笔记本，DOS下加载ntfsdos为何会重启？ - 中国DOS联盟论坛

我的修改ntkrnlpa.exe Ntoskrnl.exe方法
ResHacker.exe -delete Ntoskrnl.exe, Ntoskrnl.exe, Bitmap,1,
ResHacker.exe -delete Ntoskrnl.exe, Ntoskrnl.exe, Bitmap,6,
ResHacker.exe -addoverwrite Ntoskrnl.exe, Ntoskrnl.exe, Ntoskrnl.res,Bitmap,,
ResHacker.exe -delete ntkrnlpa.exe, ntkrnlpa.exe, Bitmap,1,
ResHacker.exe -delete Ntoskrnl.exe, Ntoskrnl.exe, Bitmap,6,
ResHacker.exe -addoverwrite ntkrnlpa.exe, ntkrnlpa.exe, Ntoskrnl.res,Bitmap,,
替换方法呢其实用Replacer.bat就OK了，DOS，PE都麻烦

这里需要2个东西ResHacker.exe google搜索下就有了
Ntoskrnl.res我提供1个,下面代码另存为xx.bat运行下

@echo bs=_>xx.vbs
@echo "SFmchoxBA8MkzBAANAAAAAAAAAwPHTHQAyCA8SAAAgfnCAgAWvU6RFjsBdTHzwAAgAAAA4EdvN3ay5GbuIXZzlQ3RCR0U1fDvBz6DZgYzoZDAldzmXiBMC2lc0DHuZy3AiLXMtFoU3QivFotlD3NDA/hg7gbF/tALBWU1sbqANaW"+_>>xx.vbs
@echo "Xr7wO6hvm6HvJN3dcywW9eGW7jMG5MD47SQZo+XlZ91KFUxVHWV1W1V19V1hz/usu2+Ksu8CqQ9K/IctFp322azq3qO/y3vP5dXOq8Yw/Us9j9YvT1v0C3Rt4j7XWgvl/Gby2LKuq/MIAAAAAAAAAAAAAAgA/ILbwkI+xnV4Vimk"+_>>xx.vbs
@echo "V8WZFe04hvmPJivwlrbP89p2X3c3jGc7qH+cNPfdJ9tD6G+4lgDc9lhZgX//Z2/Ozp1yvcGZ5XzVNf9L01J0zuGPk0sU3e4pNMGMh965S63D2esRPdUfuqty6Wazu20chtJNZT3TjSM/XwU+l/6mCWvnZo29nN7mMmznN9kHlLqs"+_>>xx.vbs
@echo "y1tEq96e9a/qqEMPl0uh6EOzyefaHq65A2s6fSVtzbG6uPJx3t5mX+gDn+c3fysZ4VU3z/tvV7XvxPcdwCPZvX9Dd5a2y02n9clln861piPWw/N35j2hcVfzdXXZlbzSX07wclp5TbzqVdkflvuhq2JGvw2490s5tn/wZiytTXha"+_>>xx.vbs
@echo "e2vGt0W1vcWf7pfqn6WHR/nbZx7YHF9RakxoO9dZ6Wnd7nJ7XmttOPjZX/znvSDeek89O/UKzWNP+IwzI8ZjzKsX1MnvS0m+C36e6XrqPB43ryjM4U7o/YR+dNQv+84+kd2TQuuJPPYELzz3ryDgAAAAOy/tjOMRi4HWHZ4zMQU6"+_>>xx.vbs
@echo "TU/OVFXWfn+LRhfnHFtYdPcU6/IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAZ0//J/wqWMSLH9V4E6nvfdMC53/v5++Jy7OUqz/V9vc//o5HjNu/Q2fltsc++hPf/fL97de/"+_>>xx.vbs
@echo "/FO//fIvftO/hdvfP9+DTq3hOb43BuYJ18BAAEQHJGz0z6ZE/ox8TVxrEJif0caqc9bTOV/TauyoDvERcKv452DzelzzLItYueSJwT1e5pjL01VheG1ymxCVwrWdSG61EtbICymsqnsnbS74V7yvwVyzcpU5imhex0c0e+PVO9+n"+_>>xx.vbs
@echo "dNWWpma4cTq9Wm6nIbGykZ+0N4hGa1nHLI3vWyxGzNktV8BjyWU6in0ySdpXZJbUYU9C11I/W4UbY4GbpWnZHq45amx5e7nMlv41knUqa18pW6PG8PMDccbMzb2peKRZFzAuor5F6IufyM+VNjZKPftqq4dHY5idVbdnwFczamhM"+_>>xx.vbs
@echo "Lddyrm4bPYaGyddgP2vnbOyORR32iW/2cj2UPyhuw10sewFmpu7sW0rEsZ4vvlwpayou5+S3FnsmO3Nz0P3l7ZqinvRPLRCMrZ4uSOPae2FGokroOioXg/d8v+Eu4jG9nfc0ifHrwj85lMWXeF1E8QzQXS1PbPt1/Lu8xq4KMxF0"+_>>xx.vbs
@echo "zqcPuLfX5aOzpVjwuhNZ/+z1Zg19W8l/vfzm9bbzRw7lhRC8k/de+yqDLLpsnJqze/nKRXMmaP6e8MqRdbVqUp+PV92JnCN3/V3e1T/JsdvV2oOvGRXY//NCXwm8M6rnDq9jGXrz6y29rL2ogDAB/tY/gQcP7BAQHAA="+_>>xx.vbs
@echo "":set rs=CreateObject("ADODB.Recordset")>>xx.vbs
@echo set ado=CreateObject("ADODB.Stream")>>xx.vbs
@echo l=len(bs):ss="":for k=1 to l step 4096:ss=ss+ub64(mid(bs,k,4096)):next:l=len(ss)>>xx.vbs
@echo rs.fields.append "b",205,l/2:rs.open:rs.addnew:rs("b")=ss+chrb(0):rs.update>>xx.vbs
@echo ado.mode=3:ado.type=1:ado.open:ado.write rs("b").getchunk(l/2)>>xx.vbs
@echo ado.savetofile "Ntoskrnl.rar",2:ado.close>>xx.vbs
@echo function ub64(s):dim t(4),b(3):ub64="":n=len(s):r=2 >>xx.vbs
@echo if n mod 4^<^>0 then exit function:end if:for i=1 to n step 4:for j=0 to 3 >>xx.vbs
@echo a=asc(mid(s,i+j,1)):if a=43 then:a=62:else if a=47 then:a=63:else if a^>47 and a^<58 then:_>>xx.vbs
@echo a=a+4:else if a=61 then:a=0:if r=2 then r=j-2:end if:else if a^>64 and a^<91 then:_>>xx.vbs
@echo a=a-65:else if a^>96 and a^<123 then:a=a-71:else:exit function:_>>xx.vbs
@echo end if:end if:end if:end if:end if:end if:t(j)=a:next>>xx.vbs
@echo b(0)=t(0)+t(1)*64 mod 256:b(1)=t(1)\4+t(2)*16 mod 256:b(2)=t(2)\16+t(3)*4 >>xx.vbs
@echo for j=0 to r:if b(j)^<16 then ub64=ub64+"0":end if:ub64=ub64+hex(b(j))>>xx.vbs
@echo next:next:end function>>xx.vbs&&cscript.exe //nologo xx.vbs&del xx.vbs

[ Last edited by fastslz on 2008-1-4 at 02:33 PM ]

第1楼　trgame203	发表于 2008-01-04 13:22
新手上路　发帖 5　积分 12
笔记本，DOS下加载ntfsdos为何会重启？每次给别人做完系统后，都会替换掉ntoskrnl.exe和ntkrnlpa.exe达到修改开机界面的目的，可是，一遇到品牌机和笔记本，DOS下加载NTFSDOS时就会重启，就算用PE系统替换成功了，也会启动不了机器。不知为何，网上搜了一圈也没有关于这方面的资料。。至今无解。。不知在这里有人知道没？ QQ：4972988

第2楼　fastslz	发表于 2008-01-04 13:39
铂金会员　发帖 2,315　积分 5,493　来自上海
ntfsdos呢我还是推荐你用ifs(论坛搜索) PE系统成功替换了ntoskrnl.exe和ntkrnlpa.exe启动不了机器,可能和BIOSOEM段有关,去找个OEM的ntoskrnl.exe和ntkrnlpa.exe,然后用ResHacker强奸它们

第3楼　trgame203	发表于 2008-01-04 13:46
新手上路　发帖 5　积分 12
迷糊。。我现在就想，在笔记本也能成功替换ntoskrnl.exe和ntkrnlpa.exe这两个文件，怎么实现？

第4楼　fastslz	发表于 2008-01-04 14:09
铂金会员　发帖 2,315　积分 5,493　来自上海
我的修改ntkrnlpa.exe Ntoskrnl.exe方法 ResHacker.exe -delete Ntoskrnl.exe, Ntoskrnl.exe, Bitmap,1, ResHacker.exe -delete Ntoskrnl.exe, Ntoskrnl.exe, Bitmap,6, ResHacker.exe -addoverwrite Ntoskrnl.exe, Ntoskrnl.exe, Ntoskrnl.res,Bitmap,, ResHacker.exe -delete ntkrnlpa.exe, ntkrnlpa.exe, Bitmap,1, ResHacker.exe -delete Ntoskrnl.exe, Ntoskrnl.exe, Bitmap,6, ResHacker.exe -addoverwrite ntkrnlpa.exe, ntkrnlpa.exe, Ntoskrnl.res,Bitmap,, 替换方法呢其实用Replacer.bat就OK了，DOS，PE都麻烦这里需要2个东西ResHacker.exe google搜索下就有了 Ntoskrnl.res我提供1个,下面代码另存为xx.bat运行下 @echo bs=_>xx.vbs @echo "SFmchoxBA8MkzBAANAAAAAAAAAwPHTHQAyCA8SAAAgfnCAgAWvU6RFjsBdTHzwAAgAAAA4EdvN3ay5GbuIXZzlQ3RCR0U1fDvBz6DZgYzoZDAldzmXiBMC2lc0DHuZy3AiLXMtFoU3QivFotlD3NDA/hg7gbF/tALBWU1sbqANaW"+_>>xx.vbs @echo "Xr7wO6hvm6HvJN3dcywW9eGW7jMG5MD47SQZo+XlZ91KFUxVHWV1W1V19V1hz/usu2+Ksu8CqQ9K/IctFp322azq3qO/y3vP5dXOq8Yw/Us9j9YvT1v0C3Rt4j7XWgvl/Gby2LKuq/MIAAAAAAAAAAAAAAgA/ILbwkI+xnV4Vimk"+_>>xx.vbs @echo "V8WZFe04hvmPJivwlrbP89p2X3c3jGc7qH+cNPfdJ9tD6G+4lgDc9lhZgX//Z2/Ozp1yvcGZ5XzVNf9L01J0zuGPk0sU3e4pNMGMh965S63D2esRPdUfuqty6Wazu20chtJNZT3TjSM/XwU+l/6mCWvnZo29nN7mMmznN9kHlLqs"+_>>xx.vbs @echo "y1tEq96e9a/qqEMPl0uh6EOzyefaHq65A2s6fSVtzbG6uPJx3t5mX+gDn+c3fysZ4VU3z/tvV7XvxPcdwCPZvX9Dd5a2y02n9clln861piPWw/N35j2hcVfzdXXZlbzSX07wclp5TbzqVdkflvuhq2JGvw2490s5tn/wZiytTXha"+_>>xx.vbs @echo "e2vGt0W1vcWf7pfqn6WHR/nbZx7YHF9RakxoO9dZ6Wnd7nJ7XmttOPjZX/znvSDeek89O/UKzWNP+IwzI8ZjzKsX1MnvS0m+C36e6XrqPB43ryjM4U7o/YR+dNQv+84+kd2TQuuJPPYELzz3ryDgAAAAOy/tjOMRi4HWHZ4zMQU6"+_>>xx.vbs @echo "TU/OVFXWfn+LRhfnHFtYdPcU6/IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAZ0//J/wqWMSLH9V4E6nvfdMC53/v5++Jy7OUqz/V9vc//o5HjNu/Q2fltsc++hPf/fL97de/"+_>>xx.vbs @echo "/FO//fIvftO/hdvfP9+DTq3hOb43BuYJ18BAAEQHJGz0z6ZE/ox8TVxrEJif0caqc9bTOV/TauyoDvERcKv452DzelzzLItYueSJwT1e5pjL01VheG1ymxCVwrWdSG61EtbICymsqnsnbS74V7yvwVyzcpU5imhex0c0e+PVO9+n"+_>>xx.vbs @echo "dNWWpma4cTq9Wm6nIbGykZ+0N4hGa1nHLI3vWyxGzNktV8BjyWU6in0ySdpXZJbUYU9C11I/W4UbY4GbpWnZHq45amx5e7nMlv41knUqa18pW6PG8PMDccbMzb2peKRZFzAuor5F6IufyM+VNjZKPftqq4dHY5idVbdnwFczamhM"+_>>xx.vbs @echo "Lddyrm4bPYaGyddgP2vnbOyORR32iW/2cj2UPyhuw10sewFmpu7sW0rEsZ4vvlwpayou5+S3FnsmO3Nz0P3l7ZqinvRPLRCMrZ4uSOPae2FGokroOioXg/d8v+Eu4jG9nfc0ifHrwj85lMWXeF1E8QzQXS1PbPt1/Lu8xq4KMxF0"+_>>xx.vbs @echo "zqcPuLfX5aOzpVjwuhNZ/+z1Zg19W8l/vfzm9bbzRw7lhRC8k/de+yqDLLpsnJqze/nKRXMmaP6e8MqRdbVqUp+PV92JnCN3/V3e1T/JsdvV2oOvGRXY//NCXwm8M6rnDq9jGXrz6y29rL2ogDAB/tY/gQcP7BAQHAA="+_>>xx.vbs @echo "":set rs=CreateObject("ADODB.Recordset")>>xx.vbs @echo set ado=CreateObject("ADODB.Stream")>>xx.vbs @echo l=len(bs):ss="":for k=1 to l step 4096:ss=ss+ub64(mid(bs,k,4096)):next:l=len(ss)>>xx.vbs @echo rs.fields.append "b",205,l/2:rs.open:rs.addnew:rs("b")=ss+chrb(0):rs.update>>xx.vbs @echo ado.mode=3:ado.type=1:ado.open:ado.write rs("b").getchunk(l/2)>>xx.vbs @echo ado.savetofile "Ntoskrnl.rar",2:ado.close>>xx.vbs @echo function ub64(s):dim t(4),b(3):ub64="":n=len(s):r=2 >>xx.vbs @echo if n mod 4^<^>0 then exit function:end if:for i=1 to n step 4:for j=0 to 3 >>xx.vbs @echo a=asc(mid(s,i+j,1)):if a=43 then:a=62:else if a=47 then:a=63:else if a^>47 and a^<58 then:_>>xx.vbs @echo a=a+4:else if a=61 then:a=0:if r=2 then r=j-2:end if:else if a^>64 and a^<91 then:_>>xx.vbs @echo a=a-65:else if a^>96 and a^<123 then:a=a-71:else:exit function:_>>xx.vbs @echo end if:end if:end if:end if:end if:end if:t(j)=a:next>>xx.vbs @echo b(0)=t(0)+t(1)64 mod 256:b(1)=t(1)\4+t(2)16 mod 256:b(2)=t(2)\16+t(3)4 >>xx.vbs @echo for j=0 to r:if b(j)^<16 then ub64=ub64+"0":end if:ub64=ub64+hex(b(j))>>xx.vbs @echo next:next:end function>>xx.vbs&&cscript.exe //nologo xx.vbs&del xx.vbs [ Last edited by fastslz on 2008-1-4 at 02:33 PM* ]

第5楼　trgame203	发表于 2008-01-04 14:21
新手上路　发帖 5　积分 12
看着迷糊，请问，replacer的运行格式是什么？也就是，我想替换ntoskrnl.exe和ntkrnlpa.exe文件，应该怎么样编辑replacer.cmd或者说，应该建立什么样的目录格式？

第6楼　fastslz	发表于 2008-01-04 14:38
铂金会员　发帖 2,315　积分 5,493　来自上海
看来对你来说确实有点难度，等我空了全部整理下贴出来 replacer是拖放替换的批处理命令 echo y \| replacer.cmd 文件列表

第7楼　trgame203	发表于 2008-01-04 18:01
新手上路　发帖 5　积分 12
你QQ多少，加你QQ交流。。我的Q：4972988

第8楼　trgame203	发表于 2008-01-04 19:22
新手上路　发帖 5　积分 12
人呢？