|
我在PE集成imdisk所导入的注册表如下:(事先要将系统的sysytem注册表文件挂载为sys)- Windows Registry Editor Version 5.00
- [HKEY_LOCAL_MACHINE\sys\ControlSet001\services\ImDisk]
- "Type"=dword:00000001
- "Start"=dword:00000001
- "ErrorControl"=dword:00000000
- "ImagePath"="system32\\DRIVERS\\imdisk.sys"
- "DisplayName"="ImDisk Virtual Disk Driver"
- "Description"="Disk emulation driver"
- [HKEY_LOCAL_MACHINE\sys\ControlSet001\services\ImDisk\Enum]
- "0"="Root\\LEGACY_IMDISK\\0000"
- "Count"=dword:00000001
- "NextInstance"=dword:00000001
- [HKEY_LOCAL_MACHINE\sys\ControlSet001\Enum\Root\LEGACY_IMDISK]
- "NextInstance"=dword:00000001
- [HKEY_LOCAL_MACHINE\sys\ControlSet001\Enum\Root\LEGACY_IMDISK\0000]
- "Service"="ImDisk"
- "Legacy"=dword:00000001
- "ConfigFlags"=dword:00000000
- "Class"="LegacyDriver"
- "ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
- "DeviceDesc"="ImDisk Virtual Disk Driver"
- [HKEY_LOCAL_MACHINE\sys\ControlSet001\Enum\Root\LEGACY_IMDISK\0000\Control]
- "*NewlyCreated*"=dword:00000000
- "ActiveService"="ImDisk"
复制代码 注册表项“HKEY_LOCAL_MACHINE\sys\ControlSet001\Enum\Root”要修改权限才能导入,可用psexec 以系统的权限导入,命令:psexec -s -i -d reg import “注册表文件”
这个注册表文件是我用SysTracer来跟踪安装imdisk前后注册表的变化得来的。SysTracer是制作绿色软件的利器。 |
|