|
cnmba
初级用户
 
积分 42
发帖 11
注册 2006-6-28
状态 离线
|
『楼 主』:
[高难讨论] 关于如何把GHOST做进HPA分区中去?
使用 LLM 解释/回答一下
HPA就是隐藏保护分区的意思..现在很多品牌机都使用这个做一键恢复..
我实现这个功能: 做个GHOST备份固然简单,但如何往HPA里写GHOST文件,然后开机按一个键就可以从HPA中恢复系统...甚至可以用一张CD引导,也可以达到从HPA恢复数据..
1.关于HPA的资料极其稀少..至少我没找到..
2.我已经去了5U等论坛,看过相关帖子,最终都没有解决方案.
3.最近熊猫烧香/金猪报喜等病毒都会全盘搜索GHOST的备份文件,然后删除..所以,很不保险..
我将长期在线关注此帖...有可能自己顶...请斑竹放过.:(
HPA means the hidden protection partition. Now many brand computers use this for one-key recovery..
I want to implement this function: Making a GHOST backup is simple, but how to write the GHOST file into HPA, and then press a key to restore the system from HPA when booting... Even can use a CD to boot and also achieve restoring data from HPA..
1. There are extremely few materials about HPA.. At least I didn't find any..
2. I have been to forums like 5U and others, read relevant posts, and finally there is no solution..
3. Recently viruses like Panda烧香/Jinzhu Baoxi all search for GHOST backup files in the entire disk and then delete them.. So, it's very insecure..
I will be online for a long time to follow this post... Maybe I will bump it myself... Please let the moderator pass.:(
|
|
2007-2-12 12:20 |
|
|
Michael
钻石会员
       
积分 10046
发帖 3039
注册 2002-11-11
状态 离线
|
『第 2 楼』:
使用 LLM 解释/回答一下
又有金猪报喜了呀!这世界。。。。
There is another golden pig announcing good news again! This world...
|

简单就是美 |
|
2007-2-12 12:46 |
|
|
Climbing
铂金会员
       网络独行侠
积分 6962
发帖 2753
注册 2003-4-16 来自 河北保定
状态 离线
|
『第 3 楼』:
使用 LLM 解释/回答一下
无忧论坛已经有成熟的解决方案了呀,就是清华同方那个一键恢复,是基于软通科技的技术的。
The Youwu Forum already has a mature solution, which is the one - key recovery of Tsinghua Tongfang, based on the technology of Softstar Technology.
|

偶只喜欢回答那些标题和描述都很清晰的帖子!
如想解决问题,请认真学习“这个帖子”和“这个帖子”并努力遵守,如果可能,请告诉更多的人!
|
|
2007-2-12 22:22 |
|
|
Climbing
铂金会员
       网络独行侠
积分 6962
发帖 2753
注册 2003-4-16 来自 河北保定
状态 离线
|
『第 4 楼』:
使用 LLM 解释/回答一下
另外,用分区软件将分区隐藏,也可以防止病毒访问隐藏分区上的文件,没有必要一定是HPA分区。
清华同方那个基于HPA的一键恢复有某些机器上可能会失败。
In addition, using a partition tool to hide a partition can also prevent viruses from accessing files on the hidden partition. It is not necessary to be an HPA partition.
The one - key recovery based on HPA in Tsinghua Tongfang may fail on some machines.
|

偶只喜欢回答那些标题和描述都很清晰的帖子!
如想解决问题,请认真学习“这个帖子”和“这个帖子”并努力遵守,如果可能,请告诉更多的人!
|
|
2007-2-12 22:25 |
|
|
lianjiang2004
金牌会员
     
积分 3946
发帖 1884
注册 2006-1-20
状态 离线
|
『第 5 楼』:
使用 LLM 解释/回答一下
我觉得还是改扩展名方便,用过一次基于同方的hpa,结果后来死的很惨,文件全部能读取。
I think changing the file extension is still more convenient. I once used a homomorphic encryption based on Tongfang's hpa, and then it ended up very badly, all the files could be read.
|

Windows 一键还原
http://www.yjhy.com |
|
2007-2-12 22:41 |
|
|
llztt1
中级用户
  
积分 214
发帖 94
注册 2007-1-11
状态 离线
|
『第 6 楼』:
使用 LLM 解释/回答一下
HPA是ATA的标准,ATA-4就包含了HPA,通俗的理解就是设置读取的硬盘最大的扇区号,从而把高端的内容隐藏起来,这个最大的扇区号能够写在硬盘的某个地方,因此即使你把这个硬盘挂到其它机器上,正常情况下你也看不到隐藏的内容
所有相关的FW工具,在第一张恢复光盘的recovery目录下面,是对fw开头的那些文件,这里打了一个工具包上来。具体在后面逐个介绍。
附件: 406198-FWTOOLS.RAR
这个是psa驱动,在config.sys文件中加入它之后,才能在DOS下面查看HPA里面的内容。
附件: 406203-PSADISK.SYS
按AccessIBM之后出来的界面,就是这个程序,IBM叫它sight.exe。
附件: 406208-SIGHT.EXE
这个程序需要minidos.sys来支持。
附件: 406212-MINIDOS.SYS
这是查到的一点信息,你的想法,N多人都奢望过:建立个高级安全的隐藏区,放置GHOST,随时备份或恢复系统,除非GHOST时,其他方式都访问不到他,呵呵,不过看来想要更好的功能肯定得付出点代价的
你去查查这个406212-MINIDOS.SYS,看能否在DOS下挂上HPA隐藏区,如果挂上了,看能否启动GHOST访问到他,如果能,那大家就谢天谢地了
HPA is a standard of ATA, and ATA-4 includes HPA. The popular understanding is to set the maximum sector number for reading the hard disk, thus hiding the advanced content. This maximum sector number can be written in a certain place on the hard disk. Therefore, even if you hang this hard disk on other machines, you normally cannot see the hidden content.
All related FW tools are in the recovery directory of the first recovery CD, which are the files starting with fw. Here, a tool package is uploaded. The specific introductions will be made one by one later.
Attachment: 406198-FWTOOLS.RAR
This is the psa driver. After adding it to the config.sys file, you can view the content in HPA under DOS.
Attachment: 406203-PSADISK.SYS
The interface after pressing AccessIBM is this program, which IBM calls sight.exe.
Attachment: 406208-SIGHT.EXE
This program requires minidos.sys to support.
Attachment: 406212-MINIDOS.SYS
This is some information found. Your idea, many people have long wished for: establish an advanced secure hidden area to place GHOST, and back up or restore the system at any time. Unless during GHOST, other methods cannot access it. Hehe, but it seems that to get better functions, you must pay a price.
You go check this 406212-MINIDOS.SYS. See if you can mount the HPA hidden area under DOS. If it is mounted, see if GHOST can access it. If it can, then everyone will be grateful.
|
|
2007-2-12 22:44 |
|
|
Climbing
铂金会员
       网络独行侠
积分 6962
发帖 2753
注册 2003-4-16 来自 河北保定
状态 离线
|
『第 7 楼』:
使用 LLM 解释/回答一下
没有绝对安全的系统,就算是基于HPA分区的一键恢复系统,只要对方手里有对应的工具,例如联想的hpatool或者ulockhpa这一类的工具,照样可以将你的hpa分区显示出来(或者删除),病毒作者也不傻,ATA的命令标准是公开的,只要病毒作者照顾到这方面,HPA也不是安全的。什么叫安全?提高安全意识,加强病毒防范,保证系统不感染病毒,这才是最安全的。
There is no absolutely secure system. Even the one - key recovery system based on HPA partitions can have its HPA partitions displayed (or deleted) as long as the other party has the corresponding tools, such as Lenovo's hpatool or ulockhpa and such tools. Virus authors are not stupid either. The ATA command standard is public. As long as virus authors take this aspect into account, HPA is not secure. What is security? Improving security awareness, strengthening virus prevention and ensuring that the system is not infected with viruses is the most secure.
|

偶只喜欢回答那些标题和描述都很清晰的帖子!
如想解决问题,请认真学习“这个帖子”和“这个帖子”并努力遵守,如果可能,请告诉更多的人!
|
|
2007-2-13 00:26 |
|
|
cnmba
初级用户
 
积分 42
发帖 11
注册 2006-6-28
状态 离线
|
『第 8 楼』:
使用 LLM 解释/回答一下
清华同方那个部署软件,不知道有什么具体的使用环境? 比如说,我故意把最后一个FAT32分区清空了,然后用该软件划个隐藏分区出来? 还是说必须先如何? 再如何呢?..~~
6楼llztt1朋友说的这个方法,到是头一次看到...我去找找那个东东!!
另外,我想HPA分区它应该算是一种分区类型,而不是像FAT32,NTFS的文件储存类型,它是使用ATA-7流命令集来操作的..(这几天,我也没闲着,也再继续研究这个问题..)...所以,HPA分区里面使用的到底是什么方式储存?? 能不能与FAT32等分区互传数据..都是个问题..
另外,Climbing你说的ATA标准是公开的,那你那里有ATA-7流命令的相关资料吗?? 请共享一下...我想看看究竟是什么样子的.?
谢谢大家关注此问题!
The deployment software of Tsinghua Tongfang, I don't know what specific usage environment it has? For example, if I deliberately clear the last FAT32 partition, and then use this software to divide a hidden partition out? Or do I have to do this first? Then how?..~~
The method mentioned by friend 6th floor llztt1 is really seen for the first time... I'll go find that thing!!
In addition, I think HPA partition should be a type of partition, not a file storage type like FAT32, NTFS. It operates using the ATA-7 stream command set..(These days, I haven't been idle either, and I'm continuing to study this problem..)... So, what kind of storage method is used inside the HPA partition?? Can it transfer data with FAT32 and other partitions.. are all problems.
In addition, you said that the ATA standard is public, then do you have relevant information about the ATA-7 stream command? Please share it.. I want to see what it looks like.?
Thank you everyone for paying attention to this problem!
|
|
2007-2-13 20:41 |
|
|
lianjiang2004
金牌会员
     
积分 3946
发帖 1884
注册 2006-1-20
状态 离线
|
|
2007-2-14 00:04 |
|
|
Climbing
铂金会员
       网络独行侠
积分 6962
发帖 2753
注册 2003-4-16 来自 河北保定
状态 离线
|
『第 10 楼』:
使用 LLM 解释/回答一下
Re cnmba:
hpa分区的标准也不是统一的,联想和IBM使用的好象是Phoniex的FirstWare,而清华同方的使用的是软通科技的技术,FisrtWare的好象用起来比较麻烦,HPA中会分很多区,而清华同方的就是一个FAT32分区(相当于一个逻辑分区)。
至于ATA的命令集,我这里也没有,网上肯定能够搜索到的。
Re cnmba:
The standards for HPA partitions are not uniform. Lenovo and IBM seem to use Phoniex's FirstWare, while Tsinghua Tongfang uses the technology of SoftTech. FirstWare seems to be more troublesome to use, and HPA will be divided into many partitions, while Tsinghua Tongfang's is a single FAT32 partition (equivalent to a logical partition).
As for the ATA command set, I don't have it here, but it must be searchable on the Internet.
|

偶只喜欢回答那些标题和描述都很清晰的帖子!
如想解决问题,请认真学习“这个帖子”和“这个帖子”并努力遵守,如果可能,请告诉更多的人!
|
|
2007-2-14 00:46 |
|
|
woo88
初级用户
 
积分 188
发帖 96
注册 2008-3-11
状态 离线
|
『第 11 楼』:
使用 LLM 解释/回答一下
怎么没的下载呀
Why isn't there any download available?
|
|
2008-3-26 23:35 |
|
|
m84464772
初级用户
 
积分 31
发帖 12
注册 2006-9-29
状态 离线
|
『第 12 楼』:
使用 LLM 解释/回答一下
其实只要你用过diskgman这个工具就知道.或者是diskgen这个命令.不管什么分区.在它那里都是可以拴的.还是图形界面.不过要在DOS下才能用的.呵呵.其实你改文件扩展名比较方便.随便改一个扩展名.重写一下批处理就完了.很方便的.至少我目前就是这么做的.
Actually, as long as you have used the diskgman tool or the diskgen command, you'll know that for any partition, it can be handled there. It's also a graphical interface. But it can only be used under DOS. Hehe. Actually, it's more convenient to change the file extension. Just change any extension randomly and rewrite the batch file. It's very convenient. At least that's what I'm doing currently.
|
|
2008-3-27 19:56 |
|