Acronis True Image home 2010 leftover tdrpman (tdrpmn273)

Discussion in 'backup, imaging & disk mgmt' started by normanm, May 26, 2014.

Thread Status:
Not open for further replies.
  1. normanm

    normanm Registered Member

    Joined:
    Feb 25, 2007
    Posts:
    38
    I'm not going to rehash the discussion of uninstalling ATIH 10-11-12. I uninstalled using the supplied uninstaller, then a lot of things started to go wrong (lost most USB functioning) and I deleted (without knowing the right sequence) a number of registry entries until I solved the most egregious problems. But Acronis, which like a bacillus that can linger for years then become active, is giving me problems again. This time it's the driver tdrpman.sys or, as it's also known in the registry, depending on the build, tdrpmn273 (for the build). If you've ever installed ATIH check Device Manager and look at the driver details for ALL your drives, you'll find tdrpmn(xxx) listed as one of the drivers. In the registry, here are the leftover entries for that particular driver:

    Data fields are: Key, Entry's name, Value, Entry last modified, Tags

    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E967-E325-11CE-BFC1-08002BE10318}\, UpperFilters, tdrpman273 ..., 13.05.2014, 09:00 PM,
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E967-E325-11CE-BFC1-08002BE10318}\, UpperFilters, tdrpman273 ..., 13.05.2014, 09:00 PM,
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E967-E325-11CE-BFC1-08002BE10318}\, UpperFilters, tdrpman273 ..., 13.05.2014, 09:00 PM,
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F}\, LowerFilters, tdrpman273 ..., 13.05.2014, 09:02 PM,
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F}\, LowerFilters, tdrpman273 ..., 13.05.2014, 09:02 PM,
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F}\, LowerFilters, tdrpman273 ..., 13.05.2014, 09:02 PM,
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\tdrpman273\, {KEY}, {KEY}, 26.05.2014, 10:50 AM,
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\tdrpman273\, ImagePath, system32\DRIVERS\tdrpm273.sys, 26.05.2014, 10:50 AM,
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\tdrpman273\, {KEY}, {KEY}, 26.05.2014, 10:50 AM,
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\tdrpman273\, ImagePath, system32\DRIVERS\tdrpm273.sys, 26.05.2014, 10:50 AM,
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\tdrpman273\, {KEY}, {KEY}, 26.05.2014, 10:50 AM,
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\tdrpman273\, ImagePath, system32\DRIVERS\tdrpm273.sys, 26.05.2014, 10:50 AM,
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\tdrpman273\Enum\, {KEY}, {KEY}, 26.05.2014, 11:55 AM,
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\tdrpman273\Enum\, {KEY}, {KEY}, 26.05.2014, 11:55 AM,

    As I said, the driver is listed in DM driver details under every drive. And I'm guessing it's causing the registry leaks I see every shutdown on one of my hard drives. When I turn the drive off (pull the plug), no EVENT 1530. When I shutdown with the drive on, I get the User Profile Service leaks. I think the Try/and/decide driver may be active, or activated, by the shutdown routine, and that may be causing the leaks. At any rate, if I simply delete these keys wholesale, I get a BSOD. They must be deleted in a sequence. I'm sure I need to deal with the current control set upper and lower filers first. Then what, current control set 001, the oo2 then the other keys? Anyone have any idea how to do this. (Yes, I've tried the so-called cleanup utility, twice, and twice have BSOD.

    Perhaps Acronis tech support will finally weigh in on this issue. There are no step-by-step manual instructions for uninstall ATIH10(build273). And Arvy's thorough and clear steps for ATIH12 blue screen an ATIH10 build, or at least the leftover from 10 on my machine. Thanks.
     
  2. normanm

    normanm Registered Member

    Joined:
    Feb 25, 2007
    Posts:
    38
    Followup: Checked the driver details of all disks listed in DM and each had trdman273.sys drivers list, every disk. So I first deleted the drivers from the drives, then cleared the registry of all trdman273 or trdmn entries. The key was recognizing that YOU MUST ALSO CLEAR THOSE ENTRIES FROM THE UPPER AND LOWER FILTERS IN ControlSet001 and ControlSet002 as well as CurrentContolSet. The order I used was oo1, then 002 then CurrentControlSet. The 1530 events at shutdown stopped, except when there was a problem installing or uninstalling or updating another program, and I've read that registry leaks are common in such cases.
     
Loading...
Thread Status:
Not open for further replies.