Have NIS on one of my XPSP3 snaps. Subs about to expire. Useful tool, I think.., PITA the way NIS just sweeps all the FPs away to quarantine. ( LOL other devs anti-rootkits !!) with no granular control re: "what do you want to do with this?" Updated to NIS 2011 for a trial: use FDISR (VSS) :copy/updated another snap: 1 Error: "...blah..blah..Index.qbs is the wrong size and has the wrong date" in the copied snap: redo: same error. Ok, try new snap: same error Investigate: chk disc: all good. Lenovo RnR ( a sys recovery tool ) has the same type of errors/problems with NIS and have a specific exclusion protocol. http://techrepublic.com.com/5208-1009-0.html?forumID=102&threadID=279199&start=0 Something about NIS and some open file. Turning tamper protection and autoscan off in NIS does not fix the problem. NIS 2011, afaics, can not be temp. shutdown. ( another pita) Data anchor "works" Exclude the file "works" just annoying to have to tweak. Anyone have similar probs. ?? Solutions ? ( anyone think Todd is still watching ?? ) Pete? Pandlouk? Stapp? croft ?