otherwise return
the error : "Access Denied - File in use by another process" (or
similar) when a file is "locked" by another program or the OS itself.

As has been quite rightly mentioned - it is indeed used by "System
Restore", but is by no means limited to only this.

It is also used by "NT Backup" and any third-part programs that have
been written to utilize the Volume Shadow Copy service, such as
ERUNT.exe (reg backup for NT (google ERUNT for more on this)).
[]
Thanks for the more intelligent response than the other idiot.

What puzzles me a

o Why did it (only) pop up when I was doing a scan? (I have - and use
occasionally - ERUNT, and it doesn't then.)

o Why does it see it as new hardware?

o I checked, and I already had restore points (going back to I think
November 7 - certainly from before I did the scan), so why hadn't it
popped up when it did those.

o I checked in Device Manager, and (once I'd turned on show hidden) I
already had the phantom drives (I forget the wording used) that are
involved.
--
J. P. Gilliver. UMRA: 1960/1985 MB++G.5AL-IS-P--Ch++(p)Ar@T0H+Sh0!:`)DNAf

Squawk Pieces of eight!
Squawk Pieces of eight!
Squawk Pieces of nine!
SYSTEM HALTED: parroty error!