Dear all,
This combined FBWF+FltMgr plugin allows running applications directly from the system drive, even if they write to the drive.
Beware: in reality the system is writing to RAM, so any changes will be lost when restarting the system.
FBWF requires the FltMgr service, which is included in the plugin.
Some applications require FltMgr as well, making this combined plugin very handy. See for example this plugin for SpyDoctor 6.x.
fbw_flt.inf
CODE
; ----------------------------------------------------------------------------
; File-Based Write Filter + File System Filter Manager - PEBuilder v3 plugin
; ----------------------------------------------------------------------------
;
; Created by Juan Zak
; Works with the fbwf loader by thuun
;
; Run "fbwfldr.exe N" from a command line or command file.
; "N" is the percent of RAM to be assigned as writable free space on the system drive.
; The fbwf loader will work only if the fbwf service is set to manual start
; (see comment in the [SetupReg.AddReg] section); otherwise the fbwf service will start
; by itself with default settings, rendering the fbwf loader useless.
;
[Version]
Signature= "$Windows NT$"
;
[PEBuilder]
Name="File Based Write Filter (FBWF) + File System Filter Manager (FltMgr)"
Enable=1
;
[SourceDisksFiles]
;
; Preferably use version 2.0.965.0 of these files.
files\fbwfldr.exe=2
files\fbwflib.dll=2,,1
files\fbwf.sys=4,,1
;
; If these files are not present in the "files" folder, they will be copied form the source XP CD.
files\fltmgr.sys=4
files\fltlib.dll =2
;
; Copies emptyregdb.dat file from the running XP system
%11%\emptyregdb.dat=2
;
;
[SetupReg.AddReg]
;
; "CacheType" options
; 0x1 = dynamic
; 0x2 = dynamic compressed
; 0x3 = pre-allocated (default)
0x4, "ControlSet001\Services\FBWF","CacheType", 0x3
;
0x1, "ControlSet001\Services\FBWF","DisplayName","fbwf"
0x1, "ControlSet001\Services\FBWF","Group","FSFilter System Recovery"
0x2, "ControlSet001\Services\FBWF","ImagePath","system32\drivers\fbwf.sys"
0x1, "ControlSet001\Services\FBWF","Description","File Based Write Filter Driver"
0x4, "ControlSet001\Services\FBWF","ErrorControl", 0x1
;
; FBWF "Start" options
; 0x0 = boot
; 0x1 = system
; 0x2 = automatic
; 0x3 = manual
0x4, "ControlSet001\Services\FBWF","Start", 0x3
;
0x4, "ControlSet001\Services\FBWF","Type", 0x2
0x7, "ControlSet001\Services\FBWF","DependOnService","fltmgr"
;
; "WinPECacheThreshold" options
; 0x10 = 16MB
; 0x18 = 24MB
; 0x20 = 32MB
; 0x30 = 48MB
; 0x40 = 64MB
; 0x48 = 72MB
; 0x60 = 96MB
; 0x80 = 128MB
; 0x100 = 256MB
; 0x200 = 512MB
; 0x400 = 1024MB maximum
; intermediate values allowed, e.g. 0x53
; Do not specify this option when using the fbwf loader.
; 0x4,"ControlSet001\Services\FBWF","WinPECacheThreshold", 0x40
;
0x1, "ControlSet001\Services\FBWF\Instances","DefaultInstance","Fbwf Instance"
0x1, "ControlSet001\Services\FBWF\Instances\Fbwf Instance","Altitude","226000"
0x4, "ControlSet001\Services\FBWF\Instances\Fbwf Instance","Flags", 0x0
;
0x4,"ControlSet001\Services\FltMgr","Type", 0x2
;
; FltMgr "Start" options
; 0x0 = boot
; 0x1 = system
; 0x2 = automatic
; 0x3 = manual
0x4,"ControlSet001\Services\FltMgr","Start", 0x3
;
0x4,"ControlSet001\Services\FltMgr","ErrorControl", 0x1
0x2,"ControlSet001\Services\FltMgr","ImagePath","system32\drivers\fltmgr.sys"
0x1,"ControlSet001\Services\FltMgr","DisplayName","FltMgr"
0x1,"ControlSet001\Services\FltMgr","Description","File System Filter Manager Driver"
0x4,"ControlSet001\Services\FltMgr","AttachWhenLoaded", 0x0
0x4,"ControlSet001\Enum\Root\LEGACY_FLTMGR","NextInstance", 0x1
0x1,"ControlSet001\Enum\Root\LEGACY_FLTMGR\0000","Service","FltMgr"
0x4,"ControlSet001\Enum\Root\LEGACY_FLTMGR\0000","Legacy", 0x1
0x4,"ControlSet001\Enum\Root\LEGACY_FLTMGR\0000","ConfigFlags", 0x0
0x1,"ControlSet001\Enum\Root\LEGACY_FLTMGR\0000","Class","LegacyDriver"
0x1,"ControlSet001\Enum\Root\LEGACY_FLTMGR\0000","ClassGUID","{8ECC055D-047F-11D1-A537-0000F8753ED1}"
0x1,"ControlSet001\Enum\Root\LEGACY_FLTMGR\0000","DeviceDesc","FltMgr"
; File-Based Write Filter + File System Filter Manager - PEBuilder v3 plugin
; ----------------------------------------------------------------------------
;
; Created by Juan Zak
; Works with the fbwf loader by thuun
;
; Run "fbwfldr.exe N" from a command line or command file.
; "N" is the percent of RAM to be assigned as writable free space on the system drive.
; The fbwf loader will work only if the fbwf service is set to manual start
; (see comment in the [SetupReg.AddReg] section); otherwise the fbwf service will start
; by itself with default settings, rendering the fbwf loader useless.
;
[Version]
Signature= "$Windows NT$"
;
[PEBuilder]
Name="File Based Write Filter (FBWF) + File System Filter Manager (FltMgr)"
Enable=1
;
[SourceDisksFiles]
;
; Preferably use version 2.0.965.0 of these files.
files\fbwfldr.exe=2
files\fbwflib.dll=2,,1
files\fbwf.sys=4,,1
;
; If these files are not present in the "files" folder, they will be copied form the source XP CD.
files\fltmgr.sys=4
files\fltlib.dll =2
;
; Copies emptyregdb.dat file from the running XP system
%11%\emptyregdb.dat=2
;
;
[SetupReg.AddReg]
;
; "CacheType" options
; 0x1 = dynamic
; 0x2 = dynamic compressed
; 0x3 = pre-allocated (default)
0x4, "ControlSet001\Services\FBWF","CacheType", 0x3
;
0x1, "ControlSet001\Services\FBWF","DisplayName","fbwf"
0x1, "ControlSet001\Services\FBWF","Group","FSFilter System Recovery"
0x2, "ControlSet001\Services\FBWF","ImagePath","system32\drivers\fbwf.sys"
0x1, "ControlSet001\Services\FBWF","Description","File Based Write Filter Driver"
0x4, "ControlSet001\Services\FBWF","ErrorControl", 0x1
;
; FBWF "Start" options
; 0x0 = boot
; 0x1 = system
; 0x2 = automatic
; 0x3 = manual
0x4, "ControlSet001\Services\FBWF","Start", 0x3
;
0x4, "ControlSet001\Services\FBWF","Type", 0x2
0x7, "ControlSet001\Services\FBWF","DependOnService","fltmgr"
;
; "WinPECacheThreshold" options
; 0x10 = 16MB
; 0x18 = 24MB
; 0x20 = 32MB
; 0x30 = 48MB
; 0x40 = 64MB
; 0x48 = 72MB
; 0x60 = 96MB
; 0x80 = 128MB
; 0x100 = 256MB
; 0x200 = 512MB
; 0x400 = 1024MB maximum
; intermediate values allowed, e.g. 0x53
; Do not specify this option when using the fbwf loader.
; 0x4,"ControlSet001\Services\FBWF","WinPECacheThreshold", 0x40
;
0x1, "ControlSet001\Services\FBWF\Instances","DefaultInstance","Fbwf Instance"
0x1, "ControlSet001\Services\FBWF\Instances\Fbwf Instance","Altitude","226000"
0x4, "ControlSet001\Services\FBWF\Instances\Fbwf Instance","Flags", 0x0
;
0x4,"ControlSet001\Services\FltMgr","Type", 0x2
;
; FltMgr "Start" options
; 0x0 = boot
; 0x1 = system
; 0x2 = automatic
; 0x3 = manual
0x4,"ControlSet001\Services\FltMgr","Start", 0x3
;
0x4,"ControlSet001\Services\FltMgr","ErrorControl", 0x1
0x2,"ControlSet001\Services\FltMgr","ImagePath","system32\drivers\fltmgr.sys"
0x1,"ControlSet001\Services\FltMgr","DisplayName","FltMgr"
0x1,"ControlSet001\Services\FltMgr","Description","File System Filter Manager Driver"
0x4,"ControlSet001\Services\FltMgr","AttachWhenLoaded", 0x0
0x4,"ControlSet001\Enum\Root\LEGACY_FLTMGR","NextInstance", 0x1
0x1,"ControlSet001\Enum\Root\LEGACY_FLTMGR\0000","Service","FltMgr"
0x4,"ControlSet001\Enum\Root\LEGACY_FLTMGR\0000","Legacy", 0x1
0x4,"ControlSet001\Enum\Root\LEGACY_FLTMGR\0000","ConfigFlags", 0x0
0x1,"ControlSet001\Enum\Root\LEGACY_FLTMGR\0000","Class","LegacyDriver"
0x1,"ControlSet001\Enum\Root\LEGACY_FLTMGR\0000","ClassGUID","{8ECC055D-047F-11D1-A537-0000F8753ED1}"
0x1,"ControlSet001\Enum\Root\LEGACY_FLTMGR\0000","DeviceDesc","FltMgr"
The following files are required:
fbwflib.dll
fbwf.sys
(Preferably version 2.0.965.0 for both)
fltmgr.sys
fltlib.dll
(copy these from your updated XP system; alternatively leave the builder use those on the source XP CD)
fbwfldr.exe
(thunn's loader, preferably version 2200)
fbwflib.dll, fbwf.sys and fbwfldr.exe can be found in the Internet.
Comments and usage options are included in the .inf file.
With regards,
Juan