none
Cannot Create a System Image

    Question

  • I am attempting to create a system image of my c:\ (Windows 7 Professional RTM) drive to a network drive. I keep getting the following message when the process completes:

    "New bad clusters were found on the source drive. These clusters were not backed up. (0x8078007D)"

    I tried running CHKDSK C: /R /F from an administrative command prompt. This necessitated restarting Windows and running CHKDSK prior to starting Windows. Following completion, I tried running the image creation again with the same message.

    Obviously, I do not want to try a restore since that could totally hose my system.

    I looked at the target drive and it does appear that a number of files and folders have been created, but whether these are any good or not, I am not in a position to say.

    Is this a documented bug, and is there a know fix?
    Windows 7 Professional RTM dual booting with Windows 7 RC (using RC to test Office 2010 in a test environment) 2 GB memory 160 HD Networked Gateway Laptop HP Officejet 6310 All-in One inkjet printer Verizon FIOS Internet Connection
    Monday, September 21, 2009 2:59 AM

Answers

  • Ok - this may explain the 512K discrepancy, but does not resolve the problem. Microsoft should look to find a way for users to make a usable image backup - otherwise the entire image backup utility is worthless for anyone running a dual boot configuration.

    Given what you are saying, I think it isfair to say that the problem is not a bad cluster - it is a cluster that Windows does not recognize.

    Apparently it can be done, as I was able to create and restore an image backup successfully using Acronis True Image 2010.

    Windows 7 Professional RTM 2 GB memory 160 HD Networked (wired and wireless)Gateway Laptop HP Officejet 6310 All-in One inkjet printer Verizon FIOS Internet Connection
    • Marked as answer by blegs38552 Monday, September 28, 2009 3:14 AM
    Monday, September 28, 2009 3:14 AM

All replies

  • Does it work properly if you back up the system image to a local hard drive? When does the issues occur, when backup starts or it runs in the middle way?

    Also please open Event Viewer, and find the log “Applications and Services Logs\Windows\Backup\Operational”. There may be some clues. 

    I suggest that you temporary disable or uninstall the anti-virus, then run backup again and check the result.


    Arthur Xie - MSFT
    Tuesday, September 22, 2009 8:35 AM
    Moderator
  • It appears that the image back found a 512K bad cluster, but running CHKDSK /R dd not report this - see below. This occurred when I ran the backup to an external USB drive, or to the network drive. It occurs at the end of the backup. I will try running withmy anti-virus program disabled and see what happens.

    Ran with anti-virus disabled - same result.

    Here's what I found in the Event Viewer (both for the backup and the CHKDSK):

    Log Name:      Application
    Source:        Microsoft-Windows-Backup
    Date:          9/21/2009 9:39:03 PM
    Event ID:      525
    Task Category: None
    Level:         Warning
    Keywords:     
    User:          SYSTEM
    Computer:      gateway_laptop
    Description:
    The backup operation that completed with warning(s) - Volume 'C:' has developed new bad clusters. This may be an indication of problems with your hardware. 512 bytes have not been backed up because they could not be read. Please run the CHKDSK /R command on 'C:' and then rerun the backup operation.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Backup" Guid="{1DB28F2E-8F80-4027-8C5A-A11F7F10F62D}" />
        <EventID>525</EventID>
        <Version>0</Version>
        <Level>3</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2009-09-22T01:39:03.584960900Z" />
        <EventRecordID>21108</EventRecordID>
        <Correlation />
        <Execution ProcessID="4068" ThreadID="4384" />
        <Channel>Application</Channel>
        <Computer>gateway_laptop</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="VolumeGuid">{74746E62-8D37-11DE-8A3F-806E6F6E6963}</Data>
        <Data Name="VolumeFriendlyName">C:</Data>
        <Data Name="BackupSourceNumUnreadableBytes">512</Data>
      </EventData>
    </Event>

    Followed by this entry:

    Log Name:      Application
    Source:        Microsoft-Windows-Backup
    Date:          9/21/2009 9:39:03 PM
    Event ID:      519
    Task Category: None
    Level:         Warning
    Keywords:     
    User:          SYSTEM
    Computer:      gateway_laptop
    Description:
    The backup operation that started at '‎2009‎-‎09‎-‎22T01:00:57.928710900Z' has failed to back up volume(s) 'C:'. Please review the event details for a solution, and then rerun the backup operation once the issue is resolved.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Backup" Guid="{1DB28F2E-8F80-4027-8C5A-A11F7F10F62D}" />
        <EventID>519</EventID>
        <Version>0</Version>
        <Level>3</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2009-09-22T01:39:03.584960900Z" />
        <EventRecordID>21109</EventRecordID>
        <Correlation />
        <Execution ProcessID="4068" ThreadID="4384" />
        <Channel>Application</Channel>
        <Computer>gateway_laptop</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="BackupTime">2009-09-22T01:00:57.928710900Z</Data>
        <Data Name="FailedVolumeNames">C:</Data>
        <Data Name="ErrorCode">0</Data>
        <Data Name="ErrorMessage">%%0</Data>
      </EventData>
    </Event>

    After reading this, I ran CHKDSK /R which returned the following log entry:

    Log Name:      Application
    Source:        Microsoft-Windows-Wininit
    Date:          9/22/2009 10:01:34 AM
    Event ID:      1001
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          N/A
    Computer:      gateway_laptop
    Description:


    Checking file system on C:
    The type of the file system is NTFS.

    A disk check has been scheduled.
    Windows will now check the disk.                        

    CHKDSK is verifying files (stage 1 of 5)...
      219136 file records processed.                                        

    File verification completed.
      59 large file records processed.                                  

      0 bad file records processed.                                    

      2 EA records processed.                                          

      61 reparse records processed.                                     

    CHKDSK is verifying indexes (stage 2 of 5)...
      248690 index entries processed.                                       

    Index verification completed.
      0 unindexed files scanned.                                       

      0 unindexed files recovered.                                     

    CHKDSK is verifying security descriptors (stage 3 of 5)...
      219136 file SDs/SIDs processed.                                       

    Cleaning up 34 unused index entries from index $SII of file 0x9.
    Cleaning up 34 unused index entries from index $SDH of file 0x9.
    Cleaning up 34 unused security descriptors.
    Security descriptor verification completed.
      14778 data files processed.                                          

    CHKDSK is verifying Usn Journal...
      34142608 USN bytes processed.                                           

    Usn Journal verification completed.
    CHKDSK is verifying file data (stage 4 of 5)...
      219120 files processed.                                               

    File data verification completed.
    CHKDSK is verifying free space (stage 5 of 5)...
      11626091 free clusters processed.                                       

    Free space verification is complete.
    Windows has checked the file system and found no problems.

      76927220 KB total disk space.
      30048184 KB in 92664 files.
         52968 KB in 14779 indexes.
             0 KB in bad sectors.
        321704 KB in use by the system.
         65536 KB occupied by the log file.
      46504364 KB available on disk.

          4096 bytes in each allocation unit.
      19231805 total allocation units on disk.
      11626091 allocation units available on disk.

    Internal Info:
    00 58 03 00 bd a3 01 00 59 02 03 00 00 00 00 00  .X......Y.......
    ef 01 00 00 3d 00 00 00 00 00 00 00 00 00 00 00  ....=...........
    70 91 2a 00 50 01 29 00 70 1e 29 00 00 00 29 00  p.*.P.).p.)...).

    Windows has finished checking your disk.
    Please wait while your computer restarts.

    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
        <EventID Qualifiers="16384">1001</EventID>
        <Version>0</Version>
        <Level>4</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2009-09-22T14:01:34.000000000Z" />
        <EventRecordID>21317</EventRecordID>
        <Correlation />
        <Execution ProcessID="0" ThreadID="0" />
        <Channel>Application</Channel>
        <Computer>gateway_laptop</Computer>
        <Security />
      </System>
      <EventData>
        <Data>

    Checking file system on C:
    The type of the file system is NTFS.

    A disk check has been scheduled.
    Windows will now check the disk.                        

    CHKDSK is verifying files (stage 1 of 5)...
      219136 file records processed.                                        

    File verification completed.
      59 large file records processed.                                  

      0 bad file records processed.                                    

      2 EA records processed.                                          

      61 reparse records processed.                                     

    CHKDSK is verifying indexes (stage 2 of 5)...
      248690 index entries processed.                                       

    Index verification completed.
      0 unindexed files scanned.                                       

      0 unindexed files recovered.                                     

    CHKDSK is verifying security descriptors (stage 3 of 5)...
      219136 file SDs/SIDs processed.                                       

    Cleaning up 34 unused index entries from index $SII of file 0x9.
    Cleaning up 34 unused index entries from index $SDH of file 0x9.
    Cleaning up 34 unused security descriptors.
    Security descriptor verification completed.
      14778 data files processed.                                          

    CHKDSK is verifying Usn Journal...
      34142608 USN bytes processed.                                           

    Usn Journal verification completed.
    CHKDSK is verifying file data (stage 4 of 5)...
      219120 files processed.                                               

    File data verification completed.
    CHKDSK is verifying free space (stage 5 of 5)...
      11626091 free clusters processed.                                       

    Free space verification is complete.
    Windows has checked the file system and found no problems.

      76927220 KB total disk space.
      30048184 KB in 92664 files.
         52968 KB in 14779 indexes.
             0 KB in bad sectors.
        321704 KB in use by the system.
         65536 KB occupied by the log file.
      46504364 KB available on disk.

          4096 bytes in each allocation unit.
      19231805 total allocation units on disk.
      11626091 allocation units available on disk.

    Internal Info:
    00 58 03 00 bd a3 01 00 59 02 03 00 00 00 00 00  .X......Y.......
    ef 01 00 00 3d 00 00 00 00 00 00 00 00 00 00 00  ....=...........
    70 91 2a 00 50 01 29 00 70 1e 29 00 00 00 29 00  p.*.P.).p.)...).

    Windows has finished checking your disk.
    Please wait while your computer restarts.
    </Data>
      </EventData>
    </Event>

    Windows 7 Professional RTM dual booting with Windows 7 RC (using RC to test Office 2010 in a test environment) 2 GB memory 160 HD Networked Gateway Laptop HP Officejet 6310 All-in One inkjet printer Verizon FIOS Internet Connection
    • Edited by blegs38552 Tuesday, September 22, 2009 4:11 PM Additional Info
    Tuesday, September 22, 2009 3:08 PM
  • Ran a scheduled backup tonight to my external USB drive. This backs up a data partition and creates an image of my c:\ drive. The message box said that the job had completed and had a green progress bar (the attempts from the prior post had a red bar), but when I looked at the Event Viewer, it had the same messages - see below:

    I created this originally by creating a backup job - the images from above were from the Create a System Image option on the right pane.

    Log Name:      Microsoft-Windows-Backup
    Source:        Microsoft-Windows-Backup
    Date:          9/22/2009 9:23:19 PM
    Event ID:      14
    Task Category: None
    Level:         Information
    Keywords:     
    User:          SYSTEM
    Computer:      gateway_laptop
    Description:
    The backup operation has completed.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Backup" Guid="{1DB28F2E-8F80-4027-8C5A-A11F7F10F62D}" />
        <EventID>14</EventID>
        <Version>2</Version>
        <Level>4</Level>
        <Task>0</Task>
        <Opcode>2</Opcode>
        <Keywords>0x4000000000000000</Keywords>
        <TimeCreated SystemTime="2009-09-23T01:23:19.715820300Z" />
        <EventRecordID>190</EventRecordID>
        <Correlation />
        <Execution ProcessID="4080" ThreadID="4844" />
        <Channel>Microsoft-Windows-Backup</Channel>
        <Computer>gateway_laptop</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="BackupTemplateID">{58801B72-AF51-4CD1-8A74-FD630AEAD104}</Data>
        <Data Name="HRESULT">0</Data>
        <Data Name="BackupState">14</Data>
        <Data Name="BackupTarget">G:</Data>
        <Data Name="NumOfVolumes">1</Data>
        <Data Name="BackupTime">2009-09-23T01:00:23.639648400Z</Data>
        <Data Name="HRESULT2">0</Data>
        <Data Name="VolumesInfo">&lt;VolumeInfo&gt;&lt;VolumeInfoItem Name="C:" OriginalAccessPath="C:" State="14" HResult="-2139619203" DetailedHResult="0" PreviousState="9" IsCritical="1" IsIncremental="1" BlockLevel="1" HasFiles="0" HasSystemState="0" IsCompacted="0" IsPruned="0" IsRecreateVhd="0" FullBackupReason="0" DataTransferred="3125662720" NumUnreadableBytes="512" TotalSize="3125662720" TotalNoOfFiles="0" Flags="1562" BackupTypeDetermined="1" SSBTotalNoOfFiles="0" SSBTotalSizeOnDisk="0" /&gt;&lt;/VolumeInfo&gt;</Data>
        <Data Name="DetailedHRESULT">0</Data>
        <Data Name="SourceSnapStartTime">1601-01-01T00:00:00.000000000Z</Data>
        <Data Name="SourceSnapEndTime">2009-09-23T01:06:40.233398400Z</Data>
        <Data Name="PrepareBackupStartTime">&lt;TimesList&gt;&lt;Time Time="2009-09-23T01:06:42.186Z" /&gt;&lt;/TimesList&gt;</Data>
        <Data Name="PrepareBackupEndTime">&lt;TimesList&gt;&lt;Time Time="2009-09-23T01:06:52.874Z" /&gt;&lt;/TimesList&gt;</Data>
        <Data Name="BackupWriteStartTime">&lt;TimesList&gt;&lt;Time Time="2009-09-23T01:06:52.874Z" /&gt;&lt;/TimesList&gt;</Data>
        <Data Name="BackupWriteEndTime">&lt;TimesList&gt;&lt;Time Time="2009-09-23T01:23:01.747Z" /&gt;&lt;/TimesList&gt;</Data>
        <Data Name="TargetSnapStartTime">2009-09-23T01:23:04.418945300Z</Data>
        <Data Name="TargetSnapEndTime">2009-09-23T01:23:19.543945300Z</Data>
        <Data Name="DVDFormatStartTime">&lt;TimesList&gt;&lt;/TimesList&gt;</Data>
        <Data Name="DVDFormatEndTime">&lt;TimesList&gt;&lt;/TimesList&gt;</Data>
        <Data Name="MediaVerifyStartTime">&lt;TimesList&gt;&lt;/TimesList&gt;</Data>
        <Data Name="MediaVerifyEndTime">&lt;TimesList&gt;&lt;/TimesList&gt;</Data>
        <Data Name="BackupPreviousState">11</Data>
        <Data Name="ComponentStatus">&lt;ComponentStatus&gt;&lt;/ComponentStatus&gt;</Data>
        <Data Name="SSBEnumerateStartTime">1601-01-01T00:00:00.000000000Z</Data>
        <Data Name="SSBEnumerateEndTime">1601-01-01T00:00:00.000000000Z</Data>
        <Data Name="SSBVhdCreationStartTime">1601-01-01T00:00:00.000000000Z</Data>
        <Data Name="SSBVhdCreationEndTime">1601-01-01T00:00:00.000000000Z</Data>
        <Data Name="SSBBackupStartTime">1601-01-01T00:00:00.000000000Z</Data>
        <Data Name="SSBBackupEndTime">1601-01-01T00:00:00.000000000Z</Data>
        <Data Name="SystemStateBackup">&lt;SystemState IsPresent="0" HResult="0" DetailedHResult="0" /&gt;</Data>
        <Data Name="BMR">true</Data>
        <Data Name="VssFullBackup">true</Data>
        <Data Name="UserInputBMR">false</Data>
        <Data Name="UserInputSSB">false</Data>
        <Data Name="BackupSuccessLogPath">
        </Data>
        <Data Name="BackupFailureLogPath">
        </Data>
        <Data Name="EnumerateBackupStartTime">&lt;TimesList&gt;&lt;Time Time="1601-01-01T00:00:00.000Z" /&gt;&lt;/TimesList&gt;</Data>
        <Data Name="EnumerateBackupEndTime">&lt;TimesList&gt;&lt;Time Time="1601-01-01T00:00:00.000Z" /&gt;&lt;/TimesList&gt;</Data>
        <Data Name="PruneBackupStartTime">&lt;TimesList&gt;&lt;Time Time="1601-01-01T00:00:00.000Z" /&gt;&lt;/TimesList&gt;</Data>
        <Data Name="PruneBackupEndTime">&lt;TimesList&gt;&lt;Time Time="1601-01-01T00:00:00.000Z" /&gt;&lt;/TimesList&gt;</Data>
      </EventData>
    </Event>

    Log Name:      Microsoft-Windows-Backup
    Source:        Microsoft-Windows-Backup
    Date:          9/22/2009 9:23:19 PM
    Event ID:      7
    Task Category: None
    Level:         Warning
    Keywords:     
    User:          SYSTEM
    Computer:      gateway_laptop
    Description:
    The backup operation that started at '‎2009‎-‎09‎-‎23T01:00:23.639648400Z' has completed with errors. Please review the event details for a solution, and then rerun the backup operation once the issue is resolved.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Backup" Guid="{1DB28F2E-8F80-4027-8C5A-A11F7F10F62D}" />
        <EventID>7</EventID>
        <Version>2</Version>
        <Level>3</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x4000000000000000</Keywords>
        <TimeCreated SystemTime="2009-09-23T01:23:19.715820300Z" />
        <EventRecordID>189</EventRecordID>
        <Correlation />
        <Execution ProcessID="4080" ThreadID="4844" />
        <Channel>Microsoft-Windows-Backup</Channel>
        <Computer>gateway_laptop</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="BackupTemplateID">{58801B72-AF51-4CD1-8A74-FD630AEAD104}</Data>
        <Data Name="HRESULT">0</Data>
        <Data Name="BackupState">14</Data>
        <Data Name="BackupTarget">G:</Data>
        <Data Name="NumOfVolumes">1</Data>
        <Data Name="BackupTime">2009-09-23T01:00:23.639648400Z</Data>
        <Data Name="HRESULT2">0</Data>
        <Data Name="VolumesInfo">&lt;VolumeInfo&gt;&lt;VolumeInfoItem Name="C:" OriginalAccessPath="C:" State="14" HResult="-2139619203" DetailedHResult="0" PreviousState="9" IsCritical="1" IsIncremental="1" BlockLevel="1" HasFiles="0" HasSystemState="0" IsCompacted="0" IsPruned="0" IsRecreateVhd="0" FullBackupReason="0" DataTransferred="3125662720" NumUnreadableBytes="512" TotalSize="3125662720" TotalNoOfFiles="0" Flags="1562" BackupTypeDetermined="1" SSBTotalNoOfFiles="0" SSBTotalSizeOnDisk="0" /&gt;&lt;/VolumeInfo&gt;</Data>
        <Data Name="DetailedHRESULT">0</Data>
        <Data Name="SourceSnapStartTime">1601-01-01T00:00:00.000000000Z</Data>
        <Data Name="SourceSnapEndTime">2009-09-23T01:06:40.233398400Z</Data>
        <Data Name="PrepareBackupStartTime">&lt;TimesList&gt;&lt;Time Time="2009-09-23T01:06:42.186Z" /&gt;&lt;/TimesList&gt;</Data>
        <Data Name="PrepareBackupEndTime">&lt;TimesList&gt;&lt;Time Time="2009-09-23T01:06:52.874Z" /&gt;&lt;/TimesList&gt;</Data>
        <Data Name="BackupWriteStartTime">&lt;TimesList&gt;&lt;Time Time="2009-09-23T01:06:52.874Z" /&gt;&lt;/TimesList&gt;</Data>
        <Data Name="BackupWriteEndTime">&lt;TimesList&gt;&lt;Time Time="2009-09-23T01:23:01.747Z" /&gt;&lt;/TimesList&gt;</Data>
        <Data Name="TargetSnapStartTime">2009-09-23T01:23:04.418945300Z</Data>
        <Data Name="TargetSnapEndTime">2009-09-23T01:23:19.543945300Z</Data>
        <Data Name="DVDFormatStartTime">&lt;TimesList&gt;&lt;/TimesList&gt;</Data>
        <Data Name="DVDFormatEndTime">&lt;TimesList&gt;&lt;/TimesList&gt;</Data>
        <Data Name="MediaVerifyStartTime">&lt;TimesList&gt;&lt;/TimesList&gt;</Data>
        <Data Name="MediaVerifyEndTime">&lt;TimesList&gt;&lt;/TimesList&gt;</Data>
        <Data Name="BackupPreviousState">11</Data>
        <Data Name="ComponentStatus">&lt;ComponentStatus&gt;&lt;/ComponentStatus&gt;</Data>
        <Data Name="SSBEnumerateStartTime">1601-01-01T00:00:00.000000000Z</Data>
        <Data Name="SSBEnumerateEndTime">1601-01-01T00:00:00.000000000Z</Data>
        <Data Name="SSBVhdCreationStartTime">1601-01-01T00:00:00.000000000Z</Data>
        <Data Name="SSBVhdCreationEndTime">1601-01-01T00:00:00.000000000Z</Data>
        <Data Name="SSBBackupStartTime">1601-01-01T00:00:00.000000000Z</Data>
        <Data Name="SSBBackupEndTime">1601-01-01T00:00:00.000000000Z</Data>
        <Data Name="SystemStateBackup">&lt;SystemState IsPresent="0" HResult="0" DetailedHResult="0" /&gt;</Data>
        <Data Name="BMR">true</Data>
        <Data Name="VssFullBackup">true</Data>
        <Data Name="UserInputBMR">false</Data>
        <Data Name="UserInputSSB">false</Data>
        <Data Name="BackupSuccessLogPath">
        </Data>
        <Data Name="BackupFailureLogPath">
        </Data>
        <Data Name="EnumerateBackupStartTime">&lt;TimesList&gt;&lt;Time Time="1601-01-01T00:00:00.000Z" /&gt;&lt;/TimesList&gt;</Data>
        <Data Name="EnumerateBackupEndTime">&lt;TimesList&gt;&lt;Time Time="1601-01-01T00:00:00.000Z" /&gt;&lt;/TimesList&gt;</Data>
        <Data Name="PruneBackupStartTime">&lt;TimesList&gt;&lt;Time Time="1601-01-01T00:00:00.000Z" /&gt;&lt;/TimesList&gt;</Data>
        <Data Name="PruneBackupEndTime">&lt;TimesList&gt;&lt;Time Time="1601-01-01T00:00:00.000Z" /&gt;&lt;/TimesList&gt;</Data>
      </EventData>
    </Event>

    Log Name:      Microsoft-Windows-Backup
    Source:        Microsoft-Windows-Backup
    Date:          9/22/2009 9:23:19 PM
    Event ID:      13
    Task Category: None
    Level:         Warning
    Keywords:     
    User:          SYSTEM
    Computer:      gateway_laptop
    Description:
    The backup operation has completed with warning(s) - Volume 'C:' has developed new bad clusters. This may be an indication of problems with your hardware. 512 bytes have not been backed up because they could not be read. Please run the CHKDSK /R command on 'C:' and then rerun the backup operation.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Backup" Guid="{1DB28F2E-8F80-4027-8C5A-A11F7F10F62D}" />
        <EventID>13</EventID>
        <Version>0</Version>
        <Level>3</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x4000000000000000</Keywords>
        <TimeCreated SystemTime="2009-09-23T01:23:19.715820300Z" />
        <EventRecordID>188</EventRecordID>
        <Correlation />
        <Execution ProcessID="4080" ThreadID="4844" />
        <Channel>Microsoft-Windows-Backup</Channel>
        <Computer>gateway_laptop</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="VolumeGuid">{74746E62-8D37-11DE-8A3F-806E6F6E6963}</Data>
        <Data Name="VolumeFriendlyName">C:</Data>
        <Data Name="BackupSourceNumUnreadableBytes">512</Data>
      </EventData>
    </Event>

    Windows 7 Professional RTM dual booting with Windows 7 RC (using RC to test Office 2010 in a test environment) 2 GB memory 160 HD Networked Gateway Laptop HP Officejet 6310 All-in One inkjet printer Verizon FIOS Internet Connection
    Wednesday, September 23, 2009 1:41 AM
  • The issue only occurs if you backup to a USB drive, but not occurs when you backup to local disk. Correct?

    I suspect that it is because the cluster size of the external hard drive is different with the local disk’s. You may open System Information by entering msinfo32 in Start Search box. Then expand Components/Storage/Disks, check the value of Bytes/Sector of each disk in the right pane.


    Arthur Xie - MSFT
    Thursday, September 24, 2009 4:00 AM
    Moderator
  • Bytes/Sector for both drives are 512.

    Remember - this happens whether I back up to a local external USB drive or a networked HDD.
    Windows 7 Professional RTM dual booting with Windows 7 RC (using RC to test Office 2010 in a test environment) 2 GB memory 160 HD Networked Gateway Laptop HP Officejet 6310 All-in One inkjet printer Verizon FIOS Internet Connection
    Thursday, September 24, 2009 11:46 AM
  • Do you have anything further to propose? The problem is continuing.

    I really do not want to test the completed, but reported backup image by attempting to restore it if there is another alternative.

    Two things:

    1. I know there is a way to run the backup from the command line. but I do not know the parameters. Could you tell me exactly how I should type in the command. Assume that I will be creating an image on my external USB drive which is designated as my g:\ drive, and that I will be creating it from my c:\ drive. If I do this, will a backup event log be created in the event viewer?
    2. My system is a dual booted system with a Ubuntu Linux partition. Could this be causing the problem (although I don't understand why this could be, since it is a totally separate partition and not an NTFS partition)?

    Windows 7 Professional RTM 2 GB memory 160 HD Networked (wired and wireless)Gateway Laptop HP Officejet 6310 All-in One inkjet printer Verizon FIOS Internet Connection
    Sunday, September 27, 2009 3:23 PM
  • I tried to restore an image and got a message to the effect that the system cannot be restored because the source volume is smaller than the target volume (I did not write down the exact message and since I did this from a rescue disk, I could not do a screen print). I assume that this is because of the 512k cluster that was not backed up.

    I created an image using Acronis True Image 2010 without receiving any such error message. I will try a restore with this and see it that succeeds.



    Windows 7 Professional RTM 2 GB memory 160 HD Networked (wired and wireless)Gateway Laptop HP Officejet 6310 All-in One inkjet printer Verizon FIOS Internet Connection
    Monday, September 28, 2009 2:10 AM
  • The following article introduced the command-line method and how we can check related events after backup. It will be helpful.

    Event ID 525 — Backup Set Integrity 

    Which hard drive is the active drive that contains the boot engine for Windows 7 and Ubuntu? If it is the C drive, that may be the problem. Because the Ubuntu MBR is 512 byte. Windows 7 system should not be able to back up the MBR to an external drive.

    The following blog introduces how to backup Ubuntu MBR.

    Backing Up the MBR

    You may get related information and discussion from the following Ubuntu forum.

    Ubuntu Forums 

    Important Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.


    Arthur Xie - MSFT
    Monday, September 28, 2009 2:31 AM
    Moderator
  • Ok - this may explain the 512K discrepancy, but does not resolve the problem. Microsoft should look to find a way for users to make a usable image backup - otherwise the entire image backup utility is worthless for anyone running a dual boot configuration.

    Given what you are saying, I think it isfair to say that the problem is not a bad cluster - it is a cluster that Windows does not recognize.

    Apparently it can be done, as I was able to create and restore an image backup successfully using Acronis True Image 2010.

    Windows 7 Professional RTM 2 GB memory 160 HD Networked (wired and wireless)Gateway Laptop HP Officejet 6310 All-in One inkjet printer Verizon FIOS Internet Connection
    • Marked as answer by blegs38552 Monday, September 28, 2009 3:14 AM
    Monday, September 28, 2009 3:14 AM
  • Hi,

    This error can occur if the last sector of a drive is corrupt. Unfortunately, chkdsk does not detect this failure and hence running chkdsk does not solve the problem. The workaround in this case is to extend or shrink the volume and then run chkdsk on it so that the failures are detected. Backup will then run successfully.

    Thanks,
    Sneha
    [MSFT]
    Tuesday, October 20, 2009 1:37 PM
  • Hi,

    This error can occur if the last sector of a drive is corrupt. Unfortunately, chkdsk does not detect this failure and hence running chkdsk does not solve the problem. The workaround in this case is to extend or shrink the volume and then run chkdsk on it so that the failures are detected. Backup will then run successfully.

    Thanks,
    Sneha
    [MSFT]
    Sneha,

    Can you please explain how one would go about "extending or shrinking the volume and then run chkdsk"?  I have just received the same error message at the conclusion of a system back up to my external USB drive.

    Thanks,
    DFrie_Burger
    Thursday, November 05, 2009 6:54 AM
  • Hi,

    Sorry for not providing detailed steps. Please do the following:
    1. Start -> Computer -> Right click -> Manage -> Storage -> Disk Management
    2. Right click on the problematic volume.
    3. Select Extend volume or Shrink volume depending on whether you want to extend or shrink the volume.
    4. Select any number > 512 K. (For instance, enter 10 MB).
    5. Click Finish.
    6. Now, launch Explorer.
    7. Right click on the volume.
    8. Select Properties and navigate to Tools.
    9. Under Error-checking, select 'Check now'.
    10. Select both options and click start.
    11. If this is the volume running Windows, it will give you a popup saying it cannot check the disk while it is running. In this case, select 'Schedule disk check'. This check will run next time you reboot your machine.
    12. Reboot your machine

    Now, retry your backup. It should succeed now.

    Thanks,
    Sneha
    [MSFT]
    Thursday, November 05, 2009 1:16 PM
  • I don't see any resolution to the problem.  i.e. DFrie_Burger never got back on this issue to see if Sneha's solution worked.  HOWEVER, I did just spend the last 5 hours doing what he/she [MSFT] said and it's BS.  I got the same error message despite shrinking the volume, error checking/fixing, and running another disk image backup. 

    If you are going to start a forum chain, at least have the decency of wrapping it up.  The [MSFT] answer left dangling in the air did not fix the problem for me.


    Sunday, March 20, 2011 1:26 PM
  • Ok after 5 hours trying to do this @#$@* disk image here is the point :

    Open Event Viewer, and find the log “Applications and Services Logs\Windows\Backup\Operational”. 
    There may be some clues. 

    Yes that's the KEY !!! thanks for that !

    in my case :

    -The backup operation that started at blablalbla has failed to back up volume(s) 'System Reserved'.
    Please review the event details for a solution, and then rerun the backup operation once the issue is resolved.

    -The backup operation that completed with warning(s) - Volume 'System Reserved' has developed new bad clusters. 
    This may be an indication of problems with your hardware. 3072 bytes have not been backed up because they could not be read. 
    Please run the CHKDSK /R command on 'System Reserved' and then rerun the backup operation.


    OK so the it llok like I have to repair System Reserved by launching a CHKDSK /F /R on system reserved

    Great ! But how do I do that Mr Microsoft ?

    Here is the trick :

    1.Control Panel/Administratives Tools/Computer Management/Disk Management
    2.Right Click on the System Reserved partition 
    3.Change Drive letter and path
    4.Add a letter W for example

    Once this is done you can see the Disk W: into your file explorer

    Right click on it then properties/tools and run check now

    In my case the errors were auto corrected just after that I run disk image again AND YEAAAH !

    So no need to shrink, Disable or uninstall anti virus....

    Hope this will help

    Thursday, January 03, 2013 5:29 AM
  • I am attempting to create a system image of my c:\ (Windows 7 Professional RTM) drive to a network drive. I keep getting the following message when the process completes:

    "New bad clusters were found on the source drive. These clusters were not backed up. (0x8078007D)"

    I tried running CHKDSK C: /R /F from an administrative command prompt. This necessitated restarting Windows and running CHKDSK prior to starting Windows. Following completion, I tried running the image creation again with the same message.

    Obviously, I do not want to try a restore since that could totally hose my system.

    I looked at the target drive and it does appear that a number of files and folders have been created, but whether these are any good or not, I am not in a position to say.

    Is this a documented bug, and is there a know fix?
    Windows 7 Professional RTM dual booting with Windows 7 RC (using RC to test Office 2010 in a test environment) 2 GB memory 160 HD Networked Gateway Laptop HP Officejet 6310 All-in One inkjet printer Verizon FIOS Internet Connection

    Friday, November 01, 2013 5:39 PM
  • Always amazes me that I often strike a problem, and search turns up that it started when Windows 7 was new (2009), and is still a problem 5 years later...

    But anyway: the steps below worked for me.

    NOTE the extra step of deleting the backup.

    ALSO NOTE THAT deleting WindowsImageBackup will delete ALL backups you may have. If you have backed up more than one PC on the backup drive, it will delete them ALL. Better to drill into WindowsImageBackup and delete ONLY the folder that is the same as your computer name.

    So. here we go:


    1) Close Backup and Restore.
    2) Delete the Image Backup folder (WindowsImageBackup) located in the destination (backup) drive.
    3) Open Disk Management. (Start/Computer/Manage/Disk Management)
    4) Note the size in GB for the partition Windows is installed on.
    5) Right click on the Windows partition (typically C:) and select ‘Shrink Volume’.
    6) In the ‘Enter the amount of space to shrink in MB’ box enter the value:  1024  (1.0GB)
    7) Click the ‘Shrink’ button. When the process has completed you will see ‘Unallocated’ space equal to 1.00 GB
    8) Right click on the Windows partition and select ‘Extend Volume…’.
    9) Click on the ‘Next’ button in the ‘Extend Volume Wizard’ window. The ‘Maximum available space in MB’ value should be 1024 (see step #6). Click the ‘next’ button to reclaim the unallocated space you created in step #7. Click the ‘Finish’ button.
    10) Disk Management should now report the size of the Windows partition equal to what you observed in step #4.

    That’s it, you’re done. You can now run the ‘Backup and Restore’ feature.

    Thanks to the link below, which also has screenshots of each step:

    http://www.pagestart.com/backuprestore0x8078007d.html


    G H




    • Edited by greenhart Monday, June 30, 2014 12:57 AM
    Monday, June 30, 2014 12:40 AM
  • SIMPLEST SOLUTION -

    "New bad clusters were found on the source drive. These clusters were not backed up. (0x8078007D)"

    I was getting the same error when trying to backup to external hard disk - Windows 7, Home Professional.

    I have installed Tweaking.com - Windows repair v 3.9.0 (updates will work)  and then  ran the complete repair (default) .

    It takes about 1 hour to do the repairs. Please restart afterwards. 

    Again attempted the system image option and YIPPEE - it worked.

    Please give a try - all the best. Tweaking is a fanatstic software - i have used it to solve many problems

    during last few years.

    Sunday, June 05, 2016 5:34 AM