| | 28 | |
| | 29 | If is does not have such an option, then the question is where they make the MBR backup. |
| | 30 | It could be they modified the win7-loader in the PBR, in which case you can probably |
| | 31 | disable it by restoring the original win7-loader. |
| | 32 | |
| | 33 | To determine if they patched the win7-loader you can do the following: |
| | 34 | - boot win7 |
| | 35 | - make a backup of track0 with winimage like you did for this ticket |
| | 36 | - install the software |
| | 37 | It could be that they already make a copy of the MBR at this point. |
| | 38 | So make another image of track0 with winimage and see if location 0x7000 |
| | 39 | contains an MBR copy. If so, replace track0 with the image you made before |
| | 40 | installing the software. This will restore AB. |
| | 41 | |
| | 42 | - now reboot |
| | 43 | AB should work because either it was untouched by the software or |
| | 44 | you restored it with winimage. |
| | 45 | |
| | 46 | - start win7 and when it is loading immediately press hard reset |
| | 47 | So you need to time this reset to happen just after the win7-loader passed |
| | 48 | control to the kernel loader. |
| | 49 | If they patched the win7 loader, AB is now corrupted. |
| | 50 | |
| | 51 | This means you can probably solve the issue by restoring the original win7-loader. |
| | 52 | However, there is a possibility that this software checks for this and reinstalls it's patch. |
| | 53 | |
| | 54 | If AB still works, they make the copy of the MBR at some other level, maybe a win7 service |
| | 55 | you can disable. |
