Quantcast
Channel: Reboot.pro
Viewing all 6812 articles
Browse latest View live

Use winload.efi from Windows 8

$
0
0

First of all in my first post here let me congratulate all of you on building such an extensive body of knowledge related to the Windows boot process. The amount of quality information here is really astonishing!

 

What I am trying to do is coerce a 13" Macbook Air Early 2015 into booting Windows 7. Apple specifically says W7 is not supported but cannot hurt trying :) (They recommend using W8 or W8.1 which do install work just fine.) This is their first firmware that does not have BIOS emulation / CSM mode available, and both the standard boot manager as well as rEFInd only show EFI-compatible bootloaders. W7 UEFI installer immediately goes into a blank screen but (long story short) I did get a UEFI-compatible W7 installed / imaged on the HDD and apropriate entries added to the BCD. However, like the installer, it will not boot, going straight into a blank screen and hanging there forever once W7 is selected in rEFInd.

 

Avenue One

Knowing that (1) Windows 8 works just fine and that (2) the hang seems to occur early on, I hoped that "simply" replacing a known-good winload.efi with one from W8 would get me started. Since its job is to mostly initialize hardware and then run ntoskrnl.exe I hoped this should not be too bad. Alas, my W7 install with winload.efi from W8 seems to get a little further: it displays a message that ntoskrnl.exe's signature could not be verified and allows me to go back to the F8 menu. Just for kicks I then replaced ntoskrnl.exe as well as its dependencies (BOOTVID.DLL, hal.dll and kdcom.dll) but got a crash soon after.

 

Do not yet know enough about the interplay between winload.efi and ntoskrnl.exe to judge if disabling signature verification is all I need to do or that there is so much communication between the two that they're utterly incompatible beyond surface-level hackery.

 

Avenue Two

Try to debug the boot process and see where it hangs. However, (1) Air does not have a serial port, (2) I do not yet have the required NET20DC debug cable, and (3) someone recently did not have much luck debugging even bootmgfw.efi with serial so I'm not sure I'm going to have much luck debugging a later-in-the-process EFI program with USB.

 

Summary

I do have programming experience but this is way more low-level than I have ever tried. Also, do have IDA but do not know what to look for yet, especially lacking the symbol files. Will thus be grateful if any of you could point me in the right direction. 

  • Do you think I should chase forcing W8's winload.efi to work with W7 or will I be better off looking for that USB debug cable already?
  • Is there some way I can learn — without a debug cable — at what step is W7 hanging to make sure it's winload.efi and not ntoskrnl.exe that is the root of the problem?
  • Looking at all this and knowing much more than I do, what likelihood would you guesstimate there is of making this to a successful end?

(Final remarks:

  • I did have a cursory search here as well as on Google but came back empty-handed. There are many threads on Air+W7 but all of them immediately conclude "not supposed to be done, sorry”.
  • No, I'd much rather spend a few days making it run natively than use a virtual machine.)

problem with NTFS partition and data recovery again [new topic]

$
0
0

Just successfully recover lost partition with the help of The Expert

http://reboot.pro/topic/20952-problem-with-ntfs-partition-and-data-recovery/#entry197482

 

and now i was given a desktop that won't boot all the way.

 

booted with WinPE to check disk:

PLPPART32 v0.1  20070403  by Elmar Hanlhofer  http://www.plop.at
Using physical drive 1

Drive geometry:
  Media Type         : FixedMedia
  Cylinders          : 19457
  Tracks per Cylinder: 255
  Sectors per Track  : 63
  Bytes per Sector   : 512

NR  ID  BOOT     SS  SH   SC    ES  EH   EC     LBAST    LBASEC  SIZE
-------------------------------------------------------------------------------
1  0x07 *[0x80]   1   1     0   63 254  1023        63 287370657 137.03 GByte
2  0x07          63 254  1023   63 254  1023 287386785  25189920 12.01 GByte
3  0x00           0   0     0    0   0     0         0         0 0.00 MByte
4  0x00           0   0     0    0   0     0         0         0 0.00 MByte

I have tried http://www.cgsecurity.org's TestDisk. Program could not recover partition 1.

 

Computer brand: hp

some hidden data stored in sectors [1-62] for recovery purpose

 

attached mbr and partition1 boot sector and backup boot sector

 

Attached Files

undefragmented copy

$
0
0

There is a way to copy a file defragmented to a free space defragemented?

Often I copy a file to a device that has sufficienten space defragmented but the file is fragmented after copying and again I have to defragment the entire disk.

 

PXE chain SCCM 2012 R2 WDS

$
0
0

Followed this:

http://sysmagazine.com/posts/175669/

 

or at webarchive:

 

http://web.archive.org/web/20150404200500/http://sysmagazine.com/posts/175669/

but with a difference, that I am still using my existing PXE menu from a different PXE server, but just added to existing default this entry:

label sccm
menu label Boot to SCCM 2012 R2
COM32 pxechn.c32
APPEND 10.0.0.86::smsboot\x86\wdsnbp.com -W

which starts booting from SCCS PXE, but crashes as it can not find its BCD store:

\\ssccm-server\REMINST\SMSTemp\2014.10.30.11.15.17.01.{10CEDB89-9093-44D6-BF1B-0FA357C08F58}.boot.bcd

I hate how SCCM is not configurable in any way, but have to live with it.

So does anybody know how to make it work?

I do not want to use SCCS PXE as default, as it means that my iso images are transferred by TFTP (currently I boot ipxe undionly.0 which does the transfer by http - which is way faster!)

sebus

 

Edit

 

There is

-o 66.x=xx:xx:xx:xx -S 

option, but I could not make it work either...

Acronis true image 2015/2016

$
0
0
does anyone can make acronis true image 2015/2016 work in winpese?

Running Windows 95 inside browser

Open file dialog, save as dialog, browse for folder dialog not working in WinPE5 x64

$
0
0

If you have the issue in the title, where these are working in 32-bit WinPE but not 64-bit WinPE - you need to add SysWOW64\comctl32.dll AND replace System32\comctl32.dll with one from a full Windows install (WinPE version seems to be trimmed down)

 

That took an inordinate amount of time to figure out, hence posting here.

Basic batch Menu using arrows keys?

$
0
0

Hi,

i'm using WinPE and i'm creating menus with choice command.

But i want to use arrow keys to navigate my menus. is it possible?

Thanks


HSF+ Driver for Win8 PE

$
0
0

Friends some script to integrate HFS+ driver in Win8PE, I have already tried but failed.

 

Thanks

Mini-WinFE

$
0
0

Posted Image

File Name: Mini-WinFE
File Submitter: misty
File Submitted: 14 Oct 2013
File Updated: 04 Jul 2014
File Category: Projects

This project is based on MistyPE. It's been scaled down and developed specifically for digital forensics acquisitions. Mini-WinFE has been co-developed with Brett Shavers to facilitate a simplified method for building a Windows Forensic Environment (WinFE).

Full documentation is included in the project download and here.

All you require to create a WinFE in a matter of minutes is the Mini-WinFE download, a Windows Source DVD (or mounted disc image) and any of the third party applications you want to include in the build - the WAIK or ADK is not required.

Supported applications include -
  • CloneDisk (included)
  • DMDE (included)
  • Forensic Acquisition Utilities (included)
  • FTK Imager (copied from local install)
  • HWiNFO (included)
  • LinuxReader (downloaded automatically)
  • MW Snap (included)
  • NT Password Edit (included)
  • Opera (included)
  • Sumatra PDF Reader (included)
  • WinHex (copied from local install)
  • X-Ways Forensics (copied from local install)
  • Write Protect Tool (included)
For changelog, see here

Click here to download this file

Adding syswow64 to Win10PE

$
0
0

Trying to work back through this script: http://w8pese.spam.net/Projects/Win8PESE/Build/5-Wow64.script

 

So far I've added all the regkeys, copied the entire syswow64 folder from a fully working Win10PE SE image to my the image I'm working on, copied the patched smss.exe into system32, copied the syswow64 three core files into system32, copied all the entries from winsxs, and copied all the entries from system32\catroot.

 

Unfortunately when trying to boot the image it crashes early in boot with "PROCESS1_INITIALIZATION_FAILED". Which some people say is related to bootcat.cache under system32\codeintegrity but this file does not exist in either of the PE images.

 

Have I missed something from the script?

 

EDIT: Just copied the original smss back, no luck, so it's not related to that in any way.

Zalman ZM-VE200 HDD enclosure Mini Review

$
0
0
Originally brought up in the topic
http://reboot.pro/8944/

Zalman ZM-VE200 HDD enclosure. Better then the older model the ' I-Odd 2501 USB disk enclosure

By default, the virtual drive shows up as a BD-ROM drive on your computer, so even if you don’t have a Blu-ray drive, you kind of do with the ZM-VE200

bluray.jpg

Just received mine thru the mail.
zalmandrive.jpg

The ZALMAN ZM-VE200 is based on the licensed design from Iodd.
More detailed review and some great tips[ZM-VE200 megatechnews.com Review]

ZM-VE200 has some great overal improvements from the get go. Well done so far in my testing.

On watching the video on Disassembling the iodd [Video for Disassembling ].
you will notice that the person disassembling the device use's a bit of force to open the case. Not so with the ZM-VE200.
I was a bit afraid after watching the iodd video of breaking something.

With Disassembling the ZM-VE200 there is no more struggle to take it apart in order to insert the drive into the case.

To insert youre drive on iodd 2501 was harder as you can see from the picture you had to disassemble it.
iodd.jpg

With the ZM-VE200 the only thing you do is an easy 4 steps no disassembling . Just beautiful. mmmm! What a relief.

1
z1.jpg
2
z2.jpg
3
z3.jpg
4
z4.jpg

Boot "any" ISO image or boot "all" ISO images ...

$
0
0
TANSTAAFL:
http://en.wikipedia.org/wiki/TANSTAAFL

There Ain't No Such Thing As A Free Lunch

Myth: Any .iso is the same as another one, thus you can boot "any" .iso

Fact: Each and every .iso has it's own peculiarities. For each sigle, specific .iso a single, specific solution may be found ;). (or may be NOT ;))

Generally speaking:

The problem is the "ANY" .iso.

Very little has changed since this thread:
http://www.boot-land.net/forums/index.php?showtopic=808

In a nutshell:
ALL DOS based .iso usually work or can be made to work easily
SOME Linux based .iso work, ALL of them can be made to work (not so easily)
ONLY RAMDISK (from Server 2003 SP1 or R2, NOT "gold", NOT SPS2 - limited to 512 Mbyte images) NT based images are known to work

This is not "limited" by grub4dos or other bootmanager, but by the actual way the .iso images are built and, in the case of NT based images, by the lack of a suitable driver.

With plenty of RAM there is a Commercial Ramdisk driver capable to go over the 512 Mb limit.

In other words, there is not (yet) a one-size-fits-all solution, each .iso has it's own "story" and needs "particular" attention:

  • some work "as-they-are"
  • some need a few, easy changes
  • some need complex, difficult/undocumented changes (and a solution may even not exist yet)

Of course there are "families" of similar .iso's, thus it is very possible that an existing solution, working for one of the "members of the family" can be used succesfully for another "members of the family", but there is actually no guarantee that it will work, the exception being DOS based .iso images, that usually ALL work when mapped via grub4dos (hd32) or (0xFF) mapping or equivalent Syslinux/memdisk method.

There is a specific thread RESERVED FOR REPORTS OF SUCCESSFUL SETUPS using the (hd32) or (0xFF) mapping approach:

grub4dos, .iso images and (hd32) or (0xFF) mapping
Post here ONLY reports of working setups!

http://www.boot-land.net/forums/index.php?showtopic=5041

If the "whatever" .iso you want to boot is not in that list, do SEARCH on the Forum for your specific .iso/product/OS BEFORE starting a new thread.

Please DO NOT start yet another generic "How do I boot a .iso image?" kind of thread, we already have several of them, in time we became fond of them, and don't want them to be put in the background by "new arrivals" ;)

Again, generally speaking:

For Windows 2K/XP/2003 based builds you need a RAMDISK based .iso build (search for keywords BootSDI, RAMDISK.SYS, Firadisk, WinVblock) AND read, before anything else, and attentively this seemingly unrelated thread:
http://www.boot-land.net/forums/index.php?showtopic=4952
AND links given within it to get a general idea of the RAMDISK booting approach.
In any case they are all part of the same "family", thus one of the solutions in the "grub4dos, .iso images and (hd32) or (0xFF) mapping" thread should apply, possibly with some small tweak.

ALL Vista/2008/Windows 7 build are of the same "family" and the solutions in the "grub4dos, .iso images and (hd32) or (0xFF) mapping" thread should apply.

For Linux based builds there is often a partial workaround which consists into extracting from the .iso only the vmlinuz (kernel) and initrd (initial ramdisk file), and as well some of the solutions in the "grub4dos, .iso images and (hd32) or (0xFF) mapping" thread may apply, though it is more probable that some tweaking/changes of the contents of the .iso (on Linux side) will be needed.


In other words:
  • your mileage may vary
  • stop asking how many miles per gallon (EU, please read Liters/100Km) "a" car will do, there is simply NOT a valid answer for that.

:D

jaclaz

Booting up Windows 93

Transfer rate on HPz400 hardware

$
0
0

Hello Saviours,

I am using TFTPd32 as a mechanism to transfer my Litetouch.wim, My issues is for other HP Desktops other than Z400 transfer rate is very fast and wim gets copied very quickly, but for Z400, transfer is very slow, and 256MB files takes more than 10 hrs to complete.

 

I tried connecting the systems directly, tried changing the cards and cable, but same issue... This machine has Broadcom card. 

 

 

 


ProxyCrypt

$
0
0

Posted Image

File Name: ProxyCrypt
File Submitter: v77
File Submitted: 05 Nov 2013
File Updated: 23 Sep 2015
File Category: Security

ProxyCrypt is a command line tool that creates encrypted volumes within a file or a hard drive. Encryption and decryption are made on the fly, allowing you to use encrypted volumes like normal ones.
Designed for paranoids and advanced users, it is also fast, very lightweight, open source and easy to recompile.


It works as a "proxy" for the ImDisk Virtual Disk Driver, so you need to install it first. Please check carefully the requirements.

Use ProxyCrypt without argument to get syntax help. See below for an example of use.

If you need to create encrypted spaces which can be partitioned like an ordinary hard drive, ProxyCrypt is also compatible with Arsenal Image Mounter. The driver, aimapi.dll and imdisk.cpl that are packed here, are required.

A complete ready-to-use GUI has been released by another developer. See here for more information.


Features:
- Supports AES-256, Serpent and Twofish ciphers.
- Cascade encryption with free choice of the ciphers.
- Mode of operation is XTS.
- Passwords are hashed with the scrypt key derivation function, which uses Whirlpool or SHA-3 hashing function.
- Password length can be up to 250 characters.
- Protection against keyloggers.
- Supports image files or physical drives with MBR (with extended partition) or GPT.
- Encrypted volumes can be created at any location, not necessarily at the beginning of a file or a partition.
- Auto-dismount after a specified period of inactivity or when system enters a suspended state.
- NTFS folders can be used as mount point instead of drive letters.
- Supports very long paths of image file (more than 260 characters).
- Performances improved with AES instructions, SSE2 optimizations and asynchronous read/write.
- Available in 32 and 64-bit.


Requirements:
- Windows XP, Vista, 7, 8 or 8.1
- ImDisk Virtual Disk Driver or Arsenal Image Mounter
- Administrative privileges
- CPU with SSE2 instructions
- About 140 MB of RAM temporarily required for password checking

Hashes of current version (1.9.1):
ProxyCrypt64.exe:
MD5: c5e9024b1116f68e4fb4cd35e7061db1
SHA-256: 76ef2c8c3c42136fe7a16014101ab751ba461a19a1997e032087224a4910e726
ProxyCrypt32.exe:
MD5: 8fd4bbf7d00a1d2abefcbd4d1c554c74
SHA-256: 134c4dfe8d0df5e6f83d01ade483cb16f8d3514378cac30951248255b5609861
proxycrypt_source.7z:
MD5: ce2eb62e71dc27ac66b13916e5480f14
SHA-256: 7b6c6ac6ed37b823cbb93a75f0395b99bd2f3917a933e4743304deccbedbb44a


Example of use:
Here, we will see how to create a file where its entire content will be encrypted. This content will be directly accessed through a drive letter.

First, download and install the ImDisk Virtual Disk Driver. Get the appropriate version of ProxyCrypt: ProxyCrypt64.exe if you are using a 64-bit system, ProxyCrypt32.exe otherwise.
Open a command prompt with administrative privilege, go to the folder where ProxyCrypt is located, and enter the following command (here, we assume you are using ProxyCrypt64.exe) :
ProxyCrypt64.exe -f test -c 100M
This command creates a 100MB file, named "test", in the current directory.
Next, enter 0 to use all space available in the created file, 1 to select AES, and 1 to select Whirlpool.
Now, enter a password (this one has to be entered 2 times). No need to choose a complicated one, since this is just a test.

The volume is now created and can be formated. If you are using Windows Vista or later, you should be automatically prompted to do that. For better security, do not use quick format.

You can now use this new volume like a normal drive: copy files and folders, open them with any software... All data are automatically and immediately encrypted or decrypted, depending of what you are doing on this volume.
Once you are done, you can dismount the volume. Simply right-click on the drive letter in Explorer, and choose "Unmount ImDisk Virtual Disk".

Next time, to mount this volume, enter the following command:
ProxyCrypt64.exe -f test
Enter your password, and the volume will be mounted with all the data you have previously written in.

About the command prompt, please note that this is not possible to retrieve the prompt for other commands. So, you can keep this window to check possible error messages, or close it: in this case, ProxyCrypt will continue to work in the background as long as the volume is mounted.

Check the syntax help to discover the other possibilities of ProxyCrypt.


License: WTFPL

For any comment or suggestion:
http://reboot.pro/topic/19128-proxycrypt/

You can also contact me by email (english / français):
v77@secure-mail.biz

If you like this software, any donation is greatly appreciated.
Posted Image

Click here to download this file

FAQs and How-Tos

$
0
0

This is a topic where I will collect frequently asked questions about ImDisk and related projects, together with answers or links to other topics with explanations, documentation etc.

  • I want a RAM disk to be automatically created and formatted when Windows starts up.

    Spoiler


     
  • I want my auto-created RAM disk to be pre-loaded with a disk image file.

    Spoiler


     
  • Image file for my auto-created RAM disk is small and I want RAM disk expanded to larger size automatically.

    Spoiler


     
  • How do I save a RAM disk as a disk image file from command line?

    Spoiler


     
  • I want a RAM disk that uses memory above 4 GB in 32 bit Windows. Can ImDisk do that?

    Spoiler


     
  • When I delete files from my RAM disk memory still seems to be used. What is wrong?

    Spoiler


     
  • I would like to mount a vhd file from Microsoft Virtual PC, Virtual Server, Hyper-V etc. Can ImDisk do that?

    Spoiler


     
  • I would like to mount an image file of another format, for example vmdk or vdi. Could ImDisk do that?

    Spoiler


     
  • I try to mount an image file named something.bin and it does not work. What could be wrong?

    Spoiler


     
  • My image file has a master boot record with partition table. When I mount it using Control Panel applet it asks me which partition to mount, but this does not seem to work from command line.

    Spoiler


     
  • I would like to mount a virtual disk to a subdirectory on my hard disk instead of using a drive letter. How to do that?

    Spoiler


     
  • When I try to use the rawcopy program to save disk contents as image file, I get corrupt image files that cannot be mounted later. What is wrong?

    Spoiler


     
  • I would like to script a silent install of ImDisk, but when I try imdiskinst.exe -y it still shows a message box at end of setup. Is there a way to avoid all kind of user interaction during setup?

    Spoiler


     
  • Is there any step-by-step guide to creating a RAM disk at system startup?

    Spoiler

Fbinst's Automated script by Maanu (NOW working for win7)

$
0
0
program introduction :

fbinst is a command line tool coded by BEAN . he is also the co-coder of grub4dos .
this utility was coded by keeping in mind to achieve the universal support for booting USB drives on the systems which support it .

following is the main thread (chinese )

http://bbs.znpc.net/viewthread.php?tid=566...;extra=page%3D4

here is what i did with the great help of JACLAZ (now known as Wonko the Sane)

it is automated cmd script which uses latest fbinst (1.6_vD) and grub4dos (12.08.2010) to make a bootable usb for you .

: UPDATE ON 19th June 2010 :
Bean just released the fbinst v 1.6 , which is NOW working for windows 7 and windows Vista too :cheers: ( could not test it yet but i believe what BEAN is saying )


SCRIPT ,FBINST VERSION AND GRUB4DOS VERSIONS ARE UPDATED TODAY AS OF 14th August 2010

PAKISTAN's 64th Birthday :cheers:

uploaded my new script based on fbinst v 1.6

just a friendly reminded ,

fbinst NOW works on Vista,Windows 7 ,xp ,2k3, 2k 32BIT versions .
you can use a XP or 2k3 or Win7 based PE too to run my script .

Enjoy and leave feedback . :cheers:

Attached Files

New a powerful software-only AoE target for Windows

$
0
0
Quick How-To Guide

WinTarget AoE Server is an advanced, powerful and full-featured AoE Target software that makes any x86, x64 Windows machine into an AoE Target.
WinTarget for AoE Server is an SAN solution that allows you, under the environment of Ethernet network, quickly to export existing storages such as disk images, physical disks, partitions, or any disk files burner to its client machines. WinTarget can support to use a remote AoE device to boot computers or installed OS by gPXE or PXE.

Download:WinTarget AoE Server x86 Edition
WinTarget AoE Server x64 Edition

1. install and run AoE Server:

Managent console
Posted Image

2. Create an AoE Target:

Choose the Ethernet Adapters bound with this Target.
Posted Image


Choose a Target ID, or use the default ID provided by the system. Enter the alias of the Target, e.g. My Target.
Posted Image

3.Add an AoE Device:

Choose a Device medium type. Free License can only choose Image File as its Medium Type.
Posted Image
Click Next button finish.An AoE Device is created.
Next, we can use the AoE Initiator to mount this Device!

4.AoE Initiator Install , We can use WinAoE or StarWind AoE Initiator, we choose StarWind AoE Initiator.
Download: AoE Initiator

4-1.Install and run AoE Initiator

4-2.Click Add Device on toolbar .

4-3.Select a network adapter .

4-4.Select a AoE Device.

OK , A AoE Device started to work!


5. I have used AoE Server diskless start a Windows XP system.
I will be released at a later date.

Thanks!

WinXP AOE boot problem with new hardware

$
0
0

I've been looking for a solution for this for a long time...hoping to find a solution here...

 

i've religously followed Sir Cristian Magadan's tutorial...

 

https://windowsdisklessaoe.wordpress.com

 

and been able to boot winxp via aoe (encountered problems along the way, but successfully managed to get it working)

 

i've been able to boot it only on old systems (g31 and g41)

 

but...using the exact same method of successfully booting the above systems but using new hardware

h61 (gigabyte h61m-ds2+intel g620) have not able to boot successfully, always stop (7b) or stuck at loading screen

 

now, this has been the common problem of the above tutorial and googling about the topic

leads to no answers

 

these are the steps i've taken to successfully aoe boot on my g31, g41

 

1) install winxp (mines an nlited winxp sp3, without driverpacks) on a single 3gb partition, disabled pagefile

2) installed only lan driver (via driverpack solution)

3) installed aoe driver

4) set lan card driver "start" parameter to 0

5) used dd to image whole partition to a "shared" drive on the server (IMG file created)

6) disconnecting drive and enabling network boot, while serving the IMG via vblade

 

I've used this steps to successfully network boot 6pcs i have here (g31, g41) without problems

 

i tried this same steps on the h61 board, it doesn't work...

 

-more info

the gigabyte mobo uses UEFI

tried updating to standard drivers (ide+isa), still won't boot

haven't tried creating vhd from virtualbox, then using that...i will try that next...

enabled /sos on boot.ini, stuck on the first screen where cpu and memory is displayed

 

what could seem to be the problem? as the steps i've taken works on the old architecture...

i'm trying to solve this for the longest time...

 

i will give more details on what i've done, also reading "universal xp", "usb boot", other topics that could

help me in this one...

Viewing all 6812 articles
Browse latest View live


Latest Images