安全基地's Archiver

哭泣之剑 发表于 2008-7-3 03:23

全手工制作Ghost XP教程

全手工制作Ghost XP教程[color=#0000ff][font=宋体]    全手工制作[/font][font=Times New Roman]Ghost XP[/font][font=宋体]之前要做点准备工作,也就是[/font][font=Times New Roman]XP[/font][font=宋体]系统母盘、你要安装的一些软件、接管部署、电源判[/font][/color]
[color=#0000ff][font=宋体]断、[/font][font=Times New Roman]SR[/font][font=Times New Roman]S[/font][font=宋体]驱动等等的文件,下面就按[/font][font=Times New Roman]12345[/font][font=宋体]的步骤写 (其中很多内容是直接引用[/font][font=Times New Roman]SKYFREE[/font][font=宋体]和众多前辈们的,在这[/font][/color]
[font=宋体][color=#0000ff]里先感谢[/color][/font][font=宋体][color=#0000ff]他们)[/color] [/font]
[font=宋体]=========================================[/font]
[font=宋体]转载请注明作者:悟己[/font]
[font=宋体]=========================================[/font]

[font=宋体][font=Times New Roman][/font][/font][color=#ff0000][b][size=3][font=宋体][font=Times New Roman]一.[/font][/font][font=宋体]准备工作[/font][/size][/b][/color]
[font=宋体]    [/font]
[font=宋体]   全手工封装需要解决电源判断、[/font][font=Times New Roman]SRS[/font][font=宋体]驱动、无用[/font][font=Times New Roman]SRS[/font][font=宋体]驱动的禁用等等的工作,不然也就不能所谓的“万能[/font][font=Times New Roman]GH[/font]
[font=Times New Roman]OST[/font][font=宋体]”了,准备系统母盘,常用软件,[/font][font=Times New Roman]skyfree[/font][font=宋体]的驱动选择工具和自由的风的驱动包以及[/font][font=Times New Roman]realhyg[/font][font=宋体]的[/font][font=Times New Roman]SRS[/font][font=宋体]驱动。[/font]
[color=#0000ff][font=Times New Roman][/font][/color]
[color=#0000ff][font=Times New Roman]A. [/font][font=宋体]准备突破[/font][font=Times New Roman]HAL [/font][font=宋体]限制电源判断的文件[/font][/color]
[font=宋体]准备突破[/font][font=Times New Roman]HAL [/font][font=宋体]限制电源模式判断的文件[/font][font=Times New Roman]halacpi.dll[/font][font=宋体]、[/font][font=Times New Roman]halapic.dll[/font][font=宋体]、[/font][font=Times New Roman]halmps.dll[/font][font=宋体]、[/font][font=Times New Roman]halaacpi.dll[/font][font=宋体]、[/font][font=Times New Roman]halmacpi.dll[/font][font=宋体]、[/font][font=Times New Roman]hal.dll[/font][font=宋体]、[/font][font=Times New Roman]ntkrn[/font]
[font=Times New Roman]lmp.exe[/font][font=宋体]、[/font][font=Times New Roman]ntkrnlpa.exe[/font][font=宋体]、[/font][font=Times New Roman]ntkrpamp.exe[/font][font=宋体]、[/font][font=Times New Roman]ntoskrnl.exe[/font][font=宋体](前面的这几个文件可以在[/font][font=Times New Roman]C:\WINDOWS\Driver Cache\i386\sp2.ca[/font]
[font=Times New Roman]b[/font][font=宋体]中提取)、[/font][font=Times New Roman]dtecthal.inf[/font][font=宋体](这个文件可以在别人做好的[/font][font=Times New Roman]GHO[/font][font=宋体]中[/font][font=Times New Roman]c:\windows\inf [/font][font=宋体]中提取)、[/font][font=Times New Roman]NTLDR([/font][font=宋体]在别人做好的[/font][font=Times New Roman]GHO[/font][font=宋体]中[/font]
[font=Times New Roman]C:\[/font][font=宋体]下提取)[/font][font=宋体]其中[/font][font=Times New Roman]hal.dll [/font][font=宋体]更名为[/font][font=Times New Roman] halstnd.dll[/font][font=宋体]、[/font][font=Times New Roman]ntoskrnl.exe [/font][font=宋体]更名为[/font][font=Times New Roman] ntkrnlup.exe[/font][font=宋体],[/font][font=Times New Roman] [/font][font=宋体]准备好了这些文件就可以为我们封装后[/font]
[font=宋体]电源判断做好了准备。[/font]
[color=#0000ff][font=Times New Roman][/font][/color]
[color=#0000ff][font=Times New Roman]B. [/font][font=宋体]准备接管部署过程的文件[/font][/color]
[font=宋体]既然我们知道系统部署过程是由 [/font][font=宋体]Windows\System32\Setup.exe [/font][font=宋体]触发的,那么系统是怎么知道在第一次启动时运行[/font]
[font=宋体][/font][font=宋体]Windows\System32\Setup.exe [/font][font=宋体]的呢?经过无数前辈们的探索,发现了 [/font][font=宋体]CMDLine [/font][font=宋体]这个键值。[/font][font=宋体]HKEY_LOCAL_MACHINE\[/font]
[font=宋体]SYSTEM\Setup\CMDLine [/font][font=宋体]键,在 封装后此键值为“ [/font][font=宋体]Setup.exe[/font][font=宋体]–newsetup -mini[/font][font=宋体]”,这也就是说在系统第一次启动[/font]
[font=宋体]时运行 [/font][font=宋体]Setup.exe [/font][font=宋体]并加载“[/font][font=宋体]–newsetup –mini[/font][font=宋体]”参数。(如果封装时没有选最小化部署这里不会有“[/font][font=宋体]mini[/font][font=宋体]”[/font][font=宋体]参数)[/font]
[font=宋体]我们可以据此断定,之所以目标计算机第一次运行时会运行 [/font][font=宋体]Setup.exe [/font][font=宋体]来部署系统,是由这个键值控制的。那么,[/font]
[font=宋体]如果我们把这个键值更改一下,让目标计算机第一次启动时运行我们所需的程序,不就能够控制部署过程了吗?因[/font]
[font=宋体]此我们用AU3脚本写一个代替“[/font][font=宋体]CMDLine[/font][font=宋体]” [/font][font=宋体]这个键值“setup.exe”[/font]
[font=宋体]我的是BZDD.exe(可以随便命名),AU3代码如下:[/font]
[font=宋体][/font]
[color=#ff0000][font=宋体][size=10.5pt]FileSetAttrib("C:\NTLDR","-RSH")[/size][/font][/color][font=宋体][size=42pt][/size][/font]
[color=#ff0000][font=宋体]FileDelete("C:\NTLDR ")[/font][/color]
[color=#ff0000][font=宋体]FileSetAttrib("C:\NTLDR_XP","-RSH")[/font][/color]
[color=#ff0000][font=宋体]FileMove("C:\NTLDR_XP","c:\ntldr")[/font][/color]
[color=#ff0000][font=宋体]FileSetAttrib("C:\NTLDR ","+RSH")[/font][/color]
[color=#ff0000][font=宋体]FileSetAttrib("c:\boot.ini","-RSH")[/font][/color]
[color=#ff0000][font=宋体]IniWrite("c:\boot.ini","operating systems","multi(0)disk(0)rdisk(0)partition(1)\WINDOWS",'"Microsoft Windows XP Professional" /noexecute=optin /fastdetect')[/font][/color]
[color=#ff0000][font=宋体]FileSetAttrib("c:\boot.ini","+RSH")[/font][/color]
[color=#ff0000][font=宋体]RegDelete("HKEY_LOCAL_MACHINE\SYSTEM\setup","cmdline")[/font][/color]
[color=#ff0000][font=宋体]RunWait("c:\sysprep\drvs\drvs.exe")  [/font][/color][color=#0000ff][font=宋体]这是调用skyfree的驱动选择工具,根据自己修改[/font]
[/color][color=#ff0000][font=宋体]Run("c:\sysprep\sysprep.exe -clean")
[/font][/color][font=宋体][color=#0000ff]这是调用清理无用SRS驱动[/color][/font]
[color=#ff0000][font=宋体]RunWait("setup.exe -newsetup -mini")[/font][/color]
[color=#000000][font=宋体][/font][/color]
[color=#000000][font=宋体]大家要是要调用其他的可以依照添加,我也是AU3菜鸟,但我依照skyfree的《xp定制不完全攻略》弄的出来了,多[/font][/color]
[color=#000000][font=宋体]研究多学习是有好处的。[/font][/color]

[color=#0000ff][font=宋体][/font][/color][color=#0000ff][font=宋体]C.[/font][font=宋体]第一次进桌面运行的文件[/font][/color]
[color=#000000][font=宋体]我的是blue.exe, AU3代码如下:[/font][/color]
[color=#ff0000][font=宋体]FileDelete("C:\Documents and Settings\[/font][/color][color=#ff0000][font=Times New Roman] [/font][/color][color=#ff0000][font=宋体]All Users \[/font][/color][color=#ff0000][font=宋体]桌面\Windows Media Player.lnk")[/font][/color]
[color=#ff0000][font=宋体]FileDelete("c:\windows\bzdd.exe")[/font][/color]
[color=#ff0000][font=宋体]FileRecycle("c:\windows\drivers")[/font][/color][font=宋体][color=#0000ff]这个是我静默删除第三方驱动,我不喜欢提示的^_^[/color][/font]
[color=#ff0000][font=宋体]FileRecycleEmpty("c:\")[/font][/color]
[color=#ff0000][font=宋体]Run(@ComSpec&' /c ping 127.0.0.1 -n 2&del /q "'&@ScriptFullPath&'"',@ScriptDir,@SW_HIDE)[/font][/color]
[color=#000000][font=宋体]大家可以根据自己的需要修改[/font][/color]
[color=#000000][font=宋体][/font][/color]
[color=#0000ff][font=宋体]D.[/font][font=宋体]封装需要用到的文件[/font][/color]
[color=#000000][font=宋体]在XP原装光盘\SUPPORT\TOOLS目录下解压DEPLOY.CAB文件可获取,主要用到的是factory.exe,setupcl.exe,syspr[/font][/color]
[color=#000000][font=宋体]ep.exe三个文件;当然还有sysprep.inf配置文件[/font][/color]
[color=#000000][font=宋体]我的sysprep.inf文件内容如下:[/font][/color]
[color=#ff0000][font=宋体];blue[/font][/color]
[color=#ff0000][font=宋体];[/font][/color][color=#ff0000][font=宋体]不再等待[/font][/color]
[color=#ff0000][font=宋体][/font][/color]
[color=#ff0000][font=宋体][Unattended][/font][/color]
[color=#ff0000][font=宋体]
DriverSigningPolicy=Ignore[/font][/color]
[color=#ff0000][font=宋体]
NonDriverSigningPolicy=Ignore[/font][/color]
[color=#ff0000][font=宋体]
OemSkipEula=Yes[/font][/color]
[color=#ff0000][font=宋体]
OemPreinstall=Yes[/font][/color]
[color=#ff0000][font=宋体]
UpdateInstalledDrivers=Yes[/font][/color]
[color=#ff0000][font=宋体]
[/font][/color]
[color=#ff0000][font=宋体][GuiUnattended][/font][/color]
[color=#ff0000][font=宋体]
AdminPassword=*[/font][/color]
[color=#ff0000][font=宋体]
EncryptedAdminPassword=NO[/font][/color]
[color=#ff0000][font=宋体]
OEMSkipRegional=1[/font][/color]
[color=#ff0000][font=宋体]
TimeZone=210[/font][/color]
[color=#ff0000][font=宋体]
OemSkipWelcome=1[/font][/color]
[color=#ff0000][font=宋体][/font][/color]
[color=#ff0000][font=宋体][UserData][/font][/color]
[color=#ff0000][font=宋体]
ProductKey="MRX3F-47B9T-2487J-KWKMF-RPWBY"[/font][/color]
[color=#ff0000][font=宋体]
ComputerName=*[/font][/color]
[color=#ff0000][font=宋体]
FullName=blue[/font][/color]
[color=#ff0000][font=宋体]
OrgName=[/font][/color][color=#ff0000][font=宋体]不再等待[/font][/color]
[color=#ff0000][font=宋体][/font][/color]
[color=#ff0000][font=宋体][Display][/font][/color]
[color=#ff0000][font=宋体]
BitsPerPel=32[/font][/color]
[color=#ff0000][font=宋体]
Xresolution=800[/font][/color]
[color=#ff0000][font=宋体]
Yresolution=600[/font][/color]
[color=#ff0000][font=宋体][/font][/color]
[color=#ff0000][font=宋体][RegionalSettings][/font][/color]
[color=#ff0000][font=宋体]
LanguageGroup=10[/font][/color]
[color=#ff0000][font=宋体][/font][/color]
[color=#ff0000][font=宋体][Identification][/font][/color]
[color=#ff0000][font=宋体]
JoinWorkgroup=WORKGROUP[/font][/color]
[color=#ff0000][font=宋体][/font][/color]
[color=#ff0000][font=宋体][Networking][/font][/color]
[color=#ff0000][font=宋体]
InstallDefaultComponents=Yes[/font][/color]
[color=#ff0000][font=宋体][/font][/color]
[color=#ff0000][font=宋体][GUIRunOnce][/font][/color]
[color=#ff0000][font=宋体]Command0=C:\WINDOWS\blue.exe[/font][/color]
[color=#000000][font=宋体][/font][/color]
[color=#ff0000][b][size=3][font=宋体]二.[/font][font=宋体]封装前准备[/font][/size][/b][/color]
[color=#000000][font=宋体][/font][/color]
[color=#000000][font=宋体]    在准备好上述文件之后,我们就需要安装好WIN XP系统(安装过程我就不说了,系统都不会装也就谈不上从新封[/font][/color]
[color=#000000][font=宋体]装了)之后,装上一些常用软件,根据自己的需要安装。安装好之后我们就要做一些工作了,如下:[/font][/color]
[color=#000000][font=宋体][/font][/color]
[color=#0000ff][font=宋体]A.[/font][font=宋体]为了能驱动自己安装完成要做如下设置:[/font]
[/color][color=#000000][font=宋体][/font][/color]
[color=#000000][font=宋体]在开始\运行窗口输入“gpedit.msc"打开组策略: [/font][/color]
[color=#000000][font=宋体]
[/font][/color][color=#000000][font=宋体]找到“计算机配置——管理模板——系统” [/font][/color]
[color=#000000][font=宋体]
[/font][/color][color=#000000][font=宋体]启用“关闭 Windows Update 设备驱动程序搜索” [/font][/color]
[color=#000000][font=宋体]
[/font][/color][color=#000000][font=宋体]找到“计算机配置——管理模板——系统——Internet 通信管理——Internet 通信设置” [/font][/color]
[color=#000000][font=宋体]
[/font][/color][color=#000000][font=宋体]启用“关闭 Windows Update 设备驱动程序搜索” [/font][/color]
[color=#000000][font=宋体]
[/font][/color][color=#000000][font=宋体]找到“用户配置——管理模板——系统” [/font][/color]
[color=#000000][font=宋体]
[/font][/color][color=#000000][font=宋体]启用“配置驱动程序搜索位置” 钩上:不搜索软盘、Windows Update(光驱不要选)[/font][/color]
[color=#000000][font=宋体]
[/font][/color][color=#000000][font=宋体]忽略“设备驱动程序的代码签名” [/font][/color]
[color=#000000][font=宋体]
[/font][/color][color=#000000][font=宋体]启用“关闭 Windows Update 设备驱动程序搜索” [/font][/color]
[color=#000000][font=宋体][/font][/color]
[color=#000000][font=宋体]右健点桌面“我的电脑”打开“系统属性——硬件”[/font][/color]
[color=#000000][font=宋体]
[/font][/color][color=#000000][font=宋体]找到“驱动程序签名”选择“忽略,安装软件不用征求我的同意” 并钩上“将这个作为系统的默认值”——确定。[/font][/color]
[color=#000000][font=宋体]找到“Windows Update”选择“从不在update搜索驱动”——确定。[/font][/color]
[color=#000000][font=宋体][/font][/color]
[color=#0000ff][font=宋体]B.[/font][font=宋体]删除计算机驱动,如下:[/font][/color]
[color=#000000][font=宋体][/font][/color]
[color=#000000][font=宋体]卸载硬件驱动[/font][/color]
[color=#000000][font=宋体]
[/font][/color][color=#000000][font=宋体]1.卸载网络适配器。[/font][/color]
[color=#000000][font=宋体]2.卸载通用串行总线控制器。[/font][/color]
[color=#000000][font=宋体]3.卸载声音、视频游戏控制器。[/font][/color]
[color=#000000][font=宋体]4.卸载监视器。[/font][/color]
[color=#000000][font=宋体]5.卸载显示卡( 卸载显卡是为了防止Ghost到别的机上时出现蓝屏现象)。卸载硬件驱动时如系统提示要重新启动[/font][/color]
[color=#000000][font=宋体]则选择“否”不启动。[/font][/color]
[color=#000000][font=宋体][/font][/color]
[color=#000000][font=宋体](关键)更改计算机电源管理模式 Advanced Configuration Power Interface(ACPI) 为 Standard PC[/font][/color]
[color=#000000][font=宋体](关键)更改IDE ATA/ATAPI控制器为“标准双通道 PCI IDE 控制器[/font][/color]
[color=#000000][font=宋体][/font][/color]
[font=宋体][size=3][color=#ff0000][b]三.封装过程[/b][/color][/size][/font]
[color=#000000][font=宋体]A. [/font][/color][color=#000000][font=宋体]在C盘根目录下新建一个sysprep文件夹,把先前准备的factory.exe,setupcl.exe,sysprep.exe,ssysprep.i[/font][/color]
[color=#000000][font=宋体]nf四个文件和驱动判断工具复制在这个文件夹里面;运行sysprep.exe进行封装。需要注意的是进行封装时的选项[/font][/color]
[color=#000000][font=宋体]设置:*在系统封装画面的4个选项中,第二项“使用最小化安装”即无残留驱动安装项正是我们需要的,因此必须[/font][/color]
[color=#000000][font=宋体]要选上。第一项“不重置激活的宽限期”和第三项“不重新产生安全标识符”都是正版用户激活用的,而我们所用[/font][/color]
[color=#000000][font=宋体]的是免激活版,因此这两项选与不选无所谓,对GHOST克隆后的系统在使用上都无影响。第四项“检测非即插即用硬[/font][/color]
[color=#000000][font=宋体]件”这一选项不用选。*关机模式可以根据需要选择,建议选择“退出”,以便下一步进行其他工作[/font][/color]
[color=#000000][font=宋体]B. [/font][/color][color=#000000][font=宋体]将先前准备的[/font][/color][font=Times New Roman]halacpi.dll[/font][font=宋体]、[/font][font=Times New Roman]halapic.dll[/font][font=宋体]、[/font][font=Times New Roman]halmps.dll[/font][font=宋体]、[/font][font=Times New Roman]halaacpi.dll[/font][font=宋体]、[/font][font=Times New Roman]halmacpi.dll[/font][font=宋体]、[/font][font=Times New Roman]halstnd.dll[/font][font=宋体]、[/font][font=Times New Roman]ntkrnlmp.exe[/font][font=宋体]、[/font][font=Times New Roman]ntkrnlpa.exe[/font]
[font=宋体]、[/font][font=Times New Roman]ntkrpamp.exe[/font][font=宋体]、[/font][font=Times New Roman]ntkrnlup.exe[/font][font=宋体]几个文件复制到[/font][font=Times New Roman]c:\windows\system32[/font][font=宋体]下,将[/font][font=Times New Roman]dtecthal.inf[/font][font=宋体]复制到[/font][font=Times New Roman]c:\windows\inf[/font][font=宋体]下,将[/font][font=Times New Roman]c[/font][font=宋体]盘根[/font]
[font=宋体]目录下的[/font][font=Times New Roman]ntldr[/font][font=宋体]文件改名为[/font][font=Times New Roman]ntldr_xp[/font][font=宋体],将先前准备的[/font][font=Times New Roman]ntldr[/font][font=宋体]复制到[/font][font=Times New Roman]C[/font][font=宋体]盘根目录;去掉[/font][font=Times New Roman] C:\BOOT.INI [/font][font=宋体]的只读属性,打开并在[/font]
[font=宋体]系统的启动参数中加上[/font][font=Times New Roman] /DETECTHAL [/font][font=宋体]参数,如下:[/font]
[color=#ff0000][font=Times New Roman][boot loader][/font][/color]
[color=#ff0000][font=Times New Roman]189[/font][/color]
[color=#ff0000][font=Times New Roman]timeout=0[/font][/color]
[color=#ff0000][font=Times New Roman]default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS[/font][/color]
[color=#ff0000][font=Times New Roman][operating systems][/font][/color]
[color=#ff0000][font=Times New Roman]multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /detecthal[/font][/color]
[font=宋体]删除准备封装的系统的[/font][font=Times New Roman]HAL [/font][font=宋体]信息。删除注册表中以下键值,如果提示权限不足不能删除,则可用[/font][font=Times New Roman] setacl.exe [/font][font=宋体]这个命令行工具修改权限后再删除。(好像直接在上面点右键可以修改权限)[/font]
[color=#ff0000][font=Times New Roman]HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ACPI_HAL[/font][/color]
[color=#ff0000][font=Times New Roman]HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ACPI_HAL[/font][/color]
[color=#ff0000][font=Times New Roman]HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\ACPI_HAL[/font][/color]
[color=#ff0000][font=Times New Roman]HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\ACPI_HAL[/font][/color]
[color=#ff0000][font=Times New Roman]HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\ACPI_HAL[/font][/color]
[color=#ff0000][font=Times New Roman]HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\ACPI_HAL[/font][/color]
[color=#ff0000][font=Times New Roman]HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\ACPI_HAL[/font][/color]
[color=#ff0000][font=Times New Roman]HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\ACPI_HAL[/font][/color]
[font=宋体]完成上述步骤就实现了电源的判断[/font]
[font=Times New Roman]C[/font][font=宋体].[/font][font=Times New Roman]srs[/font][font=宋体]驱动的处理,安装[/font][font=Times New Roman]realhyg[/font][font=宋体]的[/font][font=Times New Roman]SRS[/font][font=宋体]驱动并导入注册表然后在[/font][font=Times New Roman]sysprep.inf[/font][font=宋体]中添加:[/font]
[color=#ff0000][font=Times New Roman][sysprepcleanup][/font][/color]
[color=#ff0000][font=Times New Roman]Service=isapnp[/font][/color]
[color=#ff0000][font=Times New Roman]Service=pci[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ftdisk[/font][/color]
[color=#ff0000][font=Times New Roman]Service=swenum[/font][/color]
[color=#ff0000][font=Times New Roman]Service=update[/font][/color]
[color=#ff0000][font=Times New Roman]Service=mssmbios[/font][/color]
[color=#ff0000][font=Times New Roman]Service=dmio[/font][/color]
[color=#ff0000][font=Times New Roman]Service=rdpdr[/font][/color]
[color=#ff0000][font=Times New Roman]Upperfilter=mouclass[/font][/color]
[color=#ff0000][font=Times New Roman]Service=TermDD[/font][/color]
[color=#ff0000][font=Times New Roman]Upperfilter=kbdclass[/font][/color]
[color=#ff0000][font=Times New Roman]Upperfilter=ALIM1541[/font][/color]
[color=#ff0000][font=Times New Roman]Upperfilter=AMDAGP[/font][/color]
[color=#ff0000][font=Times New Roman]Upperfilter=AGP440[/font][/color]
[color=#ff0000][font=Times New Roman]Upperfilter=AGPCPQ[/font][/color]
[color=#ff0000][font=Times New Roman]Upperfilter=SISAGP[/font][/color]
[color=#ff0000][font=Times New Roman]Upperfilter=VIAAGP[/font][/color]
[color=#ff0000][font=Times New Roman]Service=aha154x[/font][/color]
[color=#ff0000][font=Times New Roman]Service=sparrow[/font][/color]
[color=#ff0000][font=Times New Roman]Service=adpu160m[/font][/color]
[color=#ff0000][font=Times New Roman]Service=aic78u2[/font][/color]
[color=#ff0000][font=Times New Roman]Service=aic78xx[/font][/color]
[color=#ff0000][font=Times New Roman]Service=cpqarray[/font][/color]
[color=#ff0000][font=Times New Roman]Service=sym_hi[/font][/color]
[color=#ff0000][font=Times New Roman]Service=mraid35x[/font][/color]
[color=#ff0000][font=Times New Roman]Service=perc2[/font][/color]
[color=#ff0000][font=Times New Roman]Lowerfilter=perc2hib[/font][/color]
[color=#ff0000][font=Times New Roman]Service=hpn[/font][/color]
[color=#ff0000][font=Times New Roman]Service=sym_u3[/font][/color]
[color=#ff0000][font=Times New Roman]Service=symc8xx[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ql10wnt[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ql1080[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ql1240[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ql1280[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ql12160[/font][/color]
[color=#ff0000][font=Times New Roman]Service=i2omp[/font][/color]
[color=#ff0000][font=Times New Roman]Service=cd20xrnt[/font][/color]
[color=#ff0000][font=Times New Roman]Service=cbidf[/font][/color]
[color=#ff0000][font=Times New Roman]Service=dac960nt[/font][/color]
[color=#ff0000][font=Times New Roman]Service=asc3550[/font][/color]
[color=#ff0000][font=Times New Roman]Service=asc[/font][/color]
[color=#ff0000][font=Times New Roman]Service=asc3350P[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ABP480N5[/font][/color]
[color=#ff0000][font=Times New Roman]Service=amsint[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ini910u[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ultra[/font][/color]
[color=#ff0000][font=Times New Roman]Service=intelide[/font][/color]
[color=#ff0000][font=Times New Roman]Service=pciide[/font][/color]
[color=#ff0000][font=Times New Roman]Service=cmdide[/font][/color]
[color=#ff0000][font=Times New Roman]Service=toside[/font][/color]
[color=#ff0000][font=Times New Roman]Service=3wareDrv[/font][/color]
[color=#ff0000][font=Times New Roman]Service=3waregsm[/font][/color]
[color=#ff0000][font=Times New Roman]Service=aec6210[/font][/color]
[color=#ff0000][font=Times New Roman]Service=aec6260[/font][/color]
[color=#ff0000][font=Times New Roman]Service=aec6280[/font][/color]
[color=#ff0000][font=Times New Roman]Service=aec6290[/font][/color]
[color=#ff0000][font=Times New Roman]Service=aec68x5[/font][/color]
[color=#ff0000][font=Times New Roman]Service=AEC6880[/font][/color]
[color=#ff0000][font=Times New Roman]Service=aec6897[/font][/color]
[color=#ff0000][font=Times New Roman]Service=aec67160[/font][/color]
[color=#ff0000][font=Times New Roman]Service=AEC671X[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ata1200a[/font][/color]
[color=#ff0000][font=Times New Roman]Service=aac[/font][/color]
[color=#ff0000][font=Times New Roman]Service=aar1210[/font][/color]
[color=#ff0000][font=Times New Roman]Service=dpti2o[/font][/color]
[color=#ff0000][font=Times New Roman]Service=adpu320[/font][/color]
[color=#ff0000][font=Times New Roman]Service=a320raid[/font][/color]
[color=#ff0000][font=Times New Roman]Service=aaatimeo[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ASH1205[/font][/color]
[color=#ff0000][font=Times New Roman]Service=amdbusdr[/font][/color]
[color=#ff0000][font=Times New Roman]Service=AmdEide[/font][/color]
[color=#ff0000][font=Times New Roman]Service=arcm_x86[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ahcix86[/font][/color]
[color=#ff0000][font=Times New Roman]Service=atiide[/font][/color]
[color=#ff0000][font=Times New Roman]Service=aliide[/font][/color]
[color=#ff0000][font=Times New Roman]Service=m5228[/font][/color]
[color=#ff0000][font=Times New Roman]Service=m5281[/font][/color]
[color=#ff0000][font=Times New Roman]Service=m5287[/font][/color]
[color=#ff0000][font=Times New Roman]Service=m5288[/font][/color]
[color=#ff0000][font=Times New Roman]Service=m5289[/font][/color]
[color=#ff0000][font=Times New Roman]Service=Cpq32fs2[/font][/color]
[color=#ff0000][font=Times New Roman]Service=cpqcissm[/font][/color]
[color=#ff0000][font=Times New Roman]Service=HpCISSm2[/font][/color]
[color=#ff0000][font=Times New Roman]Service=cpqarry2[/font][/color]
[color=#ff0000][font=Times New Roman]Service=cercsr6[/font][/color]
[color=#ff0000][font=Times New Roman]Service=hpt3xx[/font][/color]
[color=#ff0000][font=Times New Roman]Service=hpt374[/font][/color]
[color=#ff0000][font=Times New Roman]Service=hptmv[/font][/color]
[color=#ff0000][font=Times New Roman]Service=Hpt366[/font][/color]
[color=#ff0000][font=Times New Roman]Service=hptmv6[/font][/color]
[color=#ff0000][font=Times New Roman]Service=rr232x[/font][/color]
[color=#ff0000][font=Times New Roman]Service=rr2340[/font][/color]
[color=#ff0000][font=Times New Roman]Service=2310_00[/font][/color]
[color=#ff0000][font=Times New Roman]Service=rr172x[/font][/color]
[color=#ff0000][font=Times New Roman]Service=rr174x[/font][/color]
[color=#ff0000][font=Times New Roman]Service=nfrd960[/font][/color]
[color=#ff0000][font=Times New Roman]Service=aacsas[/font][/color]
[color=#ff0000][font=Times New Roman]Service=adp94xx[/font][/color]
[color=#ff0000][font=Times New Roman]Service=iaStor55[/font][/color]
[color=#ff0000][font=Times New Roman]Service=iaStor[/font][/color]
[color=#ff0000][font=Times New Roman]Service=iaStor70[/font][/color]
[color=#ff0000][font=Times New Roman]Service=raidsrc[/font][/color]
[color=#ff0000][font=Times New Roman]Service=iteraid[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ipsraidn[/font][/color]
[color=#ff0000][font=Times New Roman]Service=JRAID[/font][/color]
[color=#ff0000][font=Times New Roman]Service=MegaIDE[/font][/color]
[color=#ff0000][font=Times New Roman]Service=dac2w2k[/font][/color]
[color=#ff0000][font=Times New Roman]Service=SYMMPI[/font][/color]
[color=#ff0000][font=Times New Roman]Service=mv61xx[/font][/color]
[color=#ff0000][font=Times New Roman]Service=mvSata[/font][/color]
[color=#ff0000][font=Times New Roman]Service=mv614x[/font][/color]
[color=#ff0000][font=Times New Roman]Service=nvgts[/font][/color]
[color=#ff0000][font=Times New Roman]Service=nvatabus[/font][/color]
[color=#ff0000][font=Times New Roman]Service=nvrd32[/font][/color]
[color=#ff0000][font=Times New Roman]Service=nvraid[/font][/color]
[color=#ff0000][font=Times New Roman]Service=fasttrak[/font][/color]
[color=#ff0000][font=Times New Roman]Service=fasttx2k[/font][/color]
[color=#ff0000][font=Times New Roman]Service=S150sx8[/font][/color]
[color=#ff0000][font=Times New Roman]Service=FastSx[/font][/color]
[color=#ff0000][font=Times New Roman]Service=sptrak[/font][/color]
[color=#ff0000][font=Times New Roman]Service=UlSata[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ulsata2[/font][/color]
[color=#ff0000][font=Times New Roman]Service=fttxr52P[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ql2100[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ql2200[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ql2300[/font][/color]
[color=#ff0000][font=Times New Roman]Service=Pnp649r[/font][/color]
[color=#ff0000][font=Times New Roman]Service=Pnp680[/font][/color]
[color=#ff0000][font=Times New Roman]Service=Pnp680r[/font][/color]
[color=#ff0000][font=Times New Roman]Service=SI3112[/font][/color]
[color=#ff0000][font=Times New Roman]Service=SI3112r[/font][/color]
[color=#ff0000][font=Times New Roman]Service=SI3114[/font][/color]
[color=#ff0000][font=Times New Roman]Service=Si3114r5[/font][/color]
[color=#ff0000][font=Times New Roman]Service=SI3114r[/font][/color]
[color=#ff0000][font=Times New Roman]Service=SI3124[/font][/color]
[color=#ff0000][font=Times New Roman]Service=SI3124r[/font][/color]
[color=#ff0000][font=Times New Roman]Service=Si3124r5[/font][/color]
[color=#ff0000][font=Times New Roman]Service=SI3132[/font][/color]
[color=#ff0000][font=Times New Roman]Service=Si3132r5[/font][/color]
[color=#ff0000][font=Times New Roman]Service=sisraidx[/font][/color]
[color=#ff0000][font=Times New Roman]Service=SiSRaid4[/font][/color]
[color=#ff0000][font=Times New Roman]Service=SiSide[/font][/color]
[color=#ff0000][font=Times New Roman]Service=viamraid[/font][/color]
[color=#ff0000][font=Times New Roman]Service=viapdsk[/font][/color]
[color=#ff0000][font=Times New Roman]Service=videX32[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ViBus[/font][/color]
[color=#ff0000][font=Times New Roman]Service=vmscsi[/font][/color]
[color=#ff0000][font=Times New Roman]Service=3wareSrv[/font][/color]
[color=#ff0000][font=Times New Roman]Service=AFAMgt[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ACPIEC[/font][/color]
[color=#ff0000][font=Times New Roman]Service=bb-run[/font][/color]
[color=#ff0000][font=Times New Roman]Service=cbidf2k[/font][/color]
[color=#ff0000][font=Times New Roman]Service=cda1000[/font][/color]
[color=#ff0000][font=Times New Roman]Service=dontgo[/font][/color]
[color=#ff0000][font=Times New Roman]Service=isapnp[/font][/color]
[color=#ff0000][font=Times New Roman]Service=SiFilter[/font][/color]
[color=#ff0000][font=Times New Roman]Service=SiRemFil[/font][/color]
[color=#ff0000][font=Times New Roman]Service=symc810[/font][/color]
[color=#ff0000][font=Times New Roman]Service=ViPrt[/font][/color]
[color=#ff0000][font=Times New Roman]Service=xfilt[/font][/color]
[color=#000000][font=宋体]这样在之前制作的[/font][/color][color=#000000][font=Times New Roman]BZDD.EXE[/font][/color][color=#000000][font=宋体]中的[/font][/color][color=#000000][font=宋体]Run("c:\sysprep\sysprep.exe -clean")[/font][/color][color=#000000][font=宋体]命令就可以在系统部署中禁用掉不用的SRS驱动服务[/font][/color]

[align=left][color=#000000][font=宋体]D. [/font][/color][color=#000000][font=宋体]将bzdd.exe和blue.exe复制到c:\windows下,更改注册表项[/font][/color][font=宋体][size=10.5pt]HKEY_LOCAL_MACHINE\SYSTEM\Setup\CMDLine [/size][/font][font=宋体][size=10.5pt]键的键值更改为“[/size][/font][font=宋体][size=10.5pt]bzdd.exe[/size][/font][font=宋体][size=10.5pt]”[/size][/font][/align][align=left][font=宋体][size=10.5pt]E[/size][/font][font=宋体][size=10.5pt].[/size][/font][color=#000000][font=宋体]不写注册表完美解决封装后出现个人设置和[/font][/color][color=#000000][font=Times New Roman]Media player[/font][/color][color=#000000][font=宋体]图标[/font][/color][font=宋体][size=10.5pt][/size][/font][/align][color=#000000][font=宋体]结束[/font][/color][color=#000000][font=Times New Roman]explorer.exe[/font][/color][color=#000000][font=宋体]进程[/font][/color][color=#000000][font=Times New Roman],[/font][/color]
[color=#000000][font=宋体]在任务管理器中[/font][/color][color=#000000][font=Times New Roman],[/font][/color][color=#000000][font=宋体]点文件[/font][/color][color=#000000][font=Times New Roman]--[/font][/color][color=#000000][font=宋体]新建任务[/font][/color][color=#000000][font=Times New Roman]--[/font][/color][color=#000000][font=宋体]浏览[/font][/color][color=#000000][font=Times New Roman]--[/font][/color][color=#000000][font=宋体]在[/font][/color][color=#000000][font=Times New Roman]WINDOWS[/font][/color][color=#000000][font=宋体]文件夹下找到[/font][/color][color=#000000][font=Times New Roman]explorer.exe[/font][/color][color=#000000][font=宋体]文件[/font][/color][color=#000000][font=Times New Roman]--[/font][/color][color=#000000][font=宋体]打开[/font][/color][color=#000000][font=Times New Roman],[/font][/color][color=#000000][font=宋体]系统就出现个人设置窗口[/font][/color][color=#000000][font=Times New Roman],[/font][/color][color=#000000][font=宋体]封装重启就不再出现个人设置[/font][/color][color=#000000][font=Times New Roman],[/font][/color]
[color=#000000][font=宋体]再点开始[/font][/color][color=#000000][font=Times New Roman]--[/font][/color][color=#000000][font=宋体]程序[/font][/color][color=#000000][font=Times New Roman]--windows media player
[/font][/color][color=#000000][font=宋体]出现它的设置窗口[/font][/color][color=#000000][font=Times New Roman],[/font][/color][color=#000000][font=宋体]其中有一项让[/font][/color][color=#000000][font=Times New Roman]windows media player[/font][/color][color=#000000][font=宋体]创建快捷方式[/font][/color][color=#000000][font=Times New Roman],[/font][/color][color=#000000][font=宋体]选中它[/font][/color][color=#000000][font=Times New Roman],[/font][/color][color=#000000][font=宋体]删除桌面上的快捷方式[/font][/color][color=#000000][font=Times New Roman],[/font][/color][color=#000000][font=宋体]封装重启后将不再出现快捷方式[/font][/color][color=#000000][font=Times New Roman].[/font][/color]
[color=#000000][font=宋体]个人认为不会对系统产生不良影响[/font][/color][color=#000000][/color]
[color=#000000][font=Times New Roman]F. [/font][/color][color=#000000][font=宋体]避免本地连接[/font][/color][color=#000000][font=Times New Roman]2[/font][/color][color=#000000][font=宋体]出现的方法:[/font][/color][color=#000000][/color]
[font=宋体]删除[/font]
[font=Times New Roman]("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}")[color=#000000][/color][/font]
[font=宋体]新建[/font]
[font=Times New Roman]("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}")[color=#000000][/color][/font]
[font=宋体]删除[/font]
[font=Times New Roman]("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{6BDD1FC5-810F-11D0-BEC7-08002BE2092F}")[/font]
[font=宋体]新建[/font]
[font=Times New Roman]("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{6BDD1FC5-810F-11D0-BEC7-08002BE2092F}")[/font]
[font=宋体]按照以上方法就可以避免本地连接[/font][font=Times New Roman]2[/font][font=宋体]的出现[/font]
[font=宋体][font=Times New Roman][/font][/font]
[color=#ff0000][b][size=3][font=宋体][font=Times New Roman]四.[/font][/font][font=宋体]系统减肥[/font][/size][/b][/color]
[font=宋体][/font]
[font=宋体]关闭休眠和系统还原后重新启动计算机进入[/font][font=Times New Roman]WIN PE[/font][font=宋体]系统,按如下减肥:[/font]
[font=Times New Roman]c:\windows\$*
([/font][font=宋体]以[/font][font=Times New Roman]$[/font][font=宋体]号开头的所有目录,补丁的反安装,约[/font][font=Times New Roman]70M)
[/font]
[font=Times New Roman]c:\windows\*.log
[/font][font=宋体](虽然不大,但太多,看的不爽,)[/font]
[font=Times New Roman]c:\windows\pchealth
[/font][font=宋体]帮助支持中心,[/font][font=Times New Roman]30M
[/font]
[font=宋体](注意删除前把[/font][font=Times New Roman] helpctr\binaries\msconfig.exe [/font][font=宋体]复制到[/font][font=Times New Roman]system32[/font][font=宋体]目录[/font][font=Times New Roman])[/font]
[font=Times New Roman]c:\windows\ime\chtime
[/font][font=宋体]繁体输入[/font][font=Times New Roman] [/font][font=宋体](没有必要,很多输入法都支持繁体)[/font][font=Times New Roman] 12M[/font]
[font=Times New Roman]c:\windows\ime\imejp
[/font][font=宋体]日文输入[/font][font=Times New Roman]
12M[/font]
[font=Times New Roman]c:\windows\ime\imejp98
[/font][font=宋体]日文输入[/font][font=Times New Roman] 12M[/font]
[font=Times New Roman]c:\windows\ime\imjp8_1
[/font][font=宋体]日文输入[/font][font=Times New Roman] 12M[/font]
[font=Times New Roman]c:\windows\ime\imkj6_1
[/font][font=宋体]韩文输入[/font][font=Times New Roman] 12M[/font]
[font=Times New Roman]c:\windows\system32\ime\CINTLGNT
[/font][font=宋体]仓颉码[/font][font=Times New Roman]
3M[/font]
[font=Times New Roman]c:\windows\system32\ime\TINTLGNT
[/font][font=宋体]注音输入[/font][font=Times New Roman]
3M[/font]
[font=Times New Roman]C:\Windows\help,[/font][font=宋体]除[/font][font=Times New Roman] Help\Tours\mmTour\tour.exe [/font][font=宋体]和[/font][font=Times New Roman] agt0*.hlp [/font][font=宋体]等数字样式的文件外,再就是几个文件名全部[/font]
[font=宋体]大写的保留,其它全部删除。[/font][font=Times New Roman]       [/font][font=宋体]帮助文件,[/font][font=Times New Roman]30M[/font]
[font=Times New Roman]c:\windows\temp\*
[/font][font=宋体]通常没东西[/font]
[font=Times New Roman]c:\windows\prefetch\*[/font]
[font=Times New Roman]c:\windows\installer\*.msi
msi[/font][font=宋体]程序安装后剩下的一些垃圾(长名目录不能删!)[/font]
[font=Times New Roman]c:\windows\Downloaded Installations\*
msi[/font][font=宋体]程序安装后剩下的一些垃圾[/font]
[font=Times New Roman]c:\windows\resources\themes\*
([/font][font=宋体]建议保留[/font][font=Times New Roman]Classical[/font][font=宋体]是经典主题,[/font][font=Times New Roman]Luna.Theme[/font][font=宋体]是[/font][font=Times New Roman]XP[/font][font=宋体]主题[/font][font=Times New Roman] 8M[/font][font=宋体],不喜欢的删除吧[/font][font=Times New Roman])[/font]
[font=Times New Roman]C:\Windows\srchasst[/font][font=宋体],除[/font][font=Times New Roman]mui[/font][font=宋体]目录以外,[/font][font=Times New Roman]C:\Windows\msagent[/font][font=宋体],除[/font][font=Times New Roman]intl[/font][font=宋体]目录以外,其它一律删除。[/font]
[font=Times New Roman]c:\windows\softwareDistribution\download\*
[/font][font=宋体](下载补丁临时存放点)[/font][font=Times New Roman]  [/font][font=宋体]约[/font][font=Times New Roman]60M[/font]
[font=Times New Roman]c:\windows\system32\oobe
[/font][font=宋体]激活程序(我们用的都是免激活[/font][font=Times New Roman]XP[/font][font=宋体],不需要)[/font][font=Times New Roman] 8M[/font]
[font=Times New Roman]c:\windows\web\wallpaper\*
[/font][font=宋体]墙纸,留下一个好看的[/font][font=Times New Roman]bliss.bmp[/font][font=宋体]即可,全删也行。[/font][font=Times New Roman] 2M[/font]
[font=Times New Roman]c:\program files\windows nt\pinball
[/font][font=宋体]弹球,删了。记得删除开始菜单的连接[/font][font=Times New Roman]
5M[/font]
[font=Times New Roman]c:\program files\movie maker
[/font][font=宋体]全删,[/font][font=Times New Roman]10M[/font][font=宋体],垃圾。记得删除开始菜单的连接[/font]
[font=Times New Roman]c:\program files\messenger
[/font]
[font=Times New Roman]c:\program files\msn gaming zone
[/font][font=宋体]微软的游戏,垃圾[/font]
[font=Times New Roman]C:\Program Files\InstallShield Installation Information\*
[/font][font=宋体]安装程序留下的垃圾[/font]
[font=Times New Roman]C:\Program Files\WindowsUpdate\*
XP[/font][font=宋体]升级留下的垃圾[/font]
[font=宋体][/font]
[color=#ff0000][font=宋体]最后从启计算机,进入[/font][font=Times New Roman]DOS[/font][font=宋体]系统,运行[/font][font=Times New Roman]GHOST –NOU** –CRCIGNORE –Z9[/font][font=宋体]做镜像。好了,终于写[/font][/color]
[color=#ff0000][font=宋体]完了,第一次写这玩意,肯定有不少地方没写到,由于本人水品有限,肯定有些地方有不足的地方,[/font][/color]

页: [1]

Powered by 安全基地 Archiver 6.1.0  © 2001-2007 本SEO插件由网络人站长论坛出品