Mail Archives: opendos/2002/01/14/07:54:38
On 2002-01-13, Andreas Kaestner wrote:
> See:
>
> What's NOT a Virus
> http://www.bocklabs.wisc.edu/~janda/notvirus.html (section 2.2)
>
> Windows 95/98 Overwrites Boot-Sector Field on Floppy Disks (Q148637)
> http://support.microsoft.com/default.aspx?scid=kb;EN-US;q148637
>
> Understanding Disk Volume Tracking in Windows 95 (Q150582)
> http://support.microsoft.com/default.aspx?scid=kb;EN-US;q150582
>
> Windows 95/98 überschreibt Felder von Disketten-Bootsektoren
> http://www.winfaq.de/faq_html/tip1242.htm
Thanks, Andreas, that´s wonderful! :-) One more mystery is solved.
It´s unbelievable, Microsoft is doing all this mess for something
as trivial as keeping track of disk changes. I wonder why we already
have volume labels, disk serial numbers, floppy drives with change
line support, or alternatively a two-second timeout after the last
access. This should be more than enough to keep track of disk changes
in practise...
Unfortunately, there appears to be no way to completely disable
this "feature" in Windows 95+, but it is possible to define an
exclude list by adding binary keys to the registry under
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem\NoVolTrack
To keep Windows 95+ from modifying any DR DOS disks, one should add the
following OEM labels to the list:
"DIGITAL " DOS Plus 1.2;
DR DOS 3.31 - 5.0 "Leopard" Beta 3
"IBM 3.3" DR DOS 5.0 - 6.0;
Novell DOS 7, OpenDOS 7.01, DR-OpenDOS 7.02, DR-DOS 7.02 FDISK
"NWDOS7.0" Novell DOS 7 FORMAT & SYS
"OPENDOS7" OpenDOS 7.01 FORMAT & SYS
"DRDOS702" DR-OpenDOS 7.02 FORMAT & SYS
"DRDOS 7" DR-DOS 7.02 FORMAT & SYS;
DR-DOS 7.03
"DRDOS7.X" DR-DOS 7.02 - 7.03 FDISK (FAT32 only)
For your convenience I have created a file IHC.REG containing a number
of OEM strings as Windows registry keys. If you know of *any* other OEM
strings used on some pre-formatted floppies, with some formatters, or
other operating systems, please let me know - I´m collecting this stuff
for RBIL anyway.
Although the IHC.REG file is very small I don´t use MIME attachment,
because for good reasons .REG files may be blocked out by some virus
filters. Furthermore, not everyone wants to import the whole list of
OEM labels which should be excluded from Windows new volume tracking
method. It is probably a good idea to edit the file anyway. Make sure
there´s one line per key (that is remove the line wrapping).
The first six keys should already be present in your registry, otherwise
you should add them. You will only need to import the OEM labels which
I have listed above, the rest is optional.
IHC.REG:
|REGEDIT4
|
|[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem\NoVolTrack]
|"STAC disk" =hex:1F,00,CD,13,CD,14,CD,01,CD,03 ;
|"DAK acct disk" =hex:03,00,50,56,42,41,43,4B,55,50 ; "PVBACKUP"
|"IBM thinkpad disk" =hex:03,00,49,42,4D,20,35,20,33,79 ; "IBM 5 3y"
|"ROMPAQ flash disk" =hex:03,00,4D,53,44,4F,53,35,33,79 ; "MSDOS53y"
|"ROMPAQ diag disk" =hex:03,00,4D,53,44,4F,53,35,33,7A ; "MSDOS53z"
|"IBM flash disk" =hex:03,00,49,42,4D,20,35,20,33,66 ; "IBM 5 3f"
|"MS-DOS 2.0 disk" =hex:03,00,4D,53,44,4F,53,32,2E,30 ; "MSDOS2.0" MS-DOS 2.??
|"MS-DOS 3.1 disk" =hex:03,00,4D,53,44,4F,53,33,2E,31 ; "MSDOS3.1" MS-DOS 3.1
|"MS-DOS 3.3 disk" =hex:03,00,4D,53,44,4F,53,33,2E,33 ; "MSDOS3.3" MS-DOS 3.3
|"MS-DOS 4.0 disk" =hex:03,00,4D,53,44,4F,53,34,2E,30 ; "MSDOS4.0" MS-DOS 4.01
|"MS-DOS 5.0 disk" =hex:03,00,4D,53,44,4F,53,35,2E,30 ; "MSDOS5.0" MS-DOS 5.0 - 6.22
|"MS-DOS 7.0 disk" =hex:03,00,4D,53,57,49,4E,34,2E,30 ; "MSWIN4.0" Windows 95
|"MS-DOS 7.1 disk" =hex:03,00,4D,53,57,49,4E,34,2E,31 ; "MSWIN4.1" Windows 95 OSR 2 - Windows 98 SE
|"PC DOS 3.1 disk" =hex:03,00,49,42,4D,20,20,33,2E,31 ; "IBM 3.1" PC DOS 3.1
|"PC DOS 3.2 disk" =hex:03,00,49,42,4D,20,20,33,2E,32 ; "IBM 3.2" PC DOS 3.2
|"PC DOS 3.3 disk" =hex:03,00,49,42,4D,20,20,33,2E,33 ; "IBM 3.3" PC DOS 3.3; DR DOS 5.0 - 6.0; Novell DOS 7, OpenDOS 7.01, DR-OpenDOS 7.02, DR-DOS 7.02 FDISK
|"PC DOS 5.0 disk" =hex:03,00,49,42,4D,20,20,35,2E,30 ; "IBM 5.0" PC DOS 5.0; Compaq MS-DOS 5.0
|"PC DOS 6.1 disk" =hex:03,00,49,42,4D,20,20,36,2E,30 ; "IBM 6.0" PC DOS 6.1
|"PC DOS 7 disk" =hex:03,00,49,42,4D,20,20,37,2E,30 ; "IBM 7.0" PC DOS 7, PC DOS 2000
|"DR DOS 3 disk" =hex:03,00,44,49,47,49,54,41,4C,20 ; "DIGITAL " DOS Plus 1.2, DR DOS 3.31 - 5.0 "Leopard" Beta 3
|"Novell DOS 7 disk" =hex:03,00,4E,57,44,4F,53,37,2E,30 ; "NWDOS7.0" Novell DOS 7 FORMAT & SYS
|"OpenDOS 7.01 disk" =hex:03,00,4F,50,45,4E,44,4F,53,37 ; "OPENDOS7" OpenDOS 7.01 FORMAT & SYS
|"DR-OpenDOS 7.02 disk" =hex:03,00,44,52,44,4F,53,37,30,32 ; "DRDOS702" DR-OpenDOS 7.02 FORMAT & SYS
|"DR-DOS 7.02 disk" =hex:03,00,44,52,44,4F,53,20,20,37 ; "DRDOS 7" DR-DOS 7.02 FORMAT & SYS; DR-DOS 7.03
|"DR-DOS 7.02 FAT32 disk"=hex:03,00,44,52,44,4F,53,37,2E,58 ; "DRDOS7.X" DR-DOS 7.02-7.03 FDISK/FAT32
|"PTS-DOS 7.0 disk" =hex:03,00,50,54,53,44,4F,53,37,30 ; "PTSDOS70" PhysTechSoft's PTS-DOS 7 BETA 1 (1995)
|"RxDOS 6.0 disk" =hex:03,00,52,78,44,4F,53,36,2E,30 ; "RxDOS6.0" RxDOS 6.0
|"RxDOS 7.2 disk" =hex:03,00,52,78,44,4F,53,37,2E,32 ; "RxDOS7.2" RxDOS 7.2
|"FreeDOS disk" =hex:03,00,46,52,45,45,44,4F,53,20 ; "FREEDOS " FreeDOS (to be verified!)
|"boeder disk" =hex:03,00,20,52,50,53,20,35,2E,30 ; " RPS 5.0" boeder pre-formated floppy disks
Hope it helps,
Matthias
--
<mailto:Matthias DOT Paul AT post DOT rwth-aachen DOT de>; <mailto:mpaul AT drdos DOT org>
http://www.uni-bonn.de/~uzs180/mpdokeng.html; http://mpaul.drdos.org
- Raw text -