Windows 10: Recovery Options for vssadmin “No items found” error

Discus and support Recovery Options for vssadmin “No items found” error in Windows 10 Performance & Maintenance to solve the problem; Hi i'm doing a forensics analysis on a drive containing a Windows 10 System. I have a situation where I need to compare a list of applications that... Discussion in 'Windows 10 Performance & Maintenance' started by trinsic, Jan 7, 2016.

  1. trinsic Win User

    Recovery Options for vssadmin “No items found” error


    Hi i'm doing a forensics analysis on a drive containing a Windows 10 System. I have a situation where I need to compare a list of applications that were removed by analyzing the system state before and after the applications were deleted. System Restore does not show any restore points for me to recover from to compare the differences.

    I made a image of the disk and examined the file system. The "system volume information" folder exists with various snap shots:

    Code: K:\System Volume Information\ {3808876b-c176-4e48-b7ae-04046e6cc752} 65,536 12/14/2015 12:08 12/14/2015 12:08 12/14/2015 12:08 {7a074314-a711-11e5-8d73-00256488153c}{3808876b-c176-4e48-b7ae-04046e6cc752} 469,762,048 12/27/2015 01:58 12/28/2015 14:27 12/27/2015 01:58 {c84c39a0-a42b-11e5-85ed-00256488153c}{3808876b-c176-4e48-b7ae-04046e6cc752} 4,447,035,392 12/18/2015 12:33 12/27/2015 01:59 12/18/2015 12:33 {d90c1d4c-a0c9-11e5-85ed-00256488153c}{3808876b-c176-4e48-b7ae-04046e6cc752} 382,533,632 12/14/2015 12:08 12/18/2015 12:33 12/14/2015 12:08 IndexerVolumeGuid 76 10/31/2015 14:18 10/31/2015 14:18 10/31/2015 14:18 MountPointManagerRemoteDatabase 0 1/9/2013 17:03 1/9/2013 17:03 1/9/2013 17:03 Syscache.hve 19,398,656 1/9/2013 17:04 10/31/2015 13:29 10/31/2015 13:29 Syscache.hve.LOG1 262,144 1/9/2013 17:04 10/31/2015 13:28 1/9/2013 17:04 Syscache.hve.LOG2 0 1/9/2013 17:04 1/9/2013 17:04 1/9/2013 17:04 tracking.log 20,480 1/9/2013 17:04 6/4/2013 02:28 1/9/2013 17:04 WPSettings.dat 12 12/14/2015 09:49 12/14/2015 09:49 12/14/2015 09:49 K:\System Volume Information\Chkdsk\ Chkdsk20141031191126.log 5,120 10/31/2014 11:11 10/31/2014 11:11 10/31/2014 11:11 Chkdsk20150330154511.log 5,120 3/30/2015 07:45 3/30/2015 07:45 3/30/2015 07:45 Chkdsk20150604212154.log 29,696 6/4/2015 13:21 6/4/2015 13:21 6/4/2015 13:21 K:\System Volume Information\Chkdsk\ K:\System Volume Information\SPP\ K:\System Volume Information\SPP\OnlineMetadataCache\ {0f020207-6730-4eeb-9d6c-8e36789dbc7f}_OnDiskSnapshotProp 15,696 12/18/2015 12:33 12/18/2015 12:33 12/18/2015 12:33 {1dedc651-f0f0-48bc-8cfe-75efd86f9e7c}_OnDiskSnapshotProp 15,696 12/14/2015 12:08 12/14/2015 12:08 12/14/2015 12:08 {c840a18f-5f36-497b-b321-390438aed0db}_OnDiskSnapshotProp 15,736 12/27/2015 01:58 12/27/2015 01:58 12/27/2015 01:58 K:\System Volume Information\SPP\OnlineMetadataCache\ K:\System Volume Information\SPP\SppCbsHiveStore\ K:\System Volume Information\SPP\SppCbsHiveStore\ K:\System Volume Information\SPP\SppGroupCache\ {0F020207-6730-4EEB-9D6C-8E36789DBC7F}_DriverPackageInfo 87,512 12/18/2015 12:43 12/18/2015 12:43 12/18/2015 12:43 {0F020207-6730-4EEB-9D6C-8E36789DBC7F}_WindowsUpdateInfo 304 12/18/2015 12:43 12/18/2015 12:43 12/18/2015 12:43 {1DEDC651-F0F0-48BC-8CFE-75EFD86F9E7C}_DriverPackageInfo 87,512 12/15/2015 19:28 12/15/2015 19:28 12/15/2015 19:28 {1DEDC651-F0F0-48BC-8CFE-75EFD86F9E7C}_WindowsUpdateInfo 176 12/15/2015 19:29 12/15/2015 19:29 12/15/2015 19:29 {C840A18F-5F36-497B-B321-390438AED0DB}_DriverPackageInfo 87,512 12/27/2015 01:59 12/27/2015 01:59 12/27/2015 01:59 {C840A18F-5F36-497B-B321-390438AED0DB}_WindowsUpdateInfo 408 12/27/2015 01:59 12/27/2015 01:59 12/27/2015 01:59 K:\System Volume Information\SPP\SppGroupCache\ K:\System Volume Information\SPP\ K:\System Volume Information\SystemRestore\ K:\System Volume Information\SystemRestore\FRStaging\ K:\System Volume Information\SystemRestore\FRStaging\ K:\System Volume Information\SystemRestore\ K:\System Volume Information\Windows Backup\ K:\System Volume Information\Windows Backup\Catalogs\ GlobalCatalogLock.dat 0 7/16/2015 09:36 7/16/2015 09:36 7/16/2015 09:36 K:\System Volume Information\Windows Backup\Catalogs\ K:\System Volume Information\Windows Backup\ K:\System Volume Information[/quote] after I mounted the VHD vssadmin gives me an error when I try to list the shadows:
    Code: C:\Windows\system32>vssadmin list shadows /for=k:\ vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool (C) Copyright 2001-2005 Microsoft Corp. No items found that satisfy the query.[/quote] My question is, is there a way to recover the system state from the snap shot when the vss doesn't recognize it?

    I did extensive research online and nobody so far as I can tell even talks about recovering a snap shot that vss does not recognize so please dont vote this down because it was unclear or not properly researched. Thank you.

    :)
     
    trinsic, Jan 7, 2016
    #1

  2. vss problems with windows 10

    I have no restore points, when I look at vssadmin list volumes, "no items found that satisfy that query" If I try vssadmin resize shadow storage /for=c: /on=c: /maxsize=unbounded I get "Volume Shadow Copy Service error: Unexpected error DeviceIoControl
    hr = 0x80070001" I can't figure this out , Anybody have any suggestions ?
     
    roberttharaldsen, Jan 7, 2016
    #2
  3. How may I delete previous versions of the pictures file and stop it recording so many ?

    Which option did you select in the Cleanup Versions dialog.

    Try this:

    Right-clict Start, and click Command Prompt (Admin)

    Type the following command:

    VSSADMIN LIST SHADOWS

    How many items are listed?
     
    Ramesh Srinivasan, Jan 7, 2016
    #3
  4. simrick Win User

    Recovery Options for vssadmin “No items found” error

    Hi.
    Not well-versed in this sort of thing, but have you tried this program?
    ShadowExplorer.com - About
    Not sure if it will help or not.
     
    simrick, Jan 8, 2016
    #4
  5. trinsic Win User
    Thanks yes I have tried ShadowExplorer, and system restore explorer the both use vss to access snapshots. its not a problem with VSS i dont think its a problem with a corrupted snapshot or related file that prevents vss from reading the snapshot.
     
    trinsic, Jan 8, 2016
    #5
  6. simrick Win User
    Afraid that's all I can offer. Hopefully someone else will chime in with some ideas. Sorry.
     
    simrick, Jan 8, 2016
    #6
  7. trinsic Win User
    Alright, thanks for the reply.
     
    trinsic, Jan 13, 2016
    #7
  8. simrick Win User

    Recovery Options for vssadmin “No items found” error

    simrick, Apr 4, 2018
    #8
Thema:

Recovery Options for vssadmin “No items found” error

Loading...
  1. Recovery Options for vssadmin “No items found” error - Similar Threads - Recovery Options vssadmin

  2. Item Not Found

    in Windows 10 Network and Sharing
    Item Not Found: I'm trying to delete a folder, but everytime i try to delete it i get this message:Could not find this itemThis is no longer located in C:\Users\User\Downloads. Verify the item's location and try again.I already check a computer repair store, couldn't find the problem.Do you...
  3. Item Not Found

    in Windows 10 Gaming
    Item Not Found: I'm trying to delete a folder, but everytime i try to delete it i get this message:Could not find this itemThis is no longer located in C:\Users\User\Downloads. Verify the item's location and try again.I already check a computer repair store, couldn't find the problem.Do you...
  4. Item Not Found

    in Windows 10 Software and Apps
    Item Not Found: I'm trying to delete a folder, but everytime i try to delete it i get this message:Could not find this itemThis is no longer located in C:\Users\User\Downloads. Verify the item's location and try again.I already check a computer repair store, couldn't find the problem.Do you...
  5. Item not found

    in Windows 10 Network and Sharing
    Item not found: My pc got attacked by malware, i cleaned them using malwarebytes and Mcafee, after that i got problem in windows update error code 0x80080005 which was then solved by adding a new regisrty in it. But now i got a new problem like i couldn't copy, delete or move files from...
  6. Documents folder "item not found" error

    in Windows 10 Installation and Upgrade
    Documents folder "item not found" error: My user folders like Music, Videos, Pictures and Documents can be accessed, but no files can be created, moved or edited. All of these user folders give me a "Could not find this item. This is no longer located in C:/Users/myusername. Verify the items location and try...
  7. Item Not Found

    in Windows 10 Network and Sharing
    Item Not Found: I'm trying to delete a folder. However every time I try to delete it I always get this pop-up: [ATTACH] I receive the same message when trying to move it. How can I get rid of this folder? Thanks for any help....
  8. Recovery of deleted items

    in Windows 10 Network and Sharing
    Recovery of deleted items: Hi, Why deleted items from a thumb drive do not appear in the recycle bin in windows 10? And how can I enable this feature? https://answers.microsoft.com/en-us/windows/forum/all/recovery-of-deleted-items/af148e31-ea58-444d-b9de-879db3d874f5
  9. Item not found, item no longer located in desktop

    in Windows 10 Network and Sharing
    Item not found, item no longer located in desktop: Hi I was working on a Sibelius file last night and saved it to the desktop. This morning when I tried opening it, I kept getting met with the error "Item not found, item no longer located in C:users\***\Desktop. Verify the item's location and try again." If I look in...
  10. "Item not Found" error

    in Windows 10 Support
    "Item not Found" error: Hi guys, I have upgraded from Build 18362.86 to .113 using KB4497936 successfully. But when I right click on desktop to create a new folder of text document I get the "Item not Found" error. Kindly advise how to resolve this issue, thanks... 132803