How to completely remove Acronis True Image Home v10

[applegrew]

I recently (2 or 3 dats before) installed Acronic True Image Home v10 on my
Intel Centrino Duo 1.73GHz
1GB RAM
100 GB HDD

with Windows XP Home SP2

laptop, but after its installation I started facing strange problems like suddenly my optical mouse used to go dead. It required unplugging and then replugging (around 3-4 times) to get it working back to normal.

The other problem problem I faced (and I am still facing) is that sometimes any of my softwares (particularly Explorer.exe) hogs up 50% of my CPU for a simple task like just seeing the properties or opening a folder. The three other common victims, showing this problem is Internet Explorer 7, Eclipse and Azureus. The way to correct them is forcibly closing and then restarting them (around 1-2 times).

I keep my computer updated always and I have no spywares and viruses. I have checcked it uing ZoneAlarm, Spybot and Panda Online Anti-virus and anti-spyware scanner.

After I uninstalled Acronis my mouse woes got corrected but the excess CPU hogging is still a problem.

I yesteday checked the services installed and running on my computer and found that Acronis (like the wretched Symantec) has left behind its s***. >:( This acronis service is 'Acronis Scheduler2 Service'. I have disbled it but the CPU problem persists. Please give me a list of all files and registry entries this Acronis leaves behind.

[bodgy]

Just out of interest, have you downloaded any MS updates recently?

Acronis Scheduler2 is the only service in service.msc.

In system config - (msconfig) under start up may be TimounterMonitor and TrueImageMonitor. After that you can do a registry search for Acronis. The only one to my knowledge that this will miss will be the snapapi files in the lower and upper filters entry.

I doubt that TI is the cause of your CPU use - unless actually running a task or the gui TI it consume zero resources.

Again, something strange as far as your mouse is concerned within TI - from the rescue CD yes there are known problems (with v9 don't know about v10).

If you have been anywhere near YouTube recently, it has been known for their file streamer to lock up the CPU in a loop, which will consume a very high proportion of CPU time. Another culprit can be a power supply on it's way out. If you're hearing an increased whine of the CPU fan, check it is dust and crud free - if it still happens I'd be prepared for your PS to die within the next month or so.

Colin

[applegrew]

"Just out of interest, have you downloaded any MS updates recently?"
Yes

"The only one to my knowledge that this will miss will be the snapapi files in the lower and upper filters entry."
snap api, lower and upper filters? I didn't get it.

"If you're hearing an increased whine of the CPU fan, check it is dust and crud free..."
My fan whine is like before. If u r pointing towards increased CPU temp for its goin in loop then I think this is not the case, because I have been playing Oblivion regularly for hours.

"...if it still happens I'd be prepared for your PS to die within the next month or so."
PS->You mean processor? Oh my God!

[applegrew]

an update

I tried searching the registry using term acronis and I found a huge colony out there.

I have deleted many of them but I am uable to delete any of them related to that Scheduler service. e.g.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_TIFSFILTER]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_TIFSFILTER\0000]
"Service"="tifsfilter"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Acronis True Image FS Filter"

is not deletable. How do I remove that service.>:(

[Menorcaman]

Hello applegrew,

Try the following:

Right click on the HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_TIFSFILTER hive and select "Permissions". Under "Permissions for everyone" tick the "Allow" checkbox and then go back and see if you can delete the hive.

Also, I'm not sure how much can be read across to TI 10.0 but this <previous Acronis Support reply> (http://www.wilderssecurity.com/showpost.php?p=773771&postcount=8) describes how to manually uninstall the TI 9.x series.

Regards

[BlueZannetti]

applegrew,

Perhaps the information in these threads will be of assistance:

Remove True Image totally? (http://www.wilderssecurity.com/showthread.php?p=376168#post376168)
Uninstall True Image (http://www.wilderssecurity.com/showpost.php?p=773771&postcount=8)

Blue

edit: As usual - Menorcaman is right on the job! You're in excellent hands

[applegrew]

-{ Quote: "Hello applegrew,

Try the following:

Right click on the HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_TIFSFILTER hive and select "Permissions". Under "Permissions for everyone" tick the "Allow" checkbox and then go back and see if you can delete the hive.

Also, I'm not sure how much can be read across to TI 10.0 but this <previous Acronis Support reply> (http://www.wilderssecurity.com/showpost.php?p=773771&postcount=8) describes how to manually uninstall the TI 9.x series.

Regards" }-

I have read ur and BlueZannetti's pointed out threads.
I have downloaded and ran (as directed) the schedmgr.exe. But the service entry is still there; is a reboot needed?

[Bubba]

-{ Quote: "I have read ur and BlueZannetti's pointed out threads.
I have downloaded and ran (as directed) the schedmgr.exe. But the service entry is still there; is a reboot needed?" }-As part of that thread (http://www.wilderssecurity.com/showthread.php?p=773771#post773771) pointed to above by the other members....a reboot is suggested in the last step.

-{ Quote: "14.) Reboot the computer.
" }-HTH,
Bubba

[applegrew]

-{ Quote: "As part of that thread (http://www.wilderssecurity.com/showthread.php?p=773771#post773771) pointed to above by the other members....a reboot is suggested in the last step.

HTH,
Bubba" }-

UPDATE: I have now rebooted but the service entry is still there.

[bobmitch]

I removed all but ONE entry in my registry to do with the Acronis scheduler...cannot remove that one...even with administrative permission. Go figure!

[Menorcaman]

Personally, before proceeding with the actual manual uninstall, I would CTRL + ALT + DEL into the Windows Task Manager and end the following processes:

schedul2.exe
schedhlp.exe
TimounterMonitor.exe
TrueImageMonitor.exe

Regards

[applegrew]

-{ Quote: "Personally, before proceeding with the actual manual uninstall, I would CTRL + ALT + DEL into the Windows Task Manager and end the following processes:

schedul2.exe
schedhlp.exe
TimounterMonitor.exe
TrueImageMonitor.exe

Regards" }-

None of them r running. I have also disable the Acronis Scheduler2 Service.

[bodgy]

-{ Quote: ""Just out of interest, have you downloaded any MS updates recently?"
Yes

PS->You mean processor? Oh my God!" }-

No, I meant your power supply.

I'd check very carefully to see if the CPU usage problem started after downloading an update. If you have system restore enabled, you should be able to roll back as a restore point is normally made when the updates are installed.

As for the entry that refuses to be deleted, try using regedt32 or more likely boot into safe mode and remove the registry entry there.

Colin

[applegrew]

-{ Quote: "No, I meant your power supply.

I'd check very carefully to see if the CPU usage problem started after downloading an update. If you have system restore enabled, you should be able to roll back as a restore point is normally made when the updates are installed.

As for the entry that refuses to be deleted, try using regedt32 or more likely boot into safe mode and remove the registry entry there.

Colin" }-

Hello colin. Ur regedt32 thing worked. I never knew of this thing. I have always used regedit to edit my registry. How regedit and regedt32 different?

I searched the registry for 'Acronis' and found 6 more entries not mentioned in the complete removal post. I have deleted all of them and now that service entry is gone.

But, I would like to know if I have done the right thing in deleting them, i.e. I by chance didn't delete too much. Below is the list of keys I deleted

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ACRSCH2SVC]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ACRSCH2SVC\0000]
"Service"="AcrSch2Svc"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Acronis Scheduler2 Service"

---------
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_TIFSFILTER]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_TIFSFILTER\0000]
"Service"="tifsfilter"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Acronis True Image FS Filter"

-----------------
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AcrSch2Svc]
"Type"=dword:00000110
"Start"=dword:00000004
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):22,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,61,00,\
6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,43,00,6f,00,6d,00,6d,00,6f,\
00,6e,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,41,00,63,00,72,00,6f,00,\
6e,00,69,00,73,00,5c,00,53,00,63,00,68,00,65,00,64,00,75,00,6c,00,65,00,32,\
00,5c,00,73,00,63,00,68,00,65,00,64,00,75,00,6c,00,32,00,2e,00,65,00,78,00,\
65,00,22,00,00,00
"DisplayName"="Acronis Scheduler2 Service"
"DependOnService"=hex(7):52,00,70,00,63,00,53,00,73,00,00,00,00,00
"DependOnGroup"=hex(7):00,00
"ObjectName"="LocalSystem"
"Description"="Provides task scheduling for Acronis applications."

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AcrSch2Svc\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AcrSch2Svc\Enum]
"0"="Root\\LEGACY_ACRSCH2SVC\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001
---------------------------------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_ACRSCH2SVC]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_ACRSCH2SVC\0000]
"Service"="AcrSch2Svc"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Acronis Scheduler2 Service"

--------------------------------
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_TIFSFILTER]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_TIFSFILTER\0000]
"Service"="tifsfilter"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Acronis True Image FS Filter"
---------------------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AcrSch2Svc]
"Type"=dword:00000110
"Start"=dword:00000004
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):22,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,61,00,\
6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,43,00,6f,00,6d,00,6d,00,6f,\
00,6e,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,41,00,63,00,72,00,6f,00,\
6e,00,69,00,73,00,5c,00,53,00,63,00,68,00,65,00,64,00,75,00,6c,00,65,00,32,\
00,5c,00,73,00,63,00,68,00,65,00,64,00,75,00,6c,00,32,00,2e,00,65,00,78,00,\
65,00,22,00,00,00
"DisplayName"="Acronis Scheduler2 Service"
"DependOnService"=hex(7):52,00,70,00,63,00,53,00,73,00,00,00,00,00
"DependOnGroup"=hex(7):00,00
"ObjectName"="LocalSystem"
"Description"="Provides task scheduling for Acronis applications."

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AcrSch2Svc\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[curlysir]

-{ Quote: "Hello colin. Ur regedt32 thing worked. I never knew of this thing. I have always used regedit to edit my registry. How regedit and regedt32 different?

I searched the registry for 'Acronis' and found 6 more entries not mentioned in the complete removal post. I have deleted all of them and now that service entry is gone.

But, I would like to know if I have done the right thing in deleting them, i.e. I by chance didn't delete too much. Below is the list of keys I deleted

" }-

Have you had any problem as a result of deleting all these entries?

I tried all of the items mentioned before and the Acronis scheduler service was still there. I then delete all the registery items referring to the scheduler in the registery.

The service finally is gone.

The schedmgr.exe program would not remove it.

I have left some entries that you reference because I was not sure what they are for. I would like to totally remove all traces of TI10 from the registery.

I wish Acronis would update there removal instructions to include TI10.

I will continue to use TI10 but I will do it from the program CD.