{"id":1749,"date":"2013-02-05T17:32:14","date_gmt":"2013-02-05T06:32:14","guid":{"rendered":"http:\/\/support.cybersecure.com\/?p=1749"},"modified":"2015-02-16T17:14:01","modified_gmt":"2015-02-16T07:14:01","slug":"shadowprotect-will-not-install-when-detecting-acronis-is-installed","status":"publish","type":"post","link":"http:\/\/support.cybersecure.com\/?p=1749","title":{"rendered":"ShadowProtect will not install when detecting Acronis \/ snapman.sys is installed."},"content":{"rendered":"

Problem:<\/h2>\n

The problem is the ShadowProtect can’t be installed due to of Acronis TrueImage is installed and the file snapman.sys and snman380.sys existence.<\/p>\n

Cause:<\/h2>\n

ShadowProtect cannot install because it detects that snapman.sys or snman380.sys exist in the C:WindowsSystem32Drivers directory<\/p>\n

Deleting the snapman.sys or snman380.sys without removing the registry entries can cause the \u00a0system to crash with a blue screen (BSOD<\/abbr>) or spontaneously reboots while ShadowProtect backups are running. This problem can occur when Acronis TrueImage is installed on the system. Acronis snapshot driver (snapman.sys or snman380.sys) causes these crashes when ShadowProtect attempts to create a backup.<\/p>\n

Resolution:<\/h2>\n

Currently, the only solution from StorageCraft is to uninstall\u00a0Acronis TrueImage completely and reboot.<\/a><\/p>\n

Sometimes the TrueImage uninstaller does not remove the snapman.sys or snman380.sys from the system. If crashes during backups persist after uninstalling TrueImage, follow these instructions to manually remove the driver.<\/p>\n

NOTE:\u00a0Do not simply delete snapman.sys or snman380.sys, as this will cause your system to fail to boot or blue screen on boot.<\/strong><\/span><\/p>\n

    \n
  1. Uninstall the Acronis True Image and reboot.<\/li>\n
  2. Download the Acronis removal tool in this link:\u00a0http:\/\/kb.acronis.com\/sites\/default\/files\/content\/2009\/11\/6177\/abr_cleanup.zip<\/a>,\u00a0run it in CMD as a Administrator and reboot.<\/li>\n
  3. If the snapman.sys still being detected by Shadow Protect installer. You had modify the registry by doing the following: \u00a0(NOTE: Backup the registry before you start modifying it).<\/span><\/strong><\/li>\n
  4. \n
      \n
    1. Go to the\u00a0Start | Run…<\/strong> Type “regedit” and click OK.<\/li>\n
    2. In the registry editor, navigate to:HKEY_LOCAL_MACHINESystemCurrentControlSetControlClass{4D36E967-E325 -11CE-BFC1-08002BE10318}.<\/li>\n
    3. Remove the ‘snapman’ entry from the “UpperFilters” values. This will unregister the snapman.sys driver as a PnP filter for disk devices.<\/li>\n
    4. Check the “LowerFilters” Key (if it exists) and remove any reference to Snapman.<\/li>\n
    5. \"\"<\/a><\/li>\n
    6. Next, navigate to:HKEY_LOCAL_MACHINESystemCurrentControlSetControlClass{71A27CDD-812A -11D0-BEC7-08002BE2092F}.<\/li>\n
    7. Remove the ‘snapman’ entry from the “UpperFilters” values. This will unregister the snapman.sys driver as a PnP filter for logical volume devices.<\/li>\n
    8. Check the “LowerFilters” Key (if it exists) and remove any reference to Snapman<\/li>\n
    9. \"\"<\/a><\/li>\n
    10. Next, navigate to:HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicessnapman<\/li>\n
    11. Add a REG_DWORD value named DeleteFlag with a value 1 inside this ‘snapman’ key. To do this, go to the\u00a0Edit | New |\u00a0DWORD Value<\/strong>. Type the name ‘DeleteFlag’, then double-click the icon next to it to enter the value of 1. Click OK. Next, double-click the Start REG_DWORD value inside the snapman key to change its value to 4 (disabled).<\/li>\n
    12. Reboot<\/li>\n
    13. Navigate to\u00a0C:WindowsSystem32Drivers<\/strong> and rename\u00a0snapman.sys<\/strong> to snapman.old. if snapman.sys is not found also look for\u00a0snman380.sys.<\/strong><\/li>\n
    14. Change the settings so that hidden and system files are shown as well if the files are not found with a search.<\/li>\n
    15. Reboot (Important: This will insure that Snapman.sys have been removed successfully. If it has not, the machine will blue screen. You will need to reboot the computer into safe mode and ensure that the process is completed properly before you will be able to boot ‘normal’ again.)<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

      Notes:<\/strong><\/p>\n

      <\/strong>If Snapman.sys or Snman380.sys are found on the computer and after the\u00a0removal of the files and installation of ShadowProtect, the computer blue screens on boot, then snapman registry values were not removed properly.<\/p>\n

      Warning:<\/span><\/h4>\n

      This solution involves editing the Windows registry. It is strongly recommend that you make a backup of the Windows registry and the OS before making any changes to the registry. Incorrect use of the Windows registry editor may result in permanent data loss or corrupted files. Modify only the keys that are specified. Only persons who are experienced in the use of the registry editor application should modify the registry.)<\/p>\n

       <\/p>\n

       <\/p>\n","protected":false},"excerpt":{"rendered":"

      Problem: The problem is the ShadowProtect can’t be installed due to of Acronis TrueImage is installed and the file snapman.sys and snman380.sys existence. Cause: ShadowProtect cannot install because it detects that snapman.sys or snman380.sys exist in the C:WindowsSystem32Drivers directory Deleting … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[5,153,15],"tags":[],"_links":{"self":[{"href":"http:\/\/support.cybersecure.com\/index.php?rest_route=\/wp\/v2\/posts\/1749"}],"collection":[{"href":"http:\/\/support.cybersecure.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/support.cybersecure.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/support.cybersecure.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/support.cybersecure.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1749"}],"version-history":[{"count":17,"href":"http:\/\/support.cybersecure.com\/index.php?rest_route=\/wp\/v2\/posts\/1749\/revisions"}],"predecessor-version":[{"id":2821,"href":"http:\/\/support.cybersecure.com\/index.php?rest_route=\/wp\/v2\/posts\/1749\/revisions\/2821"}],"wp:attachment":[{"href":"http:\/\/support.cybersecure.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1749"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/support.cybersecure.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1749"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/support.cybersecure.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1749"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}