Flush or Commint Regedit changes

N

NiBE

Hi,
I just mount an WinXpe image on a USB device.
My personal application (Written in C#) in some circumstance change regedit
value. I notice that if I shutdown the PC without the right command, the new
registry values are dropped. I suppose it's because it doesnt commit
correctly the value, even if I use Registry.LocalMachine.Flush(); inside C#
code.
Probably it's a low level matter.
I suppose to have EWF filter, but I forget to move the EWF console manager
in my final image, so I move the file and two DLL manually,but when I start
it, it tells me: "unable to find an EWF volume"
I create image with EWF NTLDR package, so I was quite sure.
Anybody can please help me?

thanks a lot

nibe
 
N

NiBE

Dear Liming,
now I find where I can set RAM or RAM reg, and it is set as RAM.

thanks for your support

nibe
 
N

NiBE

Hi,
I just create another XpeImage, and I set RAM reg Overlay Type.
I boot my image from a USB key device.
Then I try to add a new registry key, then try to commit the changes with
ewfmgr c: -commitanddisable -live
But the new changes aren't recorded, just dropped after the reboot, If I
reboot correctly with shutdown command all things works fine.
I have no idea what else can I do, anybod please can give me some advice?

thanks a lot

nibe
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top