Manually Removing Rapid Recovery Filter drivers (4033463)

Step 1: Clean the Registry

1. Remove AAVolFlt from Upper Filters

   • Navigate to HKLM\System\CurrentControlSet\Control\Class.
   • Locate the following GUID keys associated with the device classes:
     • Storage Volumes: {71A27CDD-812A-11D0-BEC7-08002BE2092F}
     • Storage Volume Shadow Copies: {533C5B84-EC70-11D2-9505-00C04F79DEAF}
     • Disk Drives: {4D36E967-E325-11CE-BFC1-08002BE10318}
   • Under each key, find the UpperFilters value.
     • If UpperFilters does not exist or does not contain AAVolFlt, no action is needed.
     • If AAVolFlt is the only entry, delete the UpperFilters value.
     • If multiple drivers are listed, edit UpperFilters and remove only the AAVolFlt entry.

2. Delete Rapid Recovery Driver Service Keys

   • Navigate to HKLM\System\CurrentControlSet\Services.
   • Delete the following keys if they exist:
     • AAFsFlt
     • AAVdisk
     • AAVolFlt
     • AAVStor

Step 2: Reboot the System

• Reboot the system after completing the registry modifications. If any issues arise, boot the system using the "Last Known Good Configuration" option to recover.

Step 3: Delete Driver Binaries

1. After rebooting, delete the following driver files if they exist:
   • C:\Windows\System32\Drivers\AAFsFlt.sys
   • C:\Windows\System32\Drivers\AAVolFlt.sys
   • C:\Windows\System32\Drivers\AAVDisk.sys
   • C:\Windows\System32\Drivers\AAVStor.sys

Step 4: Delete Metadata Files

1. The driver metadata files are stored in the \System Volume Information folder on each volume.
   • Modify the folder’s ACL to grant the Administrators group full access.
   • Delete the log files in the format AALog_{}.log.
   • Optionally, delete AAData.md and AAFailover.md files. These files are small, and if you plan to reinstall the product, it may be beneficial to retain them.