[likuidkewl]

I have been trying for a couple of days to find out where ERD 2003 stores it's list of start menu programs, All I am trying to do is add a Virus scanning option and this is turning out to be a major pain in the arse! So if anyone has any information on this subject please enlighten me....
I have added a desktop shortcut but that is not what I am really looking to do.

[likuidkewl]

Seems to me that ERD encrypts the registery files after the ISO is created, due to not being able to load them into a registry editor, I have looked at them while creating the files for the ISO and they are mainly the normal REG files for WinPE, but the file sizes after the ISO is built is considerabley smaller in the defalt.hiv file. Anyhow anyone got any ideas?

[scp]

What about renaming regedit.exe to one of the ERD .exe's and then recreate the ISO and run it?

[likuidkewl]

Nope no dice but I did get inside it, still nothig though, I am assuming it is because I am uber the assumption that it used MS explorer when it actually uses it's own version filexplorer. But I did get some useful info seems like it uses proram manager registery entries to control certain aspects, i.e. NoRun, NoFileMenu, NoClose, etc.

Attached File(s)

•  ERDdefaultreg.JPG (71.66K)
  Number of downloads: 91

[scankurban]

You can load and edit any hiv file directly inside winpe.

[likuidkewl]

scankurban, on Apr 20 2004, 04:11 AM, said:

You can load and edit any hiv file directly inside winpe.

I am not really concerned with that issue because I found a program that allows me to do it outside ERD/WinPE. Now my issue is back to where are the start menu items listed....

[scp]

WindowsShell.exe dont uses the registry for the start menu entries. The default entries are hardcoded into the .EXE.
But it seems to be that new entries can also be added to the start menu via DT.CFG. I tried following:

shortcut
name My Computer
position 10, 10

shortcut
name Network Neighborhood
position 90, 10

menu
program %SYSTEMROOT%\system32\RegMon.exe
icon %SYSTEMROOT%\system32\RegMon.exe,0
name RegMon

I get a submenu named "Programs" in the Start menu and the correct icon and name for RegMon is shown in ta submenu entry. BUT - If I click on it , regmon don't starts, the "System Compare Wizard" starts.
Any additional idea on this?