Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Re: El Torito Stop 0x0000007B Error

9 views
Skip to first unread message

KM

unread,
Aug 18, 2004, 3:09:21 PM8/18/04
to
Anthony,

Since you did not outline the exact steps you did, you may want to search on the issue first.
Similar has been discussed on NG a few times:
http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&c2coff=1&q=Eltorito+7B&meta=group%3Dmicrosoft.public.windowsxp.embedded.*

Likely, you did not swap the boot drive letter with the El Torito CD-ROM drive letter.
Try etprep /all (or /flip) right after you enable EWF.

Also read the etprep steps carefully: http://msdn.microsoft.com/library/en-us/xpehelp/html/xetskrunningetprepexe.asp

--
Regards,
KM, BSquare Corp.


> Hell All,
> I followed exactly instructions from MS and Sean D. Liming book for
> Booting XPe from CD-ROOM. Every thing seems fine until I used final CD to
> boot from the device but unfortunately I have a Blue Screen with 0x000007B
> Error Message.
> I did check the ewfmgr/ewfmgr C: which was correctly and FBALOG.TXT was
> no error in there. and I also triple checked for compoments along with new
> uptodate QFE. Is anyone know what did I miss?
> Thank you very much in advance
> Anthony


Anthony

unread,
Aug 18, 2004, 4:45:03 PM8/18/04
to
Dear KM,
Thank you very much for all your comments in this NG, it is very helpful
for every one like me. So back to my problem, I did run "etprep -all" and the
OS rebooted so quickly that I can read the text like this
Delete EWF partitions=1
but the second sentence look like it try to reset the EWF ... something
here is my FBALOG.txt
21:06:31 PM - ConfigureEwf() Start.

21:06:31 PM - Getting EWF config parameters from registry.

21:06:31 PM - EWF Partition Size = 0 (KBytes), Levels = 1, Volumes = 1.

21:06:31 PM - Protected Volume Config #0 :

21:06:31 PM - Disk= 0,Part= 1,DiskType= IDE,Type= RAM.

21:06:31 PM - Enable= Disabled, Optimize= 0, LazyWrite= N.

21:06:31 PM - Found 1 Hard Disks.

21:06:31 PM - Searching for El Torito disk.

21:06:31 PM - Disk0 signature = 0x7F2DF44B.

21:06:31 PM - Checking Start value in
System\CurrentControlSet\Services\redbook key.

21:06:31 PM - Resetting Start value.

21:06:31 PM - Checking Start value in
System\CurrentControlSet\Services\Imapi key.

21:06:31 PM - Resetting Start value.

21:06:32 PM - Disk #0 layout info:

21:06:32 PM - PRIMARY partition,start=0x0000000000007e00,
len=0x0000000028b0a800, type= 6

21:06:32 PM - PRIMARY partition,start=0x0000000028b12600,
len=0x000000007d047e00, type= 6

21:06:32 PM - FREE partition,start=0x00000000a5b5a400,
len=0x0000001286551200, type= 0

21:06:32 PM - Allocating EWF in PRIMARY partition,
start=0x00000000a5b5a400, len=0x000000000000fc00.

21:06:32 PM - Created EWF partition on Disk = 0, partition = 3,size =
0x000000000000fc00 .

21:06:32 PM - ewfOpen.

21:06:32 PM - EWF Volume Config on Disk#0, Partition#3:

21:06:32 PM - Segments = 0, Max Volumes = 1, Max Levels = 1

21:06:32 PM - ewfAdd.

21:06:32 PM - Protected Volume Config on Disk0\Partition1 :

21:06:32 PM - Type = RAM, State= DISABLED.

21:06:32 PM - ewfClose

21:06:32 PM - Saving EWF configuration to registry:

21:06:32 PM - Protected Volume ArcName =
multi(0)disk(0)rdisk(0)partition(1).

21:06:32 PM - ConfigureEwf() End, status = 0x0.

Once again, thank you for your helps,
I appreciated that
Anthony

Anthony

unread,
Aug 18, 2004, 5:03:04 PM8/18/04
to
oh, I forgot, the Final CD still dose not work
any suggestions?
Thanks
Anthony

KM

unread,
Aug 18, 2004, 5:04:27 PM8/18/04
to
Anthony,

In the second sentence it should actually say "Swapped ElTorito volume drive X: with Boot volume C:" or something similar.
If it did not, it hasn't swapped the letters. You will need to verify that.
When the image is shutdown after etprep /all (or /swap), open the image registry offline (use RegEdit on XP Pro machine and load
image's system hive). Find [HKLM\SYSTEM\MountedDevices] key and see if El Torito is assigned to C: drive.
You can even delete all the entries under the key and leave only "\\DosDevices\\C:"=hex:45,4c,54,4f,00,7e,00,00,00,00,00,00
" entry.

Also, you did not seem to have ElTorito CD in your CD-ROM drive during FBA? You will need that so that it could read proper ELTO
disk signature.

Slobodan Brcin (eMVP)

unread,
Aug 18, 2004, 6:18:18 PM8/18/04
to
Hi Anthony,

Follow Konstantins suggestions.
1. Please use dummy El-torito CD during the FBA phase.
2. Check if EWF is working when XPe is loaded.
3. Check offline after etprep registry entries that Konstantin mentioned and see if C: is using DiskID 'ELTO'
4. Make sure that your image is made on first HDD partition with FAT FS.
5. Check from second windows by using diskpart if EWF partitition is successfully deleted.
6. Check in offline registry if EWF is configured trough Registry RAM EWF settings.

I hope that this will help you to start looking in right direction.
Also search trough this NG on El-torito topics (there are plenty of them :-( )

Best regards,
Slobodan

"Anthony" <Ant...@discussions.microsoft.com> wrote in message news:B3AFE2AD-BD90-4F77...@microsoft.com...

Anthony

unread,
Aug 18, 2004, 6:29:04 PM8/18/04
to
Thanks,
I will try all

Anthony

unread,
Aug 18, 2004, 9:13:02 PM8/18/04
to
Dear Slobodan Brcin,
Thank you for your rely, in #2 you suggested to check if EWF is working
on XPe is loaded" what do you mean? yeah, I don't seen anything wrong on the
dump file. but I had a failure on after etprep -all
Deleted EWF partitions = 1.
Start value for Redbook/IMAPI services has been reset to zero.
Failed to swap El Torito disk drive letter. Error = 0x1 .
So what are your suggestions?
Thank you very very much,
Best regards,
Anthony

KM

unread,
Aug 18, 2004, 11:46:44 PM8/18/04
to
Anthony,

I did not get it quite from your message if you had an El-Torito CD in
CD-ROM during FBA?

Also, read this MS reply:
http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&c2coff=1&selm=eqpR%24c1cEHA.3128%40TK2MSFTNGP11.phx.gbl

KM

Slobodan Brcin (eMVP)

unread,
Aug 19, 2004, 5:38:54 AM8/19/04
to
Hi Anthony,

You did not confirmed that Elto-CD was present during the FBA.

You can use etprep with switches to do partial operations.

There are two operations that you must test partially.

In one test:
2. You should delete EWF partitition using etprep and reboot device in XPe again. Using efwmgr c: you should see EWF working and
protecting C:. If this is not a case then you have problem with EWF configuration.
3. You can test volume letter swap by using etprep and then examining registry MountedDevices from XPe or offline.

BTW: Do you know hot to load XPe registry hive from regedit on Windows XP Professional?

Best regards,
Slobodan

"Anthony" <Ant...@discussions.microsoft.com> wrote in message news:F5D6E26E-F041-4162...@microsoft.com...

Anthony

unread,
Aug 19, 2004, 1:31:03 PM8/19/04
to
Hello Slobodan Brcin,
First of all, the Elto-CD was in the CD Drive during the FBA, but when
I did the "etprep -all" still Swap error occurred, here is my config
From the command line after FBA
C:\ewfmgr.exe
The Ewf Volume is "\Device\HarddiskVolume3"
Ewf Volume Configuration
Volume Size 64512
Segments 0
Segment Size 0
Free segments 0
Max Levels 1
Max Protected Volumes 1
Protected Volumes 1
Ewf Volume percent full -1.#J
Protected volumes
Device Name "\Device\HarddiskVolume1" [C:]


C:\ewfmgr.exe C:
Protected Volume Configuration
Type RAM
State DISABLED
Boot Command NO_CMD
Param1 0
Param2 0
Persistent Data ""
Volume ID 8C 88 4D 7A 00 7E 00 00 00 00 00 00 00 00 00 00
Device Name "\Device\HarddiskVolume1" [C:]
Max Levels 1
Clump Size 512
Current Level 1
Memory used for data 0 bytes
Memory used for mapping 0 bytes

and the registry MountedDevices from XPe or offline
\??\Volume{59d2224e-fedd-11d5-b541-0007b8005c47} 45 4c 54 4f 7e 00 00 00
00 00 00
\??\Volume{d01b2dc1-fedc-11d5-b540-806d6172696f} 8c 88 4d 7a 00 7e 00 00
00 00 00
\??\Volume{d01b2dc2-fedc-11d5-b540-806d6172696f} 8c 88 4d 7a 00 26 b1 28 00
00 00 00
\??\Volume{d01b2dc4-fedc-11d5-b540-e3197ac9ed08} 5c 00 3f 00 3f 00 5c 00 -
46 00 44 00 43 00 23 00
\DosDevices\A: 5c 00 3f 00 3f 00 5c 00 - 46 00 44 00 43 00 23 00
\DosDevices\C: 45 4c 54 4f 00 7e 00 00 - 00 00 00 00
\DosDevices\D: 8c 88 4d 7a 00 26 b1 28 - 00 00 00 00
\DosDevices\E: 8c 88 4d 7a 00 7e 00 00 - 00 00 00 00
\DosDevices\F: 5c 00 3f 00 3f 00 5c 00 - 49 00 44 00 45 00 23 00


and my FBALOG.txt
17:30:54 PM - ConfigureEwf() Start.

17:30:54 PM - Getting EWF config parameters from registry.

17:30:54 PM - EWF Partition Size = 0 (KBytes), Levels = 1, Volumes = 1.

17:30:55 PM - Protected Volume Config #0 :

17:30:55 PM - Disk= 0,Part= 1,DiskType= IDE,Type= RAM.

17:30:55 PM - Enable= Disabled, Optimize= 0, LazyWrite= N.

17:30:55 PM - Found 2 Hard Disks.

17:30:55 PM - Searching for El Torito disk.

17:30:55 PM - Disk0 signature = 0x7A4D888C.

17:30:55 PM - Disk1 signature = 0x4F544C45.

17:30:55 PM - Disk1 is an ElTorito disk.

17:30:55 PM - Checking Start value in

System\CurrentControlSet\Services\redbook key.

17:30:55 PM - Resetting Start value.

17:30:55 PM - Checking Start value in

System\CurrentControlSet\Services\Imapi key.

17:30:55 PM - Resetting Start value.

17:30:55 PM - Disk #0 layout info:

17:30:55 PM - PRIMARY partition,start=0x0000000000007e00,
len=0x0000000028b0a800, type= 6

17:30:55 PM - PRIMARY partition,start=0x0000000028b12600,
len=0x000000007d047e00, type= 6

17:30:55 PM - FREE partition,start=0x00000000a5b5a400,
len=0x00000008f010f600, type= 0

17:30:55 PM - Allocating EWF in PRIMARY partition,
start=0x00000000a5b5a400, len=0x000000000000fc00.

17:30:55 PM - Created EWF partition on Disk = 0, partition = 3,size =
0x000000000000fc00 .

17:30:55 PM - ewfOpen.

17:30:55 PM - EWF Volume Config on Disk#0, Partition#3:

17:30:55 PM - Segments = 0, Max Volumes = 1, Max Levels = 1

17:30:55 PM - ewfAdd.

17:30:55 PM - Protected Volume Config on Disk0\Partition1 :

17:30:55 PM - Type = RAM, State= DISABLED.

17:30:55 PM - ewfClose

17:30:55 PM - Saving EWF configuration to registry:

17:30:55 PM - Protected Volume ArcName =
multi(0)disk(0)rdisk(0)partition(1).

17:30:55 PM - ConfigureEwf() End, status = 0x0.


Is there any ideas? Thank you very much especially KM and Slobodan Brcin for
your valuable suggestions

Slobodan Brcin (eMVP)

unread,
Aug 19, 2004, 1:50:09 PM8/19/04
to
Hi Anthony,

\DosDevices\C: 45 4c 54 4f 00 7e 00 00 - 00 00 00 00

This indicates that etprep did swap volume letters.

According to your logs EWF is disabled. You should use one of the ways to make sure that EWF was enabled and working after the EWF
partition was removed. (If it was removed that is)
Without EWF working you won't be able to boot.

If you are using etprep -all then it is much harder to say what went wrong.

My favorite approach is to:
1. Configure EWF trough registry without creating of temporary config partition. Find doc and component on www.xpefiles.com.
This will allow you to enable EWF before you shutdown.
2. Swap I do not do since there are residues in MountedDevices that will give you different situation when CD is booted with
original HDD and other non FBA HDD's.
I prefer to rename ELTO section to \DosDevices\C: and to delete all other registry entries. This will give you more realistic
picture what ever HDD you use with CD or if you use it.
3. If I can remember correctly in SP1 all required drivers are set as Start = 0 if not you can do that in registry or by calling
etprep with switch that tell him to do that.

This should work, I can't recollect anything else that can go wrong.

Best regards,
Slobodan

"Anthony" <Ant...@discussions.microsoft.com> wrote in message news:AF74BC7B-4D16-44FF...@microsoft.com...

Scott Figg

unread,
Aug 19, 2004, 6:31:01 PM8/19/04
to
Anthony,

I built a couple of Eltorito CDs, and seen the error "Failed to swap
Eltorito disk" and they still worked ok. Seems like I saw a post awhile back
from a Microsoft person saying this error could be safely ignored.

What is the motherboard you are using? I fought the Stop 0x0000007B error
for a while before I found out there was issues with some Intel 845 and 865
boards.

Regards,

Scott Figg

Anthony

unread,
Aug 19, 2004, 8:03:02 PM8/19/04
to
Scott,
Yeah, I am using Intel 845 board, and I also read the article which said
"this error could be safely ignored" (referenced by KM and Slobodan Brcin).
But I am not lucky like you I still got stuck on the 7B error Blue Screen,
would you please discribe a little bit more about how to pass this error? I
already wasted more than 20 CDs.
Thanks
Anthony

Slobodan Brcin (eMVP)

unread,
Aug 19, 2004, 8:11:59 PM8/19/04
to
Hi Anthony,

> I already wasted more than 20 CDs.

Why don't you use rewritable CDs?

Also I'm hoping that you don't try to boot from USB CD drive since this won't work.
I have successfully used on two different Intel 875 chipset based boards El-torito CD's and I don't think that there is big
difference between 875, 865, 845 regarding this problem.

BTW: What is your knowledge of Kernel Debugger? If you know how to use windbg then you should be able relatively easy to pinpoint
the exact problem during the boot. (Which driver failed)

Best regards,
Slobodan

"Anthony" <Ant...@discussions.microsoft.com> wrote in message news:5B3AFD73-8625-43B8...@microsoft.com...

Scott Figg

unread,
Aug 19, 2004, 11:27:03 PM8/19/04
to
Anthony,

Yes, I too had a stack of CDs. Got the kernal debugger going and that was
also a waste of my time. I replaced the ntdetect.com with a different one I
got from Microsoft, copied it to my taget disk, even after FBA ran, ran the
hd2iso.exe and it worked like a charm. After I got it working, I took one of
my CDs from my stack and booted up an old PC I had in the corner...why I
never tried that in the begining I don't know! :-).

Here's someone back in November 2003 that had the same problem.

http://groups.google.com/groups?selm=7d61166.0311141343.23807cf3%40posting.google.com

If you want to E-mail me I'll help you get the ntdetect.com.

sf...@nospam.arrow.com (of course take out the nospam.)

Scott Figg
Arrow Electronics

Slobodan Brcin (eMVP)

unread,
Aug 20, 2004, 6:13:24 AM8/20/04
to
Hi Scott,

Now that you mention it, that could have sense.

If ntdetect.com/ntldr. pair does not collect and pass additional disk info to kernel drivers then later on OS is unable to determine
boot drive and this also can give you 7B error.
This problem is related to some BIOS/ndtetect incompatibility, but I have not seen it with BIOS El-torito support so far, but I saw
it on other devices.

Since I did not know that this problem was solved in some alternative ntdetect.com after loosing week of debugging I finally saw
what information's were missing and knowing that I added to my existing drivers patch that work-around this issue.

Best regards,
Slobodan

"Scott Figg" <sfigg@nospam_verizon.com> wrote in message news:18097818-E7B1-46D8...@microsoft.com...

Anthony

unread,
Aug 20, 2004, 11:51:01 AM8/20/04
to
Dear Slobodan Brcin,
Yeah, I have rewritable CDs, but it takes a long time to reformat those
CDs, secondly I am NOT using the USB CD/DVD drive. I am using Lite-On CD-DVD
RW drive.

What is your knowledge of Kernel Debugger?
Unfortunately, I am a newbie for Xpe just about couple months. I have no
knowledge about Kernel Debugger.

Slobodan Brcin (eMVP)

unread,
Aug 20, 2004, 1:28:42 PM8/20/04
to
Hi Anthony

There is slight possibility that you have problem with BIOS as described by Scot.
If this is the case try using this CD on several similar but different computers in your company.
One of them should be able to boot.

Kernel debugging support is integral part of Windows XP(e). And trough serial connection you can see many useful info on second
computer with debugger loaded. Although it take time to master it's usage :-(

Best regards,
Slobodan

"Anthony" <Ant...@discussions.microsoft.com> wrote in message news:145E1E35-52B9-4795...@microsoft.com...

Anthony

unread,
Aug 20, 2004, 3:35:03 PM8/20/04
to
Hi all,
After used the NTdected.com file from Scott Figg, it works but one
more error message right after the window booted up, the error is “Windows
–Delayed Write Failed” and its text error “Windows was unable to save all the
data for the C:. The data has been lost. This error may be caused by the
failure of your computer hardware or network connection. Please try to save
this file else where”, after I pressed OK button, the OS will automatically
reboot…
Special thanks to Scott Figg, Slobodan Brcin, and KM in advance

Slobodan Brcin (eMVP)

unread,
Aug 20, 2004, 4:51:52 PM8/20/04
to
Hi Anthony,

"Delayed Write Failed" message is shown because EWF is disabled or not working.

Best regards,
Slobodan

"Anthony" <Ant...@discussions.microsoft.com> wrote in message news:732925B4-AFDC-4F32...@microsoft.com...


> Hi all,
> After used the NTdected.com file from Scott Figg, it works but one
> more error message right after the window booted up, the error is "Windows

> -Delayed Write Failed" and its text error "Windows was unable to save all the


> data for the C:. The data has been lost. This error may be caused by the
> failure of your computer hardware or network connection. Please try to save
> this file else where", after I pressed OK button, the OS will automatically

> reboot.

Dunberg@discussions.microsoft.com Per Dunberg

unread,
Sep 1, 2004, 8:09:03 AM9/1/04
to
Hi all,

Does anyone know if there is a workaround for booting the system from an USB
CD-ROM device?
I've tried to change the registry offline to load the USB drivers at the
same time as the ATAPi driver but it still bluescreens (0x0000007B).
Booting a system from a USB CD-ROM is possible with a CD created with
Windows PE so there must be a way to do this by modify or changing the boot
process.
Any ideas?

Thanks for you help,

Per Dunberg

Slobodan Brcin (eMVP)

unread,
Sep 1, 2004, 8:18:49 AM9/1/04
to
Hi Per,

Is it possible, I don't know if generic solution is possible but I have done it trough my drivers.
You should make SDI image and do RAM boot from USB CD. This will always work.

Best regards,
Slobodan

"Per Dunberg" <Per Dun...@discussions.microsoft.com> wrote in message news:2303162C-9830-4A08...@microsoft.com...

Dunberg@discussions.microsoft.com Per Dunberg

unread,
Sep 3, 2004, 8:13:57 AM9/3/04
to
You're the man Slobodan!
RAM boot works perfectly.
Thanks for the help, very appreciated.
0 new messages