After about 15 minutes, a Norton Ghost 14 backup fails with Error EBAB03F1: The specified network name is no longer available.
The source computer is a P4 laptop running Windows XP SP3. The target computer is a Core2 Quad desktop running Windows Vista Ultimate 64bit.
It does not help to disable Norton 360 on the source computer or Norton Antivirus 2008 on the target computer.
The Event Viewer consistently shows the same two VSS-related errors after Norton Ghost starts but before it fails. It makes no difference if the VSS service is started or stopped. The VSS errors do not appear elsewhere in the event log, only after Ghost starts.
The MSS event messages, however, are quite common, appearing throughout the log, and they may have nothing to do with the problem.
Here is the Norton Ghost error display...
-Errors exist.
--Unable to write to file.
---Error EBAB03F1: The specified network name is no longer available.
---Unable to set file size.
----Error EBAB03F1: The specified network name is no longer available.
----Unable to write to file.
-----Error EBAB03F1: The specified network name is no longer available.
-----Unable to set file size.
------Error EBAB03F1: The specified network name is no longer available.
Here are the source computer events, with the final error
at the top and the "Ghost Starting" message at the bottom:
=====
Event Type: Error
Event Source: Norton Ghost
Event Category: High Priority
Event ID: 100
Date: 11/09/2009
Time: 9:40:26 AM
User: N/A
Computer: PAVILION2
Description:
Error EC8F17B7: Cannot create recovery points for job:
Drive Backup of (C:\) (3).
Error E7D1001F: Unable to write to file.
Error EBAB03F1: The specified network name is no longer available.
Error E7D10046: Unable to set file size.
Error EBAB03F1: The specified network name is no longer available.
Error E7D1001F: Unable to write to file.
Error EBAB03F1: The specified network name is no longer available.
Error E7D10046: Unable to set file size.
Error EBAB03F1: The specified network name is no longer available.
Details: 0xEBAB0005
Source: Norton Ghost
=====
Event Type: Information
Event Source: MSSQL$SQLEXPRESS
Event Category: Server
Event ID: 3421
Date: 11/09/2009
Time: 9:34:06 AM
User: NT AUTHORITY\NETWORK SERVICE
Computer: PAVILION2
Description:
Recovery completed for database ReportServer$SQLEXPRESSTempDB
(database ID 6) in 1 second(s) (analysis 205 ms, redo 0 ms,
undo 376 ms.) This is an informational message only. No user
action is required.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 5d 0d 00 00 0a 00 00 00 ].......
0008: 15 00 00 00 50 00 41 00 ....P.A.
0010: 56 00 49 00 4c 00 49 00 V.I.L.I.
0018: 4f 00 4e 00 32 00 5c 00 O.N.2.\.
0020: 53 00 51 00 4c 00 45 00 S.Q.L.E.
0028: 58 00 50 00 52 00 45 00 X.P.R.E.
0030: 53 00 53 00 00 00 18 00 S.S.....
0038: 00 00 52 00 65 00 70 00 ..R.e.p.
0040: 6f 00 72 00 74 00 53 00 o.r.t.S.
0048: 65 00 72 00 76 00 65 00 e.r.v.e.
0050: 72 00 24 00 53 00 51 00 r.$.S.Q.
0058: 4c 00 45 00 58 00 50 00 L.E.X.P.
0060: 52 00 45 00 53 00 53 00 R.E.S.S.
0068: 00 00 ..
=====
Event Type: Information
Event Source: MSSQL$SQLEXPRESS
Event Category: Server
Event ID: 17137
Date: 11/09/2009
Time: 9:34:02 AM
User: NT AUTHORITY\NETWORK SERVICE
Computer: PAVILION2
Description:
Starting up database 'ReportServer$SQLEXPRESSTempDB'.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: f1 42 00 00 0a 00 00 00 ñB......
0008: 15 00 00 00 50 00 41 00 ....P.A.
0010: 56 00 49 00 4c 00 49 00 V.I.L.I.
0018: 4f 00 4e 00 32 00 5c 00 O.N.2.\.
0020: 53 00 51 00 4c 00 45 00 S.Q.L.E.
0028: 58 00 50 00 52 00 45 00 X.P.R.E.
0030: 53 00 53 00 00 00 18 00 S.S.....
0038: 00 00 52 00 65 00 70 00 ..R.e.p.
0040: 6f 00 72 00 74 00 53 00 o.r.t.S.
0048: 65 00 72 00 76 00 65 00 e.r.v.e.
0050: 72 00 24 00 53 00 51 00 r.$.S.Q.
0058: 4c 00 45 00 58 00 50 00 L.E.X.P.
0060: 52 00 45 00 53 00 53 00 R.E.S.S.
0068: 00 00 ..
=====
Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 5013
Date: 11/09/2009
Time: 9:28:32 AM
User: N/A
Computer: PAVILION2
Description:
Volume Shadow Copy Service error: Shadow Copy writer
ContentIndexingService called routine RegQueryValueExW
which failed with status 0x80070002 (converted to
0x800423f4).
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 57 53 48 43 4f 4d 4e 43 WSHCOMNC
0008: 32 32 39 32 00 00 00 00 2292....
0010: 57 53 48 43 49 43 00 00 WSHCIC..
0018: 32 38 37 00 00 00 00 00 287.....
=====
Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 5013
Date: 11/09/2009
Time: 9:28:32 AM
User: N/A
Computer: PAVILION2
Description:
Volume Shadow Copy Service error: Shadow Copy writer
ContentIndexingService called routine
RegQueryValueExW which failed with status
0x80070002 (converted to 0x800423f4).
For more information, see Help and Support Center
at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 57 53 48 43 4f 4d 4e 43 WSHCOMNC
0008: 32 32 39 32 00 00 00 00 2292....
0010: 57 53 48 43 49 43 00 00 WSHCIC..
0018: 32 38 37 00 00 00 00 00 287.....
=====
Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 12302
Date: 11/09/2009
Time: 9:28:32 AM
User: N/A
Computer: PAVILION2
Description:
Volume Shadow Copy Service error: An internal
inconsistency was detected in trying to contact
shadow copy service writers. Please check to see
that the Event Service and Volume Shadow Copy
Service are operating properly.
For more information, see Help and Support Center
at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 55 45 43 58 4d 4c 43 BUECXMLC
0008: 33 36 33 37 00 00 00 00 3637....
0010: 42 55 45 43 58 4d 4c 43 BUECXMLC
0018: 33 36 30 37 00 00 00 00 3607....
=====
Event Type: Information
Event Source: Norton Ghost
Event Category: High Priority
Event ID: 100
Date: 11/09/2009
Time: 9:27:57 AM
User: N/A
Computer: PAVILION2
Description:
Info 6C8F1F63: The drive-based backup job,
Drive Backup of (C:\) (3), has been started manually.
Details:
Source: Norton Ghost
