Acronis True Image: BSOD due to snapman.sys

Symptoms

BSOD during computer bootup related to snapman.sys after removal of Acronis software. Windows does not boot in normal or safe mode.

Cause

Snapman service not properly removed from the Windows registry.

For example, you have used Acronis Cleanup Utility, but have not completed all steps.

Solution

Use a WinPE-based bootable media to remove the snapman service from the unbootable Windows system:

1. Boot the machine with WinPE media. See this article, if you need help with building a WinPE media.
2. Click to select the command prompt window, which is behind the Acronis True Image window (alternatively, use Alt+Tab key combination to switch between windows):
   
3. Type:
   regedit.exe
   
   
4. In the left pane, click to select HKEY_LOCAL_MACHINE:
   
5. In the File menu, select Load Hive:
   
6. Navigate to the Windows system that is requiring repair. In most cases, it will be listed as drive C:
   
7. Navigate to Windows, then System32, and then config. Select the SYSTEM hive and click Open:
   
8. Specify the name REMOTE_SYSTEM and click OK:
   
9. Navigate to HKEY_LOCAL_MACHINE\REMOTE_SYSTEM\ControlSet001\Control\Class\{4d36e967-e325-11ce-bfc1-08002be10318}:
   
10. In the right pane, locate UpperFilters:
    
11. Check whether snapman is listed under UpperFilters.
12. If it is present, right-click UpperFilters, and then click Modify:
    
13. Remove snapman, and then click OK. Be careful not to remove any other entries.
    
14. Navigate to HKEY_LOCAL_MACHINE\REMOTE_STSTEM\ControlSet001\Control\Class\{71a27cdd-812a-11d0-bec7-08002be2092f}.
15. In the right pane, locate UpperFilters.
16. Check whether snapman is listed in UpperFilters.
17. If it is present, right-click UpperFilters, and then click Modify. Remove snapman, and then click OK. Be careful not to remove any other entries.
18. Navigate to HKEY_LOCAL_MACHINE\REMOTE_SYSTEM\ControlSet001\Services:
    
19. Scroll down and locate the snapman service. Right-click snapman, and then select Delete to remove the service:
    
20. Click to select HKEY_LOCAL_MACHINE\REMOTE_SYSTEM:
    
21. In the File menu, select Unload Hive. This will save the changes you made.
    
22. Reboot your computer. Windows should start normally.