chkdsk问题暂时修改法(正式等小马出手):
这个方法是从水老pe里找出来的:
内核增加EVENTLOG.DLL文件,pecmd.ini加SERV EVENTLOG
如:
TEAM EXEC =PECMD SERV !AudioSrv|SERV AudioSrv|SERV EVENTLOG
SETUPREG.HI_修改
在\ControlSet001\Services\EventLog\Application下File字符串值%SystemRoot%\system32\config\AppEvent.Evt改为%SystemDrive%\TEMP\AppEvent.Evt即可.
或是:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\!syspe\ControlSet001\Services\EventLog\Application]
"File"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,44,00,72,00,69,00,76,\
00,65,00,25,00,5c,00,54,00,45,00,4d,00,50,00,5c,00,41,00,70,00,70,00,45,00,\
76,00,65,00,6e,00,74,00,2e,00,45,00,76,00,74,00,00,00 |