保护您系统的利器——微软影子系统

本软件提取中自Windows XP Embedded SP2 FP 2007 CTP MSDN关于EWF介绍:http://www.microsoft.com/china/MSDN/library/Mobility/embedded/USdnxpesp1ewfwinxp.mspx?mfr=true 软件使用说明： 1.运行SETUP.BAT安装脚本将所有文件及注册表安装到系统盘，注册表默认对硬盘第一分区进行保护。 2.本软件仅仅在XP SP2下通过测试。 3.软件主要程序EWFMGR.EXE通过/?可得到帮助信息 4. 数据保存使用SAVE.BAT 打开保护使用TRUN ON.BAT 取消保护使用TRUN OFF.BAT 本EWF支持一次休眠多次快速启动功能，请手工复制HORM.DAT文件到C： (1).请输入ewfmgr c: 确认EWF处于打开状态 (2).输入ewfmgr c: -activatehorm (3).对系统进行休眠操作。 (4).重新启动后就可以实现快速启动了，这时你无论是断电，复位，强行关机等操作均无效！只能从休眠状态快速启动 (5).取消快速启动顺序： ewfmgr c: -disable -------> ewfmgr -deactivatehorm ----> reboot 关于一次休眠多次快速启动其他内容参考以下英文内容： To disable EWF in a Hibernate Once/Resume Many environment Disable EWF by using the EWF Manager command or the EWF API, for example: ewfmgr c: -disable Deactivate HORM by using the EWF manager command or the EWF API, for example: ewfmgr -deactivatehorm Restart the system. For example: xpepm -restart If you have not previously deactivated HORM (step 2 above), press F8 at the Resuming Windows screen during system boot and do the following: At the prompt, select Delete restoration data and proceed to system boot menu. The system boots normally and EWF will be disabled. After EWF is disabled, you can apply updates or install applications to your run-time image. To re-enable Hibernate Once/Resume Many, see Enabling a Hibernate Once/Resume Many Environment with EWF. To commit and disable EWF in a Hibernate Once/Resume Many environment From a command prompt, use EWF Manager to commit and disable EWF. For example: ewfmgr c: -commitanddisable -live From a command prompt, use EWF Manager to commit and disable EWF. For example: ewfmgr c: -commitanddisable -live The contents of the EWF overlay are committed to the protected volume and EWF is immediately disabled. The hibernated image must be refreshed before your changes will take effect effect for subsequent system boots. For example, use the windows XP Embedded Power Management Applicaiton component: xpepm -hibernate