Acronis True Image 2020/2021 - remove active protection


Acronis provides ransomware active protection (based on bitdefender scan driver).
If you like, you can safety remove it.
Beware: Use this tutorial at your own risk and responsibility.

Run Windows in Safe Mode.
Login with admin rights.
Open CMD as admin.
Execute following commands in order
Batch:
ren "%CommonProgramFiles(x86)%\Acronis\ActiveProtection\anti_ransomware_service.exe" "anti_ransomware_service.ex_"
ren "%ProgramFiles%\Acronis\CyberProtect\cyber-protect-service.exe" "cyber-protect-service.ex_"
ren "%ProgramFiles(x86)%\Acronis\Agent\bin\adp-agent.exe" "adp-agent.ex_"
ren "%ProgramFiles(x86)%\Acronis\Agent\bin\adp-rest-util.exe" "adp-rest-util.ex_"

sc config "AcronisActiveProtectionService" start= disabled
sc config "AcronisCyberProtectionService" start= disabled
sc stop bddci
sc delete bddci
sc stop ngscan
sc delete ngscan
sc stop AcronisCyberProtectionService
sc delete AcronisCyberProtectionService
sc stop AcronisActiveProtectionService
sc delete AcronisActiveProtectionService

reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AcronisCyberProtectionService" /f
reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AcronisActiveProtectionService" /f
reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bddci" /f
reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ngscan" /f

Reboot system to normal mode.
Launch Acronis True Image app.
Protection Applet should be gone.

Revert changes: Remove and install App again.
 
Windows Build/Version
Windows 11 22H2 22621.xxx
Acronis provides ransomware active protection (based on bitdefender scan driver).
If you like, you can safety remove it.
Beware: Use this tutorial at your own risk and responsibility.

Run Windows in Safe Mode.
Login with admin rights.
Open CMD as admin.
Execute following commands in order
Batch:
ren "%CommonProgramFiles(x86)%\Acronis\ActiveProtection\anti_ransomware_service.exe" "anti_ransomware_service.ex_"
ren "%ProgramFiles%\Acronis\CyberProtect\cyber-protect-service.exe" "cyber-protect-service.ex_"
ren "%ProgramFiles(x86)%\Acronis\Agent\bin\adp-agent.exe" "adp-agent.ex_"
ren "%ProgramFiles(x86)%\Acronis\Agent\bin\adp-rest-util.exe" "adp-rest-util.ex_"

sc config "AcronisActiveProtectionService" start= disabled
sc config "AcronisCyberProtectionService" start= disabled
sc stop bddci
sc delete bddci
sc stop ngscan
sc delete ngscan
sc stop AcronisCyberProtectionService
sc delete AcronisCyberProtectionService
sc stop AcronisActiveProtectionService
sc delete AcronisActiveProtectionService

reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AcronisCyberProtectionService" /f
reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AcronisActiveProtectionService" /f
reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bddci" /f
reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ngscan" /f

Reboot system to normal mode.
Launch Acronis True Image app.
Protection Applet should be gone.

Revert changes: Remove and install App again.
Hello FadeMind,

THX! This solution helped to activate BypassIO again ;-)

C:\Windows\System32>fsutil bypassIo state c:\
BypassIo auf „c:\“ wird derzeit unterstützt
Speichertyp: NVMe
Speichertreiber: BypassIo-kompatibel

Before I got always that minifilter ngscan is not compatible.

Good Job!

KR Gerd
 

My Computer

System One

  • OS
    Windows 11
Ok. First it looks good but got a lot of errors from Acronis sheduler. Downloaded sheduler exe from Acronis but was Not really shure what to so so I decided to so a restore.
 

My Computer

System One

  • OS
    Windows 11
Back
Top Bottom