View Single Post
  #7  
Old November 23rd 10, 02:14 PM posted to microsoft.public.windowsxp.newusers
Tim Meddick[_3_]
external usenet poster
 
Posts: 1,020
Default What's "Generic volume shadow copy"?

I'm afraid I just can't answer that, it's a question more about your
Anti-Virus / Anti-Malware program than about the WinXP OS!

But the fact is that the Volume Shadow Copy Service has always been a
feature of NT systems - set to automatic start by default.

I would question the effectiveness of my Anti-Virus / Anti-Malware software
if such a genuine element of the Window's OS is being returned as in any
way bogus by it!

Such behaviour of "spotting" viruses / malware where there isn't any is a
feature of Malware itself.....

(An example of this below...)
http://blogs.technet.com/b/mmpc/arch...ssentials.aspx

==

Cheers, Tim Meddick, Peckham, London. :-)




"J. P. Gilliver (John)" wrote in message
...
In message , Tim Meddick
writes:
The Window's service "Volume Shadow Copy" is a built-in service that
enables the operating system to copy files that would otherwise return
the error : "Access Denied - File in use by another process" (or similar)
when a file is "locked" by another program or the OS itself.

As has been quite rightly mentioned - it is indeed used by "System
Restore", but is by no means limited to only this.

It is also used by "NT Backup" and any third-part programs that have been
written to utilize the Volume Shadow Copy service, such as ERUNT.exe (reg
backup for NT (google ERUNT for more on this)).

[]
Thanks for the more intelligent response than the other idiot.

What puzzles me a

o Why did it (only) pop up when I was doing a scan? (I have - and use
occasionally - ERUNT, and it doesn't then.)

o Why does it see it as new hardware?

o I checked, and I already had restore points (going back to I think
November 7 - certainly from before I did the scan), so why hadn't it
popped up when it did those.

o I checked in Device Manager, and (once I'd turned on show hidden) I
already had the phantom drives (I forget the wording used) that are
involved.
--
J. P. Gilliver. UMRA: 1960/1985
MB++G.5AL-IS-P--Ch++(p)Ar@T0H+Sh0!:`)DNAf

Squawk Pieces of eight!
Squawk Pieces of eight!
Squawk Pieces of nine!
SYSTEM HALTED: parroty error!


Ads