Log in

View Full Version : Phantom Share


Scleros
Jul 7, 2009, 02:04 PM
I just want to throw this out there in case someone has run into it before:

I have a Windows XP SP3 box I often do backups to using Acronis True Image. When using Acronis there appears a "Could" share in the networking tree for the XP machine, as well as all the intended shares. The "Could" share isn't accessible with any account credentials of the XP machine. I've also checked the XP machine with Computer management and both "NET VIEW" and "NET SHARE" commands which don't list a "Could" share. This "Could" share has only appeared within the last month or two and could be related to an Acronis Update or a SP3 installation on the XP machine.

:confused:

chuckhole
Jul 8, 2009, 07:18 AM
This can happen when a folder that is shared has been deleted before properly removing the share. I have seen this with programs that create shares are uninstalled and do not properly cleanup the old share or do not have permissions that once existed to remove the share.

Take a look in your registry at the following key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\lanmanserver\Shares

Look for the phantom share name and the physical path associated with it. Create this folder and reboot your computer. Allow the share to be properly setup during reboot and then go and remove the share and then delete the folder.

Your past entries in the System Event Log will have an error during the reboot that will also point to the share not being found.

Scleros
Jul 8, 2009, 07:59 PM
This can happen when a folder that is shared has been deleted before properly removing the share...

Thanks for your response. That scenario didn't occur to me. However, the phantom share isn't listed at that registry key. All the entries are for valid existing shares. I also searched the registry for the share name "Could" without finding any entries except for error message strings containing the word.

Next I think I'll point Acronis at another machine with a duplicate share setup and see if the phantom share shows up in the list and also run it by Acronis support.