Disk Management / Partition Problem? *Post Acronis True Image Recovery

A post from a ways back seems similar, yet a bit different. Here, Acronis True Image Recovery Partition Questions

*I did a Full Recovery using Acronis True Image ("free", lol, for SanDisk & WD disks). Firstly, I'm looking for a new back-up application as Acronis is loaded with processes constantly running, phoning home, and the UI is confusing for me. Any recommendations for Back-Up software?

The reason for this post is check out the C: Drive. C: drive partition scheme looks messed-up, no? The recovery wouldn't reboot when I first attempted, but after changing BIOS to UEFI the computer started booting (I'd changed to AHCI after installing Win10's default UEFI). Anyway, see screenshot please?

Aside from re-installing, is there any way to fix the oddly labeled & partitioned C: Drive? Or, since the machine boots and appears to work, don't sweat it? A DISM Health Check noted repairs could be made, yet they wouldn't take when I attempted DISM restore. After trying most DISM commands, I ran SFC and either "no errors" or "repairs made", can't recall... but as of this post SFC says "no errors".

Thanks in advance for any tips or feedback!

Win10Pro 22H2 19045.3803 (Acronis True Image for WD v2023, Build 39676).

Looks ok. You appear to have two microsoft "recovery" partitions. You could get rid of the one that is not live, but it is not essential.

There might be a small msr partition ( not visible in diskmgmt ). You can get a fuller graphical view with a 3rd party partition manager like diskgenius free version or aomei free version

DiskGenius Download Center | Free Download DiskGenius

Pentagon said:

@BoomShaka
1. Acronis is a reliable Backup&Recovery Software package. Sometimes it helps to read the manual and even the NSA never noticed any phone call Acronis did.
2. Disk 0 looks ok. Just at the beginning and the end you have small unused partitions. They are not Recovery Partitions! So it makes sense to increase the last partition to appr. 1000 MB and convert it to a Recovery Partition. In your case it can be done from diskmanagement.
The first partition is useless, but you should leave it as it is. The 2nd partition is not shown in diskmanagement and is probably 16 or 128 MB. They are not important.
3. The System partition (EFI) is the boot partition and contains the bootmanager
4. Rightclick on your Acronis (F:) partition and select expand to add the unused unallocated space of 3,01 GB to (F:)

Thanks @Pentagon! So my beef with Acronis is that I do not have Active Monitoring checked, yet quite a few Acronis processes are always running. For the life of me, I can't kill "updater.exe"...

Process Explorer Screenshot was prior to opening Acronis -to double-check Active Monitoring was "OFF". *Also, MBAM (malwarebytes is Live AV), and MBAM recently flagged an Acronis process. False flags aren't uncommon, but for Acronis?? Oh wow, it was the "updater.exe" (which again, can not be turned OFF :P )... NL but owned by RU? Is Acronis related to Kapersky? Hmm
Again, this last screenshot was taken now (ProcExp screengrab taken prior)...

I think Disc 0 used to be labeled "Recovery Partition", but not sure. The last C: partition of 577 MB might have been unallocated for overprovisioning? Interesting that it doesn't read "unallocated", huh... not my machine & can't recall how it was set-up. Anyone have thoughts on overprovisioning SSD drives in 2024?

Thanks again, my biggest concern was EFI boot partition. You've provided reassurance :) Ohh, and the F: drive with the unallocated HDD space... Im weird with #1024 and even #'s. Lol, it's probably in the HDD's best health to extend F: Good lookin out!

dalchina said:

Want to check which is your active Recovery partition?

From an admin command prompt run
reagentc /info

Thank you dalchina! nice little tip! (just learned how "Thank" & Reputation works... would have given a thumbs-up but I'm all out of thumbs!) Much obliged


- - - Updated - - -

Pentagon said:

@BoomShaka
run cmd (admin) copy&paste the following commands
reagentc /disable
diskpart
sel disk 0
list part ==> find the last partition number (I believe that it is 5)
sel par # (replace # by the last number)
delete partition override
sel par X (replace X by #-1) (means 5-1=4)
extend
SHRINK DESIRED=1024 MINIMUM=1024
create partition primary id=de94bba4-06d1-4d40-a16a-bfd50179d6ac
gpt attributes =0x8000000000000001
format quick fs=ntfs label=”Recovery”
exit
reagentc /enable
reagentc /info
The recovery should be active and working now
overprovisioning is something else. unallocated space is not overprovisioning.
After each input you get a system response.
The Active Protection is a nice feature. It protects the backups from being deleted and manipulated.
Make sure that you have a Recovery-Boot-Stick.

Very cool @Pentagon! Those commands are exactly what I was hoping were possible. Two follow up questions if I may?
1- I'm learning difference between powershell & command prompt. Are the tools interchangeable for commands like ^above, or sfc/scannow, for eg?
2- Any thoughts on MBAM flagging @IP 193.37.69.33 "C:\Program Files (x86)\Acronis\Agent\bin\updater.exe" ? If you think it's a good idea I'll turn Acronis active protection "on".

Thanks again!

@BoomShaka
Some commands are interchangeable. Therefore I always mention, what to use. Powershell is much more powerful and allows you to use many scripts, But my School-English is too bad to explain all that.
I switched the active protection on. Just when I delete old backups I switch it off.
Keep in mind that you run the "Western Digital"-Version. If you remove the WD-disk, you can't use Acronis any longer

\\?\GLOBALROOT\device\harddisk0\partition5\Recovery\WindowsRE
sel par # ==> is sel par 5
sel par X ==> is sel par 4

Thank you @Pentagon! Good information, very helpful. Danke schön