Tuesday, December 21, 2010
【 Weak current College 】 Windows7 hidden partition knowledge
I wonder if you know in Windows7 install process, the system will first start of the disk to create a hidden partition 100M left and right, and then will be installed in Windows7 another partition. The hidden partition question, what is the role of the system, here are some of the hidden partition on Windows7 inside. Come to share with you.
1. hidden partition status
The partition is formatted as NTFS, there is no disk volume label is not assigned a drive letter, the disk status descriptions are: System, active, primary partition. Because there is no drive letter in Explorer is not visible.
2. contents of the hidden partitions
Operation in Disk Manager, select the partition, right-click to select "change drive letter and paths" pop-up change Wizard. Click the "add" button in the pop-up dialog box click the "assign the following drive letter", and then click on the drop-down list select the last F, "OK" to exit. Next, open the "computer" to see a new disk partition F, enter the partition found two hidden directory Boot and SystemVolumeInformation, in addition, there are two hidden files bootmgr and BOOTSECT.BAK. There is no doubt that Windows7 the hidden partition is saved in the system boot files.
3. Add a hidden partition on the impact of the system startup
Next we restart system, see the above operations affect the Windows7 start. Test results system boots, it is evident that these changes will not affect the system start. To reassign the drive letter of the boot partition operation does not modify the system boot files, nor does it modify disk boot sector. Visible, the reason why Microsoft will Windows7 boot files placed on a separate hidden partition, must be for the protection of the boot file.
4, the hidden partition returns to hide mode
Since the hidden partition for protecting the system boot files, the following test to see if we can cancel just assigned drive letters. Right-click the partition, select "change drive letter and paths", trying to "change" or "delete" drive letter appears in the "unable to delete/change a volume's drive letter", the reason for this is to change the volume of the system or boot volume. Thus, as in this Windows7 special hidden partition on a drive letter is not reversible.
5. remove hidden partition on the impact of the system startup
The Disk Manager, I try to "format" and "delete volume" are successful, then the partition is visible Windows7 of protection is very good. Since the system tools, then try third-party tools. I tested with AcronisDiskDirectorSuite10.0, use this tool to delete the partition and the data, and then restart the system. Show "BOOTMBRismissing" i.e. the master boot sector is missing, the system will not boot. Thus, the hidden partition saving the system boot files and the disk's master boot partition information.
6, delete the files in a hidden partition on the impact of the system startup
To enter the administrator login system, and then make the F partition files deleted. In the delete process found that some files are not deleted, display "file in use" or "does not have delete permission prompt." Then he tried to administrator gives "full control", the result is rejected. Tested to discover even the system does not have full control permissions, users should have only TrusterInstaller full control permissions. Restart the system, the system boots. Thus, we have just deleted files and not related to the system startup, the real and the system starts the relevant file is not deleted.
Labels:
[:]
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment