Volume Shadow Copy
Default Description:
Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start.
Additional Information:
None at this time.
Additional Reading:
- None at this time
Discussion Topic Link:
Defaults Startup Type:
Windows 7 Starter: Manual (Started)
Windows 7 Home Basic: Manual (Started)
Windows 7 Home Premium: Manual (Started)
Windows 7 Professional: Manual (Started)
Windows 7 Ultimate: Manual (Started)
Windows 7 Enterprise: Manual (Started)
Other Settings:
Safe Setting: Manual
Service Names:
Service Name (registry): VSS
Display Name: Volume Shadow Copy
Default Path and Command Line Options:
C:\Windows\system32\vssvc.exe
Log On As:
Account: Local System account
Dependencies:
What service Volume Shadow Copy needs to function properly:
- Remote Procedure Call (RPC) (S, HB, HP, P, U, E)
- DCOM Server Process Launcher (S, HB, HP, P, U, E)
- RPC Endpoint Mapper (S, HB, HP, P, U, E)
What other service require Volume Shadow Copy to function properly:
- None (S, HB, HP, P, U, E)
Registry Settings (.reg):
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS]
"DisplayName"="@%systemroot%\\system32\\vssvc.exe,-102"
"ImagePath"=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f,00,6f,00,\
74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,76,\
00,73,00,73,00,76,00,63,00,2e,00,65,00,78,00,65,00,00,00
"Description"="@%systemroot%\\system32\\vssvc.exe,-101"
"ObjectName"="LocalSystem"
"ErrorControl"=dword:00000001
"Start"=dword:00000003
"Type"=dword:00000010
"DependOnService"=hex(7):52,00,50,00,43,00,53,00,53,00,00,00,00,00
"ServiceSidType"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\SPP]
"SppGetSnapshots (Enter)"=hex:40,00,00,00,00,00,00,00,0b,3c,d6,7e,3f,29,ca,01,\
84,09,00,00,38,0e,00,00,d2,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"SppGetSnapshots (Leave)"=hex:40,00,00,00,00,00,00,00,5e,93,d7,7e,3f,29,ca,01,\
84,09,00,00,38,0e,00,00,d2,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"SppEnumGroups (Enter)"=hex:40,00,00,00,00,00,00,00,5e,93,d7,7e,3f,29,ca,01,84,\
09,00,00,38,0e,00,00,d1,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"SppEnumGroups (Leave)"=hex:40,00,00,00,00,00,00,00,83,b9,d7,7e,3f,29,ca,01,84,\
09,00,00,38,0e,00,00,d1,07,00,00,01,00,00,00,00,00,00,00,01,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"SppCreate (Enter)"=hex:40,00,00,00,00,00,00,00,f6,5a,ec,c0,fd,23,ca,01,64,0f,\
00,00,ec,08,00,00,d0,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"SppGatherWriterMetadata (Enter)"=hex:40,00,00,00,00,00,00,00,7c,69,5c,c1,fd,\
23,ca,01,64,0f,00,00,ec,08,00,00,d3,07,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00
"SppGatherWriterMetadata (Leave)"=hex:40,00,00,00,00,00,00,00,55,b0,c3,c7,fd,\
23,ca,01,64,0f,00,00,ec,08,00,00,d3,07,00,00,01,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00
"SppAddInterestingComponents (Enter)"=hex:40,00,00,00,00,00,00,00,c6,22,c4,c7,\
fd,23,ca,01,64,0f,00,00,ec,08,00,00,d4,07,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00
"SppAddInterestingComponents (Leave)"=hex:40,00,00,00,00,00,00,00,19,1e,f4,c7,\
fd,23,ca,01,64,0f,00,00,ec,08,00,00,d4,07,00,00,01,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00
"SppCreate (Leave)"=hex:40,00,00,00,00,00,00,00,12,8a,81,cd,fd,23,ca,01,64,0f,\
00,00,ec,08,00,00,d0,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\SystemRestore]
"SrCreateRp (Enter)"=hex:40,00,00,00,00,00,00,00,f6,5a,ec,c0,fd,23,ca,01,64,0f,\
00,00,ec,08,00,00,d5,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"SrCreateRp (Leave)"=hex:40,00,00,00,00,00,00,00,4d,e2,89,cd,fd,23,ca,01,64,0f,\
00,00,ec,08,00,00,d5,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\ASR Writer]
"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,be,92,9e,c1,fd,23,ca,01,44,04,\
00,00,10,0f,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,cb,ca,aa,c1,fd,23,ca,01,44,04,\
00,00,10,0f,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\COM+ REGDB Writer]
"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,7b,40,9a,c1,fd,23,ca,01,44,04,\
00,00,10,0f,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,27,fa,9d,c1,fd,23,ca,01,44,04,\
00,00,10,0f,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,c6,7b,26,c8,fd,23,ca,01,44,\
04,00,00,10,0f,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,46,04,29,c8,fd,23,ca,01,44,\
04,00,00,10,0f,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,46,04,29,c8,fd,\
23,ca,01,44,04,00,00,10,0f,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\
00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,\
00
"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,40,aa,7d,cd,fd,23,ca,01,44,04,\
00,00,10,0f,00,00,f9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,b1,1c,7e,cd,fd,23,ca,01,44,04,\
00,00,10,0f,00,00,f9,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,64,b6,c0,c9,fd,23,ca,01,\
44,04,00,00,84,0e,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,86,31,da,c9,fd,23,ca,01,\
44,04,00,00,84,0e,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,86,\
31,da,c9,fd,23,ca,01,44,04,00,00,84,0e,00,00,02,00,00,00,01,00,00,00,01,00,\
00,00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,\
00,00,00,00,00
"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,12,b8,21,ca,fd,23,ca,01,44,04,00,\
00,ec,03,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,bc,f6,e3,0f,\
ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,12,b8,21,ca,fd,23,ca,01,44,04,00,\
00,ec,03,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,bc,f6,e3,0f,\
ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,12,b8,\
21,ca,fd,23,ca,01,44,04,00,00,ec,03,00,00,03,00,00,00,01,00,00,00,02,00,00,\
00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,\
00,00,00,00
"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,12,b8,21,ca,fd,23,ca,\
01,44,04,00,00,d4,04,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,e5,fe,1d,cb,fd,23,ca,01,44,04,00,00,\
ec,03,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,\
39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,e5,fe,1d,cb,fd,23,ca,\
01,44,04,00,00,d4,04,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,e5,fe,1d,cb,fd,23,ca,01,44,04,00,00,\
ec,03,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,\
39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\
00,e5,fe,1d,cb,fd,23,ca,01,44,04,00,00,ec,03,00,00,04,00,00,00,01,00,00,00,\
03,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,\
00,00,00,00,00,00,00
"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,5d,a9,50,cc,fd,23,ca,01,44,\
04,00,00,c0,0c,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,ae,33,61,cc,fd,23,ca,01,44,\
04,00,00,c0,0c,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\
00,00,ae,33,61,cc,fd,23,ca,01,44,04,00,00,c0,0c,00,00,05,00,00,00,01,00,00,\
00,04,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,\
00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,6b,fd,88,cd,fd,23,ca,01,\
44,04,00,00,1c,09,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Leave)"=hex:40,00,00,00,00,00,00,00,6b,fd,88,cd,fd,23,ca,01,\
44,04,00,00,1c,09,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\IIS Config Writer]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\IIS Metabase Writer]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\Lovelace]
"OPEN_VOLUME_HANDLE (Enter)"=hex:40,00,00,00,00,00,00,00,d7,14,4d,ca,fd,23,ca,\
01,44,04,00,00,d4,0c,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"OPEN_VOLUME_HANDLE (Leave)"=hex:40,00,00,00,00,00,00,00,b5,a7,c9,ca,fd,23,ca,\
01,44,04,00,00,d4,0c,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:40,00,00,00,00,00,00,00,b5,a7,c9,ca,fd,23,\
ca,01,44,04,00,00,d4,0c,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\
00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:40,00,00,00,00,00,00,00,ed,43,e6,ca,fd,23,\
ca,01,44,04,00,00,d4,0c,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"IOCTL_RELEASE (Enter)"=hex:40,00,00,00,00,00,00,00,5e,b6,e6,ca,fd,23,ca,01,44,\
04,00,00,d4,0c,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"IOCTL_RELEASE (Leave)"=hex:40,00,00,00,00,00,00,00,5e,b6,e6,ca,fd,23,ca,01,44,\
04,00,00,d4,0c,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\Lovelace(__?_Volume{c70eb294-8338-11de-9209-806e6f6e6963}_)]
"OPEN_VOLUME_HANDLE (Enter)"=hex:40,00,00,00,00,00,00,00,d7,14,4d,ca,fd,23,ca,\
01,44,04,00,00,e8,0b,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"OPEN_VOLUME_HANDLE (Leave)"=hex:40,00,00,00,00,00,00,00,90,81,c9,ca,fd,23,ca,\
01,44,04,00,00,e8,0b,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:40,00,00,00,00,00,00,00,b5,a7,c9,ca,fd,23,\
ca,01,44,04,00,00,e8,0b,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\
00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:40,00,00,00,00,00,00,00,ed,43,e6,ca,fd,23,\
ca,01,44,04,00,00,e8,0b,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"IOCTL_RELEASE (Enter)"=hex:40,00,00,00,00,00,00,00,5e,b6,e6,ca,fd,23,ca,01,44,\
04,00,00,e8,0b,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"IOCTL_RELEASE (Leave)"=hex:40,00,00,00,00,00,00,00,5e,b6,e6,ca,fd,23,ca,01,44,\
04,00,00,e8,0b,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\MSSearch Service Writer]
"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,45,26,a2,c1,fd,23,ca,01,1c,0c,\
00,00,fc,0d,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,35,21,a5,c1,fd,23,ca,01,1c,0c,\
00,00,fc,0d,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,6b,3b,2e,c8,fd,23,ca,01,1c,\
0c,00,00,fc,0d,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,d6,35,57,c8,fd,23,ca,01,1c,\
0c,00,00,fc,0d,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,d6,35,57,c8,fd,\
23,ca,01,1c,0c,00,00,fc,0d,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\
00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,\
00
"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,6d,db,7e,cd,fd,23,ca,01,1c,0c,\
00,00,fc,0d,00,00,f9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,03,74,7f,cd,fd,23,ca,01,1c,0c,\
00,00,fc,0d,00,00,f9,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,6b,c1,c1,c9,fd,23,ca,01,\
1c,0c,00,00,fc,0d,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,b9,33,15,ca,fd,23,ca,01,\
1c,0c,00,00,fc,0d,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,b9,\
33,15,ca,fd,23,ca,01,1c,0c,00,00,fc,0d,00,00,02,00,00,00,01,00,00,00,01,00,\
00,00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,\
00,00,00,00,00
"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,12,b8,21,ca,fd,23,ca,01,1c,0c,00,\
00,fc,0d,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,bc,f6,e3,0f,\
ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,12,b8,21,ca,fd,23,ca,01,1c,0c,00,\
00,fc,0d,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,bc,f6,e3,0f,\
ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,12,b8,\
21,ca,fd,23,ca,01,1c,0c,00,00,fc,0d,00,00,03,00,00,00,01,00,00,00,02,00,00,\
00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,\
00,00,00,00
"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,12,b8,21,ca,fd,23,ca,\
01,1c,0c,00,00,c4,0b,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,0b,25,1e,cb,fd,23,ca,01,1c,0c,00,00,\
fc,0d,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,\
39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,0b,25,1e,cb,fd,23,ca,\
01,1c,0c,00,00,c4,0b,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,30,4b,1e,cb,fd,23,ca,01,1c,0c,00,00,\
fc,0d,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,\
39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\
00,30,4b,1e,cb,fd,23,ca,01,1c,0c,00,00,fc,0d,00,00,04,00,00,00,01,00,00,00,\
03,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,\
00,00,00,00,00,00,00
"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,ce,1b,51,cc,fd,23,ca,01,1c,\
0c,00,00,fc,0d,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,c7,1e,e6,cc,fd,23,ca,01,1c,\
0c,00,00,fc,0d,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\
00,00,c7,1e,e6,cc,fd,23,ca,01,1c,0c,00,00,fc,0d,00,00,05,00,00,00,01,00,00,\
00,04,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,\
00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,46,d7,88,cd,fd,23,ca,01,\
1c,0c,00,00,fc,0d,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Leave)"=hex:40,00,00,00,00,00,00,00,46,d7,88,cd,fd,23,ca,01,\
1c,0c,00,00,fc,0d,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\Registry Writer]
"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,db,cf,a7,c1,fd,23,ca,01,44,04,\
00,00,2c,0b,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,e2,da,a8,c1,fd,23,ca,01,44,04,\
00,00,2c,0b,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,dd,9c,29,c8,fd,23,ca,01,44,\
04,00,00,2c,0b,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,64,30,2d,c8,fd,23,ca,01,44,\
04,00,00,2c,0b,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,64,30,2d,c8,fd,\
23,ca,01,44,04,00,00,2c,0b,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\
00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,\
00
"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,47,b5,7e,cd,fd,23,ca,01,44,04,\
00,00,10,0f,00,00,f9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,bf,32,80,cd,fd,23,ca,01,44,04,\
00,00,10,0f,00,00,f9,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,37,85,bf,c9,fd,23,ca,01,\
44,04,00,00,1c,09,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,2c,cf,d7,c9,fd,23,ca,01,\
44,04,00,00,1c,09,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,2c,\
cf,d7,c9,fd,23,ca,01,44,04,00,00,1c,09,00,00,02,00,00,00,01,00,00,00,01,00,\
00,00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,\
00,00,00,00,00
"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,35,11,31,ca,fd,23,ca,01,44,04,00,\
00,ec,03,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,bc,f6,e3,0f,\
ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,b1,ee,4c,ca,fd,23,ca,01,44,04,00,\
00,ec,03,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,bc,f6,e3,0f,\
ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,b1,ee,\
4c,ca,fd,23,ca,01,44,04,00,00,ec,03,00,00,03,00,00,00,01,00,00,00,02,00,00,\
00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,\
00,00,00,00
"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,d7,14,4d,ca,fd,23,ca,\
01,44,04,00,00,44,02,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,e5,fe,1d,cb,fd,23,ca,01,44,04,00,00,\
ec,03,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,\
39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,e5,fe,1d,cb,fd,23,ca,\
01,44,04,00,00,44,02,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,e5,fe,1d,cb,fd,23,ca,01,44,04,00,00,\
ec,03,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,\
39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\
00,e5,fe,1d,cb,fd,23,ca,01,44,04,00,00,ec,03,00,00,04,00,00,00,01,00,00,00,\
03,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,\
00,00,00,00,00,00,00
"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,ec,36,50,cc,fd,23,ca,01,44,\
04,00,00,f4,0e,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,3d,c1,60,cc,fd,23,ca,01,44,\
04,00,00,f4,0e,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\
00,00,3d,c1,60,cc,fd,23,ca,01,44,04,00,00,f4,0e,00,00,05,00,00,00,01,00,00,\
00,04,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,\
00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,46,d7,88,cd,fd,23,ca,01,\
44,04,00,00,d0,0a,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Leave)"=hex:40,00,00,00,00,00,00,00,46,d7,88,cd,fd,23,ca,01,\
44,04,00,00,d0,0a,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\Shadow Copy Optimization Writer]
"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,7b,40,9a,c1,fd,23,ca,01,44,04,\
00,00,2c,0b,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,91,61,9d,c1,fd,23,ca,01,44,04,\
00,00,2c,0b,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,b7,76,29,c8,fd,23,ca,01,44,\
04,00,00,10,0f,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,cd,97,2c,c8,fd,23,ca,01,44,\
04,00,00,10,0f,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,cd,97,2c,c8,fd,\
23,ca,01,44,04,00,00,10,0f,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\
00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,\
00
"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,84,eb,7c,cd,fd,23,ca,01,44,04,\
00,00,10,0f,00,00,f9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,f5,5d,7d,cd,fd,23,ca,01,44,04,\
00,00,10,0f,00,00,f9,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,ce,1d,c0,c9,fd,23,ca,01,\
44,04,00,00,c0,0c,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,9d,41,d8,c9,fd,23,ca,01,\
44,04,00,00,c0,0c,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,9d,\
41,d8,c9,fd,23,ca,01,44,04,00,00,c0,0c,00,00,02,00,00,00,01,00,00,00,01,00,\
00,00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,\
00,00,00,00,00
"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,8c,13,19,ca,fd,23,ca,01,44,04,00,\
00,d0,0a,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,bc,f6,e3,0f,\
ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,8c,13,19,ca,fd,23,ca,01,44,04,00,\
00,d0,0a,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,bc,f6,e3,0f,\
ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,8c,13,\
19,ca,fd,23,ca,01,44,04,00,00,d0,0a,00,00,03,00,00,00,01,00,00,00,02,00,00,\
00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,\
00,00,00,00
"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,b1,39,19,ca,fd,23,ca,\
01,44,04,00,00,30,0a,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,0b,25,1e,cb,fd,23,ca,01,44,04,00,00,\
d0,0a,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,\
39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,0b,25,1e,cb,fd,23,ca,\
01,44,04,00,00,30,0a,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,0b,25,1e,cb,fd,23,ca,01,44,04,00,00,\
d0,0a,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,\
39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\
00,0b,25,1e,cb,fd,23,ca,01,44,04,00,00,d0,0a,00,00,04,00,00,00,01,00,00,00,\
03,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,\
00,00,00,00,00,00,00
"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,7c,c4,4f,cc,fd,23,ca,01,44,\
04,00,00,84,0e,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,8e,93,ce,cc,fd,23,ca,01,44,\
04,00,00,84,0e,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\
00,00,8e,93,ce,cc,fd,23,ca,01,44,04,00,00,84,0e,00,00,05,00,00,00,01,00,00,\
00,04,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,\
00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,6b,fd,88,cd,fd,23,ca,01,\
44,04,00,00,c0,0c,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Leave)"=hex:40,00,00,00,00,00,00,00,6b,fd,88,cd,fd,23,ca,01,\
44,04,00,00,c0,0c,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\SwProvider_{b5946137-7b9f-4925-af80-51abd60b20d5}]
"PROVIDER_BEGINPREPARE (Enter)"=hex:40,00,00,00,00,00,00,00,c1,4e,1b,c8,fd,23,\
ca,01,44,04,00,00,10,0f,00,00,01,04,00,00,01,00,00,00,00,00,00,00,00,00,00,\
00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PROVIDER_BEGINPREPARE (Leave)"=hex:40,00,00,00,00,00,00,00,c7,6a,21,c8,fd,23,\
ca,01,44,04,00,00,10,0f,00,00,01,04,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PROVIDER_ENDPREPARE (Enter)"=hex:40,00,00,00,00,00,00,00,f8,54,9f,c8,fd,23,ca,\
01,44,04,00,00,d4,0c,00,00,02,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PROVIDER_ENDPREPARE (Leave)"=hex:40,00,00,00,00,00,00,00,a4,a8,aa,c9,fd,23,ca,\
01,44,04,00,00,d4,0c,00,00,02,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PROVIDER_PRECOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,b1,ee,4c,ca,fd,23,ca,\
01,44,04,00,00,d4,0c,00,00,03,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PROVIDER_PRECOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,d7,14,4d,ca,fd,23,ca,\
01,44,04,00,00,d4,0c,00,00,03,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PROVIDER_COMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,ed,43,e6,ca,fd,23,ca,01,\
44,04,00,00,d4,0e,00,00,04,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PROVIDER_COMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,5e,b6,e6,ca,fd,23,ca,01,\
44,04,00,00,d4,0e,00,00,04,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PROVIDER_POSTCOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,5e,b6,e6,ca,fd,23,ca,\
01,44,04,00,00,d4,0c,00,00,05,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PROVIDER_POSTCOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,ed,f8,19,cb,fd,23,ca,\
01,44,04,00,00,d4,0c,00,00,05,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PROVIDER_PREFINALCOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,5d,7c,1f,cb,fd,\
23,ca,01,44,04,00,00,d4,0c,00,00,06,04,00,00,01,00,00,00,00,00,00,00,00,00,\
00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,\
00
"PROVIDER_PREFINALCOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,13,4c,4b,cc,fd,\
23,ca,01,44,04,00,00,d4,0c,00,00,06,04,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,\
00
"PROVIDER_POSTFINALCOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,c7,1e,e6,cc,fd,\
23,ca,01,44,04,00,00,d4,0c,00,00,07,04,00,00,01,00,00,00,00,00,00,00,00,00,\
00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,\
00
"PROVIDER_POSTFINALCOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,80,8b,62,cd,fd,\
23,ca,01,44,04,00,00,d4,0c,00,00,07,04,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,\
00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\System Writer]
"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,09,df,9e,c1,fd,23,ca,01,b0,04,\
00,00,c4,0d,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,19,0f,5e,c5,fd,23,ca,01,b0,04,\
00,00,c4,0d,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,20,ef,2d,c8,fd,23,ca,01,b0,\
04,00,00,c4,0d,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,f4,50,56,c8,fd,23,ca,01,b0,\
04,00,00,c4,0d,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,1a,77,56,c8,fd,\
23,ca,01,b0,04,00,00,c4,0d,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\
00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,\
00
"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,65,d0,7d,cd,fd,23,ca,01,b0,04,\
00,00,74,0e,00,00,f9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,fc,68,7e,cd,fd,23,ca,01,b0,04,\
00,00,74,0e,00,00,f9,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,fb,4e,c1,c9,fd,23,ca,01,\
b0,04,00,00,c4,0d,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,41,b6,13,ca,fd,23,ca,01,\
b0,04,00,00,c4,0d,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,41,\
b6,13,ca,fd,23,ca,01,b0,04,00,00,c4,0d,00,00,02,00,00,00,01,00,00,00,01,00,\
00,00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,\
00,00,00,00,00
"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,38,de,21,ca,fd,23,ca,01,b0,04,00,\
00,c4,0d,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,bc,f6,e3,0f,\
ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,89,57,2d,ca,fd,23,ca,01,b0,04,00,\
00,c4,0d,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,bc,f6,e3,0f,\
ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,89,57,\
2d,ca,fd,23,ca,01,b0,04,00,00,c4,0d,00,00,03,00,00,00,01,00,00,00,02,00,00,\
00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,\
00,00,00,00
"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,89,57,2d,ca,fd,23,ca,\
01,b0,04,00,00,d8,0a,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,30,4b,1e,cb,fd,23,ca,01,b0,04,00,00,\
c4,0d,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,\
39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,30,4b,1e,cb,fd,23,ca,\
01,b0,04,00,00,d8,0a,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,56,71,1e,cb,fd,23,ca,01,b0,04,00,00,\
c4,0d,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,\
39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\
00,56,71,1e,cb,fd,23,ca,01,b0,04,00,00,c4,0d,00,00,04,00,00,00,01,00,00,00,\
03,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,\
00,00,00,00,00,00,00
"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,65,b4,51,cc,fd,23,ca,01,b0,\
04,00,00,c4,0d,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,bf,cb,87,cc,fd,23,ca,01,b0,\
04,00,00,c4,0d,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\
00,00,bf,cb,87,cc,fd,23,ca,01,b0,04,00,00,c4,0d,00,00,05,00,00,00,01,00,00,\
00,04,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,\
00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,6b,fd,88,cd,fd,23,ca,01,\
b0,04,00,00,74,0e,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Leave)"=hex:40,00,00,00,00,00,00,00,6b,fd,88,cd,fd,23,ca,01,\
b0,04,00,00,74,0e,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\VolSnap]
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}DiscoverSnapshots (Enter)"=hex:40,\
00,00,00,00,00,00,00,62,6c,f1,b3,5b,1e,ca,01,00,00,00,00,00,00,00,00,20,00,\
00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}Activate (Enter)"=hex:40,00,00,00,\
00,00,00,00,16,31,f6,b3,5b,1e,ca,01,00,00,00,00,00,00,00,00,08,00,00,00,01,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}ActivateLoop (Enter)"=hex:40,00,\
00,00,00,00,00,00,16,31,f6,b3,5b,1e,ca,01,00,00,00,00,00,00,00,00,1a,00,00,\
00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}ActivateLoop (Leave)"=hex:40,00,\
00,00,00,00,00,00,9a,08,0e,b4,5b,1e,ca,01,00,00,00,00,00,00,00,00,1b,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}ComputeIgnorableProduct (Enter)"=hex:40,\
00,00,00,00,00,00,00,52,20,9a,cd,fd,23,ca,01,00,00,00,00,00,00,00,00,0c,00,\
00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}ComputeIgnorableProduct (Leave)"=hex:40,\
00,00,00,00,00,00,00,ef,e5,a5,cd,fd,23,ca,01,00,00,00,00,00,00,00,00,0d,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}Activate (Leave)"=hex:40,00,00,00,\
00,00,00,00,5c,f4,19,b4,5b,1e,ca,01,00,00,00,00,00,00,00,00,09,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}DiscoverSnapshots (Leave)"=hex:40,\
00,00,00,00,00,00,00,5c,f4,19,b4,5b,1e,ca,01,00,00,00,00,00,00,00,00,21,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}DeleteProcess (Enter)"=hex:40,00,\
00,00,00,00,00,00,ed,f8,19,cb,fd,23,ca,01,00,00,00,00,00,00,00,00,12,00,00,\
00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}SetIgnorable (Enter)"=hex:40,00,\
00,00,00,00,00,00,c8,d2,19,cb,fd,23,ca,01,00,00,00,00,00,00,00,00,0a,00,00,\
00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}SetIgnorable (Leave)"=hex:40,00,\
00,00,00,00,00,00,37,1c,58,cb,fd,23,ca,01,00,00,00,00,00,00,00,00,0b,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}AdjustBitmap (Enter)"=hex:40,00,\
00,00,00,00,00,00,88,85,5e,cd,fd,23,ca,01,00,00,00,00,00,00,00,00,04,00,00,\
00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}ValidateDiffAreaFiles (Enter)"=hex:40,\
00,00,00,00,00,00,00,f0,56,c2,b5,5b,1e,ca,01,00,00,00,00,00,00,00,00,1c,00,\
00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00
"VolumesSafeForWrite (Enter)"=hex:40,00,00,00,00,00,00,00,82,dc,74,b9,5b,1e,ca,\
01,00,00,00,00,00,00,00,00,1e,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"VolumesSafeForWrite (Leave)"=hex:40,00,00,00,00,00,00,00,06,b4,8c,b9,5b,1e,ca,\
01,00,00,00,00,00,00,00,00,1f,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}ValidateDiffAreaFiles (Leave)"=hex:40,\
00,00,00,00,00,00,00,06,b4,8c,b9,5b,1e,ca,01,00,00,00,00,00,00,00,00,1d,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}AdjustBitmap (Leave)"=hex:40,00,\
00,00,00,00,00,00,65,85,b1,cd,fd,23,ca,01,00,00,00,00,00,00,00,00,05,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}DeleteProcess (Leave)"=hex:40,00,\
00,00,00,00,00,00,65,e0,82,cb,fd,23,ca,01,00,00,00,00,00,00,00,00,13,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}PrepareForSnapshot (Enter)"=hex:40,\
00,00,00,00,00,00,00,3b,a7,a3,c8,fd,23,ca,01,a4,0c,00,00,60,0b,00,00,00,00,\
00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}PreExposure (Enter)"=hex:40,00,00,\
00,00,00,00,00,f1,fe,d1,c8,fd,23,ca,01,a4,0c,00,00,60,0b,00,00,02,00,00,00,\
01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}PreExposure (Leave)"=hex:40,00,00,\
00,00,00,00,00,7e,82,aa,c9,fd,23,ca,01,a4,0c,00,00,60,0b,00,00,03,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}PrepareForSnapshot (Leave)"=hex:40,\
00,00,00,00,00,00,00,7e,82,aa,c9,fd,23,ca,01,a4,0c,00,00,60,0b,00,00,01,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}EndCommit (Enter)"=hex:40,00,00,\
00,00,00,00,00,ed,f8,19,cb,fd,23,ca,01,04,00,00,00,44,00,00,00,06,00,00,00,\
01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00
"Volume{c70eb294-8338-11de-9209-806e6f6e6963}EndCommit (Leave)"=hex:40,00,00,\
00,00,00,00,00,ed,f8,19,cb,fd,23,ca,01,04,00,00,00,44,00,00,00,07,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\VssapiPublisher]
"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,1b,b1,8c,c1,fd,23,ca,01,64,0f,\
00,00,f8,0e,00,00,e8,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,37,3b,62,c5,fd,23,ca,01,64,0f,\
00,00,f8,0e,00,00,e8,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,f4,9b,22,c8,fd,23,ca,01,64,\
0f,00,00,44,0e,00,00,e9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,fb,5b,57,c8,fd,23,ca,01,64,\
0f,00,00,44,0e,00,00,e9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,d7,31,79,cd,fd,23,ca,01,64,0f,\
00,00,58,09,00,00,f9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,e5,58,80,cd,fd,23,ca,01,64,0f,\
00,00,58,09,00,00,f9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"DOSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,d3,2e,9f,c8,fd,23,ca,01,64,0f,\
00,00,ec,08,00,00,0a,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"DOSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,66,bf,78,cd,fd,23,ca,01,64,0f,\
00,00,9c,0f,00,00,0a,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\VssvcPublisher]
"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,9b,bf,b3,c9,fd,23,ca,01,\
44,04,00,00,d4,0c,00,00,ea,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,b9,33,15,ca,fd,23,ca,01,\
44,04,00,00,d4,0c,00,00,ea,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,b9,33,15,ca,fd,23,ca,01,44,04,00,\
00,d4,0c,00,00,eb,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,bc,f6,e3,0f,\
ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"FREEZE_FRONT (Enter)"=hex:40,00,00,00,00,00,00,00,b9,33,15,ca,fd,23,ca,01,44,\
04,00,00,d4,0c,00,00,ec,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"FREEZE_FRONT (Leave)"=hex:40,00,00,00,00,00,00,00,fd,85,19,ca,fd,23,ca,01,44,\
04,00,00,d4,0c,00,00,ec,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"FREEZE_BACK (Enter)"=hex:40,00,00,00,00,00,00,00,fd,85,19,ca,fd,23,ca,01,44,\
04,00,00,d4,0c,00,00,ed,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"FREEZE_BACK (Leave)"=hex:40,00,00,00,00,00,00,00,f4,8b,1d,ca,fd,23,ca,01,44,\
04,00,00,d4,0c,00,00,ed,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"FREEZE_SYSTEM (Enter)"=hex:40,00,00,00,00,00,00,00,f4,8b,1d,ca,fd,23,ca,01,44,\
04,00,00,d4,0c,00,00,ee,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"FREEZE_SYSTEM (Leave)"=hex:40,00,00,00,00,00,00,00,89,57,2d,ca,fd,23,ca,01,44,\
04,00,00,d4,0c,00,00,ee,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"FREEZE_KTM (Enter)"=hex:40,00,00,00,00,00,00,00,89,57,2d,ca,fd,23,ca,01,44,04,\
00,00,d4,0c,00,00,f0,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"FREEZE_KTM (Leave)"=hex:40,00,00,00,00,00,00,00,ae,7d,2d,ca,fd,23,ca,01,44,04,\
00,00,d4,0c,00,00,f0,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"FREEZE_RM (Enter)"=hex:40,00,00,00,00,00,00,00,ae,7d,2d,ca,fd,23,ca,01,44,04,\
00,00,d4,0c,00,00,ef,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"FREEZE_RM (Leave)"=hex:40,00,00,00,00,00,00,00,b1,ee,4c,ca,fd,23,ca,01,44,04,\
00,00,d4,0c,00,00,ef,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,b1,ee,4c,ca,fd,23,ca,01,44,04,00,\
00,d4,0c,00,00,eb,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,bc,f6,e3,0f,\
ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"THAW_KTM (Enter)"=hex:40,00,00,00,00,00,00,00,ed,f8,19,cb,fd,23,ca,01,44,04,\
00,00,d4,0c,00,00,f4,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"THAW_KTM (Leave)"=hex:40,00,00,00,00,00,00,00,ed,f8,19,cb,fd,23,ca,01,44,04,\
00,00,d4,0c,00,00,f4,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,ed,f8,19,cb,fd,23,ca,01,44,04,00,00,\
d4,0c,00,00,f2,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,\
39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,5d,7c,1f,cb,fd,23,ca,01,44,04,00,00,\
d4,0c,00,00,f2,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,\
39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,5e,98,4b,cc,fd,23,ca,01,44,\
04,00,00,d4,0c,00,00,f5,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,c7,1e,e6,cc,fd,23,ca,01,44,\
04,00,00,d4,0c,00,00,f5,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,12,8a,81,cd,fd,23,ca,01,\
44,04,00,00,10,0f,00,00,fb,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Leave)"=hex:40,00,00,00,00,00,00,00,6b,fd,88,cd,fd,23,ca,01,\
44,04,00,00,10,0f,00,00,fb,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\WMI Writer]
"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,b6,98,a2,c1,fd,23,ca,01,58,03,\
00,00,f0,09,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,8f,83,a7,c1,fd,23,ca,01,58,03,\
00,00,f0,09,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,d4,a2,2d,c8,fd,23,ca,01,58,\
03,00,00,f0,09,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,81,5c,31,c8,fd,23,ca,01,58,\
03,00,00,f0,09,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,81,5c,31,c8,fd,\
23,ca,01,58,03,00,00,f0,09,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\
00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,\
00
"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,47,b5,7e,cd,fd,23,ca,01,58,03,\
00,00,f0,09,00,00,f9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,b8,27,7f,cd,fd,23,ca,01,58,03,\
00,00,f0,09,00,00,f9,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,bc,f6,e3,\
0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,20,75,c1,c9,fd,23,ca,01,\
58,03,00,00,f0,09,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,49,c1,14,ca,fd,23,ca,01,\
58,03,00,00,f0,09,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,49,\
c1,14,ca,fd,23,ca,01,58,03,00,00,f0,09,00,00,02,00,00,00,01,00,00,00,01,00,\
00,00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,\
00,00,00,00,00
"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,b1,39,19,ca,fd,23,ca,01,58,03,00,\
00,f0,09,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,bc,f6,e3,0f,\
ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,fd,85,19,ca,fd,23,ca,01,58,03,00,\
00,f0,09,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,bc,f6,e3,0f,\
ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,fd,85,\
19,ca,fd,23,ca,01,58,03,00,00,f0,09,00,00,03,00,00,00,01,00,00,00,02,00,00,\
00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,\
00,00,00,00
"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,fd,85,19,ca,fd,23,ca,\
01,58,03,00,00,74,04,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,5d,7c,1f,cb,fd,23,ca,01,58,03,00,00,\
f0,09,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,\
39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,5d,7c,1f,cb,fd,23,ca,\
01,58,03,00,00,74,04,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\
bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,5d,7c,1f,cb,fd,23,ca,01,58,03,00,00,\
f0,09,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,\
39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\
00,5d,7c,1f,cb,fd,23,ca,01,58,03,00,00,f0,09,00,00,04,00,00,00,01,00,00,00,\
03,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,\
00,00,00,00,00,00,00
"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,19,68,51,cc,fd,23,ca,01,58,\
03,00,00,f0,09,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,db,64,62,cc,fd,23,ca,01,58,\
03,00,00,f0,09,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,bc,f6,\
e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\
00,00,db,64,62,cc,fd,23,ca,01,58,03,00,00,f0,09,00,00,05,00,00,00,01,00,00,\
00,04,00,00,00,00,00,00,00,bc,f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,\
00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,46,d7,88,cd,fd,23,ca,01,\
58,03,00,00,f0,09,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
"BACKUPSHUTDOWN (Leave)"=hex:40,00,00,00,00,00,00,00,46,d7,88,cd,fd,23,ca,01,\
58,03,00,00,f0,09,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,bc,\
f6,e3,0f,ab,39,01,48,b7,47,87,fe,3d,86,dc,35,00,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Providers]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Providers\{b5946137-7b9f-4925-af80-51abd60b20d5}]
@="Microsoft Software Shadow Copy provider 1.0"
"Type"=dword:00000001
"Version"="1.0.0.7"
"VersionId"="{00000001-0000-0000-0007-000000000001}"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Providers\{b5946137-7b9f-4925-af80-51abd60b20d5}\CLSID]
@="{65EE1DBA-8FF4-4a58-AC1C-3470EE2F376A}"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Settings]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Settings\WritersBlockingRevert]
"{2707761B-2324-473D-88EB-EB007A359533}"="DFS-R Writer"
"{D76F5A28-3092-4589-BA48-2958FB88CE29}"="FRS Writer"
"{B2014C9E-8711-4C5C-A5A9-3CF384484757}"="AD Writer"
"{DD846AAA-A1B6-42a8-AAF8-03DCB6114BFD}"="ADAM Writer"
"TornComponentsBlockRevert"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\VssAccessControl]
"NT Authority\\NetworkService"=dword:00000001
"Have you tweaked your OS lately?"
Welcome Guest!
Choose the look:
General:
Windows 7 Related Information:
- FAQ
- Custom Services Registry Tool
- Install Guide
- Services Configurations
- Services Information
- Services Registry Files
- Strange Services
- Super Tweaks
Support BV:
Features:
Windows Service Configurations!
Includes explanations of each service and advice on which services you can safely disable.
- Windows 7 Services
- Windows Vista Service Pack 2 Services
- Windows XP x86 (32-bit) Service Pack 3 Services
- Windows XP x64 (64-bit) Service Pack 2 Services
- Windows 2000 Service Pack 4 Services
couttsj
Original content created: January 13, 2009 | Most recent update: September 28, 2009
Copyright © 1999-2010 by Charles "Black Viper" Sparks. All Rights Reserved.
Browser Compatibility List | Contact BV | Disclaimer | Privacy Policy | Site Map