Вы находитесь на странице: 1из 331

681.3.

06
32.973.26-018.2
69

69

. .
. .: -, 2005. 336 : .
ISBN 5-94157-582-3
, Windows
. ,
, .
- Shareware.
,
,
. , Windows
, ,
.

681.3.06
32.973.26-018.2

:

. .
.

02429 24.07.00. 25.03.05.


1
700 /1. . . . . 27,1.
4000 . 923
"-", 194354, -, . , 5.
-
77.99.02.953..006421.11.04 11.11.2004 .
.

" ""
199034, -, 9 , 12

ISBN 5-94157-582-3

. ., 2005
, "-", 2005


?
?

1
4
6
13

1. Windows

17

1.1. Internet Explorer


1.1.1. IE
1.1.2.
1.1.3. IE
1.1.4. IE
1.1.5.
1.2. OEM- Microsoft
1.3.
,.
1.4. Windows
1.4.1.
1.4.2.
1.4.3.
1.5. Windows XP/2003
1.5.1.
1.5.2.
1.5.3.
1.5.4.
1.5.5. StyleXP
1.6.
1.7.
1.8. Windows 9 WEB
1.9. -

17
18
20
21
22
24
24
26
28
28
29
31
32
35
36
36
37
39
40
43
45
46

JV_

2. Windows

49

2.1. Windows
2.2. Restorator
2.2.1.
2.2.2.
2.2.3.
2.2.4.
2.3.
2.3.1.
2.3.2.
2.3.3.
2.3.4.
2.4. Windows XP
2.5.
2.5.1.
2.5.2.
2.5.3.
2.6.
2.7. Shell Style
2.8.
2.9.
2.9.1.AVI
2.9.2.
2.9.3.
2.9.4.
2.9.5. ,
2.9.6.
2.10.

49
51
53
56
62
63
63
65
66
68
68
69
73
74
75
75
81
85
86
89
90
90
90
91
91
91
92

3.

93

3.1.
3.2.
3.2.1.
3.2.2.
3.2.3.
3.2.4.
3.2.5.
3.2.6.
3.2.7.
3.2.8.
3.3.
3.4. -
3.4.1.

94
96
96
96
97
97
98
99
99
100
100
105
105

3.4.2.
3.4.3.
3.4.4. Windows 9x
3.4.5.
3.4.6.
3.4.7. IE
3.5.
3.5.1. Windows Total Commander
3.5.2. Windows
3.6.
3.7.
3.8.

105
105
107
107
108
109
109
109
Ill
...114
116
118

4.

119

4.1.
4.1.1.
4.1.2. ?
4.1.3. ,
4.2.
4.3. BIOS
4.3.1.
4.3.2.
4.3.3.
4.3.4.
4.3.5. BIOS
4.4.
4.4.1.
4.4.2.
4.4.3. AMD
4.4.4. Intel
4.5.
4.6. Windows
4.6.1.
4.6.2. Windows 2000/
4.6.3.
4.6.4.
4.6.5.
4.6.6.
4.6.7.
4.6.8.
4.7.
4.7.1.
4.7.2.

119
121
123
129
138
141
141
143
144
145
146
147
148
151
152
155
157
159
159
160
164
167
168
169
170
172
172
173
173

Vl_

4.7.3.
4.7.4.
4.7.5.
4.7.6.
4.7.7.
4.7.8.
4.7.9.
4.7.10. BIOS
4.7.11.
4.7.12.
4.7.13.
4.8.
4.8.1.
4.8.2.
4.8.3.
4.8.4.
4.8.5.
4.9.
4.9.1.
4.9.2. DVD- -
4.9.3. CD-
4.9.4.
4.10.
4.10.1. ?
4.10.2.
4.10.3.
4.10.4.
4.10.5.

173
175
175
176
177
178
179
182
182
184
186
186
187
187
188
190
193
194
195
196
196
198
199
199
200
201
203
205

5.

207

5.1.
.1.
.2. DNS
.3.
.4. ,
1.5.
5.2.
5.2.1. 1
5.2.2. 2
5.2.3. 3
5.2.4. 4
5.3.
5.3.1.

208
209
213
215
218
219
220
221
222
222
223
228
229

5.3.2.
5.3.3.
5.3.4.
5.3.5.
5.3.6.
5.4.
:
5.4.1. -
5.4.2. -
5.4.3.
5.4.4. -,
5.4.5.
5.5.
5.5.1.
5.5.2.
5.5.3.
5.6.
5.6.1.
5.6.2.
5.6.3. BugTraq
5.6.4. Firewall
5.6.5. Firewall
5.6.6. Firewall
5.6.7. Virtual Private Network
5.6.8.
5.6.9.
5.7.
5.8.
5.8.1.
5.8.2. WWW-
5.8.3.
5.8.4.
5.8.5.
5.8.6. Denial of Service
5.8.7.
5.8.8.
5.8.9.
5.9.
5.9.1.
5.9.2.
5.9.3.
5.10.
5.10.1.

VII

230
231
231
233
233
234
234
237
239
240
241
242
242
245
245
246
247
247
248
249
252
254
255
256
.257
258
260
261
267
271
272
276
279
282
285
286
287
287
289
289
290
292

VIII

295

1. UIFile

297

2.

311

3.

313

4.

314

317

318

319


,
, . .
. , , ,
Windows XP. ,
.


Windows,
. ,
, ,
. , ,
.
: , Windows . ,
. , (, ),
, Windows .
, , . , , , .
.
. ,
, ? . ,
. - .

. 1. Windows XP

,
Windows .
, , , Windows XP .
, ,
,
, , , . . , "" Windows
. , .
, .
,
.
.
, , .

. ?
,
.
, ,
. "", , -

. Windows,
.
, , , .
1012 , ,
, 16 , ,
. , ,
. ,
,
. - !!
,
. , " "
. ( ), . , , ,
"". .
,
( ).
. ,
. , ,
"" ( . 3).
.
"" . .
, , , , ,
. , ,
(, , . .),
.
.
, - , .
, ,
( ).
Windows?
, , , . , , , .

, , .
. , .
,
.
, . ,
. - ( ),
, .
, .
, (
). ,
.
,
, . 3 . , ,
,
5.
, Windows .
, . , , ,
. 2 . , ,
- .
, ,
, .
, .

?
, ,
. "" , . .

"" ,
ARPANET. , . , "" .
, , ,
"".
.
FIDO. UNIX- , .
. -
. .
,
, . , - .
, . , , , , () . ,
. . ,
, , (
!).
, , , , crack
() .
, , , , , .
,
. ( ), .
, :
1. , .
2. , .
3. / " "
i , , , - , .

4.
.
. .
,
. ,
.
,
,
. Open Source , , , , . . .
, - . , ,
, .
.
. , .
,
.
.
, , , . ,
" Delphi " [2] " C++ " [1] (.
"Hackish C++ Pranks&Tricks"). , .
.
, ,
, .

?
, . ,
, .
.
( ). . (, UNIX)

( WEB-). .
, ,
.
1. .
,
"" .
? . ,
"" .
, ,
. ,
.
.
.

,
. , , , ,
,
. .
/ " " <Ctrl>+<C>/<Ctrl>+<V> <Ctrl>+<Ins>/<Shift>+<Ins>,
( , ).
Windows (
, ) , , .
, , . , " ".
.
( 20 000 ). .
,
. " ", 25 .
" " , 20 . .
2. , .
,

jS

, . , . , , , , .
, !!!
, , - .
-
. ,
.
3. . .
. Borland Delphi
C++. Borland Delphi , , , ,
. C++ ,
. ,
. , Basic ( , ). Visual Basic , ,
, . ,
,
. - .
,
. ,
, ,
, , .
, , - .
, ,
, . ,
. .
, Borland Delphi,
, .
.
4. . .
, .
.
, - .
,
. , ,
, .

.
. :
"", "" . - ,
. ,
, -.
,
. -
, , , . ,
, .
, .
.
- . , ? .
.
. ,
. , , ,
.
,
. .
, "" ,
. "" ,
, Crack , . , .

, , .
. , . , - ( )
, , .
5. . , ,
Windows
. , .

10

, , Windows . ,
Windows ,
.
- ,
, Netscape Navigator.
Microsoft Netscape , Microsoft
,
. ? , Internet Explorer .
Microsoft ,
. , .
6. .
. . , - , , .
, .
, ( !). , . ,
, .
7. , . , . . .
. .
- , .
, . .
, ? ,
, . ,
, . , , - .
, .
.
, ...
, .

11

8. , ? , , , , . , , , .
,
.
,
.
, , . . , .
- , .
(, ). , , ,
. ,
, ,
. ? ,
.
. ,
.
, . . .
, "", "".
, .
"". ,
.
: "
?"
. -,
- , . , ,
. .
, .
, .
.
. , - .
, . .

i2_

, . Borland Delphi,
, . ,
. C++ .
. Borland Delphi, , . C++. C++,
Borland Delphi.
, .
.
- 6
. , . . , Microsoft
, , . ,
.
.
XML,
. ,
.
Microsoft ,
, . , .
Microsoft
( ),
. .
Microsoft?
: DAO, RDO, ODBC, ADO, ADO.NET, .
Microsoft - ,
.
.
, , a Microsoft ,
. DA0, DAO, ADO, ,
, , .
. MS Office
, ,
.

13

, Internet Explorer (
) 10 ,
. Microsoft , .
, ,
.
, , Microsoft,
. , , Windows MS SQL Server,
. , .

, , .
, ,
. , , Borland Delphi. C++ (
) .
Visual C++,

. , , Borland Delphi.

, ( C++) ASM ( ). ,
,
. , , .

, ,
, , . .
1962- ARPA (Advanced Research Projects Agency,
) J.C.R. Licklider .
. - ,

1_4_

. . ARPANET (Advanced Research Projects Agency


NETwork, ).
. ?

, . .
!!! ,
. . ,
, . ,
, , . .
-.
, 1965 1970 . 1969
ARPANET, UNIX,
.
70- ARPANET
. . ,
. ,
, 10 .
1970 .
, . ,
, ( ,
:)) .
, Bell
Technical Assistance Program
, . 1971
" " (Blue Box),
. 10 , . 1980 ,
, .
, , Apple Computers.
, " ".
1972 , ,

15

. .
1981 Defence Security Center (DSC, ).
.
16 1981
. , , .
,
.
1982
TCP/IP (Transmission Control Protocol/Internet Protocol).
, . TCP/IP DNS (Domain Name System,
), ,
.
1983 . ,
, , - 1985- .
1984 DNS .
, , "". 1988 "" , .
, Digital,
-"",
.
"" .
, .
,
. 7 % . . "" , .
, .
. 1988
.
, .
1990 , ARPANET ,
. .

16

1991 WEB-,
. -
-.

PGP (Pretty Good Privacy, " ), , E-mail.
1994 . ,
, , .
1995 , .
, . , ,
, .
, . ,
.
, ,
.

Windows
Windows 95, ,
. , ,
,
.
, Windows 98 2000,
. , , .
Linux , Windows XP , " " . , , .
.
"", ,
.
Internet Explorer, , .
, , , , .

Windows , , Windows XP, .

1.1. Internet Explorer


, , Internet Explorer
(IE). IE,
, , . ,

18

, ,
.
, , -
. , , , .
,
.
Windows XP Internet
Explorer 6.0,
.

1.1.1. IE
Windows . - Microsoft

GIF - AVI.

,
, .
? ,
90- . . 1.1
.
180x90 ,
(
, Internet
Explorer). ,
,
.

. 1.1.

Internet Explorer .
,
, .
(

Windows

19

), 26x26
. .
bmp.
Windows, .
Internet Explorer.
regedit.exe ( Start/Run /, regedit ).
(. . 1.2).
HKEYeLOCAL_MACHINE\SOFTWARE\Microsoft\InternetExpIorer\Toolbar.
File Edit Vjew Favorites

i j|| My Computer

{pj HKEY_CIASSES_ROOT
El HKEY_CURRENTJJSER
G HKEY_LOCAL_MACHINE

j
I

a (CJ HARDWARE

C J SAM
C J SECURITY

Name

j..Type
REG_S2
|^7833539-5... REG.BINARY
REG_BINARY
REG_S2
S]BrandBitmap
gJsmBrandBitmap
REG_SZ

__ ..:;.Data_ ,...__
(value not set)
00
00
e:\l.bmp
e:\Lbmp

j SOFTWARE
ffl CJ Adobe
\ fi CJ Borland
| ffl C07ft5Y
| ffi callas software gmbl
;
| ffl- j Classes
i Clients
| ; C j Gemplus
| I ffl CJ Intel
; C j Macromedia
;

iti CJ MAXSOFT-OCRON

;
\ S
:
I

C J MDMOptions
i Microsoft
(ji CJ -NETFramework
ffl C j Active Setup

! - ADs

ginary Value
QWORD Value
M.ulti-String Value
Expandable String Value

: . CJ Advanced INF S
!
+! CJ ALG
I IS C j AudioCompressii
CJ Bidlnterface
:

T
My Computer\HKEY_LOC AL_MACHINE\5OFT WARE\Mio osof t\Internet Explorer \Toolbar

. 1.2.

.

New/String Value / . , BrandBitmap
bmp-. SmBrandBitmap .
, Internet Explorer
.
.

| ile Edit tiew Favorites Iools Hep


l
H

i $\ \ ' > >.- @


1 Search '/Favorites if Meda
| Address] http:/www.cydsoft.com

Jll fil Go ! Ur*ks >>- j

CyD software

Products Buy Now Downloads Seruic* Support About Us

Best offer

'

CyD Postman a handy tool for keeping feedback from your


customers, its a mailing list manager, a simple and handy
address book, and a simple email program. With CyD

incredible low price of & - $59! This is a one time offer that ends midnight
June 10. S a v e $ 4 0
[More info about C Y D Postman!

[Purchase Now]

I My Computer

. 1.3.

.
,
(. . 1.3). - ,
.
, ,
Microsoft.

-, \Chapter1\IELogo
,
Internet Explorer.

1.1.2.
Internet Explorer
. .
,
.

Windows

21

BMP.
HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Toolbar. ,
BackBitmap, . . Internet Explorer,
-. . 1.4 Internet Explorer .
.
|1 about:blank - Flenov Internet Explorer
File Edit View Favorites lools Help
.5 Back -

p Search f? Favorites Media

Address )| about:blank

_
Ln
i ks *

Internet

Done

. 1.4. Internet Explorer

-, \Chapter1\IEBackground ,
.

1.1.3. IE
,
Microsoft.
- .
HKEY_CURRE]W_USER\Software\Microsoft\Inteniet 1\

22_

Main Window Title, .


Internet Explorer ( 5.5) .
, ,

.
,
EnableJVlyPicsJHoverbar, .

1.1.4. IE
.
,
Internet Explorer.
, .
,
, ,
. 1.5.
Restrictions

This operation has been cancelled due to restrictions in effect on this computer. Please contact your system
administrator.
OK
. 1.5. IE

Internet Explorer ,
HKEY_CURREOTJJSER\So
Explorer\
Restrictions. , .
New/Key. , HKEY_CURRENT_USER\Software\Policies\Microsoft,
Microsoft Internet
Explorer, Restrictions.
, NoBrowserClose
DWORD 1.
, . . .
, .

Windows

23

, , .
, :
;
(
HKEYj:URREmLUSER\So
Explorer\
Restrictions);
.
,
, , - .
reg.
. ,
Internet Explorer. , , . ,
.

reg-

\Chapter1\NoClose.reg.

-,

Itf.' Registry Editor


File Edit Ve
iw Favorites Hep
l

\ Search Assistant
D Shared
j Shared Tools
SJ C J Speech
S - | ] SystemCertificates
ffl p Wab
83 C j Web Service Providers
) CJ Windows
j til CurrentVersion
it! C l Shell
i & ShellNoRoam
& -CJ BagMRU
ffi C j Bags
I

i | Qj Wn
idows Hep
l

I Windows Media
: &-CJ Windows Media Tools
i i Windows NT
! ft--CJ Windows Script Host
Mirabilis
" Netscape
ffi Q j ODBC
ii C3 Policies
G j RealNetworks
it; _J RIT

Name
,
: :
^(Default)
@C: \ WINDO WS\ime\sptip. dll, -600
5^

.Type
REGJ5Z
REG_SZ
REG.SZ
REG_SZ
REG_SZ

p3
@C\W
:N
IDOWS\syse
tm32\cem
rt mc.
Q@C\W
:N
IDOWS\syse
tm32\compa.t
g}@C\:WN
IDOWS\syse
tm32\comres.REG_SZ
*$
j@C\:WN
IDOW5\syse
tm32\cyse
.xe-,lREG_SZ
|*3@C\:WN
IDOWS\syse
tm32S
I\Mu
d
,i.
g3@C\:WN
IDOWS\syse
tm32
cim
\l ge
r..REG_SZ
@C\:WN
IDOWS\syse
tm32\mprsnap.REG_SZ
|*Q@C\:WN
IDOWS\syse
tm32\mss
tce
..REG.SZ

@
jC\:WN
IDOWS\syse
tm32\mss
tmrn.REG.SZ
REG.SZ
p@
j C\:WN
IDOWS\syse
tm32\mys-d
,.llREG_SZ
.

|* C:\WINDOWS\system32\netshell.... REG.SZ
3@C:\WINDOWS\system32\netshell.... REG_SZ
REG.SZ
REG_SZ
REG_SZ
REG_SZ
REG.SZ
REG_SZ
REG_SZ
REG_SZ
REGJ5Z

@
|[Q
jC
\:W
N
IN
D
OO
W
S\S
sy\ssye
t5m
33
22
\S\S
H
EE
LL
LL
3
2
..

@
C
\
W
:
I
D
W
e
t
m
H
3
2
@
C
\\W
:W
N
IID
O
W
S
\\s
y
s
e
ttm
3
2
\\S
H
E
L
L
3
2
..
g
@
)
C
:
N
D
O
W
S
s
y
s
e
m
3
2
S
H
E
L
L
3
2
@
^g
j]@
C\C
:W
N
IN
D
O
W
SS
\sy\ssye
tse
m
33
22
\S
H
E
LLLL3
2
..
\
W
:
I
D
O
W
t
m
\
S
H
E
3
2
S
@
jC
:\W
W
N
IID
DO
OW
WS
\\syysse
m33
\s_tim
c.d
il.n

g
j?@
C
\: N
Ss
ttem
2s
t\2
ad
i.
i L _ _
l
My Compue
H
t\rKEY_CURRENTJJSER
5\o
w
tfa.e
rM
\cic
r1.6.
sW
o
\tfnido
ws
S
\hN
e
lloRo
am
M
\U
C
Iache
.

I.Data .; ._
(value not set)
Speech Recognit
Microsoft .NET Fi
Microsoft .NET Ff
Certification Autt
Program Compat
Component Serv
Configure Your S
Internet Informa
Terminal Server I
Routing and RenRemote Desktop
Remote Desktop:
Manage Your Ser
New Connection
Network Conned
Cluster Administr
Administrative Tc
Recycle Bin
My Computer
My Network Plac
My Documents
Printers and Fax>
Scanner and Can
Terminal Service:
'vice:>j

JLJ

24

1.1.5.
" " "",
- .
Windows
HKEY_CURREOTJJSER\So
, , ,
, Internet Explorer, .
.

1.2. OEM- Microsoft


- 1999 , OEM- (Original Equipment Manufacturer,
) Windows 98.
(Start/Control Panel/System
/ /), General ()
(OEM-), .
,
, . Windows ? ,
: Microsoft -,
. , .
,
, . . 1.7,
.
,
. .
oeminfo.ini Windows/System
( Windows/System32 Windows 2000/XP/2003). :
[general]
Manufacturer=Fleno Mikhail
Model=Pirated Edition
[OEMSpecific]
SerialNo=<12345>
OEM1=<01.01.00>
[Support Information]

25

Windows
Linel=I love Microsoft Windows XP
Line2=You must love it too
Line3=Just do it for me
Line4=My lovelly site http://www.cydsoft.com
Line5=Software For You
Line6=Best regards

System Properties

S
e
ysm
tco
M
ris:o
tfW
n
d
o
w
is
R
e
s
g
e
ttro
d
ikto:
N
e
o
b
69713
6-40-592892
4-5804
e
F
n
lto
M
k
h
i
l
a
i
P
a
r
e
i
d
E
o
i
d
n
t
i
M
e
o
l
b
i
n
I
e
t
R
(
l
)
C
e
o
r
l
n
R
(
)
C
P
U
4
2
0
.
G
H
z
2
4
.
0
G
H
z
5
0
4
M
B
o
f
R
A
M
Wmk . kI
O
K Cancel

Advanced
General

Automatic Updates
Computer Name

Remote
Hardware

Manufactured and supported by:

. 1.7.

general ,
-, :
Manufacturer ;
Model .
. 1.7, ,
Support Information. , oeminfo.ini
2 . 923

26

. . . 1.8.
JFleno Mikhail

QJ

I love Microsoft Windows XP


You must love it too
Just do it for me
My lovelly site http://www.cydsoft.com
Software For You
Best regards

jj

;:;;11]|
. 1.8.

support information ,
:
LineN=TeKCT,

N .
( ),
.
.

1.3.
. Windows 95 :
, , , ""
. .

inf. 1.1.

Windows

27

I 1.1.
[VERSION]
SIGNATURE="$CHICAGO$"
CLASS=SYSTEM
PROVIDER=%HORR%
SETUPCLASS=BASE
[CLASSINSTALL]
ADDREG=HORR
CLASSNAME="MOUSE PAD"
[MANUFACTURER]
%HORR%=HORR
[HORR]
Standart_Mouse_Pad, , , , %CLASSNAME%
[STRINGS]
HORR="Horrific Corporation"

, inf-,
.
. , ,
MOUSE PAD.

.
,
inf-.
Windows 9x, Windows 2000/XP . , Microsoft
- Windows :).

-, \Chapter1
mouse_pad.inf.

28

1.4. Windows
Windows ,
,
, - .
.
Microsoft Plus!,
, .
, .
,
, , .

, .

1.4.1.
,
,
.
Windows .
MS-DOS, .
Microsoft
, . 90- .
,
. ,
, ,
.
, Windows.
,
. -
"Designed For Windows", ,
. Visual C++, , . ActiveX ,
.

Windows

29

, 16
.

1.4.2.
ComCtl32.dll,
.
Windows XP , ,
, , .
Microsoft ,
.
, , , Windows XP
. ,
: . User32.dll ComCtl32.dll (
). , , .
ComCtl32.dll, . Windows 98 Windows 95 , Microsoft. ,
, , .
Windows 98,
Windows 2003 Server .
, , Windows 2000,
, . ,
. Services (),
Control Panel/Administrative Tools ( /). Themes, .
Windows, (. . 1.9).
, Themes,
Windows 9x/ME,
, .
(, WinBinds).
, , Themes.
(. 1.10) Startup type ( ) Automatic ().
.

30
% Services
File Action Ve
i w Hep
l
4 i i f @
i es (Local)
^ Servc
-

Ofcfxli
;

% Services (Local)
Themes
Stop the service
Restart the service
Description:
Provd
i es user expere
i nce theme
managemen .

\ Extended^ Standard /

Description J Status
i l Administrati.., Ao
l ws adm..
% Speca
Started
^SQLSERVERAGENT
% System Event Notifi...Montiors s... Started
% Task Schedue
lr
Enabe
l s a... Started
% TCP/P
I NetBO
I S Hel.P
..rovd
i es s... Started
Provides .,.
% Tee
l phony
Enables ...
% Telnet
% Termn
i al Servc
i es Allows user... Started
% Termn
i al Servc
i es S...Enables a...
% Uninterruptible Pow...Manages a...
% Upo
l ad Manager Manages t...
% Virtual Dsik Servc
i e Provides s...
% Visual Studo
i Analyz...Generates .,,
a...
<% Vou
lme Shadow CopManages
y
Enables Wi...
%WebClient
Manages
a... Started
%J Wn
idows Audo
i
% Wn
idows m
I age Ac.Provides im..
% Wn
idows Installer Adds, modi...
^Windows Managem.. Provides a ... Started
% Wn
idows Manaoem..Monitors all..

JjtartupType , 1 Log On As I
Local System
Manual
Local System
Automatic
Automatic
Local System
Local System
Automatic
Automatic
Local Service
Manual
Local System
Local Service
Disabled
Manual
Local System
Local System
Disabled
Manual
Manual
Manual
Manual
Manual
Disabled
Automatic
Disabled
Manual
Automatic
Manual

. 1.9. Themes,
Themes Properties (Local Computer)
General i Log On Recovery j Dependencies!
Service name: Themes
Display name:

Themes

Description'

IProvides user experience theme management.

Path to executable:
C:\wrND0WS\System32\svchost.exe -k netsvcs
Startup type:

'wW^llEfflll

! Service status: Started


Stop
I You can specify the start parameters that apply when you start the service
I from here.

OK

Cancel

. 1.10. Themes

Local Service
Local System
Local System
Local System
Local System
Local Service
Local System
Local Service
Local System
Local System
Local Svstem

Windows

31

1.4.3.
, : , . (,
.) ,
, 1.2.
| 1.2. , Visual Studio
| C++
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.vl" manifestVersion="l.0">
<assemblyldentity
versions "1.0.0.0"
processorArchitecture="X86"
name="Microsoft.Windows.ProgramName"
type="Win32"
/>
<description>Your app description here</description>
<dependency>
<dependen tAs s embly >
<assemblyIdentity
type="Win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="X86"
publicKeyToken="6595b64144ccfldf"
language="*"
/>
</dependentAs sembly>
</dependency>
</assembly>

XML- manifest,
, .manifest.
XML- assembiyidentity
:
version ;
processorArchitecture ,
, , 86. 64-
, IA64;

32

D name , ;
type , , Win32.
, (
description) (dependency) :
type , , Win32;
name ;
version ;
processorArchitecture , ;
pubiicKeyToken , ;

l a n g u a g e .

( )
. , . DLL, .
, , , XML- ,
.
- . . , Program.exe, c:\Program Files\CyD\, .
Program.exe.manifest. 1.2 .
, .
^

-, \Chapter1
universal.manifest,
.

1.5. Windows XP/2003


ComCtl32.dll, , . ,
, .

Windows

33

, .
http://www.themexp.org/.
, , ,
(. . 1.11).
3 ThemeXP > Home - Micro

t Explorer

Fe
li Edti #ew Favote
ris Toosl Hepl
; ^ p] 'i \ ^ Seac
rh , Favote
ris %* Med
ai
^ Back
Adde
rss %. hp
t/:wwwh
t.emexpo
.rg/

! popular

U (L)

RAVEMSHE
ILO
, - - ^- -' ,
search
Title

S
Pi

<C
^j Openig page hp
t/:wwwh
t,emexpo
,rg/,.

VI i * flY(VS)

Internet

. 1 . 1 1 . www/themexp.org ,


StyleXP TGTsoft,
http://www.tgtsoft.com/ (. . 1.12, IE ).
, , 19,95 .
styleBuilder,
. -

34

.
1 SoLLC {|

Ee
li dit Ve
iwFavoties
W
tp
|
II bftarch

QE^j

..

Ml*]

Favontes [*5' MeciaJ

VS.J, . W n

, 1 . , . . , , , 5 O4. , 1

j r s p h l c : n o d>- , '

. t,i

> -

U
, u

* *"

. 1.12. TGTsoft, styleXP

Tray
- . ,
StyleXP (. 1.13).
2.0 Release 3
.
( ), .
.
. , .

Windows

35

,
. ,
.
*\- Style XP - [Current Theme in Use;'Windows Classic*]
0 1
[X)|
Click to send feedback 1
(File Language tJep
l
i Style XP
Enable Style XP
Style X P B a c k g r o u n d
Youcan
use the default Style XP skin, or
: Select a choice You can enable and disable Style XP 'On the Flychoose
'
a color to use as the background.
'f from below...
with no reboot needed
[ Options ) Enable Style XP
Use Default Skin
Disable Style XP

I IIUlflt;b ; R u n at S t a r t u p
!; B
Vias
ys
les i You can keep Style XP running in your system tray',
cual
kgrouSntd
!

Logons i
Icons
j Boot Screens
| Transparency
Rotate
Register...
Help...
Hide
Exit

or if you prefer, you can enjoy Style XP without


using any system resources at all.

Use Solid Color

Pick...

T h e m e Apply Options
Select advanced options if you are having theme
apply probems or bitmap resource problems.

Run at Startup

ED Reapply Theme at Startup

Use no Resources

LJ Do not change resource bitmaps

(Disable Style XP

. 1.13. styleXP

1.5.1.
Options .
(Enable Style XP) (Disable
Style XP).
Run at Startup, .
, (,
). ,
. , Use no resources,
.
, Reapply Theme at Startup (
) Do not change resource bitmaps (He
). , . 2 , .

36

1.5.2.
Themes ,
. ,
, , , .

jfileLanguage Hep
l
Style XP
Themes
Select a choice

Themes incl
sounds,cun
521 advance4 2"1 Theme Parts:
Visual Style

Visual Styles
i rounds
Logons
Icons
Boot Screens
Transparency

Cc
il k to send feedback I

Eclipse
Gem
Vav
Pa nth erg
'

ctor, I TBSplit - * *
: option

W<Hfi'>1 HI
Watercolor Kiyonoi

IWatei

Gro.., T h e m e T o o l s :

Register..
Help...

Preview:

W i n d o w s Classic

Display Properties..

Apply Theme

Create N e w T h e m e ,

A d d a N e w Theme,.
D o w n l o a d a N e w Theme.

Reset t o XP Default

Delete S e l e c t e d T h e m e

Style XP - [Current T h e m e In U s e : w a t e r c o l o r Olive G r e e n ]

. 1.14.

. 1.14 . , .
Preview. Background, Preview ,
, Sound .
, Apply Theme.
, Add
a New Theme, Delete Selected Theme.

1.5.3.
Visual Styles , ,
.
, Windows.
( ).

Windows

37

Backgrounds .
StyleXP , ,

Windows.

1.5.4.
Logons , . . 1.15 .
,

StyleXP.
File Language Hep
l

Cc
il k to send feedback I
Preview:

Style XP
Logon Schemes:
l ome
Select a choice Select a new wec
Options
Visual Styles
Backgrounds

Transparency
Rotate
Register...
Help...

Logonlli
'

I Welcome Screen
E ! Fast User Switching
Virus Free:
vays Rebuild Exe
Original Strings
Logon Tools:
User Manager..
Search Paths,,

Reset to XP Default
Style XP - [Current Theme In Use:Watercolor Olive Green]

Apply Logon

Add a New Logon...


Download a New Logon..
Delete Selected Logon

. 1.15.

Boot Screens , Windows. , , (Boot


Screen) ,
boot.ini. , : boot.bkk.
Windows , .

38

. . boot.ini
:
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS=
"Windows XP (bootscreen)" /fastdetect /KERNEL=kernell.exe



. , Windows XP, SP1 (Service
Pack, ),
. , .
Style XP [Current Theme In lse:'Watercolor<Jhve tireen'1
Style XP

Boot Screen Preview:


C:\WINDOWS\resources.. APirati

Boot Screens:
Select a boot scree
.Bootscreen File:
0 Blank Palette

Visual Styles
Backgrounds

Clear Overlays
Boot Actions:
Edit Boot Timeout...

Boot Screens

Windows^
Ofretad edition

Convert .zip to .boots..


.Bootscreen info...

Author: swisshoy

Boot Tools:

Register.
Help...

Reset Kernel file,


Search Paths...
Reset Boot.ini file

Apply Boot Screen


Add a New Boot Screen...
Download a New Boot Screen..
Delete Selected Boot Screen

I Style XP [Current Theme In Use:Watercolor Olive Green]


. 1.16.

- , .
Reset Boot.ini file.
, , (, http://www.themexp.org) . Add a New Boot Screen
. StyleXP,
Apply Boot Screen.

Windows

,
, . ,
. , - , ,
.
, , .
, ,
.
, Demo Party
( ),
. ,
.

1.5.5. StyleXP
StyleXP,
, ? ,
. , uxtheme.dll.
, , , uxtheme.dll
( SP1), , .
TGTsoft Download
UxTheme Util. ()
uxtheme.dll,
StyleXP.
(,
), :
1. <F8>
.
2. Windows,
. 9,
Windows NTFS (New Technology File
System, ), Windows 9x,
NTFS.
3. Windows FAT (File Allocation Table,
), DOS- .

39

40

4. Windows XP,
, , DOS,
.
uxtheme.dll . . "Cancel", "".
CD, , .
? , ,
, , . , uxtheme.dll , Microsoft-. , ,
. . , - ,
.
Microsoft MS Plus, , , ,
uxtheme.dll.
Windows XP SP1, (, ).
http://downIoad.lightstarl.com/install/PatchXP-SPl.zip.

1.6.
. 1.5
styleBuilder TGTsoft. StyleXP
http://www.tgtsoft.com/. , .
: , . , , !!! . ,
. , , .
Windows XP .
Windows 2003 Server, , , styleBuilder -.
, ,
Windows 2003 . styleBuilder.exe
Compatibility ()
Windows XP (. . 1.17). ,
, -, - .

Windows

41

StyleBuHderlnstall.exe Properties
.General' Compatibility Security Summary;
If you have problems with this program and it worked correctly on
an earlier version of Windows, select the compatibility mode that
matches that earlier version.
r Compatibility mode
0 Run this program in compatibility mode for:

Settings
Run in 256 colors
Run in 640 x 480 screen resolution
Disable visual themes

User account privileges


Allow non-administrators to run this program
Learn more about program compatibility.

OK

Cancel

Apply

. 1.17. Windows XP

. ,
Apply, . , Test.
.
, (. 1.18). ,
. , ,
, , .
: Properties, Zoom
Colorize. - ( Blue\Values\General\Window\Caption),
. Colorize .
. -

42

Lock Brightness, Source Brightness Gamma Brightness,

. , Apply Colorization.
s
w loci':fertmriiHri;
U I X

H
o
m
e
a
d
s
t
R
e
a
d
y

] ResetnIavce
it D
sae
ibd
l jP
e
o
rA
vu
isRe
N
setextE
d
F
a
rmeCo
ap
n
b
lp
.ti.

t, T
sk
B
a
n
d
4
Ta
a
k
B
a
ro
B
a
c
k
g
r
uu
nd
B
o
o
ttm
Ba
ac
ck
kg
gro
ro
nd
dR
L
e
ft
u
n
g
in
' BB
a
c
k
g
o
r
u
n
d
T
o
p
S
n
inag
BB
arB
o
tm
I Se
tS
m
ae
rlo
e
te
m
g
B
a
R
rtfo
glp
ht
,T!oo
S
t
n
i
g
B
a
r
T
b
l
a
r
,
T
oco
p
tB
ilar
T
rra
k
T
e
e
V
e
lw
W
iow
:.tnd
Capo
tin :
ap
o
lto
r&
ze
nB
gT
e
ale
t!
C
C
l
s
uo
tm
np
D
a
i
o
l
g
F
a
rra
m
ee
B
tm
F
m
Lo
e
tft
F
r
a
m
e
R
g
lh
H
ep
lxB
u
to
r,
M
a
B
u
o
t
n
it M
M
a
x
C
e
p
oltu
no
D
C
s
B
tn
M
D
M
IlIole
nIe
B
u
o
tB
n
M
O
R
s
o
t
r
e
uo
tn j
M
niiC
Su
o
tp
n
M
n
a
o
i
t
n
R
eso
tC
B
u
o
tn
S
m
a
lre
la
a
p
o
itn
S
m
C
a
l
l
p
a
t
n
S
n
ro
lg
S
m
C
llm
o
lse
u
nTemt
Sm
Fa
lra
eB
B
o
o
ttm
S
m
a
F
l
r
a
m
e
L
e
t
f
Sm
F
a
lra
im
g
iht
S
ysB
u
o
tneR

bifff/. X,
TBButton TBSplit
:
1 |^!11

Reset Bnghn
i eu
DiockBiighinwi

" To Image Fte.


-'ToGkiphPile*

. 1.18. StyleBuilder


Edit Edit With
, ()
. ,
- .
, , File/Import .msstyles file (/ .msstyles
).
, Tools ()
Test System Style ( ). ,
Actions/Compile (/).
, Action/Compile and Apply
(/ ).
Zip,
. -

Windows

43

,
StyleBuilder. File Zip
.

, ,
.

1.7.
, Pirated Edition
Home Professional? , , , Microsoft.
,
(. 1.19). , , , ,
.

W i n d o w s

"'

P i r a t e d Edition

. 1.19. Windows XP Pirated Edition

, , -
, , , ,
. , , ,
.
, .
.

44

Windows, , , Windows XP, . Boot Editor.


http://members.rogers.com/userxp.
, ,
.
,
.
:
regsvr32.exe Axlmage.

, ActiveX.

, .
,
. , . BootEditor.exe
, . , ,
, .

Bitmaps Help

Cuirent Palette

liiilli

Retish
e.':

Load ;
Load Adv:

Load,pal
Save as .pal

|1111

Move

Andbmp

RefrhU-S] 1 Save j Save All j

:. 51
.2
.600Q
. ! S40H4O) -111 266b*j

Cuirent Bitmaps1 Palette

Refresh]

- H I

Test

) R

M o v e p t . b a r

tt 1.8.9,10.1112 loaded onfly,using cunert palette

. 1.20.

Windows
? Windows\system32\
ntoskrnl.exe. .
Boot Editor , . ,
, ,
,
. Boot Editor ntoskrnl.exe.
ntoskrnl.exe (
), . .
,
256 , .
. ,
, (
Windows). ,
(. . 1.5.5).
Windows ,
. ,
,
, .
.

1.8. Windows 9x WEB


Windows
"" " " WEB.
:
HTML- ( HTML-, WEB-)
, . ., /.
? Windows
WEB. ,
. " "
Tools/Folder options (/ ) View ()

.

46

wvleft.bmp (,
), HTML. htt-.
, . HTML,
, WEB , . ,
.
htt,
, Windows . .

1.9. -
Windows Media Player WMA
(Windows Media Audio) .
, . , ? , Windows Media
Player -.
:
HKEY__LOCAL^MACHINE\SOFTWARE\Microsoft\MediaPlayer\Settings\MP3
Encoding. ,
(
New/Key). DWORD:
1. HighRate 2ee00h () 192000 ().
2. MediumHighRate lf400h 128000.
3. MediumRate - faOOh 64000.
4. LowRate dacOh 56000.
?
, .
192000. HighRate 256000, .
, , Windows
Media Player Tools/Options (/). , Copy music ( )
(. 1.21). Format ():
Audio Quality ( )
.

Windows

47

Options
Plug-ins | Privacy 1 Security | File Types ] DVD | Network J
Player
Copy Music j Devices j Performance ] Media Library
Specify where music is stored and change copy settings.
Copy music to this location
C;\Documents and Settings\Administrator\My
I Documents\My Music

Change,,.
File Name,.,

Copy settings
Format:

Learn more about


MP3 formats

\ V Copy CD when inserted


I P Eject CD when copying is completed
j Audio quality:
Smallest " ~ ~ " ' 7 " 1 . " ' " 7
"'"""""" Best
J j Quality
Size
[
- Uses about 86 MB per CD (192 Kbps)
Compare Windows Media Audio to other formats
Cancel

OK

Apply

Help

. 1.21. CD

-, \Chapter1\ ..
, . .

Windows
Windows ,
, . , ,
.
,
{. . 1.51.7),
. , , , .

Restorator, . Windows XP .
, , .
Windows 2000/XP, . Windows 9x
, , .

2.1. Windows
,
. , .
Windows .
:
;
;
.

50

,
. , ,
.
. , , ( , ).
,
. ,
.
:
Bitmap , ;
Menu , ,
;
Dialog ;
Stringtable ,
;
Accelerator - ;
Cursor ;
Icon , ;
Versioninfo . ,
:).
. ,
(dll), - (scr),
(res) .
- ,
. , :
Borland Resource Workshop Borland;
Microsoft Visual C++ .
, , , . , Visual C++
,
. Borland Delphi

Windows

51

, . .
. , .

2.2. Restorator
, , .
Restorator,
http://www.bome.com/Restorator/.
, , . .
,
,
. .
, , .
. 2.1 Restorator.
:
Resource tree
;
Resource view ;
File browser ( ),
.
.
- ,
. dialer.exe,
Windows. :,
C:\Program Files\Windows NT\dialer.exe ( C:\Windows\dialer.exe).

Restorator File/Open (/).


.
dialer.exe. Resource tree.
, (
) (*) . . 2.2.
,
, , .

52
Restorator 2004
Fjle Resources

Viewer

Tools

tlelp
3
Resource Viewer | File Browser |

T h i s p a n e Is called t h e
R e s o u r c e

T r e e

I t displays a l l y o u r exe-files a s
a tree of resources.
This p a n e is called t h e

Drag ai e x e - f i l e f r o m W i n d o w s
Explorer o r t h e File Browser ( a t

R e s o u r c e

b o t t o m r i g h t ) I n t o t h i s area t o

V i e w e r

o p e n it.

I t displays t h e c o n t e n t s o f t h e

Then y o u c a n explore t h e
resources b y clicking i t e m s in
the tree.

t h e Resource Tree.

r e s o u r c e s w h i c h y o u select In

A t a n y t i m e y o u c a n press t h e
right m o u s e b u t t o n t o g e t a
context m e n u with t h e most
important functions.

-Select Res Viewer [F9] or Fie Browser [FtO]

. 2 . 1 . Restorator

File Resources Ve
j wer Toosl Hep
l
Res Viewer: \t
Resource Viewer I Fife Browser |

'-" -2j Menu


j 4 2
- :'_j Dialog
: ; n 200
! ;iJ300
!
!
j
:
;
:
-i
:
:

2jMenu

Size:

j j Dialog
SJ String
Accelerator'
^Version
UJ24

p.. 4oo
; 5oo
\ 700
| \J 900
j n 1300
| j sue
U String
; p 57
:geo

im

j i
;
-; _ J
: !

97
j j 98
Accelerator
Q 117

zl
. 2.2. Restorator

Windows

53

2.2.1.
. 2.2 Menu
118. , Resource Viewer ,
Viewer/Edit mode, ,
, (. 2.3).
E8
.e Rpsourcei Ve
iwer lools rjelp
eTre
dialer.exe
GJ M e n u

QM

p Strmg
QJ Accelerator
CD Icon
Hi Version

Resource Viewer | File Browser j


118

MENU

POPUP

"Fil"

{
MENUITEM " E i x i t " , 1000
>
POPUP " E d i t "
{
MENUITEM "Cut\tCtrl+X", 1001
MENUITEM "Copy\tCtrl+C", 1002
MENUITEM "Paste\tCtrl+V", 1003
MENUITEM "DeleteNtDel", 1004
MENUITEM SEPARATOR
MENUITEM "Speed Dial...", 1005
}
POPUP "Tools"
{
MENUITEM "Connect Using...", 1006
MENUITEM "Dialing Properties...", 1008
>
'
POPUP "Help"
MENUITEM "Help Topics", 1010
MENUITEM SEPARATOR
}
/ menuID MENU
/ <
// [MENUITEM "itemText" [, id [, type]]]
// [MENUITEM SEPARATOR]
7
[POPUP
"itemText" [, id [, type]]]
/
{ <popupBody> >
/ >

Menu\ 118\Eng6sh (United States)

. 2..

2.1 ( ) Dialer .
, .
| 2.1.
118 MENU
POPUP "&File"
MENUITEM "E&xit", 1000

54

POPUP "fcEdit"
{
MENUITEM "Cu&t\tCtrl+X", 1001
MENUITEM "&Copy\tCtrl+C", 1002
MENUITEM "&Paste\tCtrl+V", 1003
MENUITEM "ScDeleteXtDel", 1004
MENUITEM SEPARATOR
MENUITEM "&Speed Dial.. . ", 1005
>
POPUP "&Tools"
{
MENUITEM "&Connect Using...", 1006
MENUITEM "^Dialing Properties...", 1008
}
POPUP "&Help"
{
MENUITEM "ScHelp Topics", 1010
MENUITEM "&What's This?", 1015
MENUITEM SEPARATOR
MENUITEM "&About Phone Dialer", 1011

2.1,
"". , , - . (//), . ,
, , ,
.
, ( 118). MENU.
{}:
1 1 8 MENU
//

Windows

55

C/C++,
.
, , .
POPUP, ,
.
"&". , <Alt> ,
, .
, File :
POPUP "ScFile"

,
:
MENUITEM "",

, , . . "&". , "\t"
"" . ,
<Ctrl>+<X> "Ctrl+X".
(),
. ,
, .
, .
, :
MENUITEM "Cu&tAtCtrl+X", 1001
MENUITEM "&Copy\tCtrl+C", 1002
MENUITEM "&Paste\tCtrl+V",

1003

, :
MENUITEM "Cu&t\tCtrl+X", 1002
MENUITEM "<5cCopy\tCtrl+C" , 1003
MENUITEM "&Paste\tCtrl+V",

1001

( cut)
,
() , (paste) . , .
, . - , .

56

:
MENUITEM SEPARATOR

, , . , . <F7>.

.

2.2.2.
.
, . Dialog
200.
(. 2.4).
HSRestorator 2004 - E:\dialer.exe
File Resources Ve
iwer Toosl Hep
l
Q ' 0 0 ? # : Res Viewer:
Resource Tree
Resource Ve
i wer 1 File Browser)
i-^jj da
ie
l r.exe
;
L j Menu
- _ J Dialog

;
I i ] 400
I p 500
! ; lj 700

U 900
! ! -LJ 1300
\ : -y 3115
Strin
it! CJ 9
tti p Acceelrator
lcon
ffit Cll

N.umber to dial:
i

r Speed diald

Uial
ABC

DEF !
3 1

GHI
4

JKL
5

MNO |

PRS
7

TUV
8

W>OC \
9 :i

0.

L J Version
m ; _ ] 24

Dialog\200\English (United States)

[Dialog

iPhone Dialer -194 x 168 - 33 controls

il open fik

. 2.4.

Viewer/Edit
Mode. 200 2.2.

Windows

57

j 2.2.
200 DIALOG 50, 50, 194, 168
STYLE DS_SETFONT | DS_3DLOOK | WS_MINIMIZEBOX | WS_CAPTION | WS_SYSMENU
MENU 118
CAPTION "Phone Dialer"
FONT 8, "MS Shell Dig"
{
CONTROL "", 224, "STATIC", SS_ETCHEDHORZ | WS_DISABLED, 0, 0, 194, 1
LTEXT "&Nuinber to dial:", 223, 7, 7, 90, 10
COMBOBOX 201, 7, 21, 90, 104, CBS_DROPDOWN | CBS_AUTOHSCROLL | CBS_SORT
WS_VSCROLL | WS_GROUP
DEFPUSHBUTTON "&Dial", 1, 7, 38, 90, 14, WS_DISABLED | WS_GROUP
PUSHBUTTON "\nl", 202, 6, 62, 27, 20, BS_CENTER | BS_MULTILINE |
NOT WS_TABSTOP
PUSHBUTTON "ABC\n2", 203, 37, 62, 27, 20, BS_CENTER | BS_MULTILINE |
NOT WS_TABSTOP
PUSHBUTTON "DEF\n3", 204, 69, 62, 27, 20, BS_MULTILINE | NOT WS_TABSTOP
PUSHBUTTON "GHI\n4", 205, 6, 86, 27, 20, BS_CENTER | BS_MULTILINE |
NOT WS_TABSTOP
PUSHBUTTON "JKL\n5", 206, 37, 86, 27, 20, BS_CENTER | -BS_MULTILINE |
NOT WS_TABSTOP
PUSHBUTTON " M N O \ n 6 \ 2 0 7 ,

69,

86,

27,

20,

BS_CENTER | BS_MULTILINE |

NOT WS__TABSTOP
PUSHBUTTON llPRS\n7"/ 208, 6, 110, 27, 20, BS_CENTER | BS_MULTILINE |
NOT WS_TABSTOP
PUSHBUTTON "TUVXne11, 209, 37, 110, 27, 20, BS_CENTER | BS_MULTILINE |
NOT WS_TABSTOP
PUSHBUTTON "WXY\n9", 210, 69, 110, 27, 20, BS_CENTER | BS_MULTILINE |
NOT WS__TABSTOP
PUSHBUTTON n \n*", 212, 6, 134, 27, 20, BS_CENTER | BS_MULTILINE |
NOT WS_TABSTOP
PUSHBUTTON "\nO", 211, 37, 134, 27, 20, BS_CENTER | BS_MULTILINE |
NOT WS_TABSTOP
PUSHBUTTON "\n#", 213, 69, 134, 27, 20, BS_CENTER | BS_MULTILINE |
NOT WS_TABSTOP
GROUPBOX "Speed dial", 222, 103, 7, 84, 154
LTEXT "&1", 225, 109, 24, 7, 10
3 . 923

58
PUSHBUTTON "", 214, 117, 21, 63, 14, BS_LEFT | WS_GROUP
LTEXT " & 2 \ 226, 109, 41, 7, 10
PUSHBUTTON "", 215, 117, 38, 63, 14, BS_LEFT | WS_GROUP
LTEXT "&3", 227, 109, 58, 7, 10
PUSHBUTTON

11

", 216, 117, 55, 63, 14, BS_LEFT | WS_GROUP

LTEXT "&4", 228, 109, 75, 7, 10


PUSHBUTTON "", 217, 117, 72, 63, 14, BS_LEFT | WS_GROUP
LTEXT "&5", 229, 109, 92, 7, 10
PUSHBUTTON "", 218, 117, 89, 63, 14, BS_LEFT | WS_GROUP
LTEXT "&6", 230, 109, 109, 7 , 10
11

", 219, 117, 106 , 63, 14, BS_LEFT | WS_GROUP


LTEXT "&7", 231, 109, 126, 7 / 10
PUSHBUTTON

PUSHBUTTON "", 220, 117, 123 , 63, 14, BS_LEFT | WS_GROUP


LTEXT "&8", 232, 109, 143, 7 , 10
PUSHBUTTON "", 221, 117, 140 , 63, 14, BS_LEFT I WS GROUP

:
n DIALOG , , w, h
STYLE
MENU
CAPTION ""
FONT , " "
{
//

:
;
;
;
w ;
h .
(STYLE). ,
MENU .
CAPTION " ". (/) , . , .

Windows

59

,
.
( Viewer/Default view mode),
( Viewer/Edit mode).

. ,
( ).
. . ,
.
Resource Workshop,
(. . 2.3).

. , , . :
ICON n , i , , , w, h

:
.
. , Dialer
1 116, .
;
i , . .
,
(, ),

;
;
;
w ;
h .

-
. :
LTEXT " " ,

i , , , w, h

:
( );

60

i - , .
, .
(, ),
;
;
;
. w ;
h .

- .
(, ),
. :
PUSHBUTTON "", i, , , w, h,

:
( );
i - , . , ;
;
;
w ;
h - ;
, , "|". :
;

BS_CENTER

BS_LEFT

BS_RIGHT

BS_MJLTILINE

WS_DISABLED

WS_GROUP

;
;
;

;
.


. -,

Windows

61

.
, , 225:
200 DIALOG 50, 50, 225, 168

:
CAPTION "Horrific Dialer"


Horrific Dialer.

. :
FONT 8, "MS Shell Dig"
{
ICON 1, 0, 195, 5, 18, 20
LTEXT "Copyright:

Horrific",

223, 40, 1, 90, 10

//
}

<F7>. CLASS, TO
. .
.
I Rest or at or 2004 - Dialog Preview (press F7 to update)
Copyright: Horrific
Number to dial:

Speed dial
1

Dial

I;

2
3

,...

i'
j i

4
5
6
7
8

. 2 . 5 .

_62

(. 2.5),
<F8>, , <Ctrl>+<S>, .

2.2.3.

String (. . 2.2) .
, , . (
Viewer/Edit Mode). 57 , :
STRINGTABLE
{
901,

"Dialer"

902, "Phone Dialer"


}

STRINGTABLE.
, :
,

""

, . , . . . ,
.
( Accelerator) ,
. - ,
, .
Dialer 117. , :
214: "Alt+1"
215: "Alt+2"
216: "Alt+3"

1003: "Shift+Tns"
1001: "Ctrl+X"

. ,
,
.

Windows

63

2.2.4.
( Icon)
( Bitmap). , .
Restorator ,
, .
.
Extract/Extract as " ". . File Browser, .
,
,
Assign/Assign to. .
Bitmap , Windows
Paint. Windows ,
:
;
.
, , - .
, . - , ,
.

2.3.
, . . 2.1
, Borland Resource Workshop
(BRW),
Borland, , Borland C++ Borland Pascal.

, . BRW , ,
Windows (Borland C++ Visual C++).
, , Borland Delphi,
.

64
Open project
File
Flle

Path

iVPe

I EXE application

OK

f:\progra~1 \disasm
| Directories

Files
w32dsm89.exe

CD..
CD <arp
CD wpjfiles


D
B E
( F
BG
B N

Tancel |

Help

. 2.6.

\Resource Workshop - dialer.exe


4k &' Edit Resource View Window Help

118
DA
ILOG
200
300
400
500
700
900
1300
9115
STRN
I GTABLE
901
940
945
977
1013
1545
1552
ACCELERATORS
117
C
I ON
1
116
VERSO
I NN
I FO
1
24
Ready
. 2.7.

$1

Windows

65

BRW
. , .
Borland Resource Workshop ,
. ,
File/Open project (/ ).
, . 2.6. Windows, .
File type ( ) , , .

(. . 2.7): , , .

, , . Dialer , .

2.3.1.
118,
, . 2.8.

File Edti Resource Menu Ve


iw Wnidow Hep
l
MENU: 118

"SMSI!

Item type:
Popup

Item text:

\ > item
\ > Segal a tor

Item help:
i Item Id:
||1OO1

TEST MENU: 116


Fil Edit lools Help

1001

,i

... ;.

v.-;::

Initial itate:

B.reak before:

, Enabled
Disabled
!
Grayed

No break
Menu bar break
Menu break
;
Help break

Checked

Key:

Ketype:
|

ASCII

Virtual key

Modifiers:
Alt
Shift
Control
j/j Invert menu item

i l l

^
118 iiiiii
POPUP "cF"li

!!

MENUITEM ""
End Popup
POPUP ".Edit"
MENUITEM "OAtMCtrl+X"
MENUITEM "&Copii\tDrl+C"
MENUITEM "cPasteXtDrl+V"
MENUITEM "1(\
MENUITEM SEPARATOR
MENUITEM ".Speed Dial..."
End Popup
POPUP "8Jools"
MENUITEM ".Connect Using..."
MENUITEM ".Dialing Properties..."
End Popup
POPIJP "S.UaU"

Ready
. 2 . 8 .

66^

, .
1. ( ).
2. , . ,
, , Restorator (. . 2.2).
3. .

, .
.
? Item
Text. , . Item Help , .
Item id, , .

2.3.2.
DIALOG, (. 2.9). ( )
.
.
. , Tools.
, (
) , .

,
(. 2.10). Caption,
. :
,
.
. 2.10 Control type . , ,
.
- , - ,
. , . - ( )
, .
, .

Windows

67

.dit- Resource Control Align Opto


i ns Wnidow

Menu
Speed dial-

dumber to dial:

1
I
1

ABC
2

DEF I
3 I

GHI
4

JKL
5

MNO I

PRS
7

TUV
8

wxr I
9
I

HT,

2
4

...I

J
Ready

jModify

. 2.9.

Static style
Control type

Caption

Left text

Text

IPfflTffi?RflfflTilRB

Number

Left text - No Wrap


Centered text

Control w

Right text

223

Simple text
White rectangle

Attributes
I _;j Tab stop

Group

I Disabled

j Border

Gray rectangle

Visible

Black rectangle
White frame
Gray frame
I

Black frame
Icon

. 2.10.

68

2.3.3.
STRINGTABLE (. 2.7) ,
Restorator String (. 2.2). , ,
:
1. ID Source.
2. ID Value.
3. String.
, .
,
. ( )
.

2.3.4.
ICON BITMAP,
. . . 1 ICON,
: ,
(32x32 16x16). , .
File gdit Resource Ve
i w Text Opto
i ns Icon Wn
idow |Hep
i

| Pen x: 34 y: 32 R: 255 G: 255 B: 255 Palette Index: -1


. 2.11.

Windows

69

, .
,
. , .
, 8 . ,
,
256 . , ,
(. 2.12), Bitmap/Size and attributes (/ ).
Set bitmap attributes
Size
Compression
Width in pixels 330
None
Height in pixels 536
RLE 4
RLE 8
I yf\ Stretch current bitmap
olors
2 Color
| 16 Color
! 256 Color

Format
' Windows
OS/2

Warning! Use RLE compression with great


care. Some display drivers do not support RLE
expansion.

. 2 . 1 2 .

. , (
).
(Compression Format)
.

2.4. Windows XP
. 1 Windows XP
.

70

( StyleBuilder ), .
StyleXP . .
c:\Windows\Resources\Themes. . , , Windows 9x. theme
.
\Luna . ... " " luna.msstyles?
- Windows . . ,
( Windows Commander
<F3>). , "MZ".
, -, . :
"This program cannot be run in DOS mode.", , luna.msstyles
-, , ,
.
, DLL- .
Borland Resource Workshop. , BRW
" ", . .
Restorator, " ". , ,
Files of type All files.
msstyles , .
. .
. 2.13, luna.msstyles.
, , , .
Bitmap . . 2.14 , , CheckBox ().
, , CheckBox.
Bitmap BLUE_CHECKBOX13.bmp,
BLUE_CHECKBOX16.bmp, BLUE__CHECKBOX25.bmp. .

Extraxt/Extract as BLUE_CHECKBOX13.bmp. File Browser .

Windows

71

ator 2004 - D:\WN


I DOWS\Re
File Resources Ve
i wer lools |jelp

\\
R esource Viewer Fie rowser I

) LJ COLORNAMES

COMBODATA
SI-ia FILERESNAMES
-gj MINDEPTH
Si ORIGFILENAMES
l i - ] PACKTHEMJ/ERSION
.+J ^ J SIZENAMES
TEXT FILE
-PJ Bitmap
g j String

Stzei
!pCOLORNAMES
pCOMBODATA
pFILERESNAM...
ipjMINDEPTH
ilJORIGFILENA...
pPACKTHEM_...
Q j SIZENAMES
QTEXTFILE
GlJ Bitmap
Q] String

|1 open file

. 2.13. luna.msstyles
r 2004 - D:\WIND0WS\Resource*\Theme*\Luna\luna.m*5tyles
ile Resources

Viewer

lools

jjelp

Res Viewer: I
Resource Tree

Resource Viewer File Browser

BLUE_BALLOONCL_J
1 BLUE_BUTTON_Br
BLUE_CAPTIONBU
BLUE.CHECKBOXV
BLUE.CHECKBOX-

Bitmap\BHJE_CHECKBOX25_BMP\Russidn jBitmap

25 x 300 - 32 bit colors

jl open file

. 2.14. CheckBox

72

. Assign to BLUE_CHECKBOX13.bmp.

.
, luna.msstyles ( File/Save as)
:\\1\8\88\18. luna.msstyles, ,
. ,
Themes ()
Theme () Browse ().
.
. 2.15 Windows Commander, CheckBox, ,
, .
Configuration
Packer
Zip packer
Tabstops
Color i Misc.
Layout j Operation | Display [j Language | Edit/View Font
; Screen layout ~*~ ~
\ E Show button bar

I Show drive buttons


00 Show two drive button bars (fixed width, above file windows)
Q0 Flat icons
00 Show drive combobox
00 Show current directory
E Show]abstop header
E Show status bar
E Show command Jine
E Show function key buttons
E Flat

user

interface (button bar configured separately)

OK

Cancel

Help

. 2 . 1 5 . Windows Commander
CheckBox

Windows

73

, ,
.
,
. , ,
.
, StyieXP. luna.msstyles . , , , , X.msstyles. .

2.5.
, . Windows XP,
, , .
Windows 9x , , Windows NT/2000 , <Ctrl>+<Alt>+<Del>.
UDfxj

B&Restorator 2004 - E:\logonui.exe


File Resources Ve
iwer Toosl (Hep
l

Resouc
re Te
re

? $!

@;ffli

Resouc
re V
eiwer | Fe
li Bo
rwser |

III
il

- logonui.exe
-fp UIFILE
- Bitmap

| |
i | \J 102
| 103
| I
104
;

105

p 10G
p 107
108


no
U111
LJ 1 1 2

m
114
LJ119
U
LJ '2i
\J122
rp123
yi24
U 125
[ J 126

27

;Bitrnap\ 100\Russian

Bitmap

J219 x 207 - 24 bit colors

. 2.16. logonui.exe

! 1 open file

74

, ( )
logonui.exe. ,
. , , , , .
, .
: . ,
, logonui.exe.
, Restorator ,
(. 2.16).

2.5.1.
Bitmap .
100 . ,
, , 219x207. , , . , .
, BMP-. ,
,
. 1024x768, .
logonui.exe
23 . , .
100,
Assign/Assign to. bmp .
, , . . - , . ,
:
102 ;
103 ;
104 (103);
105 ;
106 ;

Windows

75

107 ;
108 ;
109 ;
110 ;
111 ;
112 ;
113 ;
114 ;
119 ;
121 ;
122 ;
123 ;
124 ;
125 , ;
126 , ;
127, 128 .
, ,
, .
, , . ,
, (. 2.5.3). .

2.5.2.
String .
, . , (. .2.2.3 2.3.3),
, , , , . , "",
" " T m will be back". 1 11 13.

2.5.3.
.
UIFILE ( . 2.16). 1000.

76

, UIFILE, . , , ,
. , XML.
, , ( ) .
Windows XP,
,
.
,
. .
1 -,
, \Chapter2 uifile.txt.
HTML XML-, . UIFILE .
:
<style resid=framess>
element
{
background: argb(0,0,0,0);
}
element [id=atom(contentcontainer)]
{
background: rcbmp(100,6,#FF00FF,0,Q,1,0);
}
button
{
background: rcbmp(112,6,#FF00FF,0, 0,1, 0) ;
borderthickness: rect(8,8,0,8);
}
</style>

:
<style resid=framess>

. ,
s t y l e (). .
resid ( ), '
framess.
,
framess, , .
, .

Windows

77

</ >.
<styie>, , </styie>.
.
, . ,
logonui.exe ( ):
1. Background () .
:
background: argb(0,0,0,0) ;.
Alpha, Red, Green, Blue (, , , ).
:
background: argb(0,255,0,0) ;
background: argb(0,0,255, 0) ;
background: argb(0,0,0,255) ;
background: argb(0,2 55,255,0) .

Edit Colors

Basic colors:

Cuso
tm coo
lrs:


r
1
Cancel

Hue:
Sat:f240*
Solid Lum: J180

Red:fi28"
Green: JiS"
Blue: [255

Add to Custom Colors

. 2.17.
, ?
, .

78

. Paint. Colors/Edit colors (/ ) Define custom colors ( ). , . 2.17.


, .
.
2. Foreground , . ,
.
3. Bordercoior ( ), Background.
4. Fontstyle .
, ,
fontstyle: underline;.

5. Fontweight .
, fontweight: bold;.
6. cursor .
, cursor:
Hand;.

,
. , Windows . ,
, , , .
, :
<styie resid=framess> ( );
<styie resid=toppaneiss> ,
;
<styie resid=bottompaneiss> , ;
<styie resid=ief tpaneiss> ;
<styie resid=rightpaneiss> ;

< s t y l e r e s i d = h o t a c c o u n t l i s t s s > , -


. 2.3.

Windows
..

.....

._

79
........

,._

_____j

2.3.
<logonframe resid=main id=atom(frame) sheet=styleref(framess) layout=
borderlayout() layoutpos=client>
<element id=atom(contentcontainer) layout=borderlayout() layoutpos=
client>
<element id=atom(toppanel) sheet=styleref(toppanelss) layout=
borderlayout() layoutpos=top height=80rp>
<element id=atom(logoarea) layout=verticalflowlayout(0,3,3,2)>
<element id=atorn(product) contentalign=topright padding=
rect(10rp,Orp,20rp,20rp)/>
<element id=atom(help) contentalign=wrapright width=lrp padding=
rect(Orp,Orp,40rp,Orp)/>
x
</element>
<element id=atom(msgarea) layout=verticalflowlayout(0,0,0,2) >
<element layout=filllayout() width=384rp>
<element id=atom(welcomeshadow) content=rcstr(7)/>
<element id=atom(welcome) content=rcstr(7)/>
</element>
</element>
<element id=atom(divider) layoutpos=bottom height=2rp/>
</element>
<element id=atom(bottompanel) sheet=styleref(bottompanelss) layout=
borderlayout() layoutpos=bottom>
<element id=atom(divider) layoutpos=top height=2rp/>
<element id=atorn (options) layout=borderlayout() layoutpos=client>
//
<element layout=borderlayout() layoutpos=left>
<button id=atorn(power) layout=borderlayout() layoutpos=
top accessible=true accRole=43 accName=rcstr(11)>
<element layoutpos=left content=rcbmp(107,3,-1,26rp,26rp,0,0) />
<element,id=atom(label) layoutpos=client margin=rect(2rp,0,0,0)/>
</button>
<button id=atom(undock) layout=borderlayout() layoutpos=
top margin=rect(0,2rp,0,0) accessible=true accRole=43 accName=rcstr(14)>
<element layoutpos=left content=rcbmp(108,3,-1,26rp,26rp,0,0)/>
<element id=atom(label) layoutpos=client margin=rect(2rp,0,0,0)/>
</button>

80_

2
</element>
<element id=atcm(instruct) layoutpos=right content=rcstr(25) width=325rp/>

</element>
</element>
<element id=atom(contentcontainerO) layout=flowlayout(1,3,2,3) layoutpos=
client content=argb(0,0,0,0)>
<element id=atom(leftpanel) sheet=styleref(leftpanelss) layoutpos=client>
</element>
<element id=atom(rightpanel) sheet=styleref(rightpanelss) layout=
borderlayout() layoutpos=left width=920rp>
<element id=atom(divider) layoutpos=left width=lrp/>
<scrollviewer id=atom(scroller) sheet=styleref(scroller) layoutpos=
client xscrollable=false margin=rect(Orp,Orp,Orp,Orp)>
<selector id=atom(accountlist) sheet=styleref(accountlistss) layout=
verticalflowlayout(0,3,3,2)/>
I
</scrollviewer>
</element>
</element>
</element>
</logonframe>
<logonaccount resid=accountitem id=atom(accountitem) layout=filllayout()
accessible=true accRole=43>
<element id=atom(userpanelayer) layout=borderlayout() height=80rp>
<element id=atom(userpane) layout=borderlayout() layoutpos=top>
<eleinent id=atorn(pictureframe) layout=flowlayout(0,2,2) layoutpos=left width=58rp height=58rp>
<element id=atom(picture) />
</element>
<element id=atom(username) layoutpos=top/>
<button id=atom(statusO) class="status" layoutpos=none/>
<button id=atom(statusl) class="status" layoutpos=none/>
</element>
</element>
</logonaccount>
<element resid=passwordpanel id=atom(passwordpanelayer)
sheet=styleref(passwordpaness) layout=borderlayout() height=80rp>
<element layout=borderlayout() layoutpos=bottom>

Windows

81

<edit id=atorn(password) layoutpos=left width=163rp/>


<element id=atom(keyboard) layoutpos=left/>
<button id=atom(go) layoutpos=left accessible=true accRole=
43 accName= rcstr(100)/>
<button id=atom(info) layoutpos=left accessible=true accRole=
43 accName= rcstr(13)/>
</element>
<element id=atom(instruct) layoutpos=bottom content=rcstr(6)/>
</element>

2.3 r c s t r ( x x ) , .
? r c s t r ,
XX . , . ,
.
, , .
rcbmp (). ,
, ,
( Bitmap ), .
layoutpos.
. ,
:
//
<element layout=borderlayout() layoutpos=left>

, 2.3 . l e f t
(iayoutpos=ief t). right, .
, " ": l e f t right top bottom (
). l e f t bottom . , Windows
, - ,
.

2.6.
, . Restorator. .

&

, ntoskrnl.exe, Windows\system32\. , ,
, .
<F8>,
,
. ,
Windows !!!
. , ,
kernell.exe, . -
, .
, ntoskrnl.exe ( kernell.exe)
Restorator. . 1 Bitmap. . "Bitmap image is not valid".
, , (
).
Extract/Extract as "l.bmp".
, . . "
" .
Adobe Photoshop,
. .
Image/Mode/Color Table. . . , . . 2.18
System (Windows). , - , . !!!
Microsoft , !!! ,
!!!
( ), PAL. Adobe Photoshop
ACT.
-, \Chapter2 boot.pal
boot.act,
.
Adobe Photoshop Image/
Mode/Color Table, Load.
boot.act.
.

Windows

83

. 2.18. System (Windows)

, .
? . , .
Bitmap:
2 ,
( );
3 ;
4 , ;
5 , ;
6 , Windows;
7 , Windows;
8 9 ;

84

10 Professional;
11 -Home Edition;
12 Embedded;
13 , ;
14 15 ,
;
17 -Tablet PC Edition;
18 Freestyle.
(~~


(. . 2.3.4).

, . kernell.exe Windows/System32, boot.ini :.


.
. , :
1. Properties (). System properties ( ).
2. Advanced ().
Settings () Startup and Recovery ( ).
3. " edit the startup options file manually, click Edit" ( ) Edit
() .
,
:
[boot loader]
timeout=0
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Windows XP" /fastdetect

, [operating systems]
. , , . ,
, .

Windows

85

, Windows XP (
). , .
:
/KERNEL=kernell.exe/

kernell.exe , . ,
,
, .
, " Timeout (
), 30. . .
Timeout , .
. . .

J^

ntoskrnl.exe Windows XP, Windows 2000, , ,


.

2.7. Shell Style


, \Windows\
Resources\Themes. , , shellstyle.dll. ?
"" (, Restorator).
, shellstyle.dll
. Bitmap
Html. ,
Windows Media Player, CSS-,
HTML-, .
, msstyles-.
msstyles shellstyle.dll, . , :
1. shellstyle.dll
msstyles-.
.

86

2. msstyles "" ,
TEXTFILE THEMES__INI.
Extract
As/Extract As THEMESJNI.res.raw (
Restorator).
3. THEMES_INI,res.raw .
, shellstyle.dll .
, shellstyle.dll , .
, shellstyle.dll- .
Windows Media Player,
- , . Bitmap
. ,
, .

2.8.
Windows explorer.exe.
, , . , . Restorator
explorer.exe, \Windows.
Bitmap. .
157169. ,

Start (). . ? , . 2.19.

<& documents

L J ' Settings

W
^

Search
"

4$) Help and Support

Run...
j

Shut Down...

|/ art \-J ? H

-1

. 2 . 1 9 . Windows Start

12:44

Windows

87

? .
explorer.exe , Windows
(Home Edition, Professional Server) .
Windows XP 170 171
.
Start () Properties
(). Start menu ( "") . , . - . , , ,
. 2.20.

Taskbar and Start Menu Properties


Taskbar Start Menu

Customize..

(* gi tart
Select this menu style for easy access to the
Internet, e-mail, and your favorite programs.
Classic Start menu
Select this option to use the menu style from
earlier versions of Windows.

OK

Cancel

. 2 . 2 0 .

145 153
. , ,
.
Menu ,

88

( Start (), , . .).


. ,
" ", " " . . ,
. ,
.
Dialogs ,
Start ().
, , , , . , 205 , . 2.20. . 2.21,
, .
,
.
Taskbar and Start Menu Properties
Taskbar Start Menu
Start menu
Select this menu style for easy access to the
Internet, e-mail, and your favorite programs.
Passic S tart

Customize...

Select this option to use the menu style from


earlier versions of Windows.

i i mi

H a c k e d

*Sfei

nm M u m m

by

OK

Horrific

Cancel

Apply

. 2 . 2 1 .

String
. , .
, .

Windows

89

. , "Windows " "Windows


" " Windows-".
.
Accelerators (,
). ,
- .
Icon , .
, , , . .

Restorator. , , . ,
, Restorator.
explorer.exe, ,
.

.
explorer.exe.
, ,
.
explorer.exe , , . ,
explorer.exe .

^2

2.9.
, , shell32.dll.
, , . shell32.dll Windows\System32
( NT WinNt\System32).
Restorator, .
, .
4 . 923

90

2.9.1.AVI

AVI.
, . AVI- , ,
. CyD Animation Studio GIF Studio Pro
(www.cydsoft.com). -, \Soft. GIF-,
AVI. , AVI GIF-, .
. ,
. , .
, ,

. ,
Microsoft RLE.

2.9.2.
Bitmap .
( 204228),
( 240247),
. 1,
Windows. 14351 ,
Windows XP.
Windows . , Windows 2000
14351,
( ).

2.9.3.
Menu . ,
197 , . ,
:
Copy here () "";
Move here () " ";
Create Shortcut ( ) " ";
Cancel () " " " ".

Windows

91

, ,
, , .

2.9.4.
Dialog ,
Windows. , 1003 , Start/Run (/).
, .
. "%",
( s). - . , "&Current user (%s)"
"%" "s" ,
.

2.9.5.
String , , , . 5.
65, :
"Are you sure you want to delete it?" ( ?).
- -.
" , ?".
, , ,
, /
. ( Windows Commander),
Windows,
, .

2.9.6.
, Icon.
, .
Windows XP ,
StyleXP Linux,
.
.
, Apple,
Windows Mac OS X. , Linux , ,
Windows.
, .

92_

2.10.
.

. , .
, .

( !).
, , . . .
Restorator, , . ,
.
, , ,
. ( ).
, , .
.


.
,
.
.
, , ,
. . , . , .
, ,
.
.
, , . , - , - .
.
, , :
;
, , ;
:).

, .
, .

94

!!! ,
, . , .

3.1.
.
- ( ).
,
. (), , ,
. , .
, , ,
. , (- ), ,
.
, .
, .
.
, . ,
, . ,
(
), . , , .
. ,
. - (, ).
,
.
,
. , ,
. .
- PS/2- . , . , , ,
. , , .
Asus, Abit, Gigabyte,
. , -

95

, , .
, .
. .
(Start/Control Panel/Mouse
/ /). (. 3.1). Switch primary and
secondary buttons ( ).
. , .

Mouse Properties
Buttons j Pointers | Pointer Options | Hardware |
utton configuration
' ~ Switch primary and secondary buttons]
j Select this check box to make the button on the
| right the one you use for primary functions such
| as selecting and dragging.

~ Double-click speed
Double-click the folder to test your setting. If the
folder does not open or close, try using a slower
setting.
Speed:

Fast

Slow

-ClickLock
Turn on ClickLock
Enables you to highlight or drag without holding down the mouse
button. To set, briefly press the mouse button. To release, click the
mouse button again.

OK

Cancel

. . 1 .

Double-click speed ( )
Fast (). . , ,
, .

96

3.2.
"" .

,
,
. , .

3.2.1.
. -
,
. -. ,
. ,
, . .
, , ,
, .
,
, . ,
, .
, PCSpeaker, . ,
.
.
, . audio-
, ""
.

3.2.2.
, 3 .
.
"" ( ),
. , .
4 , (2 4). , , "" . , 1 2
.

97

,
. , .

3.2.3.
,
. -,
. ,
( ). , ,
, . ,
( ) . . CD-ROM,
.
. , , ,
. ,
:).

3.2.4.
. -
, . " " :),
.
. -
. , .
, ,
. .
, .
, .

. , , , (, ).
,
.
Reset .
, ,
, ,
Power On.

98

, CD-ROM, . , Intel,
. ,
.
, ,
- ( AMD
). , :).

3.2.5.

. LG FLATRON 795FT. , ,
. ,
, . , ,
, , . ,
.

.
, .
,
. ,
. ,
.
, . .
, ,
, . , ,
.
. , , 8
, . ,
(- 2
, ) , , . .
, ,
.

99

,
. , . .
, .

3.2.6.
! , . .
, :).
-
.
, . , :). , . , ,
, . ,
-. , . ? . , .
, , , ,
. , , .
- :). ,
?
, . , , ,
, , .

3.2.7.
,
, PDF-
. , .
? , -
, , . , . ,
, . -

100

, . , CD-ROM (USB, LPT . .).


, .

. . , :). , , . , ...
.
, . ,
,
.

3.2.8.
Reset :).
? . , , . - , , , ,
.
,
. ,
. .
. ,
. ,
, , .
, , ,
.
, .

3.3.
( ), , ,
Visual C++.
, , ,
NET SEND ( ).
, . :
NET SEND

101

, . NT-
(Windows NT/2000/XP/2003), , . . Windows 98 .
, , . , , , .
, Delphi.
, :
var
i:Integer;
begin
for i:=0 to 10 do
begin
WinExec('NET SEND 10.1.1.15 1 ,
SW_SHOW);
sleep(lOO);
end;
end;

C++ :
for

(int

i=0;

i<10;

WinExec("NET SEND 192.168.1.121 You will be cry by me",


SW_SHOW);
Sleep(lOOO);
}

C++ 10 ,
1000 192.168.1.121.
,
, . . , .
- ,
. , . .
, ,
. , 220 , , . Start/Control Panel/Administrative tools/Services (/ / / ).
(. . 3.2).

102

Action Ve
i w Hep
l
1 0 >

% Servc
ies (Loca)l

% Services (Local)
Messenger
Stop, the servc
ie
Restart the servc
ie

! Status
Name /
Started
%HTTP SSL
% Human Interface D..
Started
ie
%I
IS Admni Servc
%IMAPI CD-Burning Manages .
| Description

Thisservic...

Enables g e . . .

Enables thi...

% Indexing Service
Indexes ...
D
en
sscm
rp
i to
isn:net send and Ae
Tra
l rter servc
i%e Internet Connectio... Provides ...
messages between ce
il nts and serve%Intersite
rs.
Enables me...
Messaging
Thsi servc
i e is not rea
l ted to Wn
idows
Services
Provides e...
M
ee
r.ssa
Ifgtehsisw
sU
ineotisbestotrp
,%IPSEC
A
e
lers
tese
rng
m
iervc
ap
nesd
m
i%KerberosKeyDlstrl.,.
t
ed.
On domain ...
If this servc
i e is dsiabe
l d, any servc
ie%s License Logging
Monitors a...
that explicitly depend on it wil fail to
% Logical Disk Manager Detects an,..
start.
% Logical Disk Manage,.. Configures...

Started

Started

% Message Queuing

Provides a... Started

% Microsoft Search
%Microsoft Software..,
%MSSQLSERVER
%MSSQL5erverADHel...
%Net Logon
%NetMeeting Remote,.
% Network Connections
% Network DDE
% Network DDE DSDM
% Network Location A.,,
%NTLM Security Sup...
%NVIDIA Driver Help...

Creates ful...
Manages s...

Started
Started

Maintains a...
Enables an...
Manages o... Started
Provides .,.
Manages D...
Collects an... Started
Provides s... Started

| Startup Type
Manual
Disabled
Automatic
Disabled
Disabled
Disabled
Disabled
Automatic
Disabled
Disabled
Automatic
Manual
Automatic

(log On As ,..
Local System
Local System
Local System
Local System
Local System
Local System
Local System
Local System
Local System
Networks...
Local System
Local System
Local System

Automatic
Manual
Automatic
Manual
Manual
Disabled
Manual
Disabled
Disabled
Manual
Manual
Automatic

Local System
Local System
Local System
Local System
Local System
Local System
Local System
Local System
Local System
Local System
Local System
Local System

,(.>, 1 <

. .

."

'>

v.

\ExtendedX, Standard/
. .2.

Messenger, ,
(. 3.3). Stop
() , Startup type
( ) Disabled (),
.
.
, .
.
Messenger Microsoft
, .
Windows Server 2003. , .
, "", .
,

103

.
.
, .
, .
. , . .
, .
I Messenger Properties (Local Computer)
General j Log On j Recovery j Dependencies |
Service name: Messenger
Display Dame:

|~

Description:

[Transmits net send and Alerter service messages


jbetween clients and servers. This service is not

j*J
w\

Path to executable:
[CAWIND0WS\system32\svchost.exe-knetsvcs
Startup typg:

| Automatic

Service status:

Started

Start

Stop

jj

_ .

Re

You can specify the start parameters that apply when you start the service
from here.

OK

Cancel

. 3.3.

, .
- ,
, .
.
,
, NET SEND.

104

,
. , ( ).
:
.
- , ,
;
,
. CyD Careful
Observer (www.cydsoft.com),
, ;
IP- ,
. ,
. .
, . ,
.
,
.
My Computer ( ) Properties (). Computer Name ( )
Change (). .
, , . -
" " " ". , , , , .
, .
Windows 3 ( ). , IP-, . .
-
,
.
, . . 5.5
,
, , .
.
,
. :).

105

3.4. -
Windows. , , , .

3.4.1.
,
( <Print Screen>).
BMP-.
, .
.
. ,
, ,
, .

3.4.2.
.

Properties (). Shortcut ()
Target (),
.
.
, ,
. ,
Change Icon ( ). .
, . .
Microsoft Word , , . , ,
.

3.4.3.
, . , , Windows. ,

106

. , ?
.
. 11. , .
1111.
, , :).

, . Windows 98 :, . ,
:, .
:
\\\$

IP- . , . , .
, ,
( C:\Windows\Desktop Windows 9x C:\Documents and Settings\
All Users\Desktop Windows 2000/XP) ,
. -. , .
,
( - ), ,
, .
-
bat. :
md hi
md format
md
md delete

-
.
, , . , format, , delete. -!!!

107

3.4.4. Windows 9x
.
, ,
.
.
. Windows Windows 2000 Professional. - Windows 98. - Pentium III 32 . ,
512 . ,
. " " " ".
, , .
, Windows 9x. : win.com, .
C:\Windows\win.com
.
, , , Windows 2000 . , ,
, .
win.com
, - .

3.4.5.
-, \Chapter2,
IE.exe. . Internet Explorer,
. , .
Internet Explorer
, , IE
Windows.
,
"" IE :).

108

, :
, ;
;
Borland Delphi
.
, (background) .
Delphi Borderstyle bsNone,
Timage .
, .

- Internet Explorer, Delphi, \Chapter2\IEDelphiSource.

3.4.6.
Windows , . Start/All programs/Accessories/System tools/Scheduled Tasks
(/ /// ).
, , . 3.4.

Scheduled Tasks
! File

Edit

View

Favorites

Tools

Search

Advanced

Help

. Folders j (HV

Address j J3 Scheduled Tasks


Name *
- Add Scheduled Task j

\ Next Run Tm
i e | Last Run Tm
ie

j Schedue
l

Other Places
Q> Control Panel
: ] Q My Documents
1 ! j My Network Places

Details

1
1 objects

. .4.

109

Add Scheduled Task (


), Open (),
. ,
Next ().
, , - Next. .
, .
. . , .
:).

3.4.7. IE
. 1 , Internet Explorer.
. , , . , , . ,
Internet Explorer . ,

3.5.
(. . 2),
,
.
. , , . ,
, ,
.
. , , -
, .
, - . ,
, , , .

3.5.1. W i n d o w s Total C o m m a n d e r

. , Delphi (
) .

110

, ,
( , )
. ,
WCMD_ENG .
, (,
WCMD_RUS) : mnu,
Ing.
MNU . :
POPUP "&"
MENUITEM " &...", cm_SetAttrib
MENUITEM "&...\tALT+F5", cm_PackFiles
MENUITEM "&...\tALT+F9", cm_UnpackFiles

END_POPUP

, .
, , ,
. , . , .
,
.
.
,
.
,
, , , . ,
. ,
, .
, .
,
.
WCMD_RUS.LNG. , ,
Windows Total Commander.
:
, . :
" !" " ";

111

" %i (,) :" "/


%i (,) :";
, . .
, .
, , . , .
, .

3.5.2. Windows
. 1 , Windows. ,
. - ,
.
, ,
.
(check BOX) (Radio Button) -
(. . 3.5).
Configuration
Display
Font
Color
Tabstops
Folder Tabs
Language
Operation
Edit/View
Copy/Delete
FTP
Packer
Zip packer
Misc.

- Screen layout
Show button bar
Show drive buttons
Show two drive button bars (fixed width, above file windows)
Flat icons
@ Show drive combobox
Show directory tabs
Show current directory
Show buttons for history list and hotlist
Show tabstop header
Show status bar
Show command line
Show function key buttons
Flat user interface (button bar configured separately)

OK

Cancel

Help

, . 5 . CheckBox RadioButton

112

, ,
. , ,
:). - , , .

. , , . .
. . 3.6, Windows Total Comander, , . Windows.

Configuration
Display
Font
Color
Tabstops
Folder Tabs
Language
Operation
Edit/View
Copy/Delete
FTP
Packer
Zip packer
Misc.

" Screen layout


- -
Show button bar
Show drive buttons
Show two drive button bars (fixed width, above file windows)
Flat icons
Show drive combobox
Show directory tabs
Show current directory
Show buttons for history list and hotlist
Show tabstop header
Show status bar
Show command line
Show function key buttons
Flat user interface (button bar configured separately)

OK

Cancel

Help

. 3 . 6 .

Windows , . ,
, . - .

113


- , . .
( ,
), , ,
,
. , , .
.
, ,
v i s i b l e false ,
. ,
.
Restorator ,
, . , Visual C++, , .
, ,
.

, , . ,
.

. 2.8 explorer.exe , . , , .
, . ,
.
, ,
, . ,
.
, .
,
. , "! !!!" " !!!". .
explorer.exe,
, .

114

:, ,
explorer.exe. , Windows . explorer.exe Windows XP
Windows 9 2000.

, , . , ,
:).

, .

, . -,
.

3.6.
,
. .
. :
1. My computer ( ) Manage ().
(. 3.8). ,
.
2. Computer Management/System tools/Local
Users and Groups/Users ( / / /).
.
3.
New User ( ). , . ,
, . , User must change password at next logon (
).
4. , Create ().
.
5. My computer ( ) Manage (). Computer management ( )

115

Connect to another computer ( ). , . 3.8.


, , .
Computer Management
File

Action

View

Window

Help

Computer Management (Local)


< System Tools
--{jj Event Viewer
Shared Folders
B- g J Local Users and Groups
- p Users
' i i J Groups
Performance Logs and Alerts;
Device Manager
Storage
Removable Storage
Disk Defragmenter
S| Disk Management
Services and Applications

Full Name
Name
| Descrp
i to
in
J Administrator
Built-in account for admn
i si tern
i g th
J Guest
Built-in account for guest access to
|U
l SR^NOTEB.. Internet Guest Account Built-in account for anonymous ace
JW
l AM_NOTE. Launch IS Process AccountBuilt-in account for Internet Inform
^g SUPPORT_38,. CN=Mci rosoft Corporation... Thsi is a vendors' account for the H

JjJb.

iL

. .7.
Select Computer
Select the computer you want this snap-in to manage.
r~ This snap-in will always manage:
| <*" Local computer: (the computer this console is running on)
I (* Another computer:

||

Browse..

OK

Cancel

. .8.

, , . 3.7, .

116

,
. .
,
CD-ROM.
Computer Management/Storage/Removable storage/

Libraries ( / / /
).
CD-ROM.
Inject (). CD-ROM,
. , CD-ROM . .
.
, . ,
.
,
, , .

3.7.
. , - .
,
" C++ " [1] (Hackish C++
Pranks & Tricks) " Delphi " [2].
,
. .
RJL Software (www.rjlsoftware.com).
,
. http://www.ijlsoftware.com/
software/entertainment/.
. , ,
. ,
<Ctrl>+<Alt>+<Del>. Windows 2000/XP/2003,
Windows . Task Manager ( ),
Windows Task Manager ( Windows).
Process ()
. End Process ( ).
RJL Software. , ,
.

117

, , RJL Software:
Avoid ,
.
;
Click Start 45 ;
Cursor Fun
, ;

MS Office ;
Fake format . , ;
Fake delete - .
- Fake format, Fake
delete. , (
- );
Fake start menu Windows,
( );
Headache - .
, <Alt>+<F4>;
Open/Close CD CD-ROM,
;
Rotate .
, , ,
. , <Alt>+<F4>;
ShowHide Desktop ;
Time traveler 30 .
Floppy madness. ,
, ,
. ,
" ".
, ,
setup (Fioppy.exe setup).
:
-. - , .
.

118

, !!!
, ?
, .
RJL Software - , . ,
, .
RJL Software . Dewa Soft
Key Panic. - , 70 . ( , , ). ,
"", , .
http://dewasoft.com/Software/KeyPanic/
KeyPanic.html. ($10).
, , -. , .
, - . , , , ,
Hackish C++ Pranks&Tricks. -
, .

3.8.
, . , horrific@vr-online.ru.
:).
, . , , .
, .
, ,
. , .
. - , .
, :).


.
.
Windows, .
on-line , .

.
,
.
,
. .

4.1.
. , ,
,
. , , 10 %. ? . , .

, .
90 %. - .
,
.
, ,
.

120

, ,
. .
. WEB, , .
, , , , . , .

(www.kaspersky.com)
(. 4.1).
. , ,
, ,
.
File

dit

View

Favorites

0Back *

lools

* . ! * ! *

Search

Favorites ** Media

^1 hctp./jwww.kaspersky.com/

Products
E-Store
Threats
Vriuses
Hackers
Spam
Servc
ies
Downo
lads
Partners
About Us
Viruslist.com
Virus Encyco
lpeda
i
Cae
lndar
News
.1
' 1 Forurn

PREMIER PROTECTION AGAINST


VIRUSES, HACKERS A N D S P A M
code green:
virus <teth/rty is normal

FOR HOME USERS


FOR SMALL AND MEDIUM BUSINESS
FOR CORPORATE CUSTOMERS

.Total Emai! Protection


Kaspecsky Anti-Virus
.
Personal 5.0
[ Next Generation Solution

NEW

ONLINE VIRUS SCANNER

8 12| Kasperskv Labs - respondn


ig e
08 04 Kasperskv Ant-iVrius 5.0-100% efectvi e, s;
Vrius Bue
l tn
i
08 03 virus TOP Twenyt for Juyl 2004
? 24 Kasperskv Labs presents new qeneratipn
protection for PDAs

Troian.SvmbOS.Mosauit.a

> Backdoor.WinCE.Brador.a
Win32 Henkv.Rotten.1403

: Internet

. 4 . 1 .

, , , .
, ,

, , ,
.
, ,
, .
.
, , , - , .
, . , ( ),
. .

4.1.1.
, (. . 2.1).
, .
,
, . ,
,
.
.
, . .
.
, ,
2000 ,
MS DOS. , . , ,
. , ,
,
, .
, , , . .
. ,
,
.
5 . 923

122

, 2000 .
, , , BBS (Bulletin
Board System, ),
. , , . , , , ,
.
?
. MS DOS autoexec.bat. , . ,
. .
.
, . Windows
, .
, , .
.
,
.
Windows, , ,
, ,
(DLL, Dynamic-Link Library). .
, ,
,
,
.
, -,
,
DLL. ,
. , .
. Microsoft

Visual Basic.
MS Office. ,

123

. .
,
, ,
MS Office. , Microsoft Word
Microsoft Outlook,
.
, .

. , , ,
. , (
) , .
. . , ,
-. , , ,

4.1.2. ?
, .
, 6 .
5 .
MS DOS (
). , BBS . , . , , ,
.
, , .
. ,
. . .
90 % . , ,
, ,
- .

124


, ,
.
The Bat (http://www.ritlabs.com),
VB ( Visual Basic,
) VBScript. VB,
,
. , The Bat ,
, , .
- , . ,
Linux , .
, . , Windows .
, .
, .
, WEB-
, , ,
.
HTTP, TCP/IP.
, , , . .
, . , , . ,
. ,
, .
, ,
. .


, . Microsoft. ,

/25

. ,
.
, . Microsoft
.

. , ,
:
- , - , - . . ,
, , .
, - , .
Windows
, Microsoft. , , . Microsoft . ,
. , , .
, .
, ,
. .
E-mail ,
. ,
( ). .

,
!!! , ,
. , , .

. , "
", .


, , ,

126

. ,
.
, ,
? ,
JPG, GIF, BMP, - WAV, MP3, AVI . ,
. .
.
Windows Agent,
-.
, ,
. Windows 9x/NT/2000
. ,

j ) |

;
_ l j
j
]


0
0 " "

[7J
0 (*

. 4.2.

127

,
. . , update.jpg.exe, , update.jpg. ,
, ,
.
,
. (Start/Settings/Control Panel //
) Folder Options ( ).
View (). , . 4.2. Hide extensions for known file
types ( ).


, WEB. - ( ,
Internet Explorer) ,
, .
. , .

, .
, . ,
. .
,
: . .. ,
- .
-.
,
. , , , , .

E-mail
4 : , , . , 6 .
, , -

128

. ,
. ,
, .
, . . ,
, .
, E-mail
. , .
.
,
, , . (, ), .

URL-
,
. ,
. ,
:

Dear SunTrust valued member.
Due to concerns, for the safety and integrity of the Internet Banking community we have
issued this warning message.
It has come to our attention that your account information needs to be updated due toinactive accounts, frauds and spoof reports. If you could please take 5-10 minutes out of your
online experience and renew your records you will not run into any future problems with
the online service. However, failure to update your records will result in account deletation.
Once you have updated your account records your online banking account will not be interrupted and will continue as normal.
Please follow the link below and renew your account information.
https://www2.suntaist.com//cgi_w/cfm/personal/account_access/account_access.cfm
SunTrust Internet Banking
, -
. WEB-,
. URL, , ,
. - www2.suntrust.com

129

IP- http://211.202.3.208. , , , .
, URL. www2.santrust.com
- . ,
. IP-,
, -, , , ( ).

. , . , . , support@provider.com.
, , provader.com ( 5 )
E-mail support@provader.com.
, .
, 1995
, , .
, , , , - .
,
.
, ,
.
, .
,
,
.
, - .

4.1.3. ,
, . . ,
( . 4.1.2),
.
, , ,

130

, , .
.

. .,


, .
, , . . (Start/Settings/Control Panel
// ) Folder Options

( ). , . 4.2. View () Show


hidden files and folders ( ).
PIF- . -, :,
ntdetect.com. sys, bin, ini bat
.
bat , , . .
autoexec.bat.
, . .

,
.
( ), (\Windows,
\Windows\system, \Windows\system32) ,
. , . Windows 9x/XP/2003
msconfig ( Windows 2000 ),
, .
, Start/Run (/)
msconfig.exe. ,
, . Startup ().
, , . 4.3.

131

\Jj System Configuration Utility


General SYSTEM.INI WIN.INI BOOT.INI Services Startup
Startup Item
0 igfxtray
0 avpcc
0 NeroCheck
0 EngUtil
0 DrgToDsc

! Command
Location
D:\WINDOWS\System... HKLM\SOFT WARE\Microsof t\ Windows\Current Ver.,
"e:\ProgramFiles\Kas... HKLM\SOFT W ARE\Microsof t\ Windows\Current Ver.,
D:\WINDOWS\system... HKLM\SOFT WARE\Microsof t\ Windows\Current Ver.,
"D:\Program Files\Com... HKLM\SOFT W ARE\Microsoft\ Windows\Curr ent Ver.,
"E:\Program File*\Roxi... HKLM\5OFTWARE\MicrQSQft\Windows\CurrentVer.,

0 ctfmon
D:\WINDOWS\System...
0 ABBYY Lingvo 6.0 L... E:\PROGRA~1\ABBYY...
0 Acrobat Assistant
E:\PROGRA~l\Adobe...
0

Adobe Gamma Loader D:\PROGRA~...

HKCU\SOFTWARE\Microsoft\Windows\CurrentVer...
Common Startup
Common Startup
Common Startup

Disable All
OK

. 4.3. msconfig

, , .
, - ,
Windows . -
.
.
:
1. Startup item ( )
. , .
2. Command () , , .
3. Location () .
, .
, .
, , , ( ),
. .
. 4.3 ,
. "". , .
.

132

, .
:
Common startup ( )
// (Start/Programs/Startup). ;
, regedit.
mscoiifig,
.
:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run;
HKEY_CURRENT_USER\So^
a HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run.
BHCll

* Registry Editor
File Edit View Favorites Help

j.

;
M

! Type
REG_SZ
REG_52
REG_SZ
REG_SZ
REG_SZ

abp
j .oxo
iDragToDsic REG_SZ
QRoxo
i Engn
i eUtily REG_SZ

ffj D Applets
j j j Name
,
!
+ CJ Control Panel
. (Default)
+ CJ Controls Folder
!Q A V P C C
1 1
M j CSCSettings
QlgPxTray
>: _3 DateTime
^]NeroFilterCheck
t. -M| Dynamic Directc
+: CJ Explorer
:
. ;
.,:'.".'\ Extensions

;
;
[ ' r g l Group Policy

D H323TSP
ffl S | Hints
+ M j Installer
M
] Internet Settinc
1 Q IPConfTSP

; 1
M
| \ ; :
i |
; ::
;
i | .
j i M
1 ; ; ;
\

* ;
\

;
^

\
i

\
\

...j..pata. I......:.:.. .: :..: ; :


(vau
l e not set)
"e:\Program Fe
lis\Kaspersky Lab\Kaspersky Ant-iVrius
D: \ WN
I DOW5\Sy stem32\g
i f xtray. exe
D: \W
N
IDOWS\system32\NeroCheck. exe
d:\wn
i dows\y.exe
"E:\Program Fe
lis\Roxo
i \Easy CD Creator 6\DragToD:i
"D:\Program Fe
lis\Common Fe
lis\Roxo
i Shared\Syster

) Q j MediaContentlr

' CJ ModuleUsage ; ;
+; C-J MS-DOS Emulat :

:
M j NetCache
j
; ffl ; ZJ NIS
;
C l OptimalLayout J
; & M j policies
M j Reliability

CJ RunOnce
' CJ RunOnceEx
* CJ Setup

^i

My Computer \HKEY_LOCArMACHINE\SOFTWAR E\Microsofl:\Winciows\CurrentVersion\Run'

. 4.4.

,
, . 4.4. , msconfig (pnutils .).
, . Windows 9x
system.ini win.ini.

133

msconfig .
msconfig ,
. ,
, . ,
- , ,
- .
, ,
. :
1. <Ctrl>+<Alt>+<Del>. ,
.
Task Manager ( ).
.
2. (. 4.5) Processes ().
3. End Process ( ).
Windows Task Manager
File Options View Help
Applications Processes Performance ) Networking j Users j
Image Name
IWINW6RD.EXE

taskmgr.exe
mspaint.exe
wmiprvse.exe
svchost.exe
sqlmangr.exe
thebat.exe
svchost.exe
slserv.exe
WinCinemaMgr.exe
svchost.exe
inetinfo,exe
acrotray.exe
TOTALCMD.EXE
alg.exe
spoolsv.exe
igfxtray.exe
DrgToDsc.exe
agentsvr.exe
1 vAnP.nl". ftYfi

User Name
Administrator
Administrator
Administrator
SYSTEM
SYSTEM
Administrator
Administrator
SYSTEM
SYSTEM
Administrator
LOCAL SERVICE
SYSTEM
Administrator
Administrator
LOCAL SERVICE
SYSTEM
Administrator
Administrator
Administrator

Show processes Prom all users

{Processes: 35

|CPU Usage: 0%

j CPU j Mem Usage j *


6o"
21 830
3 736
!
00
7 908
00
4 324
!
00
5 180
00
4 480
00
13 332
00
3 824
00
1 052
00
2 528
00
1 224
00
10 328
00
2212
00
8 036
00
3 552
00
7 016
00
3 528
00
4 580
00
4 076
00
(
nn
1 98

End Process
iComrnit Charge: 152M / 1234M

. 4 . 5 .

134

,
.
. , , . Internat32.exe
. ,
. , . Internat.exe, ,
Internat32, .
,
, . scanbisk.exe.
. scandisk.exe
, , "( ".
. .
, "" ,
, , . , , ,
.

Windows 2000/XP/2003 ().


, , .
Windows,
.

- .
, , , , .

. ,
, , .
Services ().
Start/Control Panel/Administrative tools/

135

Services (// //).


, . 4.6.

Fe
j aco
tin $ewHep
l

0 @. *

>

Name
% Auo
tma
cit Updae
ts
%
C
o
m
p
u
e
t
r
B
o
r
w
s
%C
ry
p
o
tgraC
pe
h
cn
itServcieesr
Descri
Noti
fiesptiosn:
elected users and computers of D
H
C
P
i
l
administrative alerts. If the service is %
% Dsib
triuted Fe
li Syse
tm
stopped, programs that use
t reed,
ceivaeny % D
s
i
b
t
r
i
u
t
e
d
L
n
i
k
T
r
a
cknig ..
tadmi
hem,nisIftrati
thivse saleervrts
icewi
isl dinsoabl
SntC
ilg
nt
services that explicitly depend on it wi%
l%
t D
EN
ve
Le
o
fail to start,
%F
TP
P
b
sih
lniS
gupp
S
%
H
e
plAd
am
nu
d
oe
rtrvcie
%
I
S
n
i
S
e
r
v
c
i
e
<
%
n
IjE
teC
rnetSC
n
oitn Frie.
%
P
IS
ero
vc
in
e
sec
%
L
o
g
c
i
a
l
D
s
i
k
%
^MP
e
sg
seng
e
rd PalyManager
u
l
a
n
%
rtectted
SpoS
o
e
^%
PrP
om
o
tlrP
ragc
eedure Cal (...
R
e
m
o
e
t
% Remo
e
t Rro
eg
sitry

% Servcies (Loca)l

I Description

Alerter
Stop the service
Restart the service

Secondary Logon
% Security Accounts Manage
^Server
% Shell Hardware Detection
%SmartLinkService
% System Event Notification
% Task Scheduler
% TCP/IP NetBIOS Helper
^Themes
% Windows Audio
^Windows Management I...

. ,

Enables the download and installation of critica... Started


Maintains an updated list of computers on the ... Started
Provides three management services: Catalog ... Started
Registers and updates IP addresses and DNS r... Started
Integrates disparate file shares into a single, 1... Started
Enables client programs to track linked files tha... Started
Resolves and caches Domain Name System (D... Started
Enables event log messages issued by Window,.. Started
Enables this server to be a File Transfer Protoc... Started
Enables Help and Support Center to run on thi... Started
Enables this server to administer Web and FTP... Started
Provides network address translation, addressi... Started
Provides end-to-end security between clients ... Started
Detects and monitors new hard disk drives and,., Started
Transmits net send and Alerter service messag... Started
Enables a computer to recognize and adapt to ... Started
Manages all local and network print queues an,,, Started
Protects storage of sensitive information, such,., Started
Serves as the endpoint mapper and COM Servi... Started
Enables remote users to modify registry settin... Started
Enables starting processes under alternate ere.,, Started
The startup of this service signals other servic... Started
Supports file, print, and named-pipe sharing o... Started
Provides notifications for AutoPlay hardware e... Started
Started
Monitors system events and notifies subscriber... Started
Enables a user to configure and schedule auto... Started
Provides support for the NetBIOS over TCP/IP ... Started
Started
Provides user experience theme management.
Manages audio devices for Windows-based pr.,. Started
Provides a common interface and object model... Started
Maintains date and time synchronization on all... Started

I Startup..,
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic
Automatic

J Log On As | \
LocalSyse
tm
L
o
c
a
l
S
y
s
e
t
L
oe
cta
loS
ys
e
t.m
m
N
w
r
k
s
LocalSyse
tm
L
oe
ca
loS
ys
t.m
N
w
rky
se
L
octa
lS
s
e
tm
L
ttm
Lo
oc
ca
all S
Sy
ys
se
e
m
Local System
Local System
Local System
Local System
Local System
Local System
Local System
Local System
Local System
Local Service
Local System
Local System
Local System
Local System
Local System
Local System
Local System
Local Service
Local System
Local System
Local System
Local System

.\.^^ed.^,^^/

. 4.6.

:
1. Name () .
2. Description () .
3. Status () ,
"", .
4. Startup Type ( ) .
:
( );
;
( ).
5. Log On As ( ) ,
. ,
,

136

. ,
, .
, .
,
, .
[Alerter Properties (Local Computer)
General | Log On : Recovery j Dependencies
Service name: Alerter
Display name:
Description:

Notifies selected users and computers of


{administrative alerts. If the service is stopped.

Path to executable:
C: W-/IN D 0WS \system32\svchost. exe -k LocalS ervice
Startup type:

I Automatic

Service status:

Started

Stop
You can specify the start parameters that apply when you start the service
from here.

OK

Cancel

. 4.7.

, ,

(. 4.7).
General () :
Service Name ( ) ;
Display Name ( ) , ;
Description () . ,
, ;

137

Path to executable ( ) , .
, .
, .
-, ,
.
, , .
: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services.
, . .
DisplayName, .
.
, . ,
,
, .
, ,
, Services ()
. 4.6.
Microsoft , .
, ,
, .
,
.
Microsoft , ,
. ,
,
.
Path to executable (. . 4.7) - . Stop () , , .
, .

.
, , ,

138

/UNINSTALL. , , .


, Ad-aware. http://www.lavasoft.de/.
, Ad-aware .
,
, . , , .


, ,
, . . Windows, , , ,
, . . .
,
, . ,
, ,
. ,
/ . ,
, ( ). ,
, , .

4.2.
(. . 3),
, ^ .
. , , . ,
.
- , ?
: \\\$, "" IP- .

139

.
, .
,
.

\\\$ . .
,
.
,
. -
.
,

. ,
.
, , . , , ,
,
, .
,
, ,
. .
, .
,
. , ,
, .
, :).
.
,
.
:
1. Manage (). (. 4.8). , .
2. Computer Management/System tools/Local
Users and Groups/Groups ( / /
/).

140

1-lnl.Xl
Jfll4

|J Computer Management
4|J D'e Action

View Windov '

Help

| 3 ^ HD EH X ? tS.
-"J; Computer Management (Local)
- '$ System Tools
1 ij^|] Event Viewer

g J Shared Folders
| Local Users and Groups
- :

'(iJ Users

ffl' ] Performance Logs and Alerts


:
- . Device Manager
- _ y Storage
+ ^ Removable Storage
i Disk Defragmenter
^ : ! - - ( Disk Management
5 _^ Services and Applications

Name
Descrp
i to
in
JAdmn
i sitrators
Admn
i sitrators have compelte and u... 1
^Backup Operators
Backup Operators can overrd
i e secu..
S Guests
Guests have the same access as me..
Jtg Network Confg
i urato
i n ...Members in this group can have som..
Jj Performance Log UsersMembers of this group have remote ...
^Performance Montior Us..M
. embers of this group have remote .,.
^ Power Users
Power Users possess most adrninistr...
5 Print Operators
Members can admn
isiter domani prin...
j Remoe
t Desktop Users Members in this group are granted t...
f$Users
Repc
ilator
Supports file replication in a domani
l3
Users are prevented from maknig ac...
jlpi Hep
l ServciesGroup
Group for the Hep
l and Support Center
^ISJWPG
IS Worker Process Group
^TelnetClients
Members of this group have access t...

. 4 . 8 .
Administrators Properties
General
Administrators
Description:

Administrators have complete and unrestricted accessY

Members:

OK

Cancel

. 4 . 9 .

141

. Administrators
() . , (. 4.9), .
3. ,
. ,
Administrator ().

, .

4.3. BIOS
, , . .
? .
.
.
? BIOS (Basic Input Output System
) .
, .

. ,
.

Apple, IBM, Sun.
, BIOS . BIOS.
,
.
, . , .

4.3.1.
, BIOS. , , -,
. -

142

.
BIOS AWARD.
BIOS . ?
IDE- "
Del BIOS". <Del>,
<F2> <F12>.
BIOS
, . <Del>,
BIOS. . 4.10 Award Software.
CMOS SetupUtility - Copyright (C) 1984-2000 Award Software
Standart CMOS Features
Advances BIOS Features

Frequency/Votalge Control
Load Setup Defautsl

Advances Chipset Features

Load Turbo Defautsl

Integrated Peripherals

Set Supervsior Password

Power Management Setup


PnP/PCI Configurations
PC Health Status
Esc : Quit
F10 : Save & Exit Setup

Set User Password


Save & Exti Setup
Exti Wth
i out Savnigs
t I - - : See
l ct Item
Tm
i e, Date, Hard Dsik Type ...

. 4.10. BIOS Award Software

. ,
BIOS . , , .
, .

143

4.3.2.
, , .
. ,
,
.
Advanced Chipset Features ( ), Advanced.
(. . 4.11).
BIOS Advanced ,
.
CMOS SetupUtility -Copyright (C) 1984-2000 Award Software
Advanced BIOS Features
HExternal Cache
[Enabled]
Item Description
Quick boot
[Enabled]
1st Boot Device
[HDD-0]
Menu level
[CDROM]
2st Boot Device
[Floppy]
3st Boot Device
[Enabled]
Boot Other Device
[Disabled]
Swap Floppy
[Disabled]
Seek Floppy
Boot Up Num-Lock Led
[On]
Gate A20 Option
[Fast]
Typematic Rate Setting
[Disabled]
6
x Typematic Rate (Chars/Sec)
250
x typematic Rate (Ms [Setup]
Security Option
APiC Function
[Enabled]
MPS Table Version
[1.4]
Esc : Quit
T 4 ' - - : Seiect Item
F10 : Save & Exit Setup
PU/PD/ + /- : Modify
Time, Date, Hard Disk Type ...
. 4 . 1 1 . Advanced Chipset Features

, , Quick Boot
Enabled. <Enter>
<PgUp>/<PgDn>. ,
, seek Floppy
Disabled.

144

BIOS ,
. , , ,
- .

, . -,
.
, .
BIOS,
1st boot device <Enter> <PgUp>/<PgDn> HDD-O. BIOS,
Device, Boot.

4.3.3.
BIOS
IDE- (Integrated Device Electronics) CD-ROM. HDD CD/DVD
, ?
CMOS Setup Utility - Copyright () 1984-2000
Standard CMOS Features

Award Software

2o5

Date (mm:dd:yy): Wed, Jan j


Time (hh:mm:ss): 20 :10 : 00
HARD DISKS
Primary Master
Primary Slave
Secondary Master
Secondary Slave

TYPE SZ
IE CYLS HEAD PRECOMP LANDZ SECTOR MODE
: User 30739M 3737 255
0 59559
63 LBA

:None 0M 0 0
0 0
Q
: None 0M 0 0
0 0
63 LBA
: User 3249M 787 128
0 6295

Drive A : [1.44M, 3.5 in.]


Drive : [None]
Video

: [EGA/VGA]

Halt On : [All, But Keyboard]

Esc : Quit
F10 : Save & Exit Setup

: Select Item
PU/PD/+/- : Modfiy
Time, Date, Hard Dsi k Type ...

. 4 . 1 2 . Standard CMOS Features

145

Standard CMOS
Features ( CMOS) (. . 4.12)
IDE Configuration Advanced BIOS Features ( BIOS). IDE-: IDE Primary ( ) IDE secondary
( IDE). Auto.
CD/DVD, . , None,
.
Auto user, BIOS . , :
, None;

, BIOS. .

4.3.4.
, BIOS . (. SDRAM, DRAM .):
1. CAS# Latency , ( ). 2, 2, 5 3. , . 2,
.
2. RAS# to CAS# ,
2 4. ,

. ,
2. , 3.
3. RAS# Precharge .
2 4. , 2.
Advanced BIOS features
Advanced Chipset Configuration (
BIOS). ,
( BIOS):

System performance Expert, a Memory


Timings User (. . 4.13);

146

Extended configuration User Defined


SDRAM Timing Control Manual-user defined.
CMOSSetup Utility - Copyright (C) 1984-2000 Award Software
Advanced Chipset Features
System Perfomance

Item Description
CPU Click Ratio
[Default]
FSB Frequency
[133MHz]
Menu level
CPU Interface
[Aggressive]
Memory Frequency
[Auto]
Resulting Frequency
133 MH*
Memory Timings
[Turbo]
x I (RAS)
5
xT(RCS)
2
KT (RP)
2
x CAS Latenacy
2.0
x RAS Precharge
2

Esc : Quit
F10 : Save & Exit Setup

t i - 4- : Select Item
PU/PD/ + /- .'Modify
Time, Date, Hard Disk Type ...

. 4.13.

, , .

4.3.5. BIOS
BIOS , ,
. ,
- Windows. ,
BIOS. Intel, AMD
.
, BIOS,
. , . , , , & . ,
.
BIOS , .

147

,
, .
BIOS , . , .
BIOS,
, . . .
,
.
BIOS ,
. (Fujitsu) , (Siemens) - .
BIOS.

4.4.
, ,
. 50 %,
, , .
3 ,
. ,
AMD Intel, ,
. , , , .
1995 , 486 ,

, Doom2. .
3D Action, ,
. -
, .
66 100 . . (
, . ), . ,
FDD . FSB (Front Side Bus,
) ,
,

148

. " ", -
.
, , . , ,
.
, , . .
,
, .

, . ,
.

4.4.1.
.
.
,
1020 %. , .
,
, ,
. ,
,

.
Media, - - . ,
. ,
,
.
, Big Tower (
), , .

149

- :
1. ( ).
, . "" ,
, Thermaltake Technology Titan.
, .
2. . , ,
, .
3. , , ,
.
, . , , , .
. , .
, 5-
12 .
, CD- DVD-.
, (. . 4.14).
, , CD-.
.

. 4 . 1 4 . , 5,25

, (
). CD-ROM,
, , , CD-ROM .

150

. ,
, , ,
(,
) .
,
,
. ,
, ,
.
Intel , .
- ,
. .
.
.
, .
. , . ( Intel-)
, . .
, Thermaltake Technology
Titan, . ,
, . , . , .
, , , . ,
. , ,
.
. . ,
( , "made in Sosedniy Garag")
. ,
-8. . .

151

, (, Celeron Copermine)
.
, . . .

4.4.2.
, . , , :
. , . , Pentium III, 600 .
100 ( , Intel)
6 (100 6 = 600).
:
1. .
2. .
,
, . , ,
, , , , , , .
600- 133
( ) 4.5,
598,5 . ,
, ,
.
5,
665 , , .

. . , , .
Celeron 566. Celeron, Copermine ( Pentium III).
ZX.
, BIOS .
, ,

152

Pentium III, 126 , 4,5.


567 .
Pentium III 100- , a Celeron
66 . ,
15 % ,
66 , - .
,
.
,
. PC 100,
100 , 133 , , . ,
.
, .

. (
) BIOS. ,
, .
.
. ,
,
, .
, , . ,
.
, .
, ,
. - ,
.
, , . , ,
, .

4.4.3. AMD
,
. Athlon
, .

153

Windows. Intel- , Athlon " ",


,

Asus, Gigabyte.
- AMD,
,
, . .
, (
Athlon) . ,
, . Intel- ,
.
33 66 .
233 ,
266 ( 133 2)
300 ( 100 3). ,
133 , ,
, .
233 266 .
, .
, , :
1. .
/.
2. .
.
BIOS .
22,2 ,
2,4 . ,
, , , .
AMD,
Athlon Duron, . ,
, ,
. Alpha EV6.
,
. , , 100 ,
200 . 33 ,
66 266 .
6 . 923

154

66 ,
Athlon 800,
. . , 120 .
, 133,
. 133, 266, 266
150 , 300 (150 ,
).
, Athlon , BIOS .
/ ,
. . , Athlon Duron , L1.
. . 4.15 AMD, , L1 L3.

. 4.15. Athlon AMD

, , L1 . .
, . , ,

155

. 4.16. ?
, , . , .
- ,
, .

, 4.16. L1

, , , . ,
- , .
, . , , ,
, .
Atlon XP ,
. , , ,
. , .
.
, , , , . . , ,
.
.

4.4.4. Intel
, .
, .
Pentium II , , .

156

Pentium III 66 , 85, 100 133 .


, ,
-
, . ,
Celeron 400, 6,
66 . 85 , 6 510 . ,
. , .
FCPGA Intel
. Celeron Pentium , .
Copermine Pentium
100 , 133 , Celeron 66 . Celeron Pentium.
Celeron 100 , Celeron
Pentium , .
Celeron , 100 , . Intel ,
, .
, , Celeron 566,
4 Pentium . ,
.
, Pentium
133 .
Celeron, Copermine, .
1.5, 1.65 1.7 . ,
.
Pentium III
150, 170
200 . ,
150 . , , ?

157

Pentium IV Pentium III,


. Intel
,
. .
,
. , 100 .
(
).
, .
, .
, ,
, .

^
,
.

4.5.

. , NVIDIA,
"" .
, (
). ,
. ,
.
?
. ,
. , .
NVIDIA , , . ,
. , , ,
.

158

, , . . .
-
.
,

. PowerStrip.
. , ,
.
PowerStrip http://entechtaiwan.net/util/ps.shtm.
,
. .

PowerStrip. , ,
Performance profiles/Configure ( /). , (. . 4.17).

Intel(R) 8 2 8 4 5 G / G L / G E / P E / G V

Engine clock
133,33 MHz
Memory clock

'

<LAsynchronous flip (OpenGL)


<LUse triple buffering (OpenGL}
" <L Force anisotropic filtering (OpenGL)

133,33 MHz
Engine to memory clock ratio

jj^

Advanced memory timing

f(Current settings)

Graphics

IMPORTANT! These Windows registry switches may


not work with special or proprietary drivers.
. 1
j
.....,
I
I-ZJ I

f7 Disable support for driver options


Disable floating point precision
!"*" Disable clock controls
*** Enable clock power management

Save as...

Cancel
. 4.17.

159

Engine clock
, . Memory clock
. , /,
: ,
.
,
, (, , , . .) . , .
, . ,
.
, . , Radeon Tweaker (http://radeontweaker.sourceforge.net)
Radeon.
Linux, .

4.6. Windows
BIOS ,
Windows . , . Windows .

4.6.1.
Windows .
. 80
, , . . , .
? , ,
,
. , ,
. 3.6, , ,
, , , .

160

: 5
. D:, . , 5 ,
. , .
,
, . . ,
. ,
. , , , .

4.6.2. Windows 2000/XP



. Windows ,
,
. Windows 2000,
, .

, .
(. . 4.1.3),
.
.
Start/Control panel/Administrative tools/Services
(// //). (. . 4.6).
Windows 2000 Windows XP .
: Extended () Standard ().
. ( )
( Windows 2000 ).
, , ,
"". - , , , . 4.7.
General ()
, Startup type ( ) Start parameters ( ).
:
Automatic () .
. ;

161

Manual () . - , . , MS SQL
Server .
( ), , .
;
Disabled () ,
. , , .
. , , .
Dependencies ()
. ,
. , . - , .
, . - , ,
, ,
.
, , , -, , -, :
Automatic Updates ( )

Windows .
, ,
, .
, ( , ) -

. ,
, ;
D Print Spooler ( ) .

. ,
. , ,
, ;
Task Scheduler ( )
. , -

162

. ,
3D Action,
. ( , .., . . 4.6.7),
.
.
;
Portable media serial number (
) , . ?
;
DHCP Client (DHCP-) IP DHCP-. IP- ( ),
, . ;
DNS Client (DNS-) IP-
. ,
, . - ;
Smart card (-) -.
- ( ,
. .) . -, ;
Messenger ( ) -
NET SEND.
( . 3.3), (, ), ;
Terminal Service ( ) ,
.
.
,
, , .
, ,
;
Remote Registry Service ( ) ,
. , .
, ;

163

FTP Publishing Service ( FTP-) ,


FTP-. FTP-
. Windows ( . . 4.6.3);
IIS Admin Service ( IIS Admin) - FTP- WEB-, . Windows (. . 4.6.3);
Themes () Windows XP.
,
, ;
Telnet .
. 99 % ,
. - ,
Telnet ;
RunAs ( RunAs) Windows 2000,
. Windows XP Runas ,
;
ClipBook ( )
. ,
;
Fax service ( ) -
( Windows ), , ;
Distributed Link Tracking Client/Server ( ) NTFS-,
.
"", , ;
Distributed Transaction Coordinator ( ) , .
, ;
Logical disk manager ( ) . , -

164

, , .
, ,
. ,
.

4.6.3.
Windows
.
Windows .
Add/Remove Windows Components (
Windows),
. ,
, :
Internet Information Services (ISS) WEB FTP.
WEB . ,
, , :
FTP FTP-,
, WEB . ,
,
;
WWW , , ;
IIS IIS ;
WEB- FTP-.
,
ASP, ,
;
FrontPage 2000 WEB-.
, . ,
, . , ,
, Unix-,
;

165

SMTP ( )
,
, SMTP- ,
WEB-;

,
Windows-.
, Macintosh- Unix- ;

Microsoft Windows 2000 . ,
.
,
;
( Windows 2000)
;

,
:
DHCP (Dynamic Host Configuration Protocol,
) DHCP-, IP- .

;
DNS (Domain Name System, ) DNS- ( ) IP-;
WINS (Windows Internet Naming Service, Internet
Windows) NetBIOS-, .
;
TCP/IP (Transmission Control Protocol/Internet
Protocol, / Internet) , Character Generator, Daytime, Echo . .
;
QoS RSVP (Quality of Service/Resource Reservation Setup Protocol,
/ )

, Qos-,
. ,

166

,
. ;
. ,
Windows;
Windows Media
. ,
;
. , .
,

;
Windows ;

. , , ,
:


;
SNMP (Simple Network Management Protocol, )
;

, ( , , ).
, , . 5;

Windows , .
,
:
( Windows Serverv 2003) Windows,
"" "";

167


,
. , ;
(
),
, .
, . , 1 ;
-.
HyperTerminal, ,
"" ( ), ;
, Paint, WordPad, ,
. . - ,
, .
,
, . .
, sysoc.inf
Windows\Inf.
[components]
, , :
WBEM=ocgen.dll,OcEntry,wbemoc.inf,hide,7

hide .
. , ,
:
WBEM=ocgen. dll,OcEntry,wbemoc.inf,,7

hide ,
.

4.6.4.
,
. Start/Run (/)
msconfig. (. 4.3). ,
(. . 4.1.3). Startup (),
. ,
, .

168

, Microsoft Office,
, . , . . ,
- ?
. , , , Microsoft WORD .

4.6.5.
? . ,
( ) .
, ,
- .
Startup and Recovery
System startup
Default operating system:
["Windows Server 2003, Enterprise" /fastdetect /KERNEL=kernellj[]
p Time to display list of operating systems:

|30 -rjrj seconds 1

" Time to display recovery options when needed: 130


To edit the startup options file manually, dick Edit,

Edit

"System failure
P" Send an administrative alert
P Automatically restart
Write debugging information

OK

Cancel

. 4.18.

169

( ) - , . . .
(Properties). .
(Advanced) Settings
() Startup and Recovery ( ).
(. . 4.18) Write debugging information (
) ().

4.6.6.
, ( ),
. , .

.

Settings () Performance (). Windows Server 2003, ,
. 4.19 (
). Adjust for best performance ( ).
.
, ,
, .
.
Properties ().
. Appearance () Effects (). Windows 2000
, Effects (). ,
, .
. , .
,
. , - .
. , .

170

4
11

I Performance Options
Visual Effects ] Advanced |
Select the settings you want to use for the appearance and
performance of Windows on this computer.
f* Let W

my computer]

Adjust for JDest appearance


f* Adjust for best performance
f" Custom:

[j|

Animate windows when minimizing and maximizing


Fade or slide menus into view
Fade or slide ToolTips into view
Fade out menu items after clicking
Show shadows under menus
Show shadows under mouse pointer
Show translucent selection rectangle
Show window contents while dragging
Slide open combo boxes
Slide taskbar buttons
Smooth edges of screen fonts

OK

Cancel

JJ^

"-*

JL

. 4.19.

. 1 ,
- .
.
1024x768, 800x600,
. JPEG-, Active Desktop.

, , BMP.

4.6.7.
Windows 2000/
. ,
. , ,
,
(, , . .).
CD , ^ -

171

.
, 150 . 30 ,
, ?
,
, .
, Windows -
, . - , .
:
Windows\Driver Cache\i386 ,
70 .
driver.cab ( );
Windows\system32\dllcache ( ,
) ,
driver.cab Windows\Driver Cache\i386.
,
, 500 .
, 0.
:
sfc /cachesize=O

, , .
( 30 ),
. .
System Volume Information ,
. ? ,
. - , . Windows XP,
. Microsoft
, , .
( ) . ,
.
, ,
System Volume Information , System recovery ( ),
, .
,
.

172

,
.
. System recovery ( )
Turn off System Restore on all drives ( ). .

4.6.8.
,
- .
( 20 ) . , .
,
. , ,
, .
, , , . .
HKEY_LOCAL_MACHINE\SYSTEM\
CurrentControlSet\Control WaitToKillServiceTimeout
20000 5000 (. . 5 ). .

4.7.
(. . 4.1)
Windows (. . 4.6). , . , , .
.
, Windows . . , , . .
, ( ) 50 %.
, ,
? , , , . ,
. .

173

4.7.1.
, ,
. , . ( ), , .
.
, E-mail. ,
.
,
. , .
.

4.7.2.
, . 4.6
, ( ).
, , .
- ,
, -
.
, , , .

4.7.3.
, .
, . , , .
,
, .
8 , 12. .
, -
( ) . -

174

? .
. ,
( ).

, . .
? , , , . 4.7.9.
, .
, Windows ,
. , , ,
, ( ),
, .
Windows 2000,
(SAM, Security Accounts Manager), . ,
, .
, Windows .
, Windows\Repair SAM, . ,
.
, , , ,
. .
.
, , , . ,
, Windows .
, Windows
-. , .
. . ,
:
- ,

;
. , -

175

.
, .
, , , , . .
, ,
. ,
7 000 000. 0 6 000 000,
5 000 000.
,
.
8 , , , ,
. , .

4.7.4.
, . .
,
. , MS SQL Server
"sa" (System Administrator) .
, .
Windows 2000/XP , , . ,
, ,
-.
, .
,
. 1000 ? ,
- ?
.

4.7.5.
, , ,
. Windows ,
,
. , .
Microsoft

176

. .
, (. . 4.1.2).
. , , ,
.

4.7.6.
, ,
. , , .
Windows 95 . , -
, .
, .. Windows,
,
.
.
Windows 2000, . , .
.
(
Guest) , . ,
, . .
, , , .
,
, . . . . -
, , .
. ,

$4 . , ,
. $12 -

177

0:00 8:00 (
). ,
.
, ,
. .
( 17:00) . ,
. 8:00 18:00.
,
0:00 18:00. , .
,
, . ,
, , ,
.
, ,
.
, .
, .

4.7.7.
Windows 9x ,
,
-. ( / ,
),
" ".
, , ,
. ,
.
( //
). Windows 2000/XP
. (. 4.20). The connection
uses the following items ( ) ,
. File and Printer Sharing for Microsoft

178

Networks ( Microsoft).
, .
Windows 9x
. ,
, ,
, .
JL Local Area Connection Properties
General jAuthentication) Advanced)
Connect using:
M National Semiconductor Corp. DP83815/816 10/1.00 Ma
Configure...
This connection uses the following items:
* Client for Microsoft Networks
D J Network Load Balancing
:File and Printer Sharina for Microsoft Networks
VInternet Protocol (TCP/IP)
Install...

Uninstall

Pioperties
:

^.Description

~~
~ " ~~ : ; "~ *
Allows other computers to access resources on your computer
using a Microsoft network.

Show icon in notification area when connected

OK

Cancel

. 4.20.

4.7.8.
Windows, . ,
, .
, , , , .

179

, ,
explorer.exe. :
HKEY^LOCAL^MACHINE\SOFTWARE\Microsoft\Wmdows NT\
CurrentVersion\Winlogon

, shell .
? , . , - , (. . ""
. 3). , . . C:\Windows\explorer.exe.
Windows 9x,
Windows\system.ini, shell.
, , , . 8 . , , -, ,
Screen Saver , .
.
. Screen Saver, .
, .
Screen Saver, .
,
, .
, ,
. . , . ,
. :
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\
Session Manager\Memory Management
ciearPageFiieAtshutdown ( ,
DWORD), ,
. 1, - , .

4.7.9.
Windows\System32. ,
. ? . dll.
, .

180

passwords.dll, ( ).
, , chkprofit.dll,
.
- , kernel.dll.
kernel32.dll, ,
kernel.dll kernell6.dll .
, ,
, .
dll,
, Notepad (). , .
Windows/System32,
Windows Program files. , , . , .
, $19, ,
CyD Archiver (. . 4.21).
.
|D|x|

IgllCyD Archiver XP
File Files command Archive View lools Help

J J -J

1: | -

.?

J ?
^J WINDOWS
Folders tree Files
_J addins
_jAppPatch
^j assembly
jzi Config
^ Connection Wizard
j Cursors
*-J Debug
) Downloaded Program Files
Q| Driver Cache
2 ^ Drivers
_ j Fonts
i^Help
<1

.^ a x .

% ! %>

| ZIP Tree ZIP Files |


u History
E^IIS Temporary Compr
Qime
Qiava
QLastGood
QLastGood.Tmp
Q Media
QMicrosoft.NET
QMinidump
gjiModio

NjBHV.dat

) msagent
i r ^ msapps

1
1

jCompressed:

iUncompressed:

jl files was zipped

. 4 . 2 1 . CyD Archiver XP

181

, :
1. , .
.
2. CyD Archiver XP. File commands/Add to new archive
( / ). . , . ,
dll . CyD
Archiver XP ,
.
3. .
4. Windows/System32.
, .
, , CyD
Archiver XP .
, . CyD Archiver XP, . ZIP- , "". CyD Archiver XP
Break/Restore (/). , .

. Patch ( ), (
) .
ZIP-, ,
, "".
, . CyD Archiver XP "" .
CyD Archiver XP
, . ,
.
, , . . , ,
.

CyD Archiver XP ( File/Set file access time, /
).
.

182

4.7.10. BIOS
BIOS . , ,
. ,
. BIOS
. (
), BIOS ,
.
BIOS (, AWARD) , . 4.51
,
.
BIOS ,
, , ,
, .

4.7.11.
,
, ,
( ),
. , , , .
,
. .
, , , , .

.
.
,
, . 4.7.3.

.
,

183

.
, .
, . , . ,
(,
), . Windows,
.
Windows
. , .
Windows ,
.
, , NTFS. FAT32 .
,
Properties ().
General () Advanced (),
.
Encrypt contents to secure data (
). ,
. .
.
, . , , ,
.
, ,
, . ,
, . -,
.
,
.
, , .
, .

184

, ,
. .

PGP (Pretty Good Privacy, ) OpenPGP. . , PGP.
: . ,
, . ,
.
- , , , .
, ,
100 %, . . .
256 (32 ) .
, Windows
,
.
( ), , . .

4.7.12.
, Windows 2000/XP/2003,
- . . , . ,
, , , , .
. ,
, .
, , . . .
Computer
management ( ). Start/
Settings/Control Panel/Administrative tools/Computer Management (//

// )
. , . 4.22.

185

3 Computer Management
i j File Action View Window Help
Computer Management (Local)
Full Name
Name
~ System Tools
~\ Event Viewer
[Guest
i irJ Shared Folders
[IUSR_NOTEB... Internet Guest Account
j i j j Local Users and Groups
IWAM_NOTE... Launch IIS Process Account
i
i J Users
>j5UPPORT_38... CN=Microsoft Corporation...
; | : Q j GrOUpS
I - Performance Logs and Alerts
| -, Device Manager

j Description
Built-in account for administering t
Built-in account for guest access to
Built-in account for anonymous ace
Built-in account for Internet Inform
This is a vendor's account for the I-

- 2 Storage
| -$ Removable Storage
\ } w Disk Defragmenter
^ 1 Disk Management
+ _J Services and Applications

JjLlLll
. 4.22.

Computer management/System tools/Local Users and


Groups/Users ( / /
/). . Rename ().
,
, . ,
, . . .
, , , - , .
, . ,
Windows XP ,
SUPPORT. ,
. Microsoft, 7 . 923

186

( ), ,
.
,
.
, .

4.7.13.
, , .
,
, . , .
, .
.
, .
.
Kensington Lock. - , ,
, , .

4.8.
, , .
.
, , , , .
,
1000 . , :). ( ) , ,
, : ", !!!" ? , . , ,
.
, .
, , .

187

. . "",
(, Windows)
, .

4.8.1.
( ), Windows . Recycled,
,
. , ,
.
.
<Shift>, .
. ,
. FAT16
"~". undelete . ,
, "~".
FAT32 , . . - , -. .
. ,
.
, - / . ,
. , -
.

4.8.2.
, . ? ,
, ,
, .
. ,
.
.

188

, , , ,
:
1. .
2. 7080 %.
3. .
. 2 -
, .
/
, 20 %
. 99 % , .
,
. ,
,

(. . 4.8.1),
.
, . .
. , , ( !). ,
? , , .

4.8.3.
. ,
. , , .
,
,
. ,
. WEB-,
, , , .
,
, -

189

. , .
, .

EasyRecovery
http://www.ontrack.com.
, 30 . ,
,
.

, MS Office. ,
. , , , , . EasyRecovery '
. , , ,
. ( , ), .
. , E-mail .
, , ,
. .
. , .

File recovery
http://www.lc-tech.com.
.
: FAT12, FAT16, FAT32, NTFS, VFAT.
NTFS.
$25, $99. , .

190

4.8.4.
.
,
. , . , ,
. , , , . .
. . Word , . , . .
Microsoft Word Microsoft Excel
, .
, .
,
. , ,
- . , ,
, .
.
Windows 2000 Disk Probe.
Windows 9JC/ME, TO -
. WinHex (http://www.winhex.com),
PTS DiskEditor (http://www2.PhysTechSoft.com), . . . .
,
. Disk
Probe, 99 % Windows 2000 . Windows 9x
, . Windows 2000,
Disk Probe Windows 9x/ME.

Disk Probe
? Windows 2000!!! , .
CD Windows 2000
Support\Tools. Setup.exe. , Windows. ,
, .

191

Disk Probe .
, ,
.
Disk Probe, , . - .
, .

, Disk Probe. Windows 2000


//Windows 2000 Support Tools/Tools.
=Unimtia!i2ed - Disk Probe
File Drives Sectors View Tools Help
oooo
OO1O
OO2O
OO3O
OO4O

ooso
OO6O
OO7O

ooeo

OOAO
OOBO

oo oo
oo oo
oo oo
oo oo

oo HH
oo oo
oo oo

OO 00
00 00
00 OO

oo oo
00 OO

oo oo

ooco

OO 00

OODO
OOEO
OOFO
O1OO

00 OO

oo oo
oo oo
oo oo

oo oo
oo oo
oo oo
oo oo
oo oo
oo oo
oo oo
oo oo
oo oo
oo oo
oo oo
oo oo
oo oo
oo oo
oo oo
oo oo
oo oo
oo oo

00 00 00 OO

oo oo oo oo
00 00 oo oo
oo oo oo oo
00 00 oo oo
00 00 oo oo
OO 00 oo oo
oo oo oo oo
oieo oo oo oo oo
oo oo oo oo
O19O
oo oo oo oo
O1AO
ForO1BO
Help, press Fl
O12O
O13O
O14O
O1SO
O16O
O17O

O1CO

oo oo oo oo
oo oo oo oo
00 00 oo oo
oo oo oo oo
oo oo oo oo
00 OO oo oo
00 00 oo oo
00 00 oo oo
oo oo oo oo
oo oo oo oo
oo oo oo oo
oo oo oo oo
oo oo oo oo
00 OO oo oo
oo oo oo oo
oo oo oo oo
oo oo oo oo
OO 00 oo oo
oo oo oo oo
OO 00 oo oo
00 OO oo oo
oo oo oo oo
oo oo
00 OO
oo oo 00 OO
oo oo oo oo
OO 00 oo oo
oo oo oo oo
oo oo oo oo
oo oo

oo oo oo oo OO OO
oo oo oo oo oo oo oo oo
00 OO

OO 00 OO 00 OO 00 OO 00

oo oo oo oo oo oo
00 00 oo oo OO 00
oo oo oo oo oo oo
oo oo oo oo OO 00
oo oo 00 OO oo oo
OO 00 oo oo oo oo
oo oo oo o o oo oo
oo oo oo oo oo oo
oo oo oo oo oo oo
oo oo oo oo oo oo
oo oo oo oo oo oo
oo oo oo oo oo oo
oo oo oo oo
oo oo 00 OO oo oo
oo oo oo oo OO 00
00 OO oo oo OO 00
00 OO oo oo oo oo
00 OO oo oo OO 00
oo oo oo oo oo oo
00 OO oo oo OO 00
00 OO oo oo oo oo
00 OO 00 OO oo oo
00 OO 00 OO oo oo
oo oo oo oo oo oo
00 OO oo oo oo oo
oo oo oo oo oo oo

oo oo
oo oo
oo oo

00 OO
00 OO

oo
oo
oo
oo
oo
oo

oo
oo
oo
oo
oo
oo

OO 00

oo oo
oo oo
oo oo
00 00

oo
oo
oo
oo

oo
oo
oo
oo

OO 00

oo
oo
oo
oo
oo

oo
oo
oo
oo
oo
brv

Sec

Off 6x041

4 . 2 3 . DiskProbe

, .
Drives/Logical Volumes. (. 4.24). , Set
Active, .
Tools/Search Sectors. (. 4.25).
Tools/Exhaustive search. ,

192

, , Ignore case. : ASCII Unicode.


,
-. -
Enter characters to search for ( ) Search.
,
First sector to search ( ) Last sector to search ( ).
- , Disk
Probe . E-mail , .
.
. 5 IBM (7200 ) 20 .
,
. . N 0 , .
,
. ,
. .

I 1 w k J

1
2

4
5

OODO

OOFO
1

O12O
1
O14O
O15O
O16O
O17O
1
O19O
1
1
For1
Help; press Fl

Cancel

00

Active H andle N Active H andle

Handle 0
F

Close Handle

Open Mode OPEN_READONLY


Readonly

Set Active | j

00

Handle 1

NO_SELECTION

Open Mode INVALID_HANDLE


W ReadOnly

" oo oo oo oo oo oo oo oo oo oo oo oo
OO OO OO OO OO OO OD OO OO OO OO OO

jVol E:
. 4.24.

!off 0x041

193

, , .
, Sectors/Read.
( , )
. . ,
.
, File/Save As. Disk Probe
.
.
, ,

. , ,
- .

4.8.5.
- ,
.

194

.
. .
Erase Disc - F: Slimtype COMBO LSC-24082K
WARNING !!! All of the content in the Rewritable disc
in the selected Recorder wil be erased!
Most users prefer the Quick Erase option, however, to ensure the
entire disc is erased, click Full Erase.
r Opto
i ns ~
-
i " {Quick Erase;
Full Erase
The remaining time listed below is an approximation only. Some
erases may take up to 10 minutes longer than what appears on the
progress bar.
Remaining Time (mm.ss):

Start

Close

Help

. 4.26. Roxio Easy CD and DVD Creator 6

-, , ,
. ,
, .

, .

4.9.
, , .
.
, CD-ROM .
, "
", , ,
. , , ,
.
, , -

195

, .

4.9.1.
. , . ,
: , , , . , , ,
.
, , , . .
? :
1. - ,
.
2. , .
,
.
, .
.
, , , . , - .
,
.
. , .
, . 4.27.

. 4.27.

196

Inter ,
. ,
.
, .
- . .
,
.
, ,
, ,
.

4.9.2. DVD- -
.
. , , .
, , .
, , . CD-, DVD-
. .
.
,
, . . . , . ?
. .

4.9.3. CD-
, , CD -,
, . -.
? 50 . -

197

,
. . , .
,
2 .

,
, .


, .
.
CD-ROM. , . , ( )
. -
, , . , .
. ,
, ,
. , . .
,
.
CD- ( , )
, . , , CD-ROM .

.
.
, .


CD-ROM .
, .
, ,
.
-.
,
, -

198

. ,
.
. ,
. .
, .

4.9.4.
.
9799 ,
. , .
, - , .
? , . ,
. ,
. ,
, , .
(scandisk), , .
.
.
,
1020, ,
, .
.
, . ,
.
,
.
, .

199

4.10.
. ,
. -
. ,
.
-, ,
, . ,
, (
Open Source),
, .
. - , .
,
.
,
.
,
. , , .

4.10.1. ?
, Shareware, . .
.
? -
. -
, .
, .
,
. , ,
, , ,
. , , , , .

200

, Microsoft Windows XP
, . , ,
. ,
.
, . ,
, ! , ,
, ,
. .
, .
, ,
. . , , .

,
. - ,
. Windows , ,
. ,
. , , .
. (
), . ,
. ,
.
, .
Shareware,
.

4.10.2.

. (. . 4.10.1), Shareware , , . .
? .
. , ,
? , . . 01.01.2010

201

. 10 (
01.01.2010 ).
, ,
.
, .
Shareware-

. .

4.10.3.
,
" ".
http://www.sysinternals.com. Regmon (Regmon for
Windows NT/9x), .
Regmon , .
, .
Regmon, .
Regmon ,
(. . 4.28). :
1. # .
2. Process , .
3. Request .
4. Path .
5. Result .
6. Other .
, , , "Process"
deskt ( ) "Request" setvaiueEx.
, a setvaiueEx
. ?
. . 4.28,
1435 .
"Other". 18, . : HKEY__CURRENT__USER\Software\ Desktop\ProductID.

(#1430).
, 19.
, ,
( ), .

202

,
. 10 000, . (, 100), 10 000
, .
. ,
The Bat , , , 5 000 .
, , , , .
, , . .
regedit HKEY__CURRENT__
USER\Software\ . . ,
, ,
.
, ReglstiyMonitor- Systems Internals: irttp:/<www.vsintefn4l.com
"'"HSial
jyte Options Search


j Revest
j Path ;.
Result
| Other
i
l # i Procei?
1411 deskt
CloseKey
HKCU\SoftwareMcrosoftW\rtndowsCurrentVersion4Explorer4}ocuments
SUCCESS
SUCCESS hKey:0xC2A1D6D0 %
1412 deskt
OpenKey
HKCR>CslD
l M645FF040-5081 -101 B-9F08-00AA002F954E}'ShelFolder
1413 deskt
QueryValueEx
HKCR\CslD\{645FF040-5081 -101 B-9F08-00AA002F954E}\ShelFolder\AtiributesSUCCESS 401 0 20
1414 deskt
CloseKey
HKCR\CslD
l \{645FF040-5081 -101 B-9F08-00AAOO2F954E}heF
l od
l er
SUCCESS
SUCCESS
1415 deskt
CloseKey
0xC29A3090
SUCCESS hKey:0xC2A1D6D0 JJ
1416 deskt
OpenKey
HKCU\Software
1417 deskt
HKCU\Software\
SUCCESS hKey: 0xC2A3O07O
OpenKey
SUCCESS
1418 deskt
CloseKey
HKOASoftware
1419 deskt
OpenKey
HKCU\Softwareesktop
SUCCESS hKey:0xC2A1D6D0
1420 deskt
QueryValueEx
HKCUVSoftwareOesktopP
i roduct
NOTFOUND
1421 deskt
CloseKey
HKONSoftwareOesktop
SUCCESS
1422 Regmon
QueryValueEx
0xC186511 OWL ANG
NOTFOUND
1423 Regmon
QueryValueEx
0xC1865110\OLE32
SUCCESS "OLE32.DLL"
1424 Regmon
OpenKey
HKLM\Software\MicrosoftWndowslCurrentVersion
SUCCESS hKey:0xC2A1D6D0 *
1425 Regmon
QueryValueEx
HKLM\Software\MicrosoftWlndowsV:urrentVersion\SubVersionNumber
SUCCESS 20 4120 0
*
1426 Regmon
CloseKey
HKLM\SoftwareWicrosoftV\rtndows\CurrentVersion
SUCCESS
SUCCESS hKey:0xC2A1D6D0 jj
1427 deskt
OpenKey
HKCU\Software\Desktop
SUCCESS
1428 deskt
QueryValueEx
HKCU\Software\ Desktop\ProductlD
1429 deskt
HKCU>Software\DesktopP
i roductlD
SUCCESS
QueryValueEx
1430 deskt
QueryValueEx
HKONSoft ware\ Desktop VroductID
SUCCESS "19"
1431 deskt
CloseKey
HKCUVSoft ware\ Desktop
SUCCESS
SUCCESS hKey: 0xC2A1D6D0 *
1432 deskt
OpenKey
HKCUXSoft ware\ Desktop
SUCCESS
1433 deskt
CloseKey
HKCU\Software\ Desktop
SUCCESS hKey:0xC2A1D6D0 *
1434 deskt
OpenKey
HKCUVSoftware\ Desktop
SUCCESS "18"
1435 deskt
SetValueEx
HKCU\Software\ Desktop\ProductlD
1436 deskt
CloseKey
HKCU\Software\ Desktop
SUCCESS
1437 deskt
OpenKey
HKCU\Software\Desktop
SUCCESS hKey: 0xC2A1D6D0 *
1438 deskt
QueryValueEx
HKCUVSotware\ Deskt op\MultiLine
SUCCESS
SUCCESS
1439 desM
QueryValueEx
HKCUVSoftware\ Deslctop\MultiLine
m
SUCCESS "1"
1440 deskt
QueryValueEx
HKCU\Software\DesktopVHultiLine
SUCCESS
1441 deskt
CloseKey
HKCUVSoftware\Desktop
1442 deskt
CloseKey
HKCUVSoftware\
SUCCESS
1443 deskt
QueryValueEx
0xC1865110PCRT4
SUCCESS "RPCRT4.DLL"
~
. 4 . 2 8 . Regmon

203

Fe
li

Ev \

;9.;?

V"

j Process
explorer.exe
explorer.exe
explorer.exe
explorer.exe
explorer.exe
explorer.exe
explorer.exe
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
FILEMON.EXE
System
explorer.exe
explorer.exe
explorer.exe
explorer.exe
explorer.exe
explorer.exe
explorer.exe

M "

[Request
FASTIO_QUERY_BASI...
IRP_MJ_CLEANUP
IRP_MJ_CLO5E

Path
| Result
; \MSSQL7\Binn\sqlmangr, exe
SUCCESS
: \MSSQL7\Binn\sqlmangr. exe
SUCCESS
: \MSSQL7\Binn\sqlmangr. exe
SUCCESS
: \MSSQL7\Binn\sqlmangr. exe
IRP~MJ!CREATE
SUCCESS
FASTIO_QUERY_STA... :\MSSQL7\Binn\sqlrnangr. exe
SUCCESS
IRP_MJ_CLEANUP
C:\MSSQL7\Binn\sqlmangr.exe
SUCCESS
IRP MJ CLOSE
;\M5SQL7\Binn\sqlmangr. exe
SUCCESS
FSCTL_IS_VOLUME_M... E:\Archive\X
SUCCESS
IRP_MJ_CREATE
E:\Program Files\ABBYY Lingvo\LvHo... SUCCESS
FASTIO_QUERY_BASI... E:\Program Files\ABBYY Lingvo\LvHo... SUCCESS
IRP_MJ_CLEANUP
E:\Program Fi!es\ABBYY Lingvo\LvHo... SUCCESS
E:\Program Fi!es\ABBYY Lingvo\LvHo... SUCCESS
IRP_MJ_CLOSE
FSCTL_IS_VOLUME_M... E:\Archive\X
SUCCESS
SUCCESS
FSCTL IS VOLUME M... E:\Archive\X
IRP_MJ_C~REATE
E:\Program Files\ABBYY Lingvo\LvHo... SUCCESS
FASTIO_QUERY_STA... E:\Program Files\ABBYY Lingvo\LvHo... SUCCESS
E:\Program Files\ABBYY Lingvo\LvHo... SUCCESS
IRP_MJ_CLEANUP
IRPIMJTCLOSE
E:\Program Files\ABBYY Lhgvo\LvHo... SUCCESS
FSCTL_IS_VOLUME_M... E:\Archive\X
SUCCESS
E:\Program Files\ABBYY Lingvo\LvHo... SUCCESS
IRP_MJ_CREATE
FASTIO.QUERY BASI... E:\Program Files\ABBYY Lingvo\LvHo... SUCCESS
IRP_MJ_CLEANUP
E:\Program Files\ABBYY Lingvo\LvHo... SUCCESS
E:\Program Files\ABBYY Ungvo\LvHo... SUCCESS
IRP!MJ_CLOSE
FSCTL ISJ/OLUME M... E:\Archlve\X
SUCCESS
F5CTL_IS_VOLUME_M... E:\Archive\X
SUCCESS
IRP_MJ_CREATE
E:\Program Files\ABBYY Lingvo\LvHo... SUCCESS
IRP_MJ_CLEANUP
E:\Pr ogram Files\ABBYY Lingvo\LvHo.,. SUCCESS
E:\Program Files\ABBYY Lingvo\LvHo... SUCCESS
IRPIMJ.CLOSE
E: DASD
SUCCESS
IRP MJ WRITE*
C:\MSSQL7\Binn\sqlmangr.exe
SUCCESS
IRP_MJ_CREATE
SUCCESS
FASTIO QUERY BASI... : \MSSQL7\Binn\sqlmangr. exe
IRP_MJ_CLEANUP
:\MSSQL7\Binn\sqlmangr. exe
SUCCESS
: \MSSQL7\Binn\sqlmangr, exe
SUCCESS
IRP_MJ_CLOSE
IRPJVUJIREATE
: \MSSQL7\Binn\sqlmangr. exe
SUCCESS
FASTIO_QUERY_STA... : \MSSQL7\Binn\sqlmangr. exe
SUCCESS
IRP_MJ_CLEANUP
:\MSSQL7\Binn\sqlmangr. exe
SUCCESS
TRP~MI
nnv
si irrFss

Other
Attributes: A
Attributes: Any Options: ...
Size: 110592

Attributes: Any Options: ...


Attributes: A

Attributes: Any Options: ...


Size: 40960

Attributes: Any Options: ...


Attributes: A

Attributes: Any Options: ...


Offset: 16384 Length: 4096
Attributes: Any Options: ...
Attributes: A
Attributes: Any Options: ...
See: 110592

. 4.29. File Monitor

? , .
. .

http://www.sysinternals.com File Monitor (Filemon for
Windows NT/9x).
.
File Monitor , Regmon,
, (. . 4,29).
, , .
, .

4.10.4.
,
, , ,
, .

204

, ( ).
,
.
,
, . ,
, .
, :
W32Dasm ,
http://www/expage.com/page/w32dasm;

8.9,

Turbo Debugger Borland .


DOS-, Borland C++5.02;
DiskEditor ,
(www.symantec.ru).
, . W32Dasm.
Disassembler Open file to Disassemble...
-. , . 4.10.3.
,
,
.
.
. Search/Find Text. "Regist"
. , . , . , , ,
.
. 4.30, . W32Dasm "Enter registration code". , ,
. , , . , ,
"*" ().
, .
. , :
* Possible StringData Ref from Code Obj ->"RGCD1"

, , "RGCD1". ,
" ",
. ?

205

l^i System Configuration Utility


General ] SYSTEM,INI j WIN.INI j BOOT.INI | Services Startup
Startup Item
0 igfxtray
0 avpcc
0 NeroCheck
0 EngUtil
0 DrgToDsc

Command

Location

S
\OFTW ARE\M
cir osof t\Wn
idows\CurentVer.,
D\:WN
IDOWS\Syse
tm, HKLM
co
irsoft\Wn
idows\CurentVer.,
"e:\Program Fe
lis\Kas..HKLM\SOFTWARE\M
\OFTWAREM
\cri osof t\ Wnidows\CurentVer,
D\:WN
IDOW5\syse
tm. HKLM5
"D\:Program Fe
lis\Com.,HKLMS
\OFTWAREM
\cri osof t\ Wnidows\CurentVer,
"E:\ProgramFe
lis\Rox.i HKLM\SOFTWARE\Mciroso\tfWnidowsC
lurenV
ter,.

d
n
iN
ow
\y.eS
x\Syse
M
lO
ter.
D:\w
W
IdD
OsW
tm. HKL
C
US
\S
OFFTWARE\Mciroso\tfWnidows\CurenV
0 ctfrnon
E\P
:ROGRA~1\ABBYY. Common Startup
0 ABBYY Ln
igvo 6,0E\:P
LR
...OGRA~\A
ldobe. Common Startup
0 Acrobat Asssitant D\P
:ROGRAM\COMM,. Common Startup
0 Adobe Gamma Loader
Dsiabe
l Al
O
K

. 4 . 3 0 . W 3 2 D a s m

, , 5 "RGCD1",
.
, . ,
, . . "Software",
"Desktop" "ProductID". ,
Regmon:
Software\Desktop , a ProductID . ? ,
"sdjFE2fih3erj3J". , , . . , , - .
. , .

4.10.5.
, . Turbo Debugger ( ,
) , .

206

, :
1. MessageBoxA. , ,
.
2. . , . ,
, , - . , . ,
" , , ".
0") .
Turbo Debugger (TD).
Assembler. , TD
. . , - ( Disk Editor).
,
"
, , ".
10 . , , - , ,
. ,
. , , .
. , . ,
. .
, ,
. , ,
, .
, , .
,
. ,
, , .
. - , . . , ,
. ,
, .


.
, . .
.
.
, , ,
.
, , ,
. ,
.
: . ,
, .
.
WEB-, ,
.
,
. , ,
. , , , , .
, .
, , ( ).
. ,
, . , ,

208

( ).
, .

5.1.
, .
(Dial-up),
( 56 ). , 30 40 , .
,
64 ,
56 , .

,
, .
* GetRight Download Manager: Resume Downloads, Schedule Downloads, Faster Downloads - Flenov Internet E.

File Edit Ve
i w Favorites Ipols Hep
l

Ql Back
*j z' * .. Search ;? Favorites |gf Medai
4

.- http.//www.getright.com/

NEWS: GetRiqht 5.2 beta 3 released!


New Products: Geek Superhero & Desktop Arm or I

Welcome to the home of G e t R i g h t


GetRight works with your web browser to help you download files from the Internet.
GetRight can accelerate your downloads and can recover downloads if errors occur (resume downloading)
GetRight has many other advanced features such as scheduling, automatic dialing, and file searching.

Buy GetRigt
Purchasing options
English, Esp|gnol.
Deuigch. Italians.
Franoais. Portugues

Download
Version 5.1
(Released March 22, 2004)
for Windows
95-98-ME-NT-2000-XP

Read our "No Adware. Snyware or Bundled Extras" Statement

. 5.1. GetRight

209

( Dial-Up) , . WEB-,
. 90 % 100
Windows, .
,
Get Right Reget. . 5.1.5.
GetRight Reget
www.getright.com
www.reget.com. GetRight
. 5.1.
,

.

5.1.1.
, TCP/IP (Transmission Control Protocol,
). ,
.
TCP/IP .
, , . : , ,
. .
, 2000 . 1000 500 ,
. , .
, .
10 000 , 2000
. ,
. , - ,
, .
,
, ( ) ,
. ,

210

. , , .
, , Windows.
,
.
Windows 2000/ TCP/IP ,
, , , .
Windows 9,
.


, TCP Windows 9x regedit, . : HKEY_LOCAL_MACHINE\
SYSTEM\CurrentControlSet\Services\Class\NetTrans\0000.
. , , ,
, , 0001, 0002 0022.
, .
MTU (Maximum Transmission Unit, ) . Microsoft ( )
" :).
Win9x 1500.
, , . ,
, . . .
, . , / ,
.
.
, 57 6. ,
, . . .
552, 576, 1002, 1500. , ,
( ). 552 02.
, .

211


, , , , ,
40 . , = 1500 1460 , 576 536 . " " , . . 1500 576 , 120
. . , , .
,
40 , 1500 .
.
MSS (Maximum Segment Size,
) -40. , HKEY__LOCAL_MACHINE\System\
CurrentControlSet\Services\VxD\MSTC
DefauitMSS -40 ( ,
"MaxMTU-40", ).


HKEYJLOCAL__
MACHINE\System\CurrentControlSet\Services\VxD\MSTC,
, .
DefauitRcvwindow (RWIN Receive
Window, ) .
, RWIN- ,
. DefauitRcvwindow
, DefauitMSS, . . RWIN
20*DefauitMSS, 20 , .
,
, . , , ,
. .
DefauitRcvwindow DefauitMSS * N.
N 4, 6, 8 10.
, , 8,
. , .

212

DefauitTTL (TTL Time To Live,


). . ,
.

, TTL. , , .
DefauitTTL , .
DefauitTTL 32. , . ,
, -
. ,
64. ,
( , ). ,
,
, .


.
.
PMTUDiscovery (Path Maximum Transmission Unit
Discovery) . 1, TCP/IP
. ,
PMTUDiscovery
.
PMTUBiackHoieDetect (Path Maximum Transmission Unit
Black Hole Detect) .
1, ""
. , . "" , .


TCP/IP . , . ,
:
Wndows.

<F8>. .

213

Command Prompt Only ( ). DOS.


scanreg /restore.
.
4 .
<Enter>.
Windows 9x. Windows 2000/XP DOS-,
, , TCP ,
- .

5.1.2. DNS
, Internet Explorer ,
. , CyD Software Labs.
URL www.cydsoft.com .
, IP-, ( 4 IP-), .
, Internet Explorer
IP- , . DNS- IP. .
, .
DNS? IP- ,
,
.
,
DNS IP-.
, DNS , - , DNS.
IP-. ,
.
.
.
Favorities ()
URL, IP-. ,

214

,
DNS-.
?
:
1. Internet Explorer.
2. Favorites () .
Properties ().
3. , . 5.2.
Web Document ( )
URL, .
, . 5.2 http://www.cydsoft.com/,
www.cydsoft.com.
CyD Software Labs Properties
| General j Web Document Security
CyD Software Labs

URL:
Shortcut key: |None
Visits:

Unknown

Make this page available offline

OK

Change Icon...

Cancel

. 5 . 2 .

4. Start/Run (/), Open () cmd ( Windows 9x

275

command.com) . ,
.

ping

(, p i n g

www.cydsoft.com),

:
Pinging www.cydsoft.com [62.118.251.15] with 32 bytes of data:
Reply from 62.118.251.15: bytes=32 time<lms TTL=128
Reply from 62.118.251.15: bytes=32 time=2ms TTL=128
Reply from 62.118.251.15: bytes=32 time=lms TTL=128
Reply from 62.118.251.15: bytes=32 time<lms TTL=128
Ping statistics for 62.118.251.15:
Packets: Send = 4 , Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = Oms, Maximum = 2ms, Average = lms

IP-.
www.cydsoft.com
(. . 5.2). , URL http://62.118.251.15/.
, .
, , , - (
IP-) -, 1
IP-.
ping ,
.
, ICMP-
(Internet Control Message Protocol, ),
ping.
http://www.rus.org/cgi-bin/nph-ping.cgi,
<Enter>.

5.1.3.
Internet Explorer ,
,
. .
,

. Internet Explorer ,
,
.
, -. , WinProxy,

216

http://www.winproxy.cz/. -
, .
- WinProxy.
. , ,
, -. http://localhost:3129 (3129 , ).
Internet Explorer URL
http://localhost:3129/. (. . 5.3). , , .
, - .

Admin
.

PROXY

'

. 5.3. WinProxy

Internet Explorer -,
Tools/Internet options (/
). Connections ()
Lan settings ( ).
(. . 5.4).
Use a proxy server for your LAN ( -), Address () 127.0.0.1 (
), ( Port) 3129. ( ),
-, .

217

Local Area Network (LAN) Settings


Automatic configuration
Automatic configuration may override manual settings. To ensure the
use of manual settings^ disable automatic configuration.
] Automatically detect settings
[Jj Use automatic configuration script

Proxy server
r^i Use a proxy server for your LAN (These settings will not apply to
'-'dial-up or VPN connections).
Address:

127.0.0.1

Port:

3129|

Advanced... J

Bypass proxy server for local addresses

OK

Cancel

. 5 . 4 .

:
, ,
, ;
. - , .
, .
:
, ..
-;


, . , <Shift>;
- ,
. , www.cydsoft.com, IP ,
, DNS, .
8 . 923

218


, -, .

5.1.4. ,
50 . 50 ?
, WEB-. ,
Windows .
WEB-,
. ,
.
10 , 100 .
Edti V
e
iw Favorte
is o
los
l
Search Favorte
is Med
ai <Q
htp w
/ wwc
,ydsoc
ft.

CyD FTP Client XP Ths


i is a powerful but easy to use program to downo
lad and upo
lad files to FTP
servers. Some of its more advanced features n
icu
lde mutli threaded files and automac
ti transfer of
files. Ths
i program is a o
j y to peope
l who prefer the compue
tr to "do the work". CyD FTP Ce
ilnt

products provide you with a complete set of tools to create great looking
our WEB site, images and GIF animations for your Web pages. info]

Interne
slications include CyD FTP Client XP (upload/download files to FTP
Postman (a handy tool for keeping feedback from your customers), frnorc
Add to Favorites...
Properties
New web site design template n
available. infoi
Internet

. 5 . 5 . www.cydsoft.com

Internet Explorer
Tools/Internet options (/ ),

219

. Advanced () Multimedia () Show Pictures ( ).


, 70 % .
,
. , .
. 5.5 www.cydsoft.com ,
,
. - , Show picture ( ).
, .

5.1.5.
, , . -
. .
Internet Explorer
.
, .
Microsoft ,
.
Reget (www.reget.com/en).
.
, ,
( ).
, , ,
.
.

Jj

-, Chapter5/Reget,
Reget 4.O.

. .
. 5.6.
, Internet Explorer, , -

220

Reget. ,
Reget . , , , 1 %, . , .

, .
KReGetProl.0
File Edit View Download Options Help
1

i i n> X >6 i J: : '

10K

Fe
liname |

Z\ Size| Downl. | Speed. j Time.

Sections^ State

47%
1445
684
7070
1:51
rege... 1332 1332

/
Jredir...
0^
1199

N?

Date j

Completed

Time \ Event
Accept: V
Range: byte$=442834Referer: http: //pro. reget. com/en/download.htm
Host: download.reget.com

J3 download(s), 1 active, 1 completed, 1 paused, 0 erro! 10902/3320 b/s

S79696

. 5 . 6 . Reget

, Reget. http://deluxe.reget.com/ru/features.htm. , , .

5.2.
, ,
. , -, ,
, , .
? , ,
.
www.download.com-.
, .

221

, "" ,
.
, , ,
. Cookies ( , ). , . Cookies. ,
Cookies. , :
1. .
2. .
3. Cookies.
,
Cookies, , .
. ,
.

5.2.1. 1
www.download.com , : ,
.
, ,
(. . Cookies-) . /
, , . Cookies, - .
, , , (. . 1 2).
, ,
:
,
Cookies, ,
;
,
, .

222


, , ,
Cookies .
,
. 5.2.2.

5.2.2. 2
, , . ( ) JavaScript, .
JavaScript, ,
,
{. . 5.2.4).
Cookies-, . \Documents and
Settings\HMH \8,

, .
@ .txt. "@" ,
Cookies.
. .
,
{. .5.2.1), Cookies .

5.2.3. 3
IP-. -
, .
Dial-up , IP- . , , , IP, .
, ()
-.
proxy- ( ),
, , , .
IP-
Cookies . Cookies-, .
IP- .
, -

223

, IP. , ,
- IP-.
, ,
0 - .
IP-,
, . .
Cookies, ,
, .

5.2.4. 4

HTML. ( ), . .
,
, .
, www.xakep.ru. ,
.
- .
, . "", .
View/Source code (/ HTML), .
( /) "". 5.1,
HTML-, .
1 5.1. HTML-
<span class="textHeaderlWhite">

rcxriocoBaHMe</span></td>

<tr>
<td height="l" class="decorCellWhite"ximg
height="l" ></td>
</tr>
<tr>
<td valign='middle' align='right'>
<table width="98%">

src="i/fon.gif" width="l"

224

<trxtdxspan

class="textBodyHome">

<iframe src = "/code/common/vote3/include/iframe__vote. asp? site


= SVT5" ID="anIframeRez3" NAME="anIframeRez3s"
frameborder="0" width="100%" marginwidth="O"

scrolling="no"
marginheight="O"x/iframe>

< / spanx / td>< / tr>


</tablexbr>
</td>
</tr>
<tr>
<td height="l" class="decorCellWhite"ximg
height="l" ></td>

src="i/fon.gif" width="l"

</tr>
<tr>
<td

class="decorBodyCelll">

<table border="0" width="100%" cellpadding="O"

cellspacing="O">

<tr>
<td class="textHeaderlWhite"
MATE/</td>

height="30"

valign="top">/

"", "
". , - . , <iframe>.
, iframe, :
Src = "/code/common/vote3/include/iframe_vote.asp?site
= SVT5"

.
. ,
http://www.xakep.ru. "http://", .
, :
http://www.xakep.ru/code/common/vote3/include/iframe_vote.asp?site=SVT5
,
(. 5.7), .
View/Source code (/ HTML) (. 5.2).

225

' http;//vlwv.xakep.u//code/common/vote3/mclude/l7me>_vote*asp?s fte=SVT5-Fle...

File Edit

View

Favorites
*j i*J

Tools

Help

Search

O i l
** Media ^p
: > Favorites
*

http \ If www. . ru/code/common/vote3/indude/iPr ame_vote. asp?site=S VT5

DVD ?

#
j

|||

1
|6 Internet

33 Done

. 5.7. www.xakep.ru

| 5.2.
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-

<meta name="keywords" content^", , ,


, Linux, , , ,
, , , Deface, ,
, , ">
<link rel="stylesheet" href="../../../../local/include/main.ess"
type="text/ess">
<script language="JavaScript"
src="../../../../local/include/scripts.j s"></script>
</head>

226

<body background="" bgcolor="#FFFFFF" marginwidth="0" marginheight="0"


topmargin="0" leftmargin="O" rightmargin="0" bottommargin="0">
<table bgcolor="#FFFFFF" width="100%" cellpadding="O" cellspacing="O"
border="0"><tr><td>
<table cellpadding="3" cellspacing="O" border="0" id="votationholder">
<form action="../votel.asp" method="post" target="_top">
<input type="hidden" name="VoteID" value="WT1051">
<input type="hidden" name="userip" value="80.80.99.95">
<tr><td colspan="2" align=fIcenter"><b class="textVoteTitle">EcTb
DVD- ?</b></tdx/tr>

< t r x t d width="10px"><input type="radio" name="VoteOptionID"


value="OVT1816"></tdxtd width="100%" align="left">EcTb</tdx/tr>
< t r x t d width="10px"><input type="radio" name="VoteOptionID"
value="OVT1817"x/td><td width="100%" align="left">HeTy</tdx/tr>
< t r x t d colspan="2" align="center"><input type="submit" name="sl"
class="decorVoteInput" value="OTBeTHTb"x/tdx/tr>
< t r x t d colspan="2" align="center">[<a
href="../vote_resultsl.asp?site=SVT5"
target="_top"
class="textVtrezlink">peya</a>] </tdx/tr>
</form>
</table>
</td>
</tr>
</table>
<script language="JavaScript">

< i

document.domain= 'xakep.ru'
parent. adjustFrame (window)

II>
</script>
</body>
</html>

"<form action=".
, .
"../votel.asp". , , , .
:
http://www.xakep.ru/code/common/vote3/include/iframe_vote.asp?site=SVT5

227

, , .
:
http://www.xakep.ru/code/common/vote3/include/
, . .
, .
:
http://www.xakep.ru/code/common/vote3/
,
"<form action=M.
:
http://www.xakep.ru/code/common/vote3/votel.asp
"<form action=".
:
<form
action="http://www.xakep.ru/code/coiranon/vote3/votel.asp"
method="post" target="_top">

5.2. ,
input type="hidden". <input> ,
, .
type="hidden" , .
:
<input type="hidden" name="userip" value="182.181.19.5">

IP-. 182.181.19.5.

IP. ? .
:
1. ( 5.2) , htm.
2. .
3. IP- 2.
, , IP-. , , ,
, ASP,
.
, , HTML,
IP-.

228

-. HTML-,
, Java-Script, , (. . 5.2.1). , HTML-, www.xakep.ru, JavaScript,
. , IP-.

5.3.
.
. ,
( ) .
, ( ), , .

. ,
: , . E-mail .
,
- , . , .
- , . , .

, - .
. , - .

.
,
. .
,
, .
.
,
-.
. 3, E-mail-.

229

, , . . , ,
.

5.3.1.
E-mail-,
. , .
, , .
, Windows
BMP-, JPEG-.
,
( Internet Explorer) . .
,
, scr, bmp,
jpg, exe, com, pif . .
"Mail Delivery".
, , . , ,
. , Mail Delivery. ,
E-mail .
, . , .
, Windows . Microsoft E-mail.
, .
,
- .
, - .
, .
, - 90 % .

230

, , , ,
, . , , - .
,
.

5.3.2.

.
,
, .
, . :
.
.
, , .
, - , , .
, Whois.
, . .
.
, ,
. ,
, , ,
- ( , ) WEB.
. ,
. E-mail- : " -
?" () .
. , E-mail.
,
E-mail ,

231

. , . SMTP (Simple Mail Transfer Protocol,


) , , .
: ,
. ,
, . 80- . , ,
.

5.3.3.
. ,
,
. .
, , , , , , ,
.
. , .
E-Mail .
, () , . , .
,
.

5.3.4.
. -
, . ,
, .

.
, , , ,
, . , .

232

, . ? . - , . ,
. , . ,
, . ,
.
? . , , , .
. , .
, . ? . , . , ,
, . ,
, , .
. 20 . ,
. - , 34
.
,
, .
, , -
. .
, ( ).
, , . .
. ,
,
. ,
.
, ,
. ,
, . 90 % .
.
. , ,

. , .
, , ,
, . , , ,
, .
. ,
:


, .
!

5.3.5.

. , , ,
.
, . ,
, , .

,
. 4.7.6. ,
, . , .

5.3.6.
.
. ,
. .

. . . , , -

234

.
, .
,
, .
, ,
.
- , .

5.4.
- , -, IP- . , . Dial-up-
, IP-
, ,
. .
, IP- , , .
IP- .
, IP .
,
.
IRC (Internet
Relay Chat, ),
. . - ,
( ).
. , , .

5.4.1. -
- (proxy) . WEB- ,

235

, .
, -. ,
www.intel.com,
- www.intel.com, , - . ,
, ,
.
, (. . 5.1.3) ,
. - . WEB-,
, IP-, .
-? ,

. , , ,
. , - ? , .
, proxy ,
. :
1. HTTP- (Hypertext
Transfer Protocol, ),
HTTP-Proxy.
POP (Post Office Protocol, ),
SMTP (Simple Mail Transfer Protocol, ) FTP- (File Transfer Protocol, ).
, . Socks ( sockets, ), ,
.
2. - Socks-,
. , Socks- , . Socks .
, .
3. - .
.
, . ,
, .

236

http://www.atomintersoft.com/products/
alive%2Dproxy/online%2Dproxy%2Dchecker/, ,
(// SSL).

[^

-,
\Chapter5 proxy.url. .

-,
. proxy , IP-
.
, ,
.
-
, .
, ? - Whois.
http://www.nic.ru/whois/en/. (. . 5.8),
Information about IP-address .
, 5.3.
I 5.3. IP-
Information about IP-address 193.233.81.154 (from RIPE):
metnum:
netname:
descr:

193.233.80.0 - 193.233.83.255
SUSUCSC-LAN
Sourth Ural State University

descr:
country:

The Chelyabinsk Center of the Russian Academy of Sciences


RU
DVL7-RIPE
FGD2-RIPE

admin-c:
tech-c:
status:
notify:

ASSIGNED PA

rant-by:

feodor@urc.ac.ru
AS8324-MNT

changed:
source:

feodor@urc.ac.ru 20040316
RIPE

route:

193.233.80.0/21

237

descr:

South Ural Regional FREEnet

origin:

AS8324

remarks:

removed cross-mnt:

AS8324-MNT

mnt-routes:

AS8324-MNT

mnt-by:

AS8324-MNT

changed:

hostmaster@free.net 19970930

changed:

hostmaster@free.net 20020410

source:

RIPE

, (Chelyabinsk Center of the Russian Academy


of Sciences).
Whois , ,
, .

Trace Route, ,
, ,
.
Trace Route , . , .

5.4.2. -
.
. , , .
, , ,
, .
, .
Socks-
, .
HTTP-Proxy.
Internet Explorer (. 5.8). , .

-, ,
.

238

SSL- (Secure Socket Layer ), , ,


.

Proxy Settings
Servers
i jipi_, Type
|
I

4 L

Proxy address to use

^ J HTTP:
Secure:
FTP:

Gopher:

|7~7^

Socks:

R Use the same proxy server for all protocols


F Exceptions
~~~"

[ an I , Do not use proxy server for addresses beginning with:

_"1
Use semicolons (;) to separate entries.

OK

Cancel

. 5.8. - Internet Explorer

, - SSL-,
( . . 5.4.1)
http://www.atom^ersoft.com/products/alive^

.
proxy ,
SSL- ( "https://").
SSL- (, ) (, http://www.hotmail.com). , SSL.
HTTP-Proxy- Socks- SockChain,
http://www.ufasoft.com/socks/. ,
.

239

5.4.3.
,
. , . , . :
Anonymizer (www.anonymizer.com) , ;
Private Web Access (www.bell-labs.com/project/lpwa)
Lucent;
Onion Router (www.onion-router.net)
;
Freedom Network (www.freedom.net)
Zero Knowledge System.
,
, ,
IP- . , .
Freedom Network 2 .
, $50 .
, ,
.
( Proxy Socks), .
,
.
,
,
,
.
,
, . ,
,
, .
, , , ,
, ,
. , $50 .

240

5.4.4. -,
, , - (, )
. ,
Cookies.
WEB-
, ( ) .
, WEB-
, - ,
. ,
, , , . , , . , - , ,
(, , , ).
, :
Cookies.
. , ,
. Cookies,
, ;
(
) about:blank. ,
, , ,
. Internet Explorer;
URL ( ),
about:blank
;
. -
(, ). ( , ) .
/ / .

241

, WEB-,
( ),
, .
, , , .
.

, .

5.4.5.
IP-,
MAC (Media Access Control, ). 48- , . , .
IP- -
( ), . , , . Linux , Windows
. " ".
- - . , ,
IP-, MAC .
Fantom MAC ,
.
IP, MAC . , ,
, , ,
. ( ).
, IP, - .
.
/,
. , . ,
, ,
.

242

IP MAC
. , IP, MAC .

5.5.
,
? ,
.
, . WEB-
-. E-mail- - , ,
. , , .
( ), , (IP-)
, .
, IP- Proxy,
, .

5.5.1.
, ,
jondo@hotmail.com ( , ),
SMTP-. E-mail- (SMTP) . , , :
, .
jondo@hotmail.com mail.com,
;
.
, ,
IP- ,
.
jondo@hotmail.com, , , , . .
( ).

243

, . ,
, SMTP-, .
.
E-mail ,
. , .
SMTP-
. ,
, ,
, .
SMTP-.
. Outlook Express
Tools/Accounts (/ ).
Add ()
Mail ().
. , .
1. ,
. ,
. , . ,
Jon Doe <jondo@hotmail.com>, , E-mail-, "Jon Doe".
2. E-mail. , , . . jondo@hotmail.com.
3. , , . .
( ,
"@), .
,
.
SMTP. , (, ), SMTP.
SMTP-
( , ),
Postman (www.cydsoft.com)
SMTP-.
, Postman.
Options/Program options. Build-in Mail Server Send from (. 5.9). ,
.

246

by mx2.valuehost.ru with SMTP; 20 Sep 2004 00:59:10 +0400


Received: from HSE-Toronto-pppl30995.sympatico.ca

([64.228.69.82])

by tomts31-srv.bellnexxia.net
(InterMail vM.5.01.06.10 201-253-122-130-110-20040306) with SMTP
id <200310.VQG998.tomts-srv.bellnexxia.net@HSE-Torontopppl30.sympatico.ca>;
Sun, 19 Sep 2004 14:31:10 -0400
Message-ID: <006201c49ed8$bd91ecbb$afbafb30@sjeph>
Reply-To: "=?windows-1251?B?U2hvcDRl?=" <lk@tin.it>
From: "=?windows-1251?B?U2hvcDRl?=" <vms@tin.it>
To:

=?windows-1251?B?wOPg7+jp?= <gz@mail.ru>

Subject: =?windows-1251?B?IsLF183bySIg907t4PDo6iE=?=
Date: Sun, 19 Sep 2004 22:11:30 +0400
Organization: =?windows-1251?B?QmxlZWxpZ2hO?=
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="

=_NextPart_000_001E_01C2AA85 . 597C61B6"

X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081

Received: ,
, IP- . x-Maiier
, . , .
, , . , .
. , .

5.6.
. ,
. 5.4 5.5 .
, . , . 4.7,
{. . 4.6) .
. , ,
.

247

,
.

5.6.1.
. 4.7 ,
.
. ,
? ,
,
, .
,
, .

.
. 4.6 , . , . , , WEB- ( Internet
Information Services), Windows 2000/XP. , .
,
, .

, . ,
, MS SQL Server.
,
, SQL Server .
, , , , .

5.6.2.
, ,
, . . 4.7.3
. , , .
, Windows
Internet Explorer. ,

248

, , ,
, , IE, .

. . Cookies,
. , Cookies
, , , , , .
Cookies ( ) ,
. ,
Cookies, .

5.6.3. B u g T r a q
, .
, -
. ,
, .
, . www.securityfocus.com
(. . 5.10).
.
,
www.securityfocus.com. ,
, ,
. , , .
, " "
, // .
- -,
, . .
, , . , . ,
, .
, .

249

Feds say Lamo inspired other hackers

Examining a Public Exploit, Part 2


fry Don Parker .:.p IV. 2:004
The purpose of this article is to analyze a public
exploit in a lab environment, see the alerts generated
by an intrusion detection system, and then do some
packet analysis of the malicious binary in order to
icrosoft warns of poisoned picture peril
better understand what it does and how you may
Kevin Poulsen . - <
have been compromised. Part 2 of 2. ...
jlnerability in Windows XP and other products
:..:: ..'i:
.
'
.
Metasploit Framework. Part 3
: v Pukhraj Singh and K.K. Mookhey ".". p Ifl ., 00 Mitnick movie comes t the U.S.
This third and final article in the Metasploit series
Plea deal in 'war spam ting' prosecubo
covers the msfcli scripting interface as well as the
intuitive web interface to the Framework. The article
also discusses what's new with version 2.2, and then
Cash Bounties For Spammers Win Limited FTC
introduces the exploit development process through
Backing
an example. ....
Jonathan Krim, Washington Post

Kevin Poo/sen .
Prosecutors blame the New York Times hacker for
inspiring others of his generation to become cyber
itlaws. ...

BTernmftnts slow bff tha mark to combat


i Robert Wielaard, The Associated Press

j Click here foi Coiel


.::

MICROSOFT Deploying Network Access Quarantine


Control, Pert i

. 5 . 1 0 . w w w . s e c u r i t y f o c u s . c o m

5.6.4.

Firewall

.
WEB-, www.securityfocus.com. ,
. 8 , , .
,
, . ,
, , .
IRC (Internet Relay Chat,
) IP-
. Windows 95 , - .
, , ,
, .
9 . 923

250

,
.
1. , .
() IRC. ,
on-line-,
, . ,
.
-.
2. ,
IP-. -
(. . 5.4).
3. (Firewall).
.
.
Windows XP, ,
. ,
, . ,
. , :
Sygate Personal Firewal . , , DoS (Denial of
Service, ). http://smb.sygate..com;
McAfee Personal Firewall
. McAfee
, .
http://us.mcafee.com;
Norton Personal Firewall "Norton"
Norton Commander, ,
, ,
, . Firewall ,
, , .
Symantec, ,

251

, - Norton Commander.
http://www.symantec.com.
, . , . ,
. , ,
- .
, ,
. . 5.11
, Firewall. , , , . ,
, .

'* ^

INTERNET

Linux server

NT Server

Dajabase server

J
Roulef

Fir^ll

Computers Computers Computers


. 5.11. , Firewall

:
. , 21 , ,
FTP- / ;
URL-. , , ;
IP-.
. ,
,
. ,
, ,
;

252

Touch Memory, Smart Card


.
,
. ,
, , .
Firewall ,
. ,

, .
, . , , .

5.6.5. Firewall
Firewall, , ,
.
Firewall .
,
. , . 5.12 , . - ,
, .
, IP-, . ,
. , IP- .
, IP. 100
" , .
IP-,
WEB-. - ,
:
, , , ;
, ;

253

IP-
, ;
IP- .
.
. - .
IP-, .
IP-
.
.
, , .
,
- .
()
- ().
, , . ,

, .
. , WEB-, 80 .
!!! ,
. , . Loki,
ICMP- Echo Request (-) Echo Reply (-), ping.
, , . (. . 4.1), , ,
"" . . , , .
,
,
.
,
- Touch Memory, Smart Card
. ,
. () -

254

.
.
. . , , , , ,
.
,
.

. . , . ,
Firewall , .
, , ,
, .
, - .

5.6.6. Firewall
, Firewall . . ,
,
.
,
. IP-, . IP-
- , .
, MAC- IP- ,
. ,
,
, . .
. , , . , .
. , .
, .
, ,
. , .

255

, .
,
.
, , , , .
,
.
, , ,
. .
, , , .
, .

5.6.7. V i r t u a l P r i v a t e N e t w o r k

(VPN, Virtual Private Network). ,
, ,
.
, ,
(. . 5.12).

office
. 5.12. VPN

.
. ,
, . ,
. ,
WEB-. ,
,
, , ,
WEB- ( ).
, , . VPN WEB- .

256

'

'

. 5.13.

, VPN ,
(. . 5.13).
,
, ,
, ,
. . ,
VPN, .

5.6.8.
"", : "
?" , , , , , .
. :

- .
,
. ,
? . , ,
,
, , - .
,
.
, . , ,
. ,
Floppy- CD-ROM . , -

257

, , .
, ,
. ,
. .
, - . , 10 ,
20. , , . ,
. - ,
, .
,
. ,
,
.
, , . ,
.
.
, . :
net config server /hidden:yes

. ,
. IP-, ,
, .

5.6.9.
, . . ,
. , , .
. , . -
, ,
. , ,
.
.
,
. .
, .

- , , -

258

. , , ,
. , . ,
.

5.7.
, . , Windows,
Microsoft. ,
File and Printer Sharing for Microsoft Networks (
Microsoft). , , .

.
Windows 2000 // .
.
.
Microsoft, . . , , .
,
. :

ipconfig IP-;
CyD NET Utils .

ipconfig
IP-.
:
Windows IP Configuration
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
IP-Address
: 192.168.8.57
Subnet Mask
-.255.255.255.0
Default Gateway
: 192.168.8.1

,
IP-. (Ethernet
adapter Local Area Connection) , , 192.168.8.57.

259

- IP-,
.
. . ,
, IP- , , ().
255.255.255.0 ( ),
, 57 IP- . .
, 0 255
( 0 255 ). . CyD NET Utils
Utils/Share scanner.
From address 192.168.8.1, address 192.168.8.57
(. . 5.14). Scan .
.
, , , \\192.168.8.l\ftp. , .

. CyD NET Utils - [Share Scanner]

File Project Manage Utiis Service Help


J

J W

&

4) J

To address: (192.168.8.57
Start scannn
ig
Scannn
i g: 192.168.8.1
WI92.168.8.1\ftp
Wl 92.168.8.1\Data
\M92.168.8.1\NETLOGON
Wl 92.168.8.1\Backup

\92.168.8.
\\192.lB8.8.l\Docs
\\192.168.8.1\SYSVOL
\YI92.168.8.1\BigDocs
Scanning: 192.168.8.2
Scanning: 192.168.8.3
Scanning: 192.168.8.4
Can not ping host (192.168.8.4): (Request timed out)
Scanning: 192.168.8.5
Scanning: 192.168.8.6
Scanning: 192.168.8.7
Scanning: 192.168.8.8
Scanning: 19268,8,?9

. 5 . 1 4 . CyD NET Utils

260

CyD NET Utils , ping. Windows , , .


, .
ping,
. ,
, 99,99999 %
.

5.8.
.
,
. ,
.
?
BBS (Bulletin Board
System, ) .
, ,
.
. , , . :
1. -
, .

, , . . , .
2. .
Internet/
Intranet. , .
3. . .
4. . , . 3 (
), . - -

261

, , .
:
1. .
, .
2. . .
(Firewall)
( ), -
.
(yahoo.com, microsoft.com, NASA . .).
, , . .
, . ,
.
, , (. . 5.3).

5.8.1.
, ,
. ?
? .
. ,
, .
, . , .
, , . ? , ,
( Linux ) .
, ,
. , 21
FTP-. , .
.
1024 .
FTP, HTTP, Telnet . .
. ,

262

, - . {. . 4.6.2 4.6.3).
.
, WEB-, ,
. 80 ,
WEB-.
,
(, , ). 80
"http". ,
- . ,
. .
1024. . ? -

.
1024,
, . ,
,
.
,
. , ,
.
, . ,
, .


, . , . , ,
.
Shadow Scan
(http://www.rsh.kiev.ua). , ,
.
.
. , ,
WEB-. , Windows. , WEB-
IIS, . Windows

263

Apache. WEB-, .
-, , 80 .
Shadow Scan
.
.
? :
1. TCP/IP.
- . Shadow Scan
.
: Windows Linux.
, Windows 2000/XP/2003
, .
, Linux,
,
.
.
2. .
, FTP.

. ,
" FreeBSD4.0, FTP .". , , . .
, .
, "" .
, .
. Windows NT 4.0 , , Linux.
Windows NT Linux.
.
3. .
, . , ,
. ,
, .

264

,
, , Linux , ASP. , .
: asp
PHP- . ,
, asp,
-.
, . . , .
,
. -
, ,

.


, , , . :
. , .
. ,
,
. , . , .
? . , . www.securityfocus.com.
.
, ( 70 % 90 %)
. ,
, - .
,
(,
) . , ( ) , :


, -

265

. BugTraq
. www.securityfocus.com, , . ,
, . ? ? , , .
,
SATAN, Internet Scanner, NetSonar, CyberCop
Scanner.
- . , . , ,
. , -
.
Internet Security Systems (ISS, - www.iss.net),
(Internet Scanner, Security Manager, System
Scanner Database Scanner) ,
. ISS
Microsoft .
, ,
.
Internet Security Systems
SAFEsuite.
, .
,
. ,
.
,
, - (BugTraq).
, .
, //
.www.securityfocus.com .
, . , .

, ?
.
10 3: 923

266

, . , . ,
.
,
, .
. ,
, . ,
, , . , ,
. ,
, , .
:
, . ,
.
: , . , , , /, .
, 21 FTP. ( ), , , .
, .
,
, .
,
. . .
,
. ,
.
, .
,
. , .
. , FTP- . ,
. , , .
, , - , .

267

FTP-, ,
.
, , .
, .
, . , , . , , , Firewall,
.
. , , , . ,
?
! .
.

. .
,
. -
.
, .
, , .
,
. ,
. ,
.
, . .
,
, ,
.

5.8.2. WWW-
WWW- . CGI/PHP- , .

268

CGI-. ,
, "" .
, .

,
URL, . , IP-
(. . 5.2). , . .
PHP-nuke. , , , . URL , ID.
, , . , ( ,
PHP-nuke ), SQL-
ID . , ,
, .
, (, Perl) Internet. -
,
, .
,
. Java,
, -
WEB-.
" !".
. -
, ,
. , .
, CGI. ? . , .
, .
, www.securityfocus.com,
WEB-.

269

WWW
10 ,
- . , . "",
. ,
, .
.
,
. ,
.
www.google.com.
, . ,
,
.

WEB-. , .
, ,
SSL. Google
,
. ,
, .


google.com ,
,
Google.
. ,
:
filetype:doc

filetype:xls

Word Excel,
" ". , , , , .

270


, , - . ? , PHP, Perl .
, , . .
, phpbb ikonboard,
.
-
, , ,
.
,
.
, ? .
URL. ,
www.invisionpower.com , Invision Power Board (
), :
http://forums.invisionpower.com/index.php?showforum=l

index.php?showforum= , Invision Power Board. , URL


, Google
:
inurl:index.php?showforum

, . , - .
,
"Powered by Invision Power Board(U)". , , .
,
. :
Powered by Invision Power Board(U)
inurl:index.php?showforum

150 , . ,
Invision Power Board,
. , .
"inurl:admin/index.php",
, . - .
, , , ,
.

271

5.8.3.
, ,
" ". , ,
. .
.
, , , .
, . .
. , "" . (. . 4.7.3).
? " ", , .
. , ,
. . ,
. !!!
, , ,
. . , .
, FTP- . ,
,
.
. . , , , .
, - .
. , Firewall .
, . , . . ,
Windows, , "". Unix- ,
"root", "" , Unix- .
.
, . . . -

272

, .
, ,
.
,
.
, , . Windows,
, . ,
MS SQL Server 7.0,
"sa", . , Microsoft
,
SQL Server 2000 , .
.
, .
.
, ,
, .
Shadow Scan CyD NET
Utils ( ).

5.8.4.
:
10 ;
;
;
, .
,
.


.
. , .
:
(. 5.15, )
(. 5.15, ).
( ),
, .

Computer

Compue
tr

273

Computer

Compue
tr

Computer

Compue
tr ^

. 5.15. ( , )

,
. ? .
, , -,
, ,
.

. ,
,
. , .
,
10 /.
(Hub) (Swich) (. . 5.16).
.
Hub, ,
, , .
,
Swich ,
-. ,
IP-, .
IP-,
. , .

, , .
, -
,

274

Linux server

NT ?erver

Database server

|
Computers

Computers

Computers

. 5 . 1 6 .

, .
, .

. "" , . , ,
. , , ,
, SSL-.
,
, , .
, -
.
. ,
.
. ,
,
. .
...

275

TCP/IP.
, .
, , .
,
.
, . .


, . . ,
IP-, . ,
, .
, . ,
, IP- . ( ) . Firewall ping- , ,
, .


. ,
ARP- .
, - IP, -, . -, ,
, IP? ARP (Address Resolution Protocol, ), , IP-.
IP-, -
FFFFFFFFFFFFh. IP,
-. ARP- . , -.
, -

276

, .
, , IP-?
-,
, , IP.
, ARP-
. .
, . ,
. ,
. , .
, . - , MAC IP .
, .
. CyD NET Utils. Manage/
IP ARP. , ARP-, .
ARP,
.
,
.
DNS-. ARP-
IP- MAC, DNS
IP-. , DNS-,
.
.
, ,
. - DNS- ,
www.yahoo.com, WEB- Yahoo .
DoS, (. . 5.8.6).

5.8.5.
, , .

277

,
. , ?
. .
.
.

.

, , , . .
?
. .
, . , ,
(. . 4.7.1).
, ,
. ,
.
, ? ,
(. . 4.1.2).
Windows
. Anna_Kurnikova.jpg.exe,
(), ,
. :
Anna_Kurnikova.jpg . ,
, .
,
. ,
, . , .
. ,
, ( ). .
, ,
. ,
,
. , . , ,
.

278

. ,
. , . ,
, ,
. , , . .
,
, .
- -.
,
. ,
, . , , ,
.
, . .
, , .
, E-mail-.
( ), .
, , .
, IP- .
- , . .
, ,
, . Back Orifice, .
Back Orifice
:
;
;
;
;

279

;
, .
(Plug-in), .
, ,
,
, . ,
Back Orifice Win32..

5.8.6. D e n i a l of S e r v i c e
, , (DoS). ,
. ?
. , , ,
, , .
DoS : / .
. ,
(
). ,
"HELLO".
5 .
:

5

, , .
,
.
, -
, , , . , . . Denial
of Service .
, , , .
. IP- , .

280

, -
.
,
, , . . , WEB- . , .

, .
, .
, , .
. ,
. , 100 Pentium 100 , , . , ,
64 , .
? , -
. IP-, ,
Dial-up 56 /.
, .
IP- ping-
.
. , ,
-,
. , - . ?
, .
DoS ping- CyD NET Utils. Utils/Ping server.
Options (. . 5.17).
Number of packets ( )
( ). 1 Time out ( ).
,
ping-. Size of packets ( )
, 10 000, . ping IP-.
, , ,
, . , , -

281

. , . ,
, - .
J Pn
ig V, 1 Save ^3 Prn
i t resutl 3$. xit
Address Opo
itns j
Number of packets: 165535
Szie of packets: 110000
earch1
' 92.168.8.56'
Hos1
t'92.163.8.56-'192.168.8.56
Try:l
Send 10000 bytes on 192.168.8.56 92.168.8.56)
Car. not pino host (192.168.8.56): [Request >imed out!
Try:2
Send 10000 bytes on 192.168.8.56 (192.168.8.56)
not p;ng host (1S2.188.8.56). Request tmd out]
Try:3
Send 10000 bytes on 192.163.8.56 (192.168.8.56)
Can not ping host (192.168.8.56): (Request tirr.*d out)
Try:4
Co-.rl 1 K,,fa<- 1 QO 1 CQ Q ^C 11 QO 1 Q Q KC1
Pinging; 192.168,8.56

. 5.17. ping-


, . ,
. ,
. ,
, . ( ) , .
.
, . ,
,
. WEB-
(, RFC Request for
Comments ) . , , . 1 100 ,
. , .
.

282

IP-. , .
IP- ,
.
, TCP/IP, . IP-,
. ,
. ,
, (TimeOut 5 ).

.

Distributed Denial Of Service


DoS , www.microsoft.com www.yahoo.com,
. . ,
. DoS (Distributed Denial of Service).
. , , . Mydoom ,
Mydoom ,
Microsoft. , . Microsoft ,
, .
,
.
,
.

5.8.7.
, :
( ),
;

283

;
.
, ,
root ( Unix-) . ,
Hash-, .
,
MD5, . . . hash-, . , ,
hash-, .
, .
, , ,
hash- . .

,
,
John
the Ripper

(http://www.openwall.com/john/) Password Pro (http://www.insidepro.com/).


Windows- ,
SAM,
SAMinside (http://www.insidepro.com/). . 5.18.

SAMinside
iw 2
File. Ve
1 Username
JQBilG

! Administrator
jQfredc
twoa
0 william
iDthreea
JQfoura

Password;

:l

4
1010
500
1011
1000
1012
1001
1002

I LMPassword

NTPassword

YOKOHAMA
SCLEROSIS
CRACKPOT
AA
' ???????Y
AAA
AAAA

YokoHama
ScleROSIS
crackpot
aa
??????????????
aaa
aaaa

| LMHash
5ECD9236D21095CE75842... . C04EB42B9F5B114C86...
C7E2622D76D3F001CF...
73CC402BD3E791756C3D...
3466C2B0487FE39A417EAF... 80030E356D15FB1942...
89D42A44E77140AAAAD3B,., C5663434F963BE79C8...
6B6E0FB2ED246885B9...
DBC5E5CBA8028091B79A,,,
1C3A2B6D939A1021AAD3...
E24106942BF38BCF57.,,
FA5664875FFADF0AF6...
DCF9CAA6DBC2F2DFAAD3,..

GRUHHH

. 5.18. SAMinside Windows NT-

,
? , . ,

284

?
? .

( , ), .
Windows 9 PWL, ,
. Windows 2000/XP
SAM ,
.
PWLinside (http://www.insidepro.com/).


:

, ;
,
, ;

, .
, .
E-mail, , - .

, . .
, .
( ) .
,
. , . , ,
, , .
,
. -
.
, , , . -

285

, ,
, .

, .
, , ,
. , , , ,
.
, .
,
, . .
, .
, - , .
, FTP- ,
,
. FTP-
. -
, ,
.
, , ,
.
, .
, . , . , , .
, ,
, .

5.8.8.
, : Windows Linux?
, , .
,
. Unix Windows, .

286

,
. ,
. , .
, ,
, .
.
.
Windows , Windows
. Unix , , . , Windows
, Unix , .
, , ,
. . , Windows WEB- Apache, Microsoft
,
.
?
, .
TCP/IP, ,
(, . .) -
.
IPv6
, ,
. . , , , .
, , , .

5.8.9.
,
. , ,
. , . .

<

287

.
, . .
? :
1. . ,
, .
2. ,
, .
3. .
4. , .
5. . . , , .
.
,
.

5.9.
- ,
,
(. . 5.4 5.5). IP-
-,
(,
). , , ,
, ( ).
, ?
. ,
, .

5.9.1.
,
,
. . - .

288

, -
Shell ( )
. , , , 10 000,
.
.
. ,
/ ,
,
.
.
, - (, ).

, .
,
. , , , .
,
.
, , , .
, . IP-,
( ), , - . , ,
. ,
,
0,
.
.
.
, .
,
.
, . .
- ,
.
, , ,
,

289

, .
.
,
,
IP-. ,
.

5.9.2.
(, ), , ,
( ) .
, , .
. , , .
, . , ,
.
, .
, , ,
. , . , ,
, , .
, .

,
.

5.9.3.
, .
. ,
, , ,
.
. .
, .

290

, , ,
. . , . , ? . ,
.
.
, . , ,
. ,
. ,
, , ,
, .

5.10.

, . ?
,
, , .

, . , . , , ,
, , .
?
,
, .
,
. , WEB- , . ""
:

BugTraq , ;
, ;
-,
, , ;

291


, ,
.
, , ,
, .
( ). ,
. ,
- .
,
IP- , .
( ), , , . .
, ,
, , .
IP-
. ,
, .
,
,
, . , . Unix- (, Linux
FreeBSD)
. Windows
.
, ,
. 90 %, ,
. ,
.
- , ,
. , .
.
, .
DNS- ARP- . -

292

.
, , JavaScript,
. ,
.

( ). , , , . . ,
/, , , .
. , , , , WEB , .
. ,
, .
.
, ,
. :),
. .
, 90 % , . - ,
. ,
.
,
.
, . ,
. ,
.

5.10.1.
. "
, .

293

. ( ) :
, . , ,
,
, ;
. .
, .

, . :
1. - , . ,
.
2. , , (,
).
3. ,
.
, / .

, CD-R/RW,
DVD, , .
, .
. . , , .
,
, (
) . .
, . () , .

294

, . , . .

. ,
. ,
, 12 ,
15 . , , . , .
,
.
.
.
,
.


1. UIFiie
2.
3.
4.

UIFile
<style resid=framess>
element
{
background: argb(0,0,0,0);
}
element

[id=atom(contentcontainer)]

{
background: rcbmp(100,6,#FF00FF,0,0,1,0);
}
button
{
background: rcbmp(112,6,#FF00FF,0,0,1,0);
borderthickness: rect(8,8,0,8) ;
}
</style>
<style resid=toppanelss>
element
{
background: argb(0,0,0,0);
fontface: rcstr(l);
}
element [ i d = a t o m ( t o p p a n e l ) ]
{
background: a r g b ( 0 , 0 , 0 , 0 ) ;
}

11 . 923

298

1
element [id=atom(divider)]
{
background: argb(0,0,0,0);
}
element [id=atom(product)]
{
animation: alpha | s | mediumslow;
}
element [id=atom(toppanel)]
{
foreground: rgb(239,247,255);
}
element [ id=atom (welcome)]
{
fontstyle: italic;
fontsize: rcint(44) pt;
fontweight: bold;
padding: rect(Orp,Orp,22rp,0);
contentalign: topright;
}
element [ id=atom (welcomeshadow) 3
{
foreground: rgb(49,81,181);
fontstyle: italic;
fontsize: rcint(44) pt;
fontweight: bold;
padding: rect(2rp,3rp,20rp/0);
contentalign: topright;,
}
element[id=atom(help)]
{
fontsize: rcint(45) pt;
padding: rect(14Orp,141rp,0,0);
contentalign: wrapright;
}

</style>
<style resid=bottompanelss>
element

UIFile
{
background: argb(0,0,0,0);
}
element [id=atom(bottompanel)]
{
background: argb(0,0,0,0);//gradient(argb(0,57,52,173),
argb(0,0,48,156), 0 ) ;
fontface: rcstr(2);
}
element [id=atom(divider)]
{
//background: rcbmp(126,6,#FF00FF,0,0,1,0);
background: argb(0,0,0,0);
}
- element [id=atorn(options)]
{
padding: rect(25rp, 20rp, 25rp, 20rp);
}
button
{
fontsize: rcint(42) pt;
foreground: black;//white;
cursor: hand;
}
button [mousefocused]
{
fontstyle: underline;
}
button [keyfocused]
{
fontstyle: underline;
}
element [id=atom(instruct) ]
{
contentalign: wrapleft;
padding: rect(18rp,0,0,0);
fontsize: rcint(43) pt;
foreground: white;

29

300
</style>
<style resid=leftpanelss>
element
background: argb(0,0,0,0);
fontface: rcstr(l);
</style>
<style resid=rightpanelss>
element
background: argb(0,0,0,0);

</style>
<style resid=hotaccountlistss>
element
background: argb(0,0,0,0);
fontface: rcstr(3);
logonaccount
cursor: hand;
animation: alpha | log | fast;

logonaccount [logonstate=l]
{
animation: rectangle | s | mediumfast;
cursor: arrow;
alpha:255;
}
logonaccount [mousewithin]
cursor: hand;

UIFile

301

alpha:255;
>
logonaccount

[selected]

{
cursor: hand;
alpha:255;
}
element [id=atom(userpane)]
{
padding: rect(2rp,2rp,14rp,2rp);
borderthickness: rect(0,0,0,0);
bordercolor: rgb(43,102,159);
fontsize: rcint(45) pt;
}
element

[id=atom(userpane)][selected]

{
background: rcbmp(112,6,#FF00FF,0,0,1,0);
}
logonaccount [selected]
{
alpha: 255;
}
element

[id=atom(pictureframe)]

{
background: rcbmp(113,6,#FF00FF,0,0,1,0);
borderthickness: rect(5,5,5,5);
margin: rect(0,0, 7rp,0);
alpha: 96;
}
element [id=atom(pictureframe)]

[mousefocused]

{
background: rcbmp(119,6,#FF00FF,0,0,1,0);
borderthickness: rect(5,5,5,5);
margin: rect(0,0,7rp,0);
alpha: 255;
}
element [id=atom(pictureframe) ] [selected]

302

1
{
background: rcbmp(119,6,#FF00FF,0,0,1,0);
borderthickness: rect(5,5,5,5);
margin: rect(0,0,7rp,0);
alpha: 255;
}
element [id=atom(username) ]
{
foreground: rgb(0,0,0);//rgb(101,121,173);
contentalign: endellipsis;
}
element [id=atom(username)]

[mousefocused]

{
foreground: rgb(0,0,0);
contentalign: endellipsis;
}
element [id=atom(username)] [selected]
{
foreground: rgb(0,0,0);
contentalign: endellipsis;
}
button [class="status"]
{
background: argb(0,0,0,0);
foreground: rgb(0,0,0);//rgb(255,255,255);
fontsize: rcint(46) pt;
fontweight: bold;
}
button

[class="status"][mousefocused]

{
fontstyle: underline;
}
button

[class="status"][keyfocused]

{
fontstyle: underline;
}
button

[class="status"][selected]

{
foreground: rgb(239,247,255);

UIFile

303

fontsize: rcint(46) pt;


fontweight: bold;

</style>
<style resid=accountlistss>
element
{
background: argb(0,0,0,0);
fontface: rcstr(3);
}
logonaccount
{
cursor: hand;
animation: alpha | log | fast;
background: argb(0,0,0,0);
}
logonaccount

[logonstate=l]

{
animation: rectangle | s | mediumfast;
cursor: arrow;
}
element

[id=atom(userpane)3

{
padding: rect(2rp,2rp,14rp,2rp);
borderthickness: rect(0,0,0,0);
bordercolor: rgb(0,0,0);//rgb(43,102,159)
fontsize: rcint(45) pt;
}
element

[id=atom(userpane)][selected]

{
background: rcbmp(112,6,#FF00FF,0,0,1,0);
}
element

[id=atom(pictureframe)]

{
background: rcbmp(113,6,#FF00FF,0,0,1,0);
borderthickness: rect(5,5,5,5);
margin: r e c t ( 0 , 0 , 7 r p , 0 ) ;

304

1
}
element [id=atom(username) ]
{
foreground: rgb(239,247,255);
contentalign: endellipsis;
}
button [class="status"]
{
background: argb(0,0,0,0);
foreground: rgb(255,255, 255) ;
fontsize: rcint(46) pt;
fontweight: bold;
contentalign: wrapleft;
}
button [class="status"][mousefocused]
{
fontstyle: underline;
}
button [class="status"][keyfocused]
{
fonts tyle: under1ine;
}
button [class="status"][selected]
{
foreground: rgb(0,0,0);//rgb(239,247,255);
fontsize: rcint(46) pt;
fontweight: bold;
}
-

</style>
<style resid=passwordpaness>
element
{
background: argb(0,0,0,0);
}
element [id=atom(passwordpanelayer)]
{
padding: rect(71rp,0,0,0);

UIFile
}
element [id=atom(instruct)]
{
fontface: rcstr(48);
fontsize: rcint(47) pt;
foreground: black;//white;
padding: rect(3rp,0,0,3rp);
}
edit [id=atom(password) ]
{
background: rcbmp(102,6,#FF00FF,0,0,1,0);
borderthickness: rect(3,3,5,5);
passwordcharacter: 9679;
fontface: "arial";
fontsize: 16pt;
}
button

[id=atom(go)]

{
margin: rect(5rp,0,0,0);
content: rcbmp(103,3,-1,26rp,26rp,0,0);
padding: rect(Orp,lrp,0,lrp);
}
button

[id=atom(go)][keyfocused]

{
content: rcbmp(104,3,-1,26rp,26rp,0,0);
}
button

[id=atom(info)]

{
margin: rect(5rp,0,0,0);
content: rcbmp(105,3,-1,28rp,28rp,0,0);
}
button

[id=atom(info)][keyfocused]

{
content: rcbmp(106,3,-1,28rp,28rp,0,0);
}
element [id=atom(keyboard) ]
{
cursor: arrow;
margin: rect(5rp,0,0,0);

305

306

}
</style>
<style resid=scroller>
scrollbar
{
layoutpos: ninebottom;
}
scrollbar [vertical]
{
layoutpos: nineright;

layoutpos: nineclient;

thumb
background: dtb(handlemap(1), 3, 1)
content: dtb(handlemap(1), 9, 1) ;
contentalign: middlecenter;

thumb [mousefocused]
{
background: dtb(handlemap(1), 3, 2)
content: dtb(handlemapd) , 9, 2) ;
}
thumb [captured]
{
background: dtb(handlemap(1), 3, 3)
content: dtb(handlemapd) , 9, 3) ;
}
repeatbutton [id=atorn(lineup)]

UIFile

307

{
background: dtb(handlemap(l), 1, 1);
width: sysmetric(2);
height: sysmetric (20) ;
}
repeatbutton [id=atom(lineup)][mousefocused]
{
background: dtb(handlemap(1) , 1, 2 ) ;
}
I
repeatbutton [id=atom(lineup)][pressed]
{
background: dtb(handlemap(1) , 1, 3 ) ;
}
repeatbutton [id=atom(linedown)]
{
background: dtb(handlemap(1), 1, 5) ;
width: sysmetric(2) ;
height: sysmetric(20);
}
repeatbutton [id=atom(linedown)][mousefocused]
{
background: dtb(handlemap(1), 1, 6);
}
repeatbutton [id=atom(linedown)][pressed]
{
background: dtb(handlemap(1), 1, 7 ) ;
}
repeatbutton [id=atom(pageup)]
{
background: dtb(handleraap(l), 7, 1);
}
repeatbutton [id=atom(pageup)][mousefocused]

308

1
{
background: dtb(handlemap(l), 7, 2 ) ;
}
repeatbutton [id=atoni(pageup)][pressed]
{
background: dtb(handlemap(1) , 7, 3);
}
repeatbutton [id=atoni(pagedown)]
{
background: dtb(handlemap(1), 6, 1);
}
repeatbutton [id=atom(pagedown)][mousefocused]
{
background: dtb(handlemap(1) , 6, 2 ) ;
}
repeatbutton [id=atom(pagedown)][pressed]
{
background: dtb(handlemap(1) , , 3) ;
}

</style>
<logonframe resid=main id=atom(frame) sheet=styleref(framess) layout=
borderlayout() layoutpos=client>
<element id=atom(contentcontainer) layout=borderlayout() layoutpos=client>
<element id=atom(toppanel) sheet=styleref(toppanelss) layout=
borderlayout() layoutpos=top height=80rp>
<element id=atom(logoarea) layout=
verticalflowlayout(0,3,3,2)>
<element id=atorn(product) contentalign=topright padding=
rect(10rp,Orp,20rp,20rp)/>
<element id=atom(help) contentalign=wrapright width=
lrp padding=rect(Orp,Orp,40rp,Orp)/>
</element>
<element id=atom (msgarea) layout=verticalflowlayout(0,0,0,2) >

UIFile

309

<element layout=filllayout() width=384rp>


<element id=atom(welcomeshadow) content=rcstr(7)/>
<element id=atom(welcome) content=rcstr(7)/>
</element>
</element>
<element id=atorn(divider) layoutpos=bottom height=2rp/>
</eleinent>
<element id=atom(bottompanel) sheet=styleref(bottompanelss) layout=
borderlayout() layoutpos=bottom>
<element id=atom(divider) layoutpos=top height=2rp/>
<element id=aton\(options) layout=borderlayout() layoutpos=client>
<element layout=borderlayout() layoutpos=left>
<button id=atorn (power) layout=borderlayout() layoutpos=
top accessible=true accRole=43 accName=rcstr(11)>
<element layoutpos=left content=rcbmp(107,3,l,26rp,26rp,0,0) />
<element id=atom(label) layoutpos=client margin=
rect(2rp,0,0,0)/>
</button>
<button id=atom(undock) layout=borderlayout() layoutpos=
top margin=rect(0,2rp,0,0) accessible=true accRole=43 accName=rcstr(14)>
<element layoutpos=left content=
rcbmp(108,3,-l,26rp/26rp,0/0)/>
<elernent id=atom(label) layoutpos=
client margin=rect(2rp,0,0,0)/>
</button>
</element>
<element id=atom(instruct) layoutpos=right content=rcstr(25)
width=325rp/>
</element>
</element>
<element id=atom(contentcontainerO) layout=
flowlayout(1,3,2,3) layoutpos=client content=argb(0,0,0,0)>
<element id=atom(leftpanel) sheet=
styleref(leftpanelss) layoutpos=left>
</element>
<element id=atom(rightpanel) sheet=
styleref(rightpanelss) layout=borderlayout() layoutpos=left width=920rp>
<element id=atom(divider) layoutpos=left width=lrp/>

310

<scrollviewer id=atom(scroller) sheet=


styleref(scroller) layoutpos=client xscrollablefalse margin=rect(Orp,Orp,Orp,Orp)>
<selector id=atom(accountlist)
sheet=styleref(accountlistss) layout=verticalflowlayout(0,3,3,2)/>
</scrollviewer>
</element>
</element>
</element>
</logonframe>
<logonaccount resid=accountitem id=atom(accountitem) layout=filllayout()
accessible=true accRole=43>
<element id=atom(userpanelayer) layout=borderlayout() height=80rp>
<element id=atom(userpane) layout=borderlayout() layoutpos=top>
<element id=atom(pictureframe) layout=flowlayout(0,2,2) layoutpos=left width=58rp height=58rp>
<element id=atom(picture) />
</element>
<element id=atom(username) layoutpos=top/>
<button id=atom(statusO) class="status" layoutpos=none/>
<button id=atom(statusl) class="status" layoutpos=none/>
</element>
</element>
</logonaccount>
<element resid=passwordpanel id=atorn(passwordpanelayer) sheet=
styleref(passwordpaness) layout=borderlayout() height=80rp>
<element layout=borderlayout() layoutpos=bottom>
<edit id=atom(password) layoutpos=left width=163rp/>
<element id=atorn(keyboard) layoutpos=left/>
<button id=atom(go) layoutpos=left accessible=true accRole=
43 accName= rcstr(100)/>
<button id=atom(info) layoutpos=left accessible=true accRole=
43 accName= rcstr(13)/>
</element>
<element id=atom(instruct) layoutpos=bottom content=rcstr(6)/>
</element> .


CyD Careful Observer (www.cydsoft.com)
, ,
, , E-mail,
.
CyD NET Utils (www.cydsoft.com) ,
.
(Ping), ( ), . .
John the Ripper (http://www.openwall.com/john/) Unix-.
Internet Scanner (www.iss.net) .
SAFEsuite,
.
Password Pro (http://www.insidepro.com/)
Unix-.
Postman (www.cydsoft.com) SMTP-,
.
PWLinside (http://www.insidepro.com/)
Windows 9-.
SAMinside (http://www.insidepro.com/)
Windows NT-.
SockChain (http://www.ufasoft.com/socks/)
Proxy- Socks-, .
Shadow Scan (http://www.rsh.kiev.ua/) .
.

312

NT Crack (http://archivedaru.hypermart.net/winnt_hacking/Ntcrack.zip) NT .
Windows-, , , .
NT Bugs (hhttp://archivedaru.hypermart.net/winnt_hacking/Ntbugs.zip) Windows-.
, .
LC3 (http://www.10pht.com/10phtcrack/dist/lc252instalI.zip) NT-.
Restorator (http://www.bome.com/Restorator/) .
Retina Network Security Scanner (http://www.eeye.com/)
.


www.cert.org , . , .
www.securityfocus.com .
www.2600.com .
http://www.defcon.org/ .
www.opensource.org/for-hackers.html

www.kaspersky.com ,
.

ASP Microsoft, Windows.


CGI (Common Getaway Interface) , WEB- , Perl, ,
Delphi .
Cookies , WEB- .
DNS , IP- .
Firewall , .
.
FTP .
Hub () , . ,
, , . . , .
IP- ( )
32 . IP, ,
.
MAC-address (Media Access Control address) 48-
, .
WEB-. ,
, .

315

RFC (Request For Comments) ( ,


),
. , RFC
SMTP, .
Switch () , . , , ,
-.
.
, .
FTP "Anonymous", E-mail. ,
, , .
, . , , , .
, , .
, - .
unix-. , , "d".
WEB- ,
80 ( ,
). ,
. ,
, , .
, , .

. .
: FTP 21 , HTTP 80 . .
, (FTP WEB). ,
,
. FTP-,
... 21. , FTP-, WEB.

316

- , .
,
.
Windows, Unix.
, '. - . *nix, .
.
,
.
.
.
.
, .
, (,
), .

\Chapter1

, , ,
Windows Internet Explorer

\Chapter2

\Chapter2\Login

Windows XP

\Chapter4

CyD Archiver XP,

\Chapter5

\Soft

CyD Software Labs Restorator.


.

StyleBuilderlnstall.exe StyleXPInstallFemale.exe,
Chapteri, Windows XP.

- Chapter2\Login ,
.
. 2.

. . C++ . .: , 2004.
. . Delphi . .: , 2003.
"" "" ()
C++ Delphi.
http://www.vr_online.ru ,
.
www.xakep.ru , ,
.

Active Desktop 170


ActiveX 28, 44
ARPA 13
ARPANET 5, 14
- 94, 97

BBS 122
BIOS 141
Blue Box 14

DewaSoft 118
DNS 15

FIDO 5
FSB- 147

Kensington Lock 186

OEM 24
Open Source 6
OpenPGP 184

PGP 16, 184


PS/2- 94
PS-Speaker 96

Recycled 187
RJL Software 116

SAM 174
Screen Saver 179

H
- 206
HTML- 45

i
IDE- 144
IP- 104

TCP/IP 15
Tray 34

UNIX- 5
URL- 128

320
w

Windows:
170

178
28
Messenger 102

122, 132, 167


. .

29, 134, 160


136
134
183
28, 29
29, 70, 111
171
169

18, 90
119
31
203

- 70
:
ComCtl32.dll 29, 32
shell32.dll 89
shellstyle.dll 85
User32.dll 29
uxtheme.dll 39

99, 149
5
5, 119
130
121
:
126
187, 188
190
189

168
116, 159
152
204
27

38, 143
82
172
182
183
200
182

104
5
12
11, 50
121
121
121
121

321

182
184
184
:
Print Screen 105
100
:
net send 100
rcbmp 81
rcstr 81
9
187
130
151
5

20, 24, 28

29, 31
96
97, 98
:
95
95
94

110

:
BIOS 146
158
124
:
58
78

58, 78
58
141
177
103

45, 69, 82

77
:
174
BIOS 182
176
174
173
180
106
127

. .
97, 102
:
Ad-aware 138
Boot Editor 44
Borland Resource Workshop 63
CyD Animation Studio 90
CyD Archiver XP 180
CyD Careful Observer 104
DiskProbe 190
Easy Recovery 189
explorer.exe 179
File Monitor 203
File recovery 189
Floppy madness 117
GIF Studio Pro 90
Key Panic 118
logonui.exe 74
msconfig.exe 130
PowerS trip 158
PTSDiskEditor 190
Radeon Tweaker 159
Regmon 201

322

Restorator 49
scandisk.exe 134
styleBuilder 33, 40
styleXP 33
The Bat 124
Turbo Debugger 205
UxTheme Util 39
W32dASM 204
WinBinds 29
Windows Total Commander 110
winHex 190
73
8
183
18, 28
173
9
7, 11, 12, 13
8

147
158
152
151
176
51, 55, 92
17, 18, 21, 22, 46
137
137
133
23
49
62

59, 63
68
65
66
68
56
63
59

60
54
112
53, 54
59
59
86
50
50
51
62
50

138
90
9
130
180
96
. . Windows
35
37
201

82
5
36
Windows 73
:
12
12
1
2
IE 17

:
184
184

323

:
autoexec.bat 130
boot.act 82
boot.ini 37
boot.pal 82
BootEditor.exe 44
driver.cab 171
explorer.exe 86, 113
Floppy.exe 117
luna.msstyles 70
mouse_pad.inf 27
ntdetect.com 130
ntoskrnl.exe 45, 82
oeminfo.ini 24
sysoc.inf 167
WCMD_RUS.lng 110
WCMD_RUS.mnu 110
win.com 107
wvleft.bmp 46
75
109
20
- 148
18
ACT 82
AVI 18, 90
106
BMP 18
CSS 85
GIF 18, 90
HTT46

LNG
MNU
MP3, 46
PAL 82
WMA 46
XML 31
ZIP 181
14

X
8

36

151

28
29

12, 13
Borland Delphi 13
13
C++ 13
105

www.bhv.ru

.
C++
(+CD-ROM)

" "
., ., . 29, . (812) 251-41-10

e-mail: opt@bhv.spb.su


C++
, ,

,
.
, , .

C++ , .
-
, CyD Softwere Labs.

, . "", "Hack FAQ" " ", "" "Chip-".


" Delphi", " Delphi ".

www.bhv.ru

.
Delphi
(+CD-ROM)

" "
., ., . 29, . (812) 251-41-10

e-mail: opt@bhv.spb.su

,
,
.
, " ", "" . , Delphi,
, , -. .
- , " Delphi",
.
, . "", "Hack FAQ" " ", "" "Chip-".
" Delphi", " C++ ".