ERD Commander 2005 User’s Guide Winternals Software LP 3101 Bee Caves Road, Suite 150 Austin, Texas 78746 (512) 330-9130 (512) 330-9131 Fax www.winternals.
ERD Commander 2005 User’s Guide Table of Contents 1 Welcome to ERD Commander 2005.............................................1 2 Introduction ...................................................................................3 2.1 2.2 2.3 3 The Boot CD-ROM Wizard ..........................................................12 3.1 3.2 3.3 3.4 3.5 3.6 3.7 3.8 3.9 3.10 3.11 3.12 3.13 3.14 3.15 3.16 4 Capabilities......................................................................................
ERD Commander 2005 User’s Guide 4.16 4.17 4.18 4.19 4.20 4.21 4.22 4.23 4.24 4.25 4.26 4.27 4.28 4.29 5 Troubleshooting ..........................................................................84 5.1 6 Disk Management ......................................................................... 65 Locksmith ...................................................................................... 66 File Sharing ...................................................................................
ERD Commander 2005 User’s Guide 1 Welcome to ERD Commander 2005 When your Windows NT 4.0®, Windows 2000®, Windows XP®, or Windows Server 2003® system becomes unbootable and you’ve exhausted the recovery options available with the operating system, you can rely on ERD Commander 2005 to provide full access to your dead system with a familiar Windows-like environment.
ERD Commander 2005 User’s Guide ERD Commander 2005 also includes the Mozilla Firefox 1.0 web browser allowing you to download patches, driver updates, or other updates to an offline system - giving you a secure offline environment to download updates in. You can browse for security bulletins and explore Microsoft support newsgroups to find answers to system problems while troubleshooting the system itself.
ERD Commander 2005 User’s Guide 2 2.1 Introduction Capabilities ERD Commander 2005’s built-in tools allow you to perform many different types of system diagnosis and repair. A few of the ways that ERD Commander 2005 helps you solve problems include: Diagnosing Windows Crashes The Crash Analyzer™ allows you to diagnose Windows crashes and pinpoint the driver causing the failure. Once found, you can remove, replace, or disable the problem driver to restore the system.
ERD Commander 2005 User’s Guide Updating Out-of-Date System Files Incorrectly applying service packs or system software updates can cause system DLLs to become out of sync with each other, which may prevent Windows from booting successfully. ERD Commander 2005 can copy up-todate versions of old files from USB flash drives or USB or 1394-attached hard disks, floppy disks, or other computers on your network.
ERD Commander 2005 User’s Guide Registry Editor, making it easy for you to inspect and change registry settings. Recovering Deleted Files ERD Commander 2005 includes FileRestore™, a utility that you can use to find and restore deleted files from any supported Windows file system format, including FAT, FAT32, and NTFS. Copying Important Files off of a Dead System ERD Commander 2005 enables you to access files on a Windows system that fails to boot.
ERD Commander 2005 User’s Guide Enabling and Disabling Services and Drivers You can list and modify the start types of a system's drivers and services with ERD Commander 2005’s Service and Driver Manager utility. The utility implements an interface similar to the Windows 2000/XP Services MMC snap-in, which makes it easy to identify services and drivers and to disable those that are preventing a system from booting.
ERD Commander 2005 User’s Guide can use the corresponding command-line tool, DiskPart, to accomplish the same tasks. Scanning a Dead System for Viruses With ERD Commander 2005 and Remote Recover 3.0 you can share the drives of a system on the network so that you can access them from another computer. This allows you to use tools installed on other systems to aid in the repair or recovery process. For example, if you suspect a virus has attacked a computer you can shut it down, boot into Remote Recover 3.
ERD Commander 2005 User’s Guide 2.2 Sample Screen This screenshot demonstrates a typical session using ERD Commander 2005 to access the Registry and service configuration of an offline system.
ERD Commander 2005 User’s Guide 2.
ERD Commander 2005 User’s Guide Windows XP or Windows Server 2003 running on Intel Itanium or 64-bit Extended systems. The use of the Internet Browser and the Crash Analyzer Wizard require a writable volume formatted with NTFS or FAT. The use of DiskWipe requires at least one working hard disk or floppy diskette. ERD Commander 2005 provides more diagnostic and repair functionality than any other version of ERD Commander before. Most of the utilities provided are compatible with several versions of Windows.
ERD Commander 2005 User’s Guide Regedit Compatible Compatible Compatible Compatible Not Compatible Service and Driver Manager Compatible Compatible Compatible Compatible Not Compatible Not Compatible Solution Wizard See individual tool System Compare Compatible Compatible Compatible Compatible System File Repair Wizard Compatible Compatible Compatible Not Compatible Not Compatible System Information Compatible Compatible Compatible Compatible System Restore Not Compatible Comp
ERD Commander 2005 User’s Guide 3 The Boot CD-ROM Wizard 3.1 Introduction There are two delivery methods for ERD Commander 2005: as a Boot-CD Creation Wizard and as a bootable CD-ROM on physical media. The BootCD Creation Wizard is what is received when you download ERD Commander 2005 after an online purchase; the version of ERD Commander 2005 that ships as physical media is a bootable image that also includes an installer for the Boot-CD Creation Wizard.
ERD Commander 2005 User’s Guide the tools you decide to include in it via the wizard, ERD Commander 2005 can range in size from 130 to 230 MB, so also insure that you are using media large enough to contain the resulting ISO image (i.e. if you intend to use CD recordable 3" media). This section guides you through the Boot-CD Creation Wizard.
ERD Commander 2005 User’s Guide 3.2 Welcome After you start the Boot-CD Creation Wizard you will be presented with a welcome page briefly informing you of the functionality the wizard performs.
ERD Commander 2005 User’s Guide 3.3 License Agreement Next you will be presented with a page containing the Licensing Agreement containing the licensing terms for the resulting product created from the wizard. You must select Yes, I accept the terms in the License Agreement before you can click Next.
ERD Commander 2005 User’s Guide 3.4 License Information Next you will be presented with a page that requests your licensing information (or will contain your existing information if you already have a licensed copy of the Administrator's Pak 5.0 installed). Online purchasers receive the licensing information as an email attachment that can be imported into the wizard.
ERD Commander 2005 User’s Guide 3.5 Extracting Files The next page will begin the process of extracting the files from the wizard to begin the process of creating the ISO image.
ERD Commander 2005 User’s Guide 3.6 Select Target Functionality The next page will allow you to select the functionality of the final CD: • Include only ERD Commander 2005 functionality. • Include only Remote Recover 3.0 client functionality. • Include both, and allow the user to decide which to use at run-time.
ERD Commander 2005 User’s Guide 3.7 Select Remote Recover Port The next page will allow you to select the UDP port which Remote Recover will use to connect to client systems. At this point you can also select to make all connections to this client CD read-only.
ERD Commander 2005 User’s Guide 3.8 Remote Recover Security The next page will allow you to select any constraints as to which Remote Recover hosts can connect to this client. You can select: • Any system on the network. This allows any system at all to connect to any Remote Recover clients, without exception. • Only this particular system. This allows only the system you are building the ISO on to act as a host to these clients. • Only systems providing this password.
ERD Commander 2005 User’s Guide 3.9 Selecting the Included Utilities On this page you can customize the set of components included on the ERD Commander 2005 CD. Tools that you omit are not included on that instance of the CD-ROM image. This page is only shown if you selected to include ERD Commander 2005 functionality (always shown if you are using the ERD Commander 2005 Emergency Download version).
ERD Commander 2005 User’s Guide 3.10 Adding the Debugging Tools for Windows This page allows you to either specify the location of a current copy of the debugging tools for Windows (to be built into your ERD Commander 2005 CD). You can either specify the location of an existing installation of the Debugging Tools for Windows or utilize a copy on the system where you are diagnosing a crash. The tools must be installed on each system you are diagnosing in that case.
ERD Commander 2005 User’s Guide 3.11 Password Protection The next page allows you to password protect the ERD Commander 2005 CD-ROM that you create. This is useful if you wish to restrict use of the ERD Commander 2005 boot CD-ROM to authorized individuals.
ERD Commander 2005 User’s Guide 3.12 Adding OEM Storage Controller Drivers If you work with systems that use SCSI adapters that Windows XP does not natively support then you can add OEM drivers for them to ERD Commander 2005. To add an OEM driver, simply click the Add Device button and browse to the driver's txtsetup.oem file. This file is provided by the storage vendor with other additional driver files. Note that SCSI is not the only type of storage driver you may need to add.
ERD Commander 2005 User’s Guide 3.13 Adding OEM Network Controller Drivers If you work with systems that have network controller drivers that Windows XP does not natively support then you can add OEM drivers for them to ERD Commander 2005. To add an OEM driver, simply click Add Device and browse to the driver’s installation file (the installation file should end in .INF) and all networking devices supported by that installation file will be added. Note that wireless connectivity (Bluetooth or 802.
ERD Commander 2005 User’s Guide 3.14 Adding Files to the CD-ROM Image Before creating the final ISO image, ERD Commander 2005 gives you the opportunity to add your own files to the image. The Boot-CD Creation Wizard informs you of the location of the ERD Commander 2005 directory tree. Files you add to the tree will be present in the final ISO image.
ERD Commander 2005 User’s Guide 3.15 Image Location The Boot CD-ROM Wizard’s next to last page prompts you to specify the destination of the generated ISO image. The resulting image can range from approximately 150 MB to 250MB of disk storage, depending on the options you select (it will also grow further if you added additional files in the preceding step). Because most CD-ROM burning software requires ISO images to have an .iso file extension, the Boot-CD Creation Wizard also requires that extension.
ERD Commander 2005 User’s Guide 3.16 Burning the CD-ROM The final interactive page of the wizard will look for a compatible CD recordable drive on your system. If a supported drive is found, it will offer to burn the ISO image to disc for you. You can then use a CD duplicator, duplicating service, or CD-burning software to make any additional copies you may need.
ERD Commander 2005 User’s Guide 4 4.1 Using ERD Commander 2005 Introduction Once ERD Commander 2005 boots, a minimal version of Windows based upon Windows Server 2003 will start and run the ERD Commander 2005 environment. It’s important to keep in mind that, although this graphical environment looks like Windows and even has similar utilities, it is not Windows code and therefore behaves slightly differently.
ERD Commander 2005 User’s Guide Command Prompt [Command_Prompt] Chkdsk [Chkdsk] Diskpart [Diskpart] Notepad [Notepad] Regedit [Regedit] Service and Driver Manager [Using_Service_and_Driver_Manager] Event Log Viewer [Using_Event_Log_Viewer] TCP/IP Configuration [Using_TCP_IP_Configuration] Disk Management [Disk_Management] Disk Commander [Intro_Cmdr] Locksmith [LS] File Sharing [File_Sharing] Map Network Drive [Mapping_Network_Drives] System Restore [System_Restore] System Compare [System_Compare] System Fi
ERD Commander 2005 User’s Guide Autoruns [Autoruns] Running External Commands [Running_External_Commands] This section describes the functionality and use of each of these tools. In addition, you can execute Win32 applications[Running_External_Commands] other than those that are part of the ERD Commander 2005 environment.
ERD Commander 2005 User’s Guide 4.2 Network Initialization 4.2.1 Network Initialization The first step performed once ERD Commander 2005 has completed the first phase of booting is starting networking services. These services assume that a DHCP server is present on your network and attempt to obtain an IP address. If your network uses static IP addresses rather than DHCP you can use the TCP/IP Configuration [Using_TCP_IP_Configuration] utility after logging in to specify a static IP address.
ERD Commander 2005 User’s Guide 4.3 Role Selection 4.3.1 Role Selection If you are utilizing a version of ERD Commander 2005 provided as a component of Administrator's Pak 5.0, and you selected to include the Remote Recover client as well as ERD Commander 2005, the first screen visible when ERD Commander 2005 boots will ask whether you would like to continue running ERD Commander 2005, or switch to Remote Recover 3.0 client mode.
ERD Commander 2005 User’s Guide 4.4 Logon 4.4.1 Logon When ERD Commander 2005 boots it executes the Winternals Logon application. If the ERD Commander 2005 CD was generated by the Boot CDROM Wizard, the Logon application next displays the licensing information entered during execution of the wizard. Otherwise it will prompt you to enter ERD Commander 2005 license text or specify a file containing an ERD Commander 2005 license.
ERD Commander 2005 User’s Guide The Logon application allows you to choose a keyboard layout and time zone using the respective drop down controls. The default selections for keyboard layout and time zone are taken from the installation you have currently entered into the installation selection field if the registry of that installation is accessible. Clicking the OK button selects the specified installation and starts the ERD Commander 2005 Windowing shell, described in the next section.
ERD Commander 2005 User’s Guide 4.5 Windowing Shell 4.5.1 Windowing Shell The ERD Commander 2005 Windowing Shell closely resembles Microsoft's Explorer shell. It has a task bar, Start menu, and desktop shortcuts. However, you cannot move the Windowing Shell’s task bar, edit the items on the Start menu, move or modify existing desktop shortcuts, or create new desktop shortcuts.
ERD Commander 2005 User’s Guide 4.6 System Information 4.6.1 Using System Information The ERD Commander 2005 System Information utility is accessed via the Administrative Tools folder of the Start menu. The utility reports extensive information about the system you are repairing, including the operating system version, service pack, hotfixes, registered owner and organization, and more.
ERD Commander 2005 User’s Guide 4.7 Explorer 4.7.1 Introduction ERD Commander 2005 Explorer, accessible from the Start menu, allows you to browse the system’s volumes as well as the NetBIOS network neighborhood; Active Directory browsing is not supported. The Explorer window has a tree view on the left and a list view on the right that displays the contents of the folder selected in the tree view.
ERD Commander 2005 User’s Guide menu launches a dialog that displays information about a volume, including statistics on total size and free space. See Resetting Permissions [Resetting_Permissions] for a description of the Reset Permissions button. 4.7.3 Folder Properties You can view detailed information about a folder by choosing the Properties menu entry from the folder’s context menu or the Properties menu entry in the File menu when the folder is selected.
ERD Commander 2005 User’s Guide 4.7.5 Adding a Domain If a domain is not visible within ERD Commander 2005's Network Neighborhood you can add it with the Add Domain dialog, which you activate from the Tools menu of ERD Commander 2005 Explorer.
ERD Commander 2005 User’s Guide 4.8 File Search 4.8.1 Using File Search Using ERD Commander 2005's File Search you can search for files on the hard disks of the system that you are repairing. ERD Commander 2005 File Search has an interface similar to the Windows File Search utility, and is accessible via the Start menu and from the context-menu of folders within ERD Commander 2005 Explorer.
ERD Commander 2005 User’s Guide 4.9 FileRestore™ 4.9.1 Using FileRestore Use ERD Commander 2005’s FileRestore utility to recover deleted files from the system you are repairing. Its interface, like that of ERD Commander 2005 File Search, is similar to that of the Windows File Search utility. The search pattern you enter can contain any subset of the file or path names for which you wish to search, and can include the asterisk (*) wild-card character.
ERD Commander 2005 User’s Guide Note: To reduce the possibility of overwriting data that you may wish to recover, whenever practical you should restore files to a location other than the source volume. Options include other disks or volumes on the same system, a USB attached flash drive or hard drive, or a mapped network drive.
ERD Commander 2005 User’s Guide 4.10 Command Prompt 4.10.1 Introduction ERD Commander 2005 Command Prompt presents a subset of the functionality implemented by the Windows XP command-prompt that includes most built-in commands, the ability to execute external applications, and batch file capabilities. This section serves as reference for the Command Prompt’s built-in commands. 4.10.2 The Command Set ATTRIB [Attrib] Displays or changes file attributes.
ERD Commander 2005 User’s Guide DISKPART [DiskPart] Performs disk and volume partitioning and configuration. ECHO [Echo] Displays messages, or turns command echoing on or off. ERASE [Del_Erase] Deletes one or more files. EXIT [Exit] Exits the command prompt. HELP [Help] Provides Help information for ERD Commander 2005 commands. MAP [Map] Displays drive letter to partition mapping. MD [Mkdir_Md] Creates a directory. MKDIR [Mkdir_Md] Creates a directory.
ERD Commander 2005 User’s Guide VER [Ver_Version] Displays ERD Commander 2005 version number. VERSION [Ver_Version] Displays ERD Commander 2005 version number. XCOPY [Xcopy] Copies files and directory trees. 4.10.3 Attrib Displays or changes file attributes. ATTRIB [+R | -R] [+A | -A] [+S | -S] [+H | -H] [[drive:][path]filename] [/S] + Sets an attribute. - Clears an attribute. R Read-only file attribute. A Archive file attribute. S System file attribute.
ERD Commander 2005 User’s Guide BUFFER [width height] width Specifies width of the console buffer. height Specifies height of the console buffer. 4.10.5 Call Calls one batch program from another. CALL [drive:][path]filename [batch-parameters] batch-parameters Specifies any command-line information required by the batch program. 4.10.6 Chkdsk ERD Commander 2005 includes a clone of the Windows 2000/XP Chkdsk utility for analyzing and correcting file system corruption.
ERD Commander 2005 User’s Guide If you specify a drive that has open files, for instance because you are running an application from the drive, you must use the /X switch. However, the /X switch does not work on the system drive of an installation you are repairing if you are running any utilities that access the Registry of that installation. The ERD Commander 2005 utilities that access the Registry include Regedit, Explorer, Service and Driver Manager, System Information, and Event Log Viewer.
ERD Commander 2005 User’s Guide 4.10.9 Copy Copies one or more files to another location. COPY source [destination] Source Specifies the file or files to be copied. Destination Specifies the directory and/or filename for the new file(s). Wildcards can be used in both the source and destination file name specifications. 4.10.10 Date Displays the current date. DATE 4.10.11 Del/Erase Deletes one or more files.
ERD Commander 2005 User’s Guide Specify multiple files by using wildcards. /P Prompts for confirmation before deleting each file. /F Force deleting of read-only files. /S Delete specified files from all subdirectories.
ERD Commander 2005 User’s Guide [drive:][path][filename] Specifies drive, directory, and/or files to list. /P Don't pause after each screen of information. /W Uses wide list format. /A Displays files with specified attributes. Attributes D Directories R Read-only files H Hidden files A Files ready for archiving S System files - Prefix meaning not /O List by files in sorted order.
ERD Commander 2005 User’s Guide 4.10.13 Diskpart Diskpart, Microsoft’s command-line disk partitioning utility, ships with ERD Commander 2005. The ERD Commander 2005 Disk Management [Disk_Management] snap-in that you access with the Computer Management utility provides a graphical interface to a subset of Diskpart’s functionality, but Diskpart has interactive as well as script-driven modes. For help on Diskpart’s commands, run it and enter the Help command.
ERD Commander 2005 User’s Guide Command Displays specific information on the specified command. 4.10.17 Map Displays drive letter to partition mappings. This command displays the drive letter assignments made by ERD Commander 2005. For each drive you will see the device name, volume label, file system type, and drive size.
ERD Commander 2005 User’s Guide 4.10.18 Mkdir/Md Creates a directory. MKDIR [drive:]path MD [drive:]path MKDIR creates any intermediate directories in the path, if needed. For example, assume \a does not exist then: mkdir \a\b\c is the same as: mkdir \a mkdir \a\b mkdir \a\b\c 4.10.19 Move Moves or renames a file or directory. MOVE Source [Target] Source Specifies the path and name of the file(s) to move. Target Specifies the path and name to move file(s) to.
ERD Commander 2005 User’s Guide 4.10.20 Rmdir/RD Removes (deletes) a directory. RMDIR [/S] [/Q] [drive:]path RD [/S] [/Q] [drive:]path /S Removes all specified directories directory directory itself. in and files in addition to the the Used to remove a directory tree. /Q Quiet mode, do not ask if ok to remove a directory tree with /S. 4.10.21 Screen Sets console screen information. SCREEN [width height] width Specifies width of the console window.
ERD Commander 2005 User’s Guide Type SET without parameters to display the current environment variables. 4.10.23 Start Starts a program in a new command prompt window. START [program] [parameters] program Specifies the program. parameters Specifies the parameters for the program. 4.10.24 Time Displays the current time. TIME 4.10.25 Type Displays the ASCII contents of a file. TYPE filename The TYPE command displays the contents of a file.
ERD Commander 2005 User’s Guide VER 4.10.27 Xcopy Copies files and directory trees. XCOPY source [destination] [/A | /M] [/P] [/S] [/W] [/C] [/E] [/I] [/Q] [/F] [/H] [/R] [/T] [/U] [/K] source Specifies the file(s) to copy. destination Specifies the location and/or name of new files. /A Copies files with the archive attribute set, doesn't change the attribute. /M Copies files with the archive attribute set, turns off the archive attribute.
ERD Commander 2005 User’s Guide /I If destination does not exist and copying more than one file, assumes that destination must be a directory. /Q Does not display file names while copying. /F Displays full source and destination file names while copying. /H Copies hidden and system files also. /R Overwrites read-only files. /T Creates directory structure, but does not copy files. Includes empty directories or subdirectories. /U Copies only files that already exist in destination.
ERD Commander 2005 User’s Guide 4.11 Notepad 4.11.1 Using Notepad ERD Commander 2005 Notepad is essentially a clone of the Windows Notepad application, allowing you to edit existing text files and create new ones.
ERD Commander 2005 User’s Guide 4.12 Regedit 4.12.1 Regedit ERD Commander 2005 Regedit is similar to the Windows XP Regedit utility, but enables you to edit the registry of the system you are repairing. Unlike with Windows Regedit, you will only see three top-level keys in ERD Commander 2005 Regedit: HKEY_CLASSES_ROOT and HKEY_LOCAL_MACHINE and HKEY_USERS.
ERD Commander 2005 User’s Guide • DWORD Like the Windows Regedit utility, ERD Commander 2005 Regedit supports registry key import and export, allowing you to save registry key information to a text file and to incorporate registry key information of the same format into the registry. The file format used by ERD Commander 2005 Regedit is the same as that used by the Windows 2000, Windows XP, and Windows Server 2003 registry editors.
ERD Commander 2005 User’s Guide 4.13 Service and Driver Manager 4.13.1 Using Service and Driver Manager The ERD Commander 2005 Service and Driver Manager, accessible in the Administrative Tools folder of the Start menu, is an ERD Commander 2005 Computer Management utility snap-in.
ERD Commander 2005 User’s Guide 4.14 Event Log Viewer 4.14.1 Using Event Log Viewer ERD Commander 2005 Event Log Viewer enables you to examine the System, Application, and Security event logs of the system you are repairing. It functions like the Windows Event Viewer, allowing you to look for entries that might help you diagnose a problem that is preventing a system from booting. Examples include blue-screen crash errors and errors or warnings that indicate problems with particular services or drivers.
ERD Commander 2005 User’s Guide 4.15 TCP/IP Configuration 4.15.1 Using TCP/IP Configuration When you boot a computer with ERD Commander 2005, network adapters on the system are started using a default configuration that assumes that you have a DHCP server on your network from which an IP address, gateway, and DNS servers can be obtained.
ERD Commander 2005 User’s Guide 4.16 Disk Management 4.16.1 Using Disk Management The Disk Management utility is a snap-in to the ERD Commander 2005 Computer Management utility that is located in the Administrative Tools folder of the Start menu. It provides information on drive-letter to volume mappings as well as a graphical disk partitioning and formatting interface.
ERD Commander 2005 User’s Guide 4.17 Locksmith 4.17.1 Using Locksmith If you are unable to logon to a system because you have lost the local administrator password or because the administrative password has been locked out, use the ERD Commander 2005 Locksmith utility to reset the password to a known value and unlock the account.
ERD Commander 2005 User’s Guide 4.18 File Sharing 4.18.1 Using File Sharing To export the volumes of a system booted with ERD Commander 2005, use the ERD Commander 2005 File Sharing utility located in the Networking Tools folder of the Start menu. The utility requires that you enter a workgroup name and password for the ERD Commander 2005 administrator account.
ERD Commander 2005 User’s Guide 4.19 Map Network Drive 4.19.1 Map Network Drive ERD Commander 2005 Explorer provides a Network Neighborhood folder for you to navigate to file shares. However, in some cases it is more convenient to access a file share through a mapped drive letter.
ERD Commander 2005 User’s Guide 4.20 System Restore 4.20.1 Using System Restore Windows XP’s System Restore feature can be configured to periodically create snapshots, called restore points, of operating system files, the Registry, and various Windows component configuration databases such as COM+ and WMI (Windows Management Instrumentation).
ERD Commander 2005 User’s Guide 4.21 System Compare 4.21.1 Using System Compare If you have an unbootable system that was configured similarly to another installation on your network or to an on-disk image (such as an installation CD), use the ERD Commander 2005 System Compare utility to identify file, service and driver differences between the system and a reference image to help guide the repair process.
ERD Commander 2005 User’s Guide 4.22 Disk Commander 4.22.1 Introduction to Disk Commander Disk Commander is an advanced partition, volume, file and master boot record (MBR) salvage and repair tool that ERD Commander 2005 includes when you purchase it as part of the Winternals Administrator’s Pak. You can use Disk Commander to: • Salvage files from a volume that your operating system is having trouble accessing.
ERD Commander 2005 User’s Guide Warning: The drive letter assignments you see in Disk Commander may be different than what Windows assigns. Please carefully examine the sizes and labels of all of the drives before making a selection. If you select a drive letter then you will be able to salvage files from the volume, but not make any kinds of repairs (normally if the volume is assigned a drive letter than there are no further repairs that Disk Commander can perform).
ERD Commander 2005 User’s Guide Partition Table Backup Because Disk Commander allows you to modify your partition table, you may want to create a back up of the information stored there. Disk Commander allows you to back up the partition table entries, as well as the boot sectors of each of your partitions, and save them to a file.
ERD Commander 2005 User’s Guide volume has been corrupted you can use this “backup” version of the partition to repair or salvage data in the original. The bottom pane provides a summary of all the displayed volumes. It first lists the regular volumes, followed by lost volumes. Clicking an entry in the top or middle pane will automatically select the corresponding entry in the bottom pane, and vice versa.
ERD Commander 2005 User’s Guide salvage. You can unmark a marked file/directory by clicking the (De)Select button again. • Type the path of a directory on an intact volume to which you wish to copy the marked files/directories, or use the Browse… button to select one. • If you wish for Disk Commander to preserve the directory structure of the files being copied then ensure that Preserve paths is checked. Otherwise no directories will be created when the files are copied.
ERD Commander 2005 User’s Guide you enter. The use of wild cards in your search is not supported by Disk Commander. • If a file is deleted it will be marked with a red X. • If a file or directory is found but it cannot be determined which directory it belongs to (possibly because the parent directory is destroyed) then it is placed in a directory labeled “” and marked with an X.
ERD Commander 2005 User’s Guide 4.23 System File Repair Wizard 4.23.1 System File Repair Wizard If your Windows installation is not acting correctly or you have corrupt system files, you can run the System File Repair Wizard. Similar to the Window System File Checker utility, this wizard walks through the DLLCache directory installed with Windows by default to insure key Windows files are not corrupt.
ERD Commander 2005 User’s Guide 4.24 Crash Analyzer Wizard 4.24.1 Crash Analyzer Wizard You may use the Crash Analyzer Wizard to debug a Windows crash dump and diagnose system errors. Using a copy of the Microsoft Debugging Tools for Windows (which must be manually downloaded to insure you have the most recent version) the Crash Analyzer Wizard will take a Windows crash dump (either a full dump or minidump) and pinpoint the driver most likely to have caused the crash.
ERD Commander 2005 User’s Guide 4.25 Hotfix Uninstall Wizard 4.25.1 Hotfix Uninstall Wizard If a system update (Windows hotfix or service pack) is preventing a system from booting, you can utilize the Hotfix Uninstall Wizard to remove the update, provided an uninstall profile was created at install time. Once the update has been removed and Windows boots normally, you should remove the update again using the Windows Add/Remove Programs control panel applet to ensure the update is completely removed.
ERD Commander 2005 User’s Guide 4.26 Mozilla Web Browser 4.26.1 Mozilla Web Browser You may use version 1.0 of the Mozilla Web browser to look for updates, find support information on Microsoft web-based newsgroups or in the Microsoft Support Knowledgebase, or find technical information on system vulnerabilities - even on unbootable systems. The browser functions the same as a normal version of Mozilla on a full installation of Microsoft Windows.
ERD Commander 2005 User’s Guide 4.27 DiskWipe 4.27.1 DiskWipe DiskWipe is a utility that will erase disks or volumes, either with a single pass or a US Department of Defense standard four pass overwrite with verification. Once written, a drive cannot be recovered. Since Windows and ERD Commander may assign drive letters in a different order, double check the size and volume label before proceeding with the disk wipe.
ERD Commander 2005 User’s Guide 4.28 Autoruns 4.28.1 Autoruns Autoruns allows you to identify potential malware and applications which may be consuming system resources. You can see what programs are configured to startup automatically when your system boots and when you login.
ERD Commander 2005 User’s Guide 4.29 Running External Commands 4.29.1 Running External Commands The ERD Commander 2005 operating environment allows you to run Win32 applications other than those included on your product CD. Such External Commands may be found on the volumes of the computer that you wish to repair, or on the network. However, because the ERD Commander 2005 environment is different than that of Windows, many applications launched within it either behave incorrectly or fail to run.
ERD Commander 2005 User’s Guide 5 5.1 Troubleshooting Frequently Asked Questions Why do I get access denied errors when I try to replace a system's Registry hives? If you are running a utility that accesses the registry of the system being repaired you will be unable to replace the Registry hives. Utilities that access the Registry include Regedit, Explorer, Service and Driver Manager, System Information, and Event Log Viewer.
ERD Commander 2005 User’s Guide Hive Name Registry Key(s) SAM HKLM\SAM SECURITY HKLM\SECURITY SOFTWARE HKLM\SOFTWARE SYSTEM HKLM\SYSTEM, HKCR Why does ERD Commander 2005 freeze when I eject the ERD Commander 2005 CD-ROM? Individual ERD Commander 2005 applications are loaded into memory on demand. If you remove the ERD Commander 2005 CD the system cannot read any items not already in memory, potentially causing a fatal error within the ERD Commander 2005 environment.
ERD Commander 2005 User’s Guide 6 Contacting Winternals Software 6.1 Sales Order Winternals products Online at www.winternals.com, or by fax, phone or email: Phone: (800) 408-8415 (512) 330-9130 Fax: (512) 330-9131 Email: sales@winternals.
ERD Commander 2005 User’s Guide 6.2 Technical Support For access to the latest updates and FAQs on ERD Commander 2005, please visit our support web site at: www.winternals.com/support You can directly contact technical support at support@winternals.com or by calling 1-512-330-9861 Before contacting support, please determine if the problem is reproducible, and if so, record the steps necessary to reproduce it.