jaclaz

A RARE image of the comparison test between Windows 7 (+Symantec Norton 360 and Norton Internet Security 2012) and Windows 8 (+Symantec Norton 360 and Norton Internet Security 2013) : I think I'll have a beer or two while I ponder on this : jaclaz

More than that, you could be opening a can of worms page__view__findpost__p__968052 jaclaz

Well, no, it does mention them clearly (IMHO): BUt cannot say if it delivers what it states... jaclaz

I guess you missed the previous few posts. jds asked (nicely IMHO) for a feature. <-that's part of his freedom His request was denied by PROBLEMCHYLD. <-that's part of his freedom I expressed how this approach (all or nothing ) is IMHO "not smart". <-that's part of my freedom Everything was clearly (I hope) expressed by everyone, no need to re-ask WHY, nor for whining about an hypothetical damage that you might suffer IF the request from jds was granted (which was not) and only IF PROBLEMCHYLD while adding it would have made a mess and actually caused an issue. That's of course part of your freedom , but still the question was redundant and the whining gratuitious..... It seems to me like not so long ago you weren't as convinced of the "take it or leave it" approach as you seem now: jaclaz

Just in case : http://dictionary.reference.com/browse/optional http://www.merriam-webster.com/dictionary/optional and while we are at it : http://dictionary.reference.com/browse/freedom http://www.merriam-webster.com/dictionary/freedom jaclaz

What about this one (Commercial) : http://www.registrytool.com/features.htm jaclaz

I think you have all the time in the world (and even more), I mean, it is not like your Win9x OS is going to become UNsupported any time soon (at least here on MSFN ) jaclaz

Can we move from the kitchen to the studio? jaclaz

It is really "strange". Stiil there must be *something* (very likely in the Registry) differing. Can you try doing two "clones", one with the VM running and one with the VM shut down and then compare the two registries? What you report seems like implying that when you make the clone on the powered on VM *something* is seen by the whatever is used to "clone" as *somehow* "busy" or "not accessible" and this "flag" (or whatever) is "transported" to the clone. (I know that the above is VERY "vague" , it is just to convey the "general idea") Have you tried running "blindly" either mountstorage PE or showdrive in one of the affected clones to see of the issue is solved? Could it be that somehow the disk gets "offline" (but this should not be possible in a PE 2.1) if I recall correctly: http://reboot.pro/8200/ http://reboot.pro/8200/page__st__25#entry73620 Another possibility is that - still somehow - the thingy gets the NoAutoMount key set: http://www.911cd.net/forums//index.php?showtopic=24551 however the related keys should be the ones mentioned: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MountMgr\ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\partmgr\Parameters jaclaz

Yes It is different between command line and batch, my bad . jaclaz

I think you are a bit pessimistic. http://forum.scottmueller.com/viewtopic.php?f=1&t=2202 The actual "male" on the hard disk no-matter how and what was designed for can resist many, many more than 50 insertions. In the worst cases, if you have a no-name/poor quality "female" (on the cable) in the worst case you will need to replace the cable. jaclaz

Open a command prompt. Try issuing in it: @echo %temp% @echo ^%temp^% jaclaz

@jds I am sorry as I seemingly sent you after a red herring (re: 9x/Me vs. NT hives format) But the concept of the Registry being an assembly is important (and still valid) and you need to grasp it fully. The Registry (as you see it in Regedit or actually how it is seen by the booted system) ONLY EXISTS when the system is booted (online). What windows does when booting is to take 2 (9x), 3 (Me) or 5 (NT) "backing files" and assemble them in a "volatile" structure that is the Registry. From the mouth of the wolf: http://support.microsoft.com/kb/256986/en-us Read attentively the explanation of HKEY_CLASSES_ROOT- As another example (talking of NT which I am more familiar with) the hive HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet does NOT exist (if not "online") as it is a redirection (or link, or "subst", whichever concept you like better) to one of the: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet00n (which do exist BOTH "online" and "offline"), to be more exact, the CurrentControlSet is a link to the ControlSet00n with n being the value of : HKEY_LOCAL_MACHINE\SYSTEM\Select\Current Try thinking of it as a common HTML page with frames, example: http://www.tizag.com/htmlT/frames.php In your browser you see a single page, but when you look at it in detail, what you see is not coming from a single file, but from a number of them that are "assembled" on the fly by the browser. If you add to it some javascript that adds some "dynamic" contents on the fly, you have a reasonably accurate representation of the Registry as you see it in Regedit.... Yes and no. Nothing prevents (as the Paul-Lee) thingy does, to make a program that does the same kind of "assembling" Windows does, so that you have a representation of the "offline" Registry similar to the one you would have for an "online" one. jaclaz

Now, should we have (by any chance) a willing programmer, nmaybe he/she could take where this guy left: http://www.frogaspi.org/ http://www.frogaspi.org/products/frogaspi/index.htm http://www.frogaspi.org/products/frogaspi/faq.htm What about the VOB ASAPI? http://www.digital-digest.com/articles/imgburn_for_dummies_page16.html (Pinnacle): ftp://ftp.pinnaclesys.de/driver/pc/InstantCDDVD/ASAPI.exe And patin-couffin access layer? http://www.free-codecs.com/download/Patin_Couffin_access_layer.htm jaclaz

Exactly, that's the idea of "shorting the read channel", to overcome the LED:00000xxx message. jaclaz

This profoundly saddens me. It is another sign that I am really getting old The thought that a telephone must make phone calls, and that a smartphone should do (besides other things) smarter phone calls and that more generally the final goal is to make and receive phone calls (and OK, check quickly your e-mail or search a word or info you are missing on an online dictionary or Wikipedia) is so radicated that I never thought about the use of them as a social facilitator at parties . But I guess you are right.... ... then, the human race is doomed Should anyone need them, I do make courses for people aspiring to become qualified phone sanitizers, Basic, Intermediate and Advanced.... jaclaz

It sounds familiar.... http://en.wikipedia.org/wiki/Chewbacca_defense ...jaclaz ducking really fast... jaclaz

Sure , even a single happy bunny is better than none , but still, if with a little effort you can make more happy bunnies, life would be better..... http://www.msfn.org/board/index.php?showtopic=128727&st=10 jaclaz

Normally I would use fsz.exe (part of the dsfok toolkit): http://members.ozemail.com.au/~nulifetv/freezip/freeware/ that is if you have the space available to create a "whole" file, but It should be more convenient to use instead mksparse, here: http://reboot.pro/3191/page__st__25#entry70583 this way the file will grow only with the actual "chunks" that you write to it. And the reference app to write these chunks is dsfi (still part of the dsfok toolkit). I can give you specific instructions if this other approachs actual succeeds in getting more data. But if the test with DMDE on the original disk gives the same results, than there is a more serious issue somewhere "before" (partial unbricking or "failed" unbricking) though as said it sounds "strange". jaclaz

....don't forget "convenience" and "freedom" . Really, I do understand how there might be difficulties and even "unresolvable" ones in doing this in practice , and as said you are perfectly free to manage your project every which way you want/can , but the concept of "modularity" should IMHO be the first one whenever designing this kind of tools. We already have the MS guys that pretend to know better than we do what is best for us..... Try seeing it another way, let's take nlite as an example. Nuhi designed it in such a way that it is VERY modular (and this is actually a drawback as some "interconnectedness" is not IMHO explained or explained "well enough" ) But he could have made as well a three radio button choice thingy: Remove nothing Remove average (this is what is advised as the "best thing for you") Remove everything (max reduction) then, simplify it to a two choices: Remove average (this is what is advised as the "best thing for you") Remove everything (max reduction) (if you dont' want to remove anything then do not run nlite) Or even a single choice: Remove average (this is what is advised as the "best thing for you" and be done with it . (but I think that IF nlite was designed this latter way it would have had much less success ) jaclaz

Not really, different linguistical interpretation, nothing of much relevance . I read "already" as "already" as opposed to "at that point",or, if the actions suggested in #1 were carried: the bolded part in 2) would be a truism. (double one , as in #1 the third partition is made active and also in #13 of the linked tutorial) on the other hand, IF the thrid partiion had not been made active, the system wouldn't have booted at all..... The "play safe" was actually refered to the "Move" (as opposed to "copy"): I am pretty sure that your approach is very correct :, but as I see it missed a "what if something goes wrong" wayback provision, IMHO when dealing with disks/data always "better be safe than sorry" . jaclaz

@Ilko_t Thanks for the update. NO , the currently active one is the second. @SteveOC You want to play "safe". When you are in the grub4dos prompt, input these commands: map (hd0) (hd1) map (hd1) (hd0) map --hook root (hd0,1) Now run ls you should see the files BOOTMGR listed. Now: chainloader /bootmgr boot You should boot to Windows 7 "normally". Now copy the BOOTMGR and the \boot\ directory to the "main" Windows 7 partition. Reboot, and again at the grub4dos prompt run: map (hd0) (hd1) map (hd1) (hd0) map --hook root (hd0,2) chainloader /bootmgr boot (please note how this time we are loading the bootmgr from (hd0,2) i.e. from the "main" "third" partition). You should be able to boot again the Windows 7 normally. If this happens, then open Disk Management and set the "main" "third" system partition as the Active one, and reboot, this time without the USB stick/grub4dos. If everything is OK, then, and only then you can remove the contents of the (hd0,1) or even delete that partition allright. jaclaz

This should mean that the $MFT is OK (i.e. no need to analyze it manually with mft2csv). But if you ran the DMDE on the (incomplete) image, this may still be "normal". And, AGAIN, you are using a WRONG approach (attempting to image the whole disk at once). For the THIRD time, please read again this: You might want to try with even smaller "chunks". Another test (but be careful): What happens with DMDE on the original disk? I find it strange that the $MFT is "perfect" (as it seemingly is) but *all* the disk is unreadable (I could understand some areas, but not the large majority of the disk) jaclaz

Yep, this is what I was not sure about . If I recall correctly the mentioned Paul.lee thingy can open both, it is very possible that it has a "double" internal parser. The site is not reachable today, just in case: http://wayback.archive.org/web/*/http://paullee.ru/regstry.html Since the source code tor the "real mode" version is available, maybe someone familiar with Borland Pascal may be interested in woring on it.... The original site for regdat: http://people.freenet.de/h.ulbrich/ is also no more (and unfortunately is not cached in the Wayback Machine) . The "main" site has only the "front page" cached: http://web.archive.org/web/20110202154630/http://regdat.com/ The tool itself (shareware) is still available here: http://files.brothersoft.com/utilities/registry_tools/Regdat_15017.zip jaclaz

It seems to me like you are still missing a point. The Registry (online) is nothing but an assembly of 2 (win 9x) or 5 (NT) "databases" (or actually IMHO "filesystems") files. See also: http://www.911cd.net/forums//index.php?showtopic=24370&st=0&p=168043entry168043 Since you are seemingly old enough to remember good ol' DOS databases, you have to think to it as you would at a good ol DBaseIII (not that more modern databases are that much different ). You had a number of tables containing DATA, that were assembled and accessed in an "assembled" way through a form, and the results (still coming form the assembly) were visualized through a report. The normal online registry editor is nothing but a combined form/report "DBase" or "Clipper" app. Of course, like you could use *any* dbase uility to access directly the tables, you can use *any* registry tool to access the single files composing the Registry (offline). If you prefer, the Registry (online) as you are used to see it, is a building erected on-the-fly when booting with a number of bricks (and broken again into single elements when shutting down). Nothing prevents you to access the bricks when they are not assembled all together. jaclaz