Results 1 to 23 of 23

Thread:

Hybrid View

Previous Post Previous Post   Next Post Next Post
  1. #1
    Registered User
    Join Date: Dec:2005
    Location: yvr
    Posts: 5,167

    - USB fixed, removable, , .
    .sys - USB removable. ( ), a false true.

    http://www.codeproject.com/system/so...ct_hooking.asp
    Last edited by ilko; 14th September 2007 at 09:19.

  2. #2
    Bombera's Avatar
    Join Date: Jul:2001
    Location: 4EVA
    Posts: 13,833
    ?
    EVGA X299 FTW K|i9-7960X@4.7|4x8 Patriot Viper Steel 4000|GTX 1660 Ti|970 EVO 1 TB|Seasonic Focus GX-1000|Xigmatek Elysium|
    Rampage IV Extreme BE|E5-1680v2@4.7|4x4 HyperX 1866|Cougar Aqua 240|GTX 1050 Ti|970 EVO 1/4 TB|CM 850 SilentPro|HAF-X|

  3. #3
    Registered User
    Join Date: Dec:2005
    Location: yvr
    Posts: 5,167
    ?

  4. #4
    Bombera's Avatar
    Join Date: Jul:2001
    Location: 4EVA
    Posts: 13,833
    . , , - KeNumberProcesors. . . , , .
    Attached Files
    EVGA X299 FTW K|i9-7960X@4.7|4x8 Patriot Viper Steel 4000|GTX 1660 Ti|970 EVO 1 TB|Seasonic Focus GX-1000|Xigmatek Elysium|
    Rampage IV Extreme BE|E5-1680v2@4.7|4x4 HyperX 1866|Cougar Aqua 240|GTX 1050 Ti|970 EVO 1/4 TB|CM 850 SilentPro|HAF-X|

  5. #5
    Registered User
    Join Date: Dec:2005
    Location: yvr
    Posts: 5,167
    , - , , System Reserved dummy.sys \system32\drivers :

    Code:
    Windows Registry Editor Version 5.00
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\dummy]
    "Type"=dword:00000001
    "Start"=dword:00000000
    "ErrorControl"=dword:00000001
    "ImagePath"=hex(2):53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\
    52,00,49,00,56,00,45,00,52,00,53,00,5c,00,64,00,75,00,6d,00,6d,00,79,00,2e,\
    00,73,00,79,00,73,00,00,00
    "DisplayName"="USB-Fixed Disk"
    "Group"="System Reserved"
    "Tag"=dword:00000001
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\dummy\Enum]
    "0"="Root\\LEGACY_DUMMY\\0000"
    "Count"=dword:00000001
    "NextInstance"=dword:00000001

  6. #6
    Bombera's Avatar
    Join Date: Jul:2001
    Location: 4EVA
    Posts: 13,833
    , Automatic. , , - . , . (php/MySQL), , ,

    ? FALSE TRUE, - . .
    EVGA X299 FTW K|i9-7960X@4.7|4x8 Patriot Viper Steel 4000|GTX 1660 Ti|970 EVO 1 TB|Seasonic Focus GX-1000|Xigmatek Elysium|
    Rampage IV Extreme BE|E5-1680v2@4.7|4x4 HyperX 1866|Cougar Aqua 240|GTX 1050 Ti|970 EVO 1/4 TB|CM 850 SilentPro|HAF-X|

  7. #7
    Registered User
    Join Date: Dec:2005
    Location: yvr
    Posts: 5,167
    , .
    USB removable, TEXT USB fixed :
    http://www.msfn.org/board/boot_insta...30#entry684730

    .

  8. #8
    Registered User
    Join Date: Dec:2005
    Location: yvr
    Posts: 5,167
    ,

  9. #9
    Bombera's Avatar
    Join Date: Jul:2001
    Location: 4EVA
    Posts: 13,833
    , . .
    EVGA X299 FTW K|i9-7960X@4.7|4x8 Patriot Viper Steel 4000|GTX 1660 Ti|970 EVO 1 TB|Seasonic Focus GX-1000|Xigmatek Elysium|
    Rampage IV Extreme BE|E5-1680v2@4.7|4x4 HyperX 1866|Cougar Aqua 240|GTX 1050 Ti|970 EVO 1/4 TB|CM 850 SilentPro|HAF-X|

  10. #10
    Registered User
    Join Date: Dec:2005
    Location: yvr
    Posts: 5,167

  11. #11
    Bombera's Avatar
    Join Date: Jul:2001
    Location: 4EVA
    Posts: 13,833
    Chapter 5 , , , 25( 20, ).
    EVGA X299 FTW K|i9-7960X@4.7|4x8 Patriot Viper Steel 4000|GTX 1660 Ti|970 EVO 1 TB|Seasonic Focus GX-1000|Xigmatek Elysium|
    Rampage IV Extreme BE|E5-1680v2@4.7|4x4 HyperX 1866|Cougar Aqua 240|GTX 1050 Ti|970 EVO 1/4 TB|CM 850 SilentPro|HAF-X|

  12. #12
    Registered User
    Join Date: Dec:2005
    Location: yvr
    Posts: 5,167
    , FALSE TRUE. , windows 2000 checked, Vista DDK.
    - , , - Text Mode Setup scsi driver, usbstore , USB removable. , - start=boot. , USB removable.
    .
    , .
    Attached Files

  13. #13
    Bombera's Avatar
    Join Date: Jul:2001
    Location: 4EVA
    Posts: 13,833
    , -, ... .
    EVGA X299 FTW K|i9-7960X@4.7|4x8 Patriot Viper Steel 4000|GTX 1660 Ti|970 EVO 1 TB|Seasonic Focus GX-1000|Xigmatek Elysium|
    Rampage IV Extreme BE|E5-1680v2@4.7|4x4 HyperX 1866|Cougar Aqua 240|GTX 1050 Ti|970 EVO 1/4 TB|CM 850 SilentPro|HAF-X|

  14. #14
    Registered User dobrin90's Avatar
    Join Date: Aug:2006
    Location: Bourgas
    Posts: 69
    , . -, ? Windows ? ? 2 , .

    / ?
    Last edited by dobrin90; 8th November 2007 at 23:52.

  15. #15
    Registered User
    Join Date: Dec:2005
    Location: yvr
    Posts: 5,167
    - windows USB storage basic disk( USB ) removable ( USB ).
    .
    USB , removable .
    , , basic disk, . dummydisk hitachi filter microdrive driver.

    :
    http://www.hardwarebg.com/forum/show...&highlight=usb

    Text mode basic removable .
    rdummy, basic disk USB removable.
    . , , .

  16. #16
    Registered User
    Join Date: Dec:2005
    Location: yvr
    Posts: 5,167
    , , ( #12) x64.


  17. #17
    Bombera's Avatar
    Join Date: Jul:2001
    Location: 4EVA
    Posts: 13,833
    , . . GDT - , . x64 .
    Last edited by Bombera; 9th December 2008 at 00:51.
    EVGA X299 FTW K|i9-7960X@4.7|4x8 Patriot Viper Steel 4000|GTX 1660 Ti|970 EVO 1 TB|Seasonic Focus GX-1000|Xigmatek Elysium|
    Rampage IV Extreme BE|E5-1680v2@4.7|4x4 HyperX 1866|Cougar Aqua 240|GTX 1050 Ti|970 EVO 1/4 TB|CM 850 SilentPro|HAF-X|

  18. #18
    Registered User
    Join Date: Dec:2005
    Location: yvr
    Posts: 5,167

  19. #19
    Bombera's Avatar
    Join Date: Jul:2001
    Location: 4EVA
    Posts: 13,833
    . (IDT). 64 :

    The anti-patching technology provided in the Windows x64 kernel,
    nicknamed PatchGuard, is intended to protect critical kernel
    structures from being modified outside of the context of approved
    modifications, such as through Microsoft-controlled hot patching. At
    the time of this writing, PatchGuard is designed to protect the
    following critical structures:


    - SSDT (System Service Descriptor Table)
    - GDT (Global Descriptor Table)
    - IDT (Interrupt Descriptor Table)
    - System images (ntoskrnl.exe, ndis.sys, hal.dll)
    - Processor MSRs (syscall)


    At a high-level, PatchGuard is implemented in the form of a set of
    routines that cache known-good copies and/or checksums of structures
    which are then validated at certain random time intervals (roughly
    every 5 - 10 minutes). The reason PatchGuard is implemented in a
    polling fashion rather than in an event-driven or hardware-backed
    fashion is because there is no native hardware level support for the
    things that PatchGuard is attempting to accomplish. For that
    reason, a number of the tricks that PatchGuard resorted to were done
    so out of necessity.

    , - , . . (x64 ), . ( ), .
    EVGA X299 FTW K|i9-7960X@4.7|4x8 Patriot Viper Steel 4000|GTX 1660 Ti|970 EVO 1 TB|Seasonic Focus GX-1000|Xigmatek Elysium|
    Rampage IV Extreme BE|E5-1680v2@4.7|4x4 HyperX 1866|Cougar Aqua 240|GTX 1050 Ti|970 EVO 1/4 TB|CM 850 SilentPro|HAF-X|

  20. #20
    Registered User
    Join Date: Dec:2005
    Location: yvr
    Posts: 5,167
    , .
    Text mode , PatchGuard e.
    GUI mode , , , .
    - , .

  21. #21
    Registered User
    Join Date: Dec:2005
    Location: yvr
    Posts: 5,167

  22. #22
    Bombera's Avatar
    Join Date: Jul:2001
    Location: 4EVA
    Posts: 13,833
    , " scsi" -, , , , . wrapper.
    32- ?
    .
    .inf .

    ICQ , , . . , . , . , , .
    Last edited by Bombera; 30th December 2008 at 00:54.
    EVGA X299 FTW K|i9-7960X@4.7|4x8 Patriot Viper Steel 4000|GTX 1660 Ti|970 EVO 1 TB|Seasonic Focus GX-1000|Xigmatek Elysium|
    Rampage IV Extreme BE|E5-1680v2@4.7|4x4 HyperX 1866|Cougar Aqua 240|GTX 1050 Ti|970 EVO 1/4 TB|CM 850 SilentPro|HAF-X|

  23. #23
    Registered User
    Join Date: Dec:2005
    Location: yvr
    Posts: 5,167
    32 . filter driver . inf- a , a - .

    - fixed removable, - removable fixed(basic). - dummydisk, 64 .

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Copyright © 1999-2011 . .
iskamPC.com | mobility.BG | Bloody's Techblog | | 3D Vision Blog |