Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: File Based Write Filter (FBWF) for win 7 from embedded

16 Feb 2010   #11
bballista

windows 7
 
 

Hi Guys,

I tried to follow this thread to get FBWF to run on my windows 7 but I wasn't able to. I am curious if it has anything ot do with the fact that I am running windows 7 64 bit.

Thank You


My System SpecsSystem Spec
.
20 Feb 2010   #12
bballista

windows 7
 
 

Just wanted to update.

I got Windows 7 32 Bit and this worked as described in this thread.

Thank you guys for helping me with this!
My System SpecsSystem Spec
17 Mar 2010   #13
cvocvo

Win7
 
 

I am trying to script the process that the posted application goes through.
I have tried setacl -on "HKLM\SYSTEM\CurrentControlSet\ENUM\Root" -ot reg -actn act -ace "n:Everyone;p:full"
But it fails with an access denied error. That's the same command that is run in the application, but the application also uses psexec somehow to copy itself and setacl to the host computer, or do something of the sort. Then psexec also imputs those registry keys to the box listed on the first page. Any ideas on how to do this?
My System SpecsSystem Spec
.

11 Apr 2010   #14
extrem

Windows 7
 
 
The next problem...

FBWF is working for me with the application on page 1. I'm using Windows 7 Home Premium (German Version). After the installation I can enable the fbwf, set the threshold and protect any volume. After restarting the computer everything is resetted. If I try to exclude the folder "\Programme" on volume c: (the german equivalent of "\Program Files") nothing happens... The solution is to protect "\Program Files" on c: Now I wanted to install Avira AntiVir, so I did the following: removing c: from the protected volumes (due to restrictions of creating folders on protected volumes), installing AntiVir and adding c: to the protected volumes again. Everything worked fine. The only problem - all the updates (especially virus signatures) are not permanent (... of course). But if I try to exclude all the AntiVir application folders (in my case "\Program Files\Avira" and "\ProgramData\Avira") or simply "\Program Files" I get a BSOD during reboot with error code:
"*** STOP: 0X0000007F (0X00000008,0X8DF03750,0X00000000,0X00000000)".
Unfortunately there's the same error after installation of any other application. Does anyone know why?
Maybe the problem is caused by a problem of the FBWF_setup application?! After setting up the fbwf I can find the following registry entries:

Quote:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FBWF]
"Start"=dword:00000000
"Type"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,64,00,\
72,00,69,00,76,00,65,00,72,00,73,00,5c,00,46,00,62,00,77,00,66,00,2e,00,73,\
00,79,00,73,00,00,00
"Group"="FSFilter System Recovery"
"DisplayName"=""
"DependOnService"=hex(7):46,00,6c,00,74,00,4d,00,67,00,72,00,00,00,00,00
"DebugFlags"=dword:00000000
"EnabledOnAllSkus"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FBWF\Enum]
"0"="Root\\LEGACY_FBWF\\0000"
"Count"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FBWF\FBA]
"ProtectRegistryRamdisk"="\\RegfData"
"EnablePostFBA"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FBWF\Instances]
"DefaultInstance"="Fbwf Instance"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FBWF\Instances\Fbwf Instance]
"Altitude"="226000"
"Flags"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FBWF]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FBWF\0000]
"Service"="Fbwf"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Fbwf"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FBWF\0000\Control]
"ActiveService"="FBWF"
But these are not exactly the same entries as in hispeedmikes documentation (see the bold marked parts). If I set the keys and values manually as shown on page 1 of this threat like this:

Quote:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FBWF]
"Start"=dword:00000000
"Type"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,64,00,\
72,00,69,00,76,00,65,00,72,00,73,00,5c,00,46,00,62,00,77,00,66,00,2e,00,73,\
00,79,00,73,00,00,00
"Group"="FSFilter System Recovery"
"DisplayName"=""
"DependOnService"=hex(7):46,00,6c,00,74,00,4d,00,67,00,72,00,00,00,00,00
"DebugFlags"=dword:00000000
"EnabledOnAllSkus"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FBWF\Enum]
"Altitude"="226000"
"Flags"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FBWF\FBA]
"ProtectRegistryRamdisk"="\\RegfData"
"EnablePostFBA"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FBWF\FBA\Exclusion]
"0"="Root\\LEGACY_FBWF\\0000"
"Count"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FBWF\Instances]
"DefaultInstance"="Fbwf Instance"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FBWF]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FBWF\0000]
"Service"="Fbwf"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Fbwf"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FBWF\0000\Control]
"ActiveService"="FBWF"
... I get another BSOD during reboot caused by "fbwf.sys" with error code:
"*** STOP: 0X000000D3 (0X82E140E8,0X00000002,0X00000001,0X828BF608)"!?

Thank yor for all ideas in advance!
My System SpecsSystem Spec
20 May 2010   #15
cvocvo

Win7
 
 

Has anyone gotten FBWF to install on Windows 7 x64? I have tried with both the 32bit and 64bit files (from Windows Embedded Standard) and can't get it to work on a 64bit version of win7.
My System SpecsSystem Spec
18 Apr 2011   #16
jgarizona

Windows 7 Embedded 32bit
 
 

Sorry I am a little new to the tool. Do you run this with "insert>Synchronous Command>Pass 7" and use regedit.exe /s to change the permission on the key?
My System SpecsSystem Spec
04 Feb 2014   #17
MarkM82

Windows 7 Ultimate x64
 
 

Sorry if I reply to this old topic, but I'd like to know if it's illegal or not to use FBWF from embedded versions of Windows and install it in desktop versions (it would be very useful for some of my customers), just as described here: copy some files from Windows embedded and add some registry keys.
I've asked in other forums, and nobody was sure about it.
My System SpecsSystem Spec
Reply

 File Based Write Filter (FBWF) for win 7 from embedded




Thread Tools




Similar help and support threads
Thread Forum
How can I write a batch file that opens a file in a program?
I wrote this batch file which does what I want it to do so far. @echo off "C:\Users\xxxxxx\Documents\HideTaskbar\HideTaskbar.exe" "C:\Program Files (x86)\VideoLANold\VLC\vlc.exe" "C:\Users\xxxxxx\Documents\HideTaskbar\ShowTaskbar.exe" exit
General Discussion
Enhanced Write Filter (EWF) in Win-7
Enhanced Write Filter (EWF). Is EWF (or something like it) available in Win-7 ? According to a post I have just read ... in Win-XP EWF can increase the life of drives. (HDDs ?) My browser/email laptop is used extensively all day. I use an external USB HD ... 1. make my data portable ...
Software
cannot open embedded pdf file in Excel 2007
Dear all, I cannot open embedded pdf file in Excel 2007 and Excel 2010. When I try to open it, I get a message: Cannot start the source application for this object. I checked the registery, the path is correct.:sick: HKEY_CLASSES_ROOT\CLSID\{B801CA65-A1FC-11D0-85AD-444553540000}\LocalServer32 ...
Microsoft Office
Searching for a file in windows 7... not working, i need extra filter
Sometimes the companies trying to make the thing SO "intuitive" and "smart" that destroy the power of customization... in windows XP i remember i could specify whatever i remember of a file and i could get straight to the file i was looking for, i could only remember a range of dates, an approx...
General Discussion
How to create a batch file that will move files based on the file type
How to create a batch file that will move files based on the file type? My Requirement : I need a batch file to copy all .doc files in all my HardDisk to a removable disk say (Z: drive) . Can anyone make it possible using a batch file?Please...Its urgent...
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 14:06.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App