Volume Shadow Copies Disappearing

[Ben]

I'm at service pack 2. I have enabled volume shadow copies on our d:
drive. C: drive is where the OS is installed. D: drive only contains
user files.

I am getting the following three application log events:

Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 8193
Date: 2/17/2008
Time: 2:05:35 AM
User: N/A
Computer: MTSRV1
Description:
Volume Shadow Copy Service error: Unexpected error calling routine
IMultiInterfaceEventControl::GetSubscriptions. hr = 0x800401fd.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2d 20 43 6f 64 65 3a 20 - Code:
0008: 20 49 4e 43 53 45 43 48 INCSECH
0010: 30 30 30 30 30 33 31 37 00000317
0018: 2d 20 43 61 6c 6c 3a 20 - Call:
0020: 20 49 4e 43 53 45 43 48 INCSECH
0028: 30 30 30 30 30 32 39 32 00000292
0030: 2d 20 50 49 44 3a 20 20 - PID:
0038: 30 30 30 30 30 33 30 38 00000308
0040: 2d 20 54 49 44 3a 20 20 - TID:
0048: 30 30 30 30 35 35 39 36 00005596
0050: 2d 20 43 4d 44 3a 20 20 - CMD:
0058: 43 3a 5c 57 49 4e 44 4f C:\WINDO
0060: 57 53 5c 53 79 73 74 65 WS\Syste
0068: 6d 33 32 5c 76 73 73 76 m32\vssv
0070: 63 2e 65 78 65 20 20 20 c.exe
0078: 2d 20 55 73 65 72 3a 20 - User:
0080: 4e 54 20 41 55 54 48 4f NT AUTHO
0088: 52 49 54 59 5c 53 59 53 RITY\SYS
0090: 54 45 4d 20 20 20 20 20 TEM
0098: 2d 20 53 69 64 3a 20 20 - Sid:
00a0: 53 2d 31 2d 35 2d 31 38 S-1-5-18

Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 12291
Date: 2/17/2008
Time: 2:05:35 AM
User: N/A
Computer: MTSRV1
Description:
Volume Shadow Copy Service error: Error on creating/using the COM+
Writers publisher interface: BackupShutdown [0x8000ffff].

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2d 20 43 6f 64 65 3a 20 - Code:
0008: 43 4f 52 53 4e 50 53 43 CORSNPSC
0010: 30 30 30 30 32 31 33 33 00002133
0018: 2d 20 43 61 6c 6c 3a 20 - Call:
0020: 43 4f 52 53 4e 50 53 43 CORSNPSC
0028: 30 30 30 30 32 30 39 35 00002095
0030: 2d 20 50 49 44 3a 20 20 - PID:
0038: 30 30 30 30 30 33 30 38 00000308
0040: 2d 20 54 49 44 3a 20 20 - TID:
0048: 30 30 30 30 35 35 39 36 00005596
0050: 2d 20 43 4d 44 3a 20 20 - CMD:
0058: 43 3a 5c 57 49 4e 44 4f C:\WINDO
0060: 57 53 5c 53 79 73 74 65 WS\Syste
0068: 6d 33 32 5c 76 73 73 76 m32\vssv
0070: 63 2e 65 78 65 20 20 20 c.exe
0078: 2d 20 55 73 65 72 3a 20 - User:
0080: 4e 54 20 41 55 54 48 4f NT AUTHO
0088: 52 49 54 59 5c 53 59 53 RITY\SYS
0090: 54 45 4d 20 20 20 20 20 TEM
0098: 2d 20 53 69 64 3a 20 20 - Sid:
00a0: 53 2d 31 2d 35 2d 31 38 S-1-5-18

Event Type: Error
Event Source: EventSystem
Event Category: (51)
Event ID: 4609
Date: 2/17/2008
Time: 2:05:35 AM
User: N/A
Computer: MTSRV1
Description:
The COM+ Event System detected a bad return code during its internal
processing. HRESULT was 80070057 from line 64 of d:\nt\com\complus\src
\events\tier1\subscription.cpp. Please contact Microsoft Product
Support Services to report this error.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


I've been pouring over newsgroups and knowledge base searches. It
looks like most answers address pre-service pack 2 issues.

Thanks in advance.