New
#1
Altered(?) Boot folder/files attributes and Keriver 1Click Restore Pro
Greetings,
I recently installed W7 Ultimate 32bit, on my machine, without the "System Reserved" partition, based on the pre-installation instructions that i found here (clean all (x2) --> create partition primary... --> format... --> active). The first thing i did, after booting on my newly installed W7 System, was to install Keriver 1 Click Restore Pro, which automatically took a baseline snapshot of the system partition. Right after that, i browsed my system partition and found out that:
(usage of present time intended)
a1. The "Boot" folder (C:\Boot) is visible. Its "Read-only (Only applies to files in folder)" attribute is "grey"-checked, while its "Hidden" attribute is not checked at all. Also, its "Allow files in this folder to have contents indexed in addition to file properties" advanced attribute is checked.
a2. Inside the "Boot" folder: Both BCD and memtest.exe files are visible/accessible. They both have unchecked "Read-only" and "Hidden" attributes and checked "File is ready for archiving" and "Allow this file to have contents indexed in addition to file properties" attributes. Also, there are various language folders, each one containing an accessible localized (i assume) version of bootmgr.exe.mui.
Today, i browsed that baseline snapshot, through a virtual drive, and, after enabling the "show hidden files, folders and drives" and "show protected operating system files" options, i additionally found out that:
b1. There are 1 file in the root directory (BOOTSECT.BAK (R-only, H, Archiving, Indexed)) and 3 files in the "Boot" folder (BCD.LOG1 (H, Archiving, Indexed), BCD.LOG2 (H, Archiving, Indexed), BOOTSTAT.DAT (H, Archiving, Indexed)), all having been modified at the exact same date (16/10/11) and time. What puzzles me the most is that the installation of W7 and the initial system-imaging (baseline snapshot) took place on 15/10/11!!!
b2. The BCD file had been modified at the exact same time/date (15/10/11) that the Keriver 1CR Pro installed (it adds a pre-(OS)boot Recovery Console). BTW, in some system snapshots that i have taken, the BCD file has a "future" modification date (e.g., snapshot taken at 18/10 and BCD mod dated 19/10)!!! In these particular snapshots, there is also a hidden folder in the root directory named "Config.Msi".
Obviously, i 'm not an expert when coming to MBR, BCD, bootmgr etc., so i 'm, really, going to need help with this one. So, to anyone willing to help/answer me, my questions are as follows:
q1. Shouldn't the "Boot" folder be hidden and, probably, system protected ?
q2. Have i done something wrong during the pre-installation procedure (regarding the partition's settings) OR is my installation corrupted OR has Keriver's Recovery Console messed up any boot files attributes?
q3. How the "future modification dates" are explained?
and the most important
q4. What do i have to do in order to set back the correct file/folder attributes? + Which of the above-mentioned files can/should i delete?
Thank you for your time.
P.S. So far, i have tried to manually hide the "Boot" folder (even though i assume that it should be an automatically protected operating system folder) and i have run the Windows Resource Protection scanning procedure that i found here. Nothing worked (the sfc command returned no integrity violations).