Win10XPE Project General Discussions

Hi 3rik

I'm happy to be corrected, but I believe we are not allowed to distribute MS files. I'm hoping that JFX can resolve this issue, presumably caused by some change at MS re the ADK.

I guess you could try d/l the whole Windows Assessment and Deployment Kit (ADK) for Windows 10 and get the files that way, but it's very big, for only 10Mb worth of files we need, which is why we use JFX's great tool (GWT) to do it.

If you d/l and install full ADK, the files are in something like C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Deployment Tools\amd64\BCDBoot\

In the projects the d/l only happens once on the initial project run, subsequently using the already downloaded files, so anyone using any of the projects for the first time will get this error, we will just have to be patient.

Unless others have a bright idea

Ah alright
For now i tried copying the BcdBoot folder from the x86 folder, and it did boot, and things seemed to work fine (havent tested everything but i assume that issues with bcdboot with happen at bootup)
Hopefully it gets fixed soon

Question unrelated to the issue i had;
Custom apps install to the "Programs" folder at the root of the iso and not to the boot.wim file. Im using this as a replacement for windows recovery (winre.wim) and i cant figure out a way to get it to use stuff in that programs folder, it only loads whats inside the .wim. Is it possible to install everything to the boot.wim file itself instead of external folders?
Thanks :)

Question unrelated to the issue i had;
Custom apps install to the "Programs" folder at the root of the iso and not to the boot.wim file. Im using this as a replacement for windows recovery (winre.wim) and i cant figure out a way to get it to use stuff in that programs folder, it only loads whats inside the .wim. Is it possible to install everything to the boot.wim file itself instead of external folders?
Thanks :)

Depending on what you mean by Custom Apps

On the Build Core-Main Interface check 'Run ALL Programs From RAM' box

@anQS
@3rik

to clarify my earlier post

after you run the project and get that error, you find that the path ...\Projects\Tools\x64 is empty
you need to copy/move the 2 folders in ...\Win10XPE\Projects\Tools\ADK_6  (DISM & Oscdimg) to ...\Projects\Tools\x64
these are 2 of the 3 folders it should d/l and does before the failure

then in ...\Projects\Tools\x64 create the third missing folder BCDBoot. Then copy to it the 3 missing files bcdboot.exe bcdedit.exe and bootsect.exe from your other x64 source, if available. These are different from the similar named ones in the x86 dir.
When the project finds those  required files in the x86 & x64 dir it will no longer attemp to d/l the ADK bit and should progress past that point.
Bearing in mind this was only a temp solution until problem resolved one way or another.

@APT
(About the apps on ram thing) Ohhh yeah thanks so much! I should have been able to figure that out myself lol

Also, its been fine for me without copying the two folders from ADK_6 to x64, i only copied the BcdBoot folder over. No errors and everything seems ok within WinPE.
Not sure if im breaking something i havent noticed by not copying them though

downloaded Windows ADK for Windows 10, version 2004, replaced files - creation win10xpe, loading, work in it - all OK.
APT - thanks!

@APT
(About the apps on ram thing) Ohhh yeah thanks so much! I should have been able to figure that out myself lol

no probs 

you could have also checked each apps 'Run From Ram' individually

Hello James,

I am from Germany and I am very interested in your
Macrium Reflect 7 Multi-Edition XPE Plugin
or / and
Macrium Reflect 7 Home XPE Plugin

I am using Version 7.2 (last Build) of the Free Edition, but will buy the Home or Workstation Edition the next days.

Is it possible to share these XPE PlugIns with me or give me a download link?

Cheers and thanks in advance,
Alex

Hi Alex1976

Unfortunately, James doesn't post here anymore, but I will endeavor to get an answer for you.

Oooh, great :)
Thank you very much!!!

Acronis TrueImage 2021 now uses the Lang Code and no longer the lang ID to set the user interface language
In Acronis_TrueImage_2021_XPE.script, we need to change

Code: [Select]

StrFormat,SPLIT,%ScrollBox_Lang%,|,2,%LangID%
If,Not,%LangID%,Equal,0,RegWrite,HKLM,0x1,Tmp_Software\Acronis\Global,language,%LangID%

==>

Code: [Select]

StrFormat,SPLIT,%ScrollBox_Lang%,|,3,%LangCode%
If,Not,%LangCode%,Equal,EN,RegWrite,HKLM,0x1,Tmp_Software\Acronis\Global,language,%LangCode%

@richard hurn

from: richard hurn on Today at 03:14:18 PM

    MALWARE
    in the win10xpe download, once extracted the directoy for projects includes at file
    GWT.EXE
    that scans as a TROJAN
    Joes Sandbox also lists this as a malicious file
    the win10xpe installer / builder fails to run without this file
    LOOKS SUSPICIOUS AS HELL

Hi Richard

GWT.exe is only one of half a dozen files that regularly throw up these false positives in our projects.

this has been happening for years, we can only assure you they are False Positives. If you had looked through the forum posts you would find many new user reports of this each year, which is why we recommend making an exception to the project folder in your A/V.  as always, if your not happy - don't use the projects.

MALWARE

in the win10xpe download, once extracted the directoy for projects includes at file

GWT.EXE

that scans as a TROJAN

Joes Sandbox also lists this as a malicious file

the win10xpe installer / builder fails to run without this file
LOOKS SUSPICIOUS AS HELL

GWT.exe is a good example to show the inconsistency of some Antivirus software.
30 engines detected this file as positive, including Bitdefender, McAfee, Microsoft,...

GWT.exe is an executable compressed with the well known tool UPX: The Ultimate Packer for eXecutables
Homepage https://upx.github.io
https://github.com/upx/upx/releases/download/v3.96/upx-3.96-win32.zip (458Kb)
https://github.com/upx/upx/releases/download/v3.96/upx-3.96-win64.zip (458Kb)

If we decompress GWT.exe
upx.exe -d "E:\Win10XPE\Projects\Tools\GWT.exe"

9 engines detected this file now. There is no more alarm for Bitdefender, McAfee, Microsoft,...

We can conclude that it is either a False Positive or a False Negative, after decompression. They are wrong in one case or the other 
Their work is not satisfactory, they should do better
 
Here they are wrong about GWT.exe upxed, False Positive.
I will put GWT.exe uncompressed in the next update, to reduce false alarms.

+, I submitted GWT for malware analysis to Microsoft security, here is the result:

Submission details Refresh
gwt.exe
Submission ID: f9856c80-ec67-47d8-a5a6-b288ecaeaaf4
Status: Completed
Submitted by: xxxxxx@gmail.com
Submitted: Dec 7, 2020 10:52:10
User Opinion: Incorrect detection

Analyst comments:

We have removed the detection. Please follow the steps below to clear cached detection and obtain the latest malware definitions.

1. Open command prompt as administrator and change directory to c:\Program Files\Windows Defender
2. Run “MpCmdRun.exe -removedefinitions -dynamicsignatures”
3. Run "MpCmdRun.exe -SignatureUpdate"

Alternatively, the latest definition is available for download here: https://www.microsoft.com/en-us/wdsi/definitions

Thank you for contacting Microsoft.


Click here for more information

Thank You for that information and the info on UPX.