Results 1 to 6 of 6
  1. #1
    Star Lounger
    Join Date
    Jul 2001
    Location
    Edison, New Jersey, USA
    Posts
    89
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Ghost Image confusion

    Greetings,
    I am using Ghost 10 to do daily backups. I have them scheduled to occur at 2am. I have only recently gotten around to checking the logs and this is what is confusing me:

    At 2:10 I get this msg:
    Description: Info 6C8F0436: A scheduled incremental recovery point of C: completed successfully.

    Seems normal enough. But at 3:03am, and 3:06am, and 3:09am, I get these messages (this same message 3 times):
    Description: Info 6C8F0438: Event driven incremental recovery point of C: completed successfully. This recovery point was done because an application was installed.

    So my question is this... What kind of trap can I set to catch the culprit that is coming into my house and installing 3 applications on my PC at 3am? Beats me how he/she/it gets past my alarm system...

    Ok, that's not really my question. I do run with anti-malware protection but let's say that something is getting by it. Is there some place that I can check to try to determine what is triggering Ghost's belief that I have installed a new application? I suspect Windows XP has some kind of log(s) to check, but I don't know where to look.

    Any direction is very much appreciated.

  2. #2
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: Ghost Image confusion

    Could be that some software is scheduled to update itself regularly in the early hours. Surprising that there would actually be three updates on one night, unless they are Windows updates, which tend to come in batches.

  3. #3
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Quedgeley, Gloucester, England
    Posts
    5,333
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Ghost Image confusion

    Check both the System and the Application Event Logs to see if anything interesting is going on at these times (that has been recorded there). Occasionally something may be shown...

    John
    <font face="Script MT Bold"><font color=blue><big><big>John</big></big></font color=blue></font face=script>

    Ita, esto, quidcumque...

  4. #4
    Silver Lounger
    Join Date
    Jan 2001
    Location
    Swanzey, New Hampshire, USA
    Posts
    1,707
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Ghost Image confusion

    Rob,

    IF you are using a Broadband Internet service, why not disable your NIC for one evening and see what happens. IF there is some program updating itself or even some miscreant that has snuck onboard, you may see an Error message or two or three in the morning stating that xxxxxx was unable to update, or something along those lines. Of course, if you have a 3rd-party firewall installed, you can do the same thing by setting it to full block and get the same results. <IMG SRC=http://www.the-highway.com/Smileys/Ponder.gif>

    Jeff
    Jeff
    simul iustus et peccator

  5. #5
    Super Moderator
    Join Date
    Dec 2000
    Location
    Renton, Washington, USA
    Posts
    12,560
    Thanks
    0
    Thanked 4 Times in 4 Posts

    Re: Ghost Image confusion

    Check out Ghost10: The VSS Provider vetoed the operation and scroll down to Reply #5.

    Also check out Aborting VSS Operations

    Now running HP Pavilion a6528p, with Win7 64 Bit OS.

  6. #6
    Star Lounger
    Join Date
    Jul 2001
    Location
    Edison, New Jersey, USA
    Posts
    89
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Ghost Image confusion

    Well... Turns out Ghost is detecting the Updates of MSXML 4.0 SP2 Security Updates KB927978 & 925672. Every night for a few weeks now, my system installs these same updates. I just did a manual install of both updates and they triggered the Ghost backups. The event logs showed these updates are scheduled for installation (again) tonight at 3am.

    So, thanks for the ideas and directions for identifying the culprit - I will tell my 6-year old that we don't need his stacked up cans on a collapsible table any longer....

    Now do you have any ideas on why my update installs the same 2 updates every night? Time to hit the Search buttons some more!

    Thanks again,

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •