The illustrated freezing point reduction 6. 0 works and crack-vulnerability warning-the black bar safety net

ID MYHACK58:62200819992
Type myhack58
Reporter 佚名
Modified 2008-08-10T00:00:00


Deep Freeze & How to crack Deep Freeze 6.0

The author of the article:old yellow article source:CNOOC gas

One, first the way freezing works. Without the patience of friends can jump directly to the second part to see how to crack the freezing point reduction 6. 0 in. Probably a lot of people have seen online the widely circulated“DeepFreeze freezing principle”of the post, why I would also like to reiterate its principle? Because I this person is a dry technology jobs, deep reasonable theory to the practice of major significance, do not understand the essence of things, technology can only ever stay in the follow the level; furthermore I think the quote simply is too ambiguous, and in some places also in misleading people. Freezing and other restore software such as a Restore Wizard, three tea one-key recovery, etc is not the same, it did not capture the South Bridge chip of the I0 control, nor control the drive of the INT13 interrupt, it does not rewrite the hard drive MBR(Master Boot Record. Restore Wizard, three tea one-key recovery, etc. by rewriting the hard drive of MBR the restore software in theoperating systemis loaded before the section to achieve its reduction function, and the freezing point is the use of drive added in the form ofoperating systemkernel module to implement its reducing function, it must be attached to the original system,once into another system,it the Restore feature fails. Its load priority is very high, and after loading in the current system can not stop can not be disabled nor deleted. The following figure by the software of the method of freezing the kernel driver will be described: ! ! The freezing point is also no“use your own hard drive to replace the original drive”, and it is the hard drive the original drive is a on the lower layer of the relationship, that is all to hard disk access, first through its“filter”and then commit to the hard disk the original drive processing,so as to achieve reduction purposes,this technique is called“filter driver”. The following figure through the hard disk and partition driver files for detailed analysis to be verified: ! ! The mouse and keyboard as a character access equipment, is also the freezing point of the regulation: ! Here you may have thought the freezing point of the crack method, that is to uninstall the freezing point of the kernel driver, but that's not enough, we still need to unravel the freezing point and the device turns out the drive of the upper and lower layer of the relationship, may be someone tried to directly remove the Deepfrz. sys file and directly or indirectly remove or disable the registry entry: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DeepFrz method has suffered the blue screen experience, and that is because there is no unlock the driver's sake. Below I give a freezing point reduction of 6. 0 crack method, of course, as long as the understand its principle, the method is varied.

Second, the freezing point reduction 6. 0 crack methods: Because the registry key the key to be modified, we must get into another oneoperating systemcan be achieved, in addition we also need a registry editing tool. I use the deep autumn leaves disc PE from CD to start theoperating system, and CopyToDVD(advanced Registry Editor), if everyone's computer is a dual system that is better, the direct use of the system comes with the Registry Editor(Regedit)is also available. Now to the topic: 1, From the optical disc to boot into system, open RegistryWorkshop it. ! 2, from the File menu select“load hive”, we want to import hard disk system registry. ! Navigate to C:\WINDOWS\system32\config find the system and open, possibly some path is not the same, it depends on what you want to hack the system where the actual position. ! Item names we can easily write, such as: df loading position by default without changes. ! So under HKEY_LOCAL_MACHINE. a df: ! 3, We in the HKEY_LOCAL_MACHINE\df item to find all contains deep words of content: ! 4, good search results come out, in order to facilitate the view, I chose to by value to the arrangement. The red line above the section is the freezing point of service entry, which is the first part of the principles of the article said the freezing point of the kernel module is from here to drive the load. The red line of the following section represents the freezing point of the drive module and the device, a keyboard, a mouse, a hard disk, a single partition of the original drive has a common function of the hardware of the drive. ! 5, we remove from the registry the red line above each item, the red line the following section we want to one by one edit the UpperFilters value, clear the value in the data DeepFrz words, it can also be a one-time export use Notepad to edit after import. ! The UpperFilters in the Edit I only model once, the other similar to: ! Note: remove the DeepFrz after a certain can not leave the air line, see below: ! ! 6, for each of the UpperFilters values are edited after the US and then the mouse positioning to the df on the item, then from the File menu select“unload hive”, the reboot into the hard driveoperating system, you'll find that the freezing point has been dissolved. !

Third, the freezing point reduction 6. 0 crack method of the two: First with the ice edge tools such as the C:\WINDOWS\system32\config\system copy to the U disk, and then in accordance with the above method for its use RegistryWorkshop editing, the editing good and then from a DOS system or other system to copy back to the hard disk overwriting the original file.

Attachment A: The freezing point reduction 6. 0 main file description: Deepfrz. sys-------------the freezing point of the kernel file,in order to drive the load,this is the key file. The driver is loaded after that no way to the end. In another system delete the file after restart will cause the blue screen of death. Df5sev. exe and Frzstate2k. exe----------these two files work together,is the freezing point of the management and settings of the program,the former to service in the form of loading, the latter by the former to boot. So you in the registry is not found Frzstate2k. exe startup items. $persi0. sys--------------the freezing point of the set to save the files,including password,protection plate, etc. LogonDll. dll--------------DfLogon

Attachment II: online wide spread“DeepFreeze freezing principle of the”post original: DeepFreeze freezing principle of freezing point the reduction is the acquisition of a South Bridge chip of the I0 control, it is control the hard disk of the INT13 interrupt, almost all of the reduction software are relying on this implementation, when loaded right after driving,the freezing point can be the correct to get to the I0 controller to control,and then use your own hard drive replacing the original drive,it reached the No on the hard disk of the write to go through his control,so that you can easily achieve reduction purposes,the same,the dual system or GHOST restore,the correct loading on the freezing point of the system will have a Restore feature,if not the words,of course it is not. So the GHOST can be unrestricted to add the file,while under windows To add the files to be restored. The freezing point is with a windows startup before startup,the windows Start to load the driver when the freezing point is some way to trigger the start,since the freezing point with I0 Controller control,so,he can put any write to the hard drive things put into anywhere and don't know we have never seen the temp(windows temporary folder)there is a DF5. TMP, right? The specific file name I can remember less than quite clear,and,I'm not in my Cafe,the home Cafe the C disk the shield of the!@#$%$% So can't provide specific names,you can see for yourself Supplement, the freezing point of the dump is generally as the windows temporary folder, so, the system do the later be sure to put the windows temporary folder is transferred to a relatively free disk, otherwise, it will appear as missing files in the case of downloading large files lost after file is this caused, because, the DF put all the written files are placed in there, although on the surface you lost in the elsewhere, but the storage location is in fact still in the temporary folder, just a windows shows you the path to you was misleading, it is on the hard disk of the actual position should be in the temporary folder below. DOS the following not possible to operate the freezing point Ah, even if is to use NTFSDOS to modify it, it may start bad, and DOS can not install the freezing point. in addition, the DF is designed for NTFS when it is considered that NTFS is not DOS support, therefore, does not provide DOS support, even in FAT32 win98 under DOS are not supported, the DF was designed for windows Best to put the System File format to NTFS, but NTFS does also there is a missing file, I have ever encountered, however, NTFS lost file most is hardware-related, I encounter a problem that is the keyboard interface bad contact, replace the keyboard, files loss phenomenon is solved, windows 2 0 0 0/XP/2 0 0 3 The following have a NTDETECT. COM file,this file is in the windows startup is responsible for reading the hardware information,ntldr in every time you start the When the first load is on it,then it will give, respectively, the reading of each of hardware of the information,decision ntldr to load the drivers,because the program is not windows under the program,The design is also very simple,so,the hardware if there are some small problems,caused by not found in some of the necessary hardware,some driver will not be loaded,and then prompts the file is missing(sometimes the BIOS can pass,can the error message which damage to hardware,but windows at boot time does not tell you what hardware is broken? Either fails to start,or start after the success of tell you what is broken),we sometimes encountered such a thing,the machine does not start up,but,put a few days and well,or put a few days and the bad,there is some element of damp? Heat? A lot of little small not a small problem together going to a big problem. My argument is extreme,is a more of a dead end argument,if you each machine is as if it does not exist on the hardware issue,but in my opinion,missing file chances are really low. (NTFS). So,NTFS under lost files,is basically a hardware cause,don't know which bit brothers able to give some advice. Or my analysis is wrong. NTDETECT. COM this file at boot time would be to the registry in one of the button below to add the hardware environment information, specifically I don't know it, in order to determine the load of what the drive, does not detect anything which hardware it will not load the corresponding driver, and ntldr in the load system files when it is possible the error occurred, what to say what file is missing, in fact, that file is still there, just not by NTDETECT. COM to the list to load into it. Looked on the patch, surely we more clearly point freezing point? I see this above the freezing point of the problem, in addition to cannot be used is an installation error right. errer #0 0 1 0 0 0 4 0 errer #0 0 0 0 0 0 0 0 These are and your what SP4 Ah, does not matter, the key is that you do not use a tool to give you the GHOST system is packaged, is the system installation disk with the package tool, I hope everyone is doing good system, fast moment of the disc when the first system package once, and then re-starting time directly at the GHOST server to obtain the master disc do not allow the system to start, otherwise, package will white do. Then is driver install order and version of the problem, in principle, you must use the installation disk on the driver, I'm looking at when the part of the people is with the generic driver it, manufacturers will according to their own need to change the electrical structure cut corners on? Saving costs?, the If you join a lot of the fresh functions, it would need its own rewrite the driver, so, this time, you must use the manufacturers give you the drive, I also suggest that you use the original factory drive. Here I explain, because each Board is not necessarily absolutely the same, so, the system drive to the motherboard of the parameters is not the same, but you don't have the package on the GHOST, in anything else on the machine can be used, install the freezing time, since the drive is not the same, of course, the freezing point does not need to motherboard drivers, hard drive, the motherboard of the parameters are not the same, plus the hard drive and the motherboard connection may be caused by the parameter difference, so that the freezing point when installed, could not properly replace the system's original drive, we have no note to install the Graphics Card Driver, the screen will flash once, and that was the driver in the unloading has been loaded into the memory in the driver file, so, freezing to a hard disk drive, you must uninstall, along with their parameters, the parameters are changed, the freezing point is not correctly uninstall the driver, it installed not on the. The package is to take hardware information from the system completely removed the moment after a good system yourself to find the appropriate driver, configure the appropriate parameters. Personal opinion, the Forum of what the freezing point is crack is fake, is the gunman posts, even if it is broken, we have to do is: change to another software. Abroad such software a bunch, but the majority of the network's English level is not high, also not interested to find. Take a look at their posting attitude. give out pictures, but don't give out things, also say what is afraid handed down, the impact of large for the majority of the NMS the sake of the Chinese, what things are so hidden? There's something just come up, so that hair picture is purely alarmist it! So, my opinion is that gunners post, the purpose is to want everyone to use other restore software, look carefully at the posts and posts of people who say, a little technical content are not, there is no freezing, we still work very enjoyable!