How to Recover from a failed ATI 2013 installation to ATI 2017
I have been a long term user of Acronis True Image, and indeed Disk Director for many years. This important application has been running on my PC virtually without any intervention from me for ages. Its backup images have saved the day on a few occasions!
With a plan to upgrade my computer under consideration, I still run with Windows XP. My ATI is the 2013 version, Build 6514.
Everything was fine until earlier in the year when I started to get problems with the program. It may be that the hard drive was simply becoming clogged with data. In a nutshell, my last known GOOD backups are all dated 11th April, and my backup scheduling no longer works.
For obvious reasons I am very nervous about messing about with this computer, as it still does most of what I need on a daily basis. However I am also aware of Acronis' recent promotion of ATI 2017, and would like to action its installation. I realise that my existing ATI images cannot simply be removed under Windows Explorer, as this will completely screw up the ATI database.
I would appreciate if someone could provide step-by-step instructions of the process to follow that will remove ALL TRACES of ATI 2013 from this PC, including wiping all the backup data files from its external SATA hard drive. I would then expect to purchase ATI 2017, and set it up from scratch to replicate how my partitions were being backed up until April 2016. I should point out that I also have Disk Director 11 Home installed.
Please remember... right now I have no means of recovery, so this procedure needs to be very low risk! I look forward to some kind soul taking pity on me!
Regards
Norrie
Steve, a comprehensive and helpful response. Thank you, it is appreciated.
Let me address each point in turn...
Having read more about the release of the new version, I had spotted the remarks pertaining to 2017's compatibility issues with XP. Not too bothered about old images, as I was really hoping to wipe my hard drive and start ATIH afresh. However I will be certain to retain all the files which should at least let me recover back to the machine's status in April.
At one stage, a few years back, I was really quite au fait with ATIH, and I have to admit that I am a bit rusty on it now to say the least! However I can still open ATIH 2013, but unfortunately can't remember how to delete existing tasks. Correction:- if I click on the little gear wheel icon (next to Back up now) in any task, two of the listed options are Delete and More>>Remove from the list.
Q) Which ones deletes the task so it no longer happens?
The KB article on Acronis Schedule Manager looks pretty straightforward to carry out. And I am reasonably confident that I can manage a Repair or Clean Install too.
So, Steve, in conclusion I think your recommendation to stick with ATIH 2013 is the correct one. I am continuing to use Win XP for now as my PC is too long in the tooth to support newer operating systems. I suspect it will be OK with Win 7, but that means virtually re-building the computer with new drivers and so on. My long term goal calls for an iMac, but sadly that's still a fair bit away!
Your signature seems to include links to everything I should need to sort this out. I have some other tasks in hand that I need to see to first. But this is in line for attention soon.
Meantime it would be helpful for you to jog my mind as to how I go about removing unwanted backup images from my hard drive, without corrupting the Acronis database.
Norrie, the option for Delete and More>>Remove from the list that you found via the little gear wheel, is the one to remove the backup task settings while leaving the backup files intact on your drive.
Once you have removed the task settings, then as far as the Acronis Database is concerned, it doesn't care what you do to the backup files unless you allow it to add them back in as existing backups or do this manually.
So, removing the backup task and cleaning out the scheduled tasks will stop any further attempts to run those tasks.
Fair enough Steve. So I just remove all the listed backup tasks, clean out the scheduled tasks, and dispose of all the old backup image files. Except of course for those at 11th April that I need to keep for now. I''ll have a go ASAP, but too busy today.
Hi Steve. No, I have not yet had the bottle to follow your steps for ATIH 2013 recovery! But I have played around a bit with the program to better understand just what files are currently on the two partitions on my external backup images drive.
Partition M: has backups of my System Drive C:, with the latest dated file being System_SSD_inc_b46_s2_v1.tib, significantly dated 11/04/16, which I believe to be the date when my ATIH last did its biz properly.
Partition N: has backups of my Data Drive D:, with the latest file being Data_SSD_inc_b1_s845_v1.tib. This is most likely the cause of my program crash, as this partition has just run out of space, and seems to just want to keep adding incremental files ad infinitum. Again 11/04/16.
Partition N: also stores differential backups of the entire PC, taken less often, with the last file shown as 9150_XP_Images_full_b48_s1_v1.tib, of 11/04/16 (April).
Some of the above files date back to 2012, so this application has run pretty well for a long time. None of these files list on the usual timeline along the botton. But they are shown in Recover Data>>Data Recovery>>Browse for Backup.
Hope to spend some time on this in the coming days, as I do need to fix this for my peace of mind. This message requires no response from you, as it is more to record the current file status for my own benefit!
Norrie, just some brief comments based on the file names you have given in the last update:
System_SSD_inc_b46_s2_v1.tib
This is backup #46 sequence 2, so you should have System_SSD_full_b46_s1_v1.tib to make a full version chain for this backup.
Data_SSD_inc_b1_s845_v1.tib
This backup may present more of a challenge as is backup #1 sequence 845 and would need to have every backup starting with Data_SSD_full_b1_s1_v1.tib followed by Data_SSD_inc_b1_s2_v1.tib and all subsequent sequences for S3 to S844 intact in order to be able to recover from this backup version chain.
9150_XP_Images_full_b48_s1_v1.tib
This may be your best bet if needed, as this is a full backup of your entire PC per your comments above, so should included both your C and D drives
Yes, Steve, I agree with your assessment of my present image status. And yes, 9150_XP_Images is my best recovery bet! The PC is a Dell 9150, hence the file name.
I think my next step is to verify just what chains are complete/usable. Also to re-visit the original task schedule details to establish what I was actually having ATIH do each week, what partition on what days etc. The idea was to spread the load on my CPU while ensuring that both partitions got backed up twice in the week (I think).
Of course there is no need to slavishly follow what was done before, but it'll provide a pointer for when I recover the app as per your instructions!
Just out of interest, I did verify completeness of the three image latest chains. All appear to be complete, even the very long Data_SSD chain. It was checked by the simple expedient of sorting files in descending order by date, and then visually scanning the sXXX numbers to ensure none were skipped. Interestingly, s770 has _v1, _v1-2, _v1-3 while _s748 has _v1 and _v1-2. This probably marks the stage where the N: partition was beginning to run out of space, and image files were sometimes to be split. Surprisingly there were no more breaks to the final _s845 entry.
After some ATIH "Not Responding" error messages, I have finally been able to start a new Task to save out an Emergency_9150_XP image of both my C: and D: partitions, as a prelude to following your recovery advice Steve.
After an earlier attempt had to be aborted due to lack of capacity on my usual hard drive, I decided to repeat the process using up free space on the QNAP TS-209 Pro II NAS normally reserved for My_(Sonos)_Music_Library. About half way thru now, and lookin' good!
A further indication though that my ATIH is not happy... a Comment added to this new task has also popped up on 2 from 3 of the original tasks too. Definitely wrong!
Due to domestic commitments I do not expect to do any further work on this today. But I feel that, provided this task completes and validates OK, at least I should be able to Restore to TODAY rather than April 11th should the repair go awry! Time well spent then!
Incidentally Steve, I meant to mention that I have Acronis Disk Director 11 Home Update 2 Build 11.0.2343 installed on this PC too. I seem to recall that some years ago when I first experimented with ATIH and made use of the Cleanup Tool that there may have been some shared sub-routines that got messed up.
Please comment... is what you recommend to repair my ATIH problem likely to mess up my DD 11?
Norrie, if you use the Acronis Cleanup Tool then this will remove DD11 too as well as ATIH. You should be able to download the latest installer for both programs from your Acronis account should you still use the tool.
As I thought Steve. The good news is that despite the program crashing (Not Responding) at critical points in the process, I was able to use Task Manager to stop ATIH and then re-start it, when I was able to carry on. So I now have an image on NAS of both the PC's SSDs, and this new image passed validation. I reckon I can confidently go ahead to repair as per your instructions, secure in the knowledge that I ought to be able to Restore if necessary.
Incidentally the long time taken to write this file, just under 100GB, and validate it (roughly 2 hours each), vindicates my decision some years ago NOT to backup via LAN connection to NAS!
Not sure when I will have time to try this, but soon I hope.
Your advice is most welcome and appreciated.
Norrie
I have now run through the process you outlined, Steve.
I was unable to delete tasks as ATIH simply goes "Not responding". Couldn't run the Schedule Manager either as "administrator", as I do not have the necessary password to get in.
I did manage a Repair Install, but not wholly successful. Decided to go for broke. Used the Control Panel>>Add or Remove Programs to remove a) DD 11 b) ATIH 2013. Next I ran the Cleanup Tool without issue, and then re-installed ATIH. I opted to let it scan my M: & N: drives for old backups, however only one task lists, and the timeslice for it shows only entries for 18th Feb & 11th Apr, both at 15:30, and both as 9150_XP_Images_full_b48_s1_v1. Surely wrong!
Have to stop for now, but next going to repeat this process but this time, after running the Cleanup Tool, I plan to wipe most of the M: & N: partitions too so the slate is clean. And that before a Clean Install. Bear in mind that I have a fresh PC backup image on my NAS, taken on Saturday. I hope this is OK, it did validate. I will attempt, as per your instructions, to leave the last full chain of each of my three backup types available.
Norrie, quick question, is your own account an Administrator one or not? ATIH needs Administrator privileges in order to perform many of its functions and should be run with such priveleges.
Yes, I believe I am listed as User 'Norrie' c/w Administrator privileges. I have not been able to play with my Clean Install for more than a few minutes, but the app frequently shows as "Not responding" on Task Manager. How does one ensure ATIH is being run with such privileges?
In fact, Steve, please list in detail the steps to follow to wipe all traces of ATIH including all "old" image files so that I am basically starting anew as if it had never been on the PC at all? Specifically how and at what step in the sequence to ditch the old stuff?
Norrie, if you look at Control Panel >> Users (User Accounts) and look at your account, it should show you as Administrator, and if so, you do not need to know the computer Administrator account password, as you do not need it to be able to run programs as Administrator.
For the Schedule Manager (or any other program), you can right-click on the program name or icon, then select the option to 'Run as administrator' from the drop-down menu listing shown.
To wipe all traces of ATIH from your system you need to do the following:
1. Uninstall ATIH & DD11 via the normal Control Panel options
2. Run the Acronis Cleanup Tool (using 'Run as administrator') - this will remove all traces of the Acronis programs from your system.
3. Restart the computer to complete the cleanup action.
4. To completely clean all your previous backup image files, you would need to either delete these from your backup drives where they are stored, or if these are the only files on those drives, format the drives. Please be careful when doing this that you only delete those files that are unwanted.
Certainly my User name is as an administrator, but I only managed a few minutes on the PC as SWMBO had other plans! Rt-click on the app took me straight into command line entry, with Task 0-0 IIRC. I did not run the Tool as Admin, nor restart after the Clean Install. So will repeat the entire process tomorrow when I expect to have more time.
Rather than format the M: & N: partitions, I will use Windows Explorer to remove unwanted chains before the Clean Install.
Steve, all is not exactly proceeding to plan! In User Accounts I am shown as Norrie Computer administrator. Only other account is Guest, and Guest account is off.
Yesterday I ran ATIH_Cleanup_Tool.exe, a file I created way back in 2013. I notice your link is to KB48668, which says it's a Cleanup Utility for ATIH2017. Although the eight images included in the KB (specifically Image 4), do include "True Image 2013 by Acronis" as a removal option covered by this tool.
Q1) Please confirm that it is CleanupTool.exe that I should be running?
Irrespective of which tool I choose, if I rt-click on its icon, select Run as...
Open File - Security Warning, select Run.
Run As pane opens...
Which user account do you want to run this program?
Current user (9150-PC\Norrie) is checked.
Protect my computer and data from unauthorized program activity -- checked.
Select OK... and nothing happens.
Repeat, checking instead
The following user: User Name Administrator, leave password blank, click OK.
Acronis Cleanup Tool...
Unable to log in:
Logon failure: user account restriction. Possible reasons are blank passwords not allowed, login hour restrictions, or a policy restriction has beenb enforced.
Just can't seem to get passed this step today to actually get the Cleanup Tool to Run!
Norrie, my apologies, I had forgotten that you are still using Win XP where things work a little differently than in the later versions of the OS, and where there is no option to 'run as administrator' when you right-click on a program name! I had to go find an old XP box and do a quick check to remind myself!
Ok, the Cleanup Tool should be the one from my signature link below - this works for all versions from 2010 upwards regardless of what the KB document says initially - the screen shots show the true range of versions supported.
In this case with XP, just run the Cleanup Tool (latest version 48) then follow the prompts shown - I doubt that you have any Extended Capacity disks unless you having any greater than 2TB that weren't recognised by Windows as being larger than that, so you should ignore that option when shown. Restart after the tool has run.
For information, the Administrator account is not normally used or visible and I have never worked out what the default password is for this account, though I have reset them lots of times when needed by using various tools for this purpose - I use the Lazesoft Rescue Suite most often which allows you to set a blank password for this account.
As a diversion from trying to remove all traces of ATIH2013 (and failing), I took a little time to run Windows Explorer to delete all but the latest chains of System_SSD and 9150_XP_Images. When this was completed, and despite the huge number of incremental files (845) associated with Data_SSD, there is now so much capacity available on drive N: that I have just left this 11th April 2016 data image chain in place for now. Hopefully will never need to use it, and it can be deleted later.
Incidentally I am now seeing two little files pop up on M: and N: -- ENCRYPTION.KEY2, a KEY2 File of 1KB, and INSTRUCTIONS, a MSG2 File of 2KB.
Q) Any idea what has created these, Steve?
OK re Administrator function on XP. And no Extended Capacity drives in use here.
Acronis Clean Up Utility 2.0 has opened OK now that the admin bit is skipped.
Q) How does one check it is latest version 48? Downloaded via your link, it pretty well has to be!
Now going to run through the app.
Cleanup Tool ran OK, no need to modify any Registry settings as per KB. Rebooted and Reinstalled ATIH2013, a painless albeit slow process.
The PC is presently executing a new backup as I type, a new backup to M:\My backups\Win_XP_New (C)_full_b1_s1_v1.tib.
Two other tasks are listed...
9159_XP_Images_full_b48_s1_v1 of 11th April 2016. On N:, this is the only such chain I still have. Correct.
Data_SSD_full_b1_s1_v1, but shown as version 242 of 3rd Feb 2014. On N:, this is Not Correct, as there should be 845 versions as per our previous discussion.
The program also still has a tendency to hang "Not Responding", although it usually starts again after a delay.
"Explore all backups" and it goes busy for ages, with no apparent disk activity. And the Emergency_9150_XP dump of last Saturday, done on my NAS is just not showing up at all so far.
Better than it was, but not 100% convinced all is yet OK!
Norrie, I would strongly recommend disconnecting from the internet / disconnecting the M & N drives if external, and running a comprehensive full system scan for malware.
See webpage: Sophos Troj/Locky-DG where the presence of files with these names is an indication of ransomware being present!
I can highly recommend using the AVG Rescue CD (or USB drive) to do a full offline antivirus scan of your system by booting from the AVG Rescue CD or USB stick - you should keep an ethernet cable connected to allow AVG to update with the latest antivirus definitions.
Mmm! Interesting and worrying too! I already have AVG2015 running on this PC, and its protection is up-to-date. But I do see what you mean vis-a-vis Sophos!
Update: Win_XP_New (C)w completed and validated OK, although at first it reported that the user had cancelled the operation. But now it states that "the backup is valid".
Will probably repeat the process so that I also have a good Drive D: dump, before I experiment further. Even with a possible virus, any backup is better than none. Will backup quickly again as soon as this virus issue is sorted. Probably not much more can happen today. I have just completed an eBay sale, and have follow up work to do on that now, plus it's European soccer on telly tonight as well. So viruses not my #1 priority right now!
But seriously I do appreciate all your advice on this, and I will follow up ASAP.
Just a couple of wee questions though...
You say "I would strongly recommend disconnecting from the internet / disconnecting the M & N drives if external"
Q1) So why do I disconnect my external drive before the scan? Surely these wee files need to be removed too?
And then you say "...you should keep an ethernet cable connected to allow AVG to update..." implying I DO need to stay connected. Bit confused about internet connection.
Q2) Please be more explicit? I had a quick look at your links, and I think the virus scan process from USB Stick itself looks easy enough to do. The videos will be useful.
Summary... I feel positive progress has been made today, but still work to do.
FYI, managed to squeeze in an AVG 2015 Whole Computer Scan. Database is up-to-date.
3 High severity Trojans detected
1 Medium severity Corrupted Executable detected
1 Excluded file.
All secured to Virus Vault.
Steve, I must apologise. Some of my posts, especially where I used italics for file names, seem to have become corrupted. Hope you can still make enough sense of it. Otherwise I will edit without using italics tomorrow!
Norrie
You say "I would strongly recommend disconnecting from the internet / disconnecting the M & N drives if external"
Q1) So why do I disconnect my external drive before the scan? Surely these wee files need to be removed too?
And then you say "...you should keep an ethernet cable connected to allow AVG to update..." implying I DO need to stay connected. Bit confused about internet connection.
Norrie, disconnecting from the internet / disconnecting the M & N drives if external, is simply an immediate precaution to try to limit the potential impact this type of virus can have - if it relies on a control network, then removing the Internet connection can help try to disrupt the malware, while removing the 2 drives will stop it from possibly encrypting any of the content of those drives.
The AVG Rescue CD / USB stick runs completely outside of Windows by booting into a safe Linux OS environment and can establish a network connection to download antivirus updates to make the offline scan the most effective it can be. You can also point it to the definitions stored on your local drive but given the presence of existing trojan viruses, this could be deemed to be potentially compromised. The key benefit of doing the offline scan is that you can know that there are no active malware processes running that were started as Windows starts unless you have hit a rare root virus that can infect the BIOS / firmware.
When I have deloused virus infected systems, I would normally remove the boot drive and scan it on a separate system where I can deploy a number of different antivirus / antimalware products, i.e. AVG for offline scan, Comodo Internet Security for a Windows based scan, Malwarebytes Antimalware to look for other types of malware etc. This type of approach means that most malware has no real place to hide.
The worst type of virus currently out there is ransomware which will encrypt all your files / data and unless you have encountered one for which there is a known method of decrypting the files, then you either have to lose this data, pay the ransom (not recommended or guaranteed to get it back!) or rely on having good backups of the data prior to it being encrypted.
Steve, I'm going to switch over to PM later for further discussion on the sad state of my aged XP PC. The content of posts is straying too far from ATIH I fear for this thread, to be fair.
However, for OP reading this, after carrying out your instructions yesterday to remove and clean up all traces of ATIH 2013, I have to say that the Clean Install seems to be performing rather better today. I have backed up and validated my C: and D: SSDs successfully, and a complete machine C: & D: backup is happening as I type. Obviously if there is a virus issue, I need to repeat this once the problem is fixed!
The post corruption point I made in Post #25 is not happening today. The only thing I have done, apart from an AVG 2015 Whole Computer Scan last night, is to delete all ENCRYPTION.KEY2 and INSTRUCTIONS MSG2 files, using the simple expedient of Rt-click the file name, Select Unlocker 1.9.1, Action Delete, OK and the file is gone. I am not suggesting for a moment that this obviates the need to follow up on your AVG Rescue recommendation. This I will do ASAP. But everything seems altogether more stable today. Fingers crossed.
Norrie, responded to your PM earlier.
Screwed up my earlier PM attempt, but done now.