EWF Tool has ruined me!

[Zollex]

I can not remove it! Every time I reboot XP returns to its source, as if replace the changes with a backup copy! Help!

[Tripredacus]

Enhanced Write Filter? Which specific edition of XP are you using and how exactly did you add/enable it?

[Zollex]

I have XP Pro and I used this guide: http://www.prime-expert.com/articles/a04/speeding-up-ssd-based-netbooks-and-adding-filesystem-integrity-with-ewftool.php

Edited February 1, 2016 by Zollex

[Tripredacus]

It sounds like you just need to remove that shortcut from the Startup folder. If you boot your PC using a boot media like a Win7 setup DVD, other WinPE, Linux live-cd, DOS with NTFS (if you are using that) support, etc you should be able to delete that shortcut.

[heinoganda]

Such services should be tested in a virtual machine. Well, first, all important data is copied to an external source, if something goes wrong. As a next step in the registry following entry under HKLM, "SYSTEM\CurrentControlSet\Services\EWF\Parameters\Protected" "Volume0" (can differ, because I would like a return info) Delete. Then on the command line (CMD) following run "ewfmgr c: -commit" and reboot of XP. Now you should at least once again the changes are written to the volume (removal of the service EWF, original file "ntldr" restore and various changes to the registry to its original setting).