u盘系统如何安装杀毒软件

wimtool是一款非常强大的镜像处理工具，同时它也是PE下加载wim镜像的必要软件，在制作PE时如果把它添加到PE里呢？

其实很简单，几步就可以实现了。

第一步：先在WinPE内核中添加WIMFLTR.SYS、WIMFSF.SYS、WIMGAPI.DLL和FLTLIB.DLL 4个文件（sys放在drivers下，dll放在system32下）。

第二步：在WInPE注册表中导入以下内容：

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\pe\ControlSet001\Services\FltMgr]
"Description"="File System Filter Manager Driver"
"DisplayName"="FltMgr"
"ErrorControl"=dword:00000001
"Group"="FSFilter Infrastructure"
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,64,00,\
72,00,69,00,76,00,65,00,72,00,73,00,5c,00,66,00,6c,00,74,00,6d,00,67,00,72,\
00,2e,00,73,00,79,00,73,00,00,00
"Start"=dword:00000000
"Type"=dword:00000002
"Tag"=dword:00000001
"AttachWhenLoaded"=dword:00000001

[HKEY_LOCAL_MACHINE\pe\ControlSet001\Enum\Root\LEGACY_FLTMGR]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\pe\ControlSet001\Enum\Root\LEGACY_FLTMGR\0000]
"Service"="FltMgr"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="FltMgr"

[HKEY_LOCAL_MACHINE\pe\ControlSet001\Services\WimFltr]
"Type"=dword:00000002
"Start"=dword:00000003
"ErrorControl"=dword:00000001
"Tag"=dword:00000004
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\
52,00,49,00,56,00,45,00,52,00,53,00,5c,00,77,00,69,00,6d,00,66,00,6c,00,74,\
00,72,00,2e,00,73,00,79,00,73,00,00,00
"DisplayName"="WimFltr"
"Group"="FSFilter Compression"
"DependOnService"=hex(7):46,00,6c,00,74,00,4d,00,67,00,72,00,00,00,00,00
"DependOnGroup"=hex(7):00,00
"Description"="Windows Image Mini-Filter Driver"
"DebugFlags"=dword:00000001

[HKEY_LOCAL_MACHINE\pe\ControlSet001\Services\WimFltr\Instances]
"DefaultInstance"="WimFltr Instance"

[HKEY_LOCAL_MACHINE\pe\ControlSet001\Services\WimFltr\Instances\WimFltr Instance]
"Altitude"="170500"
"Flags"=dword:00000000

[HKEY_LOCAL_MACHINE\pe\ControlSet001\Services\WimFltr\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
[HKEY_LOCAL_MACHINE\pe\ControlSet001\Services\WimFsf]
"DisplayName"="Windows Imaging File System Filter Driver"
"Group"="FSFilter Compression"
"ErrorControl"=dword:00000001
"Start"=dword:00000000
"Type"=dword:00000002
"DependOnService"=hex(7):46,00,6c,00,74,00,4d,00,67,00,72,00,00,00,00,00
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\
72,00,69,00,76,00,65,00,72,00,73,00,5c,00,77,00,69,00,6d,00,66,00,73,00,66,\
00,2e,00,73,00,79,00,73,00,00,00
"Tag"=dword:00000001
"DependOnGroup"=hex(7):00,00
"Description"="Windows Imaging File System Filter Driver"

[HKEY_LOCAL_MACHINE\pe\ControlSet001\Services\WimFsf\Instances]
"DefaultInstance"="Wimfsf Instance"

[HKEY_LOCAL_MACHINE\pe\ControlSet001\Services\WimFsf\Instances\Wimfsf Instance]
"Altitude"="161000"
"Flags"=dword:00000000

把PE重新打包，进入PE就可以使用这个工具了。

　通过修改注册表，我们可以允许禁止他人在我们的电脑使用U盘，但如果想更改当前设置，我们又要重新修改注册表，这无疑是非常浪费时间和精力的。其实我们完全可以将“禁用/启用U盘”添加到“我的电脑”的右键菜单中，这样的话，我们就可以更方便地更改U盘设置了。具体步骤如下：　　

　　单击“开始/运行”，在“运行”对话框中输入“regedit”并按下回车键。打开注册表编辑器后，依次展开　　

　　[HKEY_CLASSES_ROOTCLSID{20D04FE0-3AEA-1069-A2D8-08002B30309D}shell分支，右键单击“shell”项并在弹出的菜单中选择“新建/项”命令，把它重命名为“禁用U盘”，然后在“禁用U盘”这个新项下再新建一个“项”并重命名为“command”，然后双击右侧窗格中的“（默认）字符串值”，打开“编辑字符串”窗口后，在“数值数据”一栏中输入“REG ADD HKLMSYSTEMCurrentControlSetServicesUSBSTOR /f /v Start /t REG_DWORD /d 4”（不含双引号），最后单击“确定”按钮即可。用同样的方法我们还可以新建一个“启用U盘”项，只要在“数值数据”中输入“REG ADD HKLMSYSTEMCurrentControlSetServicesUSBSTOR /f /v Start /t REG_DWORD /d 3”　　

　　现在如果您想禁用U盘，只要右击“我的电脑”，然后选择“禁用U盘”就可以了。如果你觉得修改注册表有点麻烦，还可以下载已经修改好的注册表文件，下载完直接导入注册表即可。