Return
-
Title
Rapid Recovery Client fails to boot after Agent install or upgrade -
Description
After successfully installing or upgrading the Rapid Recovery Agent, the protected machine encounters a boot failure, often presenting as a blue screen. This issue may also include the following stop error:
- Stop Error Code:
STOP: 0xc0000359 - File:
\windows\system32\DRIVERS\AAFsFlt.sys
- Stop Error Code:
-
Cause
The issue is caused by the incorrect installation of the filter driver on the agent machine, leading to a blue screen or stop error when attempting to send commands to it. -
Resolution
⚠Registry Editing Warning: This procedure involves modifying the Windows Registry. Make sure to back up the registry before making any changes to avoid potential data loss. If further issues arise, or if you are unsure about any step in this process, contact support for additional assistance before proceeding.
To resolve this issue and restore the machine's ability to boot, follow these steps to disable the Rapid Recovery filter drivers and upper filters:1. Boot from a Bootable CD or Windows Recovery Environment (WinRE):
- Open a Command Prompt.
- Type
regeditand press Enter to open the Registry Editor.
2. Load the SYSTEM Hive:
- Highlight
HKEY_LOCAL_MACHINE (HKLM). - From the Registry Editor menu, select
File > Load Hive.... - Navigate to
C:\Windows\System32\Config, selectSYSTEM, and click Open. - Enter
Restored_HKLMas the Key Name and click OK.
3. Disable Rapid Recovery Filter Drivers:
- Expand
HKLM\Restored_HKLM\ControlSet001\Services. - Locate the following registry keys and set their
Startvalues to4(Disabled):
Start Values Table:
Registry Subkey Value Name Type Value AAFileFilter Start REG_DWORD 4 AAFsFlt Start REG_DWORD 4 AAVolFlt Start REG_DWORD 4 AAVStor Start REG_DWORD 4 AAVDisk Start REG_DWORD 4 Value Reference:
0 = Boot
1 = System
2 = Automatic
3 = Manual
4 = Disabled4. Remove AAVolFlt as an Upper Filter:- Navigate to
HKLM\System\ControlSet001\Control\Class. - Identify the following GUIDs for device classes where AAVolFlt may be listed as an upper filter:
- Storage Volumes:
{71A27CDD-812A-11D0-BEC7-08002BE2092F} - Storage Volume Shadow Copies:
{533C5B84-EC70-11D2-9505-00C04F79DEAF} - Disk Drives:
{4D36E967-E325-11CE-BFC1-08002BE10318}
- Storage Volumes:
- Under each GUID, check for a multi-string value named
UpperFilters. - If
UpperFiltersdoes not exist or does not containAAVolFlt, do nothing. - If
AAVolFltis the only driver listed, delete theUpperFiltersvalue. - If other drivers are listed alongside
AAVolFlt, remove only theAAVolFltstring.
5. Unload the Hive:
- Highlight
Restored_HKLM. - From the Registry Editor menu, select
File > Unload Hive..., and confirm by clicking Yes.
6. Restart the Machine:
- Close the Registry Editor and restart the machine. The system should now boot successfully.