EWF process failed in FBA fase

Y

Yasutaka Nakamura

Hi all,

I am testing EWF(RAM Overlay) function in my target. I
found strange phenomenon as described below.
In FBA fase, EWF process failed and it does not work.
I checked FBALOG.TXT and found EWF failed.
But sometime(very low establishment) FBA process resulted
OK and EWF works good.

--- FBALOG.TXT start ---
:
ConfigureEwf() Start.
:
:
ewfOpen.
ewfOpen returned invalid file handle.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
:
--- FBALOG.TXT end ---

I configured Enhanced write filter component.
Start EWF Enabled: unchecked
Enable Lazy write: unchecked
Disk Number: 0
Partition Number: 1
Disk Type: IDE
Overlay Type: RAM
Optimization Option: Optimal Performance

Disk is formatted NTFS and disk compression is enabled.

Please advice for me.

Regards,
 
Y

Yasutaka Nakamura

Hi Slobodan,

Thank you for your advice.
I found that you had already posted this advice before in
this newsgroup. I am sorry about my not enough
investigation.

I tryed to build image according to your advice and
confirmed that EWF works almost perfect as you described
in the documents("Normal behaviour").

So I tryed another method to execute FBA without skipping
EWF configure fase.

1. Create a partition on target disk with no temp pation
on the disk.
2. Format it as FAT32 and set active.
2. Restart PC.(Currently I do not know this operartin is
needed.)
3. Delete the partition.
4. Recreate a partition with no temorary partition.
5. Format it as NTFS and set Active and commpression
enable.
6. Deploy the image to this volume.
7. Boot the device and execute FBA.

I tryed above this procedure three time, I confirmed that
EWF works perfect at every time.

Slobodan, What do you think about this?
Basically, Do you think that it is MS's problem about EWF
initialize failure at FBA fase?

Regards,
 
D

Doug Hoeffel

Yasutaka:

The "invalid file handle" error is probably the most common error related to
EWF. It usually means that the EWF partition could not be created. This
can happen for many reasons. Do a google groups search on "EWF" and
"invalid file handle" and you'll see why.

If you have found a method that works consistently then I'd stick with it
:)

HTH... Doug
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top