I'm trying to make a backup copy of C:/hiberfil.sys
without rebooting the system. So booting to a linux is not possible. The Windows system is currently running.
Running hobocopy c:\ e:\ hiberfil.sys
outputs:
HoboCopy (c) 2006 Wangdera Corporation. [email protected]
Starting a full copy from c:\ to e:\
Creation of directory failed with error Access is denied.
(Error number 5) on directory \\?\e:\
(I'm running the stable x64 hobocopy release.)
Going through some of the comments by the author on a thread here, I tried:
• icacls \hiberfil.sys /grant Administrator:(D,WDAC)
:
\hiberfil.sys: The process cannot access the file because it is being used by another process.
Successfully processed 0 files; Failed processing 1 files
• .. and attrib -h -s \hiberfil.sys1
:
Unable to change attribute - C:\hiberfil.sys
• .. and psexec -s "%userprofile%/downloads\hobocopy-1.0.0.0-W2K3-Vista-x64-Release/hobocopy" C:\ e:\ hiberfil.sys
:
PsExec v2.2 - Execute processes remotely
Copyright (C) 2001-2016 Mark Russinovich
Sysinternals - www.sysinternals.com
HoboCopy (c) 2006 Wangdera Corporation. [email protected]
Starting a full copy from C:\ to e:\
Creation of directory failed with error Access is denied.
(Error number 5) on directory \\?\e:\
C:\Users\new2/downloads\hobocopy-1.0.0.0-W2K3-Vista-x64-Release/hobocopy exited on MQHPPV045TX2 with error code 1.
• .. and psexec -s %userprofile%/downloads\hobocopy-1.0.0.0-W2K3-Vista-x64-Release/hobocopy C:\ e:\f1 *.sys
:
PsExec v2.2 - Execute processes remotely
Copyright (C) 2001-2016 Mark Russinovich
Sysinternals - www.sysinternals.com
HoboCopy (c) 2006 Wangdera Corporation. [email protected]
Starting a full copy from C:\ to e:\f1
Copy of file failed with error Access is denied.
(Error number 5) on file \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy26\hiberfil.sys
C:\Users\new2/downloads\hobocopy-1.0.0.0-W2K3-Vista-x64-Release/hobocopy exited on MYWINDOWSCOMNAME with error code 1.
Nothing works.
I can copy c:\pagefile.sys
simply using hobocopy c:\ e:\f1 hiberfil.sys
without changing any access rights, but c:\hiberfil.sys
just absolutely refuses to be copied.
Does SYSTEM
even have permission to hiberfil.sys
?
Anyone tried copying hiberfil.sys
live before? Is this even possible?
ps
usingSYSTEM
yet it doesn't work. (see the output of the cmd above). Are you sure it's locked for exclusive access bySYSTEM
or is it something else.. DoesSYSTEM
even have permission to hiberfil.sys?