vss事件13错误频发

Question

日志名称: Application
来源: VSS
日期: 2022/4/24 14:13:36
事件 ID: 13
任务类别: 无
级别: 错误
关键字: 经典
用户: 暂缺
计算机: LAPTOP-K9B8BF8V
描述:
卷影复制服务信息: 无法启动 CLSID 为 {4e14fba2-2e22-11d1-9964-00c04fbbb345} 、名称为 CEventSystem 的 COM 服务器。[0x8007045b, 系统正在关机。
]
事件 Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="VSS" />
<EventID Qualifiers="0">13</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2022-04-24T06:13:36.2033126Z" />
<EventRecordID>5080</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>LAPTOP-K9B8BF8V</Computer>
<Security />
</System>
<EventData>
<Data>{4e14fba2-2e22-11d1-9964-00c04fbbb345}</Data>
<Data>CEventSystem</Data>
<Data>0x8007045b, 系统正在关机。
</Data>
<Data>
</Data>
<Binary>2D20436F64653A20575254575254494330303030343932332D2043616C6C3A20575254575254494330303030343931362D205049443A202030303030353037322D205449443A202030303030363630382D20434D443A2020433A5C57494E444F57535C73797374656D33325C737663686F73742E657865202D6B204E6574776F726B53657276696365202D70202D732043727970745376632D20557365723A204E616D653A204E5420415554484F524954595C4E4554574F524B20534552564943452C205349443A532D312D352D3230</Binary>
</EventData>
</Event>

Answer 1

Hello

Please confirm the following questions：

1.Is the VSS service started normally?

2.Is the COM+event system service started normally?

3.Is the Microsoft Volume Shadow Provider service started normally?

4.Run the vssadmin list providers command to view the list of VSS providers

Here is an article about the CryptSVC bug causing this issue.You can try to stop CryptSVC manually in the service or create a task before restarting or shutting down W10.

https://answers.microsoft.com/en-us/windows/forum/all/windows-10-vss-event-id-13/cf3f6a83-85a7-4865-9aef-dd308487229e

Best Regards,
Wesley Li