Macrium Error Code:0x8004230f and Windows System Restore Error Code:0x81000203 Solution Way

dark_wielder

Level 2
Thread author
Mar 7, 2020
67
Hi everyone!

I've been getting errors in the title for a while.

Macrium Error Code:0x8004230:
failed-to-create-volume-snapshot.png

(the pictures are not mine.)

Windows System Restore Error Code:0x81000203:
Fix-System-Restore-Error-Code-0x81000203-on-Windows-10-e1571654222869.png

(the pictures are not mine.)

Because of this situation i can't use macrium but I got stubborn and started researching. All the services were working as they should, there were no errors.

Yeah, when I was about to go crazy I found the culprit, based on this source. --> System Restore not working: error 0x81000203 - Kaspersky Removal Tool.
Made sense because I recently used kaspersky removal tool.

Some programs (AV removal tools such as Kasperky, and a few others) have been known to delete relevant VSS registry keys causing this error. The expected output if this is the case is that vssadmin list volumes will return no results. This error may also be appearing in event viewer:

(IVssSnapshotProvider::IsVolumeSupported() failed with 0x8000ffff [hr = 0x8000ffff f, Catastrophic failure]).

and I took the recommended step for repair

...at some point it looks like the Kaspersky Removal Tool has deleted the registry key - this registry key is part of the Volume Shadow Copy service, which handles system restore points.
To fix it - please carry out the following steps:
  1. Open a new Notepad window
  2. Copy / Paste the below script into Notepad, and save as "kaspersky_fix.reg":
    Code:
    Windows Registry Editor Version 5.00
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{71a27cdd-812a-11d0-bec7-08002be2092f}]
    "UpperFilters"=hex(7):76,00,6f,00,6c,00,73,00,6e,00,61,00,70,00,00,00,00,00
This will update the "UpperFilters" value at this location to be "volsnap" (the hex code decodes to "volsnap"). Once you've copy/pasted the registry key, save this in a location you can easily access (e.g. desktop), and double click on the script to run the fix.

You will need to restart your machine once the fix has run, then check if you get the same issue accessing System Restore.

and incredible, but true, all of the errors have been fixed. I open this topic to guide people who will experience similar errors.
 
Last edited:

CyberTech

Level 44
Verified
Top Poster
Well-known
Nov 10, 2017
3,247
Because of this situation i can't use macrium but I got stubborn and started researching. All the services were working as they should, there were no errors.

Thats a reason i cant use it too because i was running Windows 10 (Custom OS) like fast performance, trick etc which the system restore disabled, some services disabled/stopped running to get speed up thats why its mess up i tried to find out so many times no repair it was my fault because i didnt read disable/enable lists i was jump to download custom OS lel i had decided to use Windows 10 official...
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top