本帖最後由 mydaniel 於 2011-4-22 10:02 編輯
我用 Windows 7 x64 fbwf.sys 是 1.0.299.0,用以下的 registry:
rkkc 發表於 2011-4-22 01:31 
如果你沒有把wow64 給遺忘了可以試試看這個- Windows Registry Editor Version 5.00
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FBWF]
- "Start"=dword:00000000
- "Type"=dword:00000002
- "ErrorControl"=dword:00000001
- "ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,64,00,\
- 72,00,69,00,76,00,65,00,72,00,73,00,5c,00,46,00,62,00,77,00,66,00,2e,00,73,\
- 00,79,00,73,00,00,00
- "Group"="FSFilter System Recovery"
- "DisplayName"="File-Based Write Filter"
- "Description"="File-Based Write Filter driver"
- "DependOnService"=hex(7):46,00,6c,00,74,00,4d,00,67,00,72,00,00,00,00,00
- "DebugFlags"=dword:00000000
- "EnabledOnAllSkus"=dword:00000001
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FBWF\FBA]
- "ProtectRegistryRamdisk"="\\RegfData"
- "EnablePostFBA"=dword:00000000
- "ThresholdSize"=dword:00000000
- "CacheType"=dword:00000003
- "VirtualSizeDisplay"=dword:00000001
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FBWF\FBA\Exclusion]
- "Protection1"=hex(7):
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FBWF\Instances]
- "DefaultInstance"="Fbwf Instance"
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FBWF\Instances\Fbwf Instance]
- "Flags"=dword:00000000
- "Altitude"="226000"
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FBWF\Enum]
- "0"="Root\\LEGACY_FBWF\\0000"
- "Count"=dword:00000001
- "NextInstance"=dword:00000001
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FBWF]
- "NextInstance"=dword:00000001
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FBWF\0000]
- "Service"="FBWF"
- "Legacy"=dword:00000001
- "ConfigFlags"=dword:00000000
- "Class"="LegacyDriver"
- "ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
- "DeviceDesc"="File-Based Write Filter"
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FBWF\0000\Control]
- "ActiveService"="FBWF"
複製代碼 |