Recent Changes - Search:
TechNotes /

EvermorePE

To-do

  • Add driver for SG31G2 network adapter (Marvell 10/100/1000Mbps Integrated Ethernet) - was unable to extract the actual driver without installing it on the first try
  • Update ClamWin defs
  • Move System and System Utilities from the Nu2Menu to the main Start menu.
  • Update AdAware?
  • Look for other anti-virus options (Nod32) (AVG 8.0)
  • Add VMWare plugin? Needs files from VMWare Tools windows.iso. Fusion version won't work.
  • Add PCATTCP (network throughput testing)

20091030

  • Verified that Sherpya plugins are current.
  • Added SIW plugin (SIW Home)
  • Updated ClamWin defs.
  • Updated splash screen.

20090601

  • Verified that Sherpya plugins are current.
  • Added Macrium Reflect plugin and, customized for menu.
  • Created a plugin for Recuva(file recovery tool).
  • Upgraded to this TestDisk plugin.
  • Updated ClamWin defs.
  • Updated splash screen.
  • Ran a full scan of a Shuttle SB61G2V3 system (1GB RAM, 200g+ of files) with ClamScan to verify that it is working properly. Scan completed as expected.

20090511

Minor interim release.

  • Restored Registry Editor PE icon to start menu (still in NU menu)
  • Updated ClamWin defs
  • Updated splash screen

20081124

  • Increased default RAMDisk size to 128MB to allow newer ClamWin to complete CVD extraction.
  • Updated to latest ClamWin defs (11/24/2008)
  • Removed Firefox IT link on desktop (again).
  • Updated splash screen

20081116

  • Updated to XPE 1.0.7
  • Updated to AutoRAMDiskResizer 2.1
  • Updated to SpyBot 1.6
  • Installed latest SpyBot definitions (16 November 2008)
  • Updated to WinPCAP plugin version 1.4.
  • Updated to WireShark plugin version 1.0.
  • Updated to Firefox plugin version 3.3
  • Updated to FirefoxFlash version 1.3
  • Updated to Clamwin 2.7
  • Installed latest Clamwin definitions (15 November 2008).
  • Added ShowTraffic.
  • Update the Acrobat Reader plugin to version 1.1. When unpacking, AVG 8 Pro detected a threat in the AcroStart.exe file: Trojan Horse Downloader.Generic8.BCM. ClamScan did not think the file was infected. I sent the file in to AVG to confirm that it was a false positive. Strangely, the AcroStart.exe file has disappeared from the backups of the last version. Update: I received a response from AVG confirming that this was a false positive.
  • Updated to RegistryEditorPE version 1.0a. For some strange reason, the older version broke - PEBuilder insisted it was missing an exe file that does not appear in any of the older versions or archives. I know I have been using it, though.
  • Updated splash screen
  • Slipstreamed Windows SP3 into the source.
  • Fixed Partition Magic (Reference reference 2). Note that it doesn't run in VMWare (testing). It just displays the splash screen and exits. It does work on real hardware booted from the PE CD, though.
  • Enabled WMI support, built the Repository and added it to the image.
  • HandyRecovery is working again, though I made no changes specifically to fix it.

Using Device Tools > Install Devices causes a pop-up requesting the install media (Please insert the floppy disk labeled "Windows XP Professional Service Pack 3 CD" into the drive A: and then click OK). Checking back, I see that this was happening in the 20080719 release, too. If I click Cancel, then run Install Devices again, it seems to work correctly. I posted about this to the 911 CD forum.

20080719

This is mostly a minor maintenance release. I have deferred several items due to limited time to sort them out.

  • Added CPU-Z
  • Added InfraRecorder
  • Updated ClamWin, installed current defs (19 July, 2008)
  • Updated SpyBot
  • Updated splash screen

There appears to be a new version of AdAware and updates for the previous version are no longer available. Disabled for this release.

20080216

  • Fixed WinFlash
  • Updated to Firefox (standalone) 2.0.0.9 (modified to remove IT localizations)
  • Updated to ClamWin 0.92
  • Updated ClamWin definitions to today (16 February 2008)1
  • Added 7-Zip
  • Updated Spybot to 1.5.22
  • Updated boot screen
  • Updated AdAware definitions
1 You can download the latest main.cvd and daily.cvd directly from the ClamAV site without having ClamWin installed.
2 Remember that SDUpdate.exe and SpybotSD.exe are marked as system files on install and must be made visible before they can be copied.
Note that Spybot can now update itself successfully, given a working network connection.

Remember that non-XPE plug-ins need a .inf entry for the menu.

AVG 7.5

I checked for a plugin for AVG 7.5. It sounds like there is one in development but, has not yet been released. This appears to be the forum topic to watch, although recent change logs for the UBCD4WIN projects show AVG 7.5, suggesting it already exists.

Windows XP Hotfixes

I tried slipstreaming 93 post-SP2 hotfixes into the Windows install tree. However, it caused the disc to boot with a series of errors and not bring up the GUI. Some of the messages were incompletely readable but, this is the main portion:

XPERunOnce
Error while executing : browseui.dll
Error while executing : shdocvw.dll
Error while executing : urlmon.dll

I found several articles that suggest this is related to the RAM disk.

20070930

  • Updated Clamwin definitions
  • Updated to Spybot 1.5, new plug-in
  • Updated AdAware
  • Updated XPE
  • Updated to Firefox (standalone) 2.0.0.6
  • Updated to Java 1.6, used re-compression to minimize space usage
  • Updated Ethereal / Wireshark
  • Updated PCap
  • Updated AutoRAMResizer
  • Added Sysinternals utils
  • Added nu2xpe to convert menu items
  • Added custom Evermore boot splash screen
  • Added Show Traffic plug-in
  • Customized various plug-in .inf files to add entries to the XPE (normal Start) menu
  • Disabled Startup Group and Nu2Shell for XPE compatibility
  • Disabled YAPS - current version appears to be infected with a virus
  • Modified Firefox, Wireshark, and WinSCP .inf files to not leave icons on the desktop
  • Modified Firefox .inf file to get rid of Italian localized launch icon
  • Modified Restoration plug-in to use the Programs directory (like everything else does), instead of Program Files
  • Changed bginfo to start up via XPE's RUNONCE system (in bginfo.inf)
  • Enabled WMI and built cache to correct framedyn.dll problem with Spybot startup

Notes

To update the boot image, create a 640x480 16-color BMP with no compression (gimp worked well for this). View the image information in IrfanView and change the resolution from 71x71 to 72x72 and save. Use ResHacker to replace the existing image in bootvid.dll (plugins/bootvid/bootvid.dll). Be sure to backup bootvid.dll, since this destructive.

Update: Update PSD file in Photoshop, save as TIFF, reduce colors to 16 in Irfanview and save.

Applications from the previous version that are not in the XPE menu should be in the Nu2XPE sub-menu.

20070401

  • First XPE version

20070301

20060816