FBWF + boot up process RRS feed

  • Question

  • Hello
    Does anyone know where in the boot up process FBWF is loaded and running?
    I'm trying to determine if there is a chance of hive file corruption if there's a power interruption before FBWF is enabled.

    Another related question: If I have system32\config folder protected (i.e. not on my exclusion/write through list) using FBWF, would power interruptions corrupt any of the said hive files and prevent OS from working?

    Lastly, what are some of the most common causes of system32\config (hive file) corruptions?

    Thank you
    Monday, February 16, 2009 5:51 PM


  • FBWF is a minifilter so it gets loaded on top of the file system. This means it gets loaded early - pretty much when there is any file access, FBWF is running.

    If FBWF is protecting the system32\config folder, then there is very little chance that power interuptions would corrupt the system hives.

    So to answer your last question, suppose that you commit the hive files, that opens it up to corruption issues. There might be some theorectical cases but I haven't heard of any real issues if you are protecting the folder. 
    • Marked as answer by Steve_Oh Monday, February 23, 2009 11:58 PM
    Thursday, February 19, 2009 1:29 AM