GHOST_XP

FAT32

NTFS
1FAT32NTFSNTFSFAT32

2GHOSTNTFSFAT32XRMPVOL_CN
NTFSGHOSTFAT32
30M

XP2003GHOST
VMGHO
ghost8.3

GHO

1
2
3

c:\windows\system32\setup.bmp
oem

oemset

D:\My Documents

1 10

4
5

:--

0-------
--

drwtsn32

9
ZIP regsvr32 /u zipfldr.dll

InternetCookies

C:\Documents and Settings\Administrator\Local Settings\Temp\

C:\Program Files\UPDATE\*.*
c:\program files\windows nt\pinball

5M

c:\program files\movie maker

10M

c:\program files\messenger

MSN

c:\program files\msn gaming zone

C:\Program Files\InstallShield Installation Information\*

C:\Program Files\windowsUpdate\*

XP

C:\windows\$NtUninstall*$
C:\windows\KB8Q.log
C:\windows\RegisteredPakages\*.*
C:\windows\Installer\*.*

c:\windows\$*

$70M

c:\windows\*.log

2 10

c:\windows\pchealth

30M
helpctr\binaries\msconfig.exe system32

c:\windows\help\*

30M
Help\Tours\mmTour\tour.exe agt0*.hlp

c:\windows\ime\chtime

12M
c:\windows\ime\imejp

c:\windows\ime\imejp98
c:\windows\ime\imjp8_1
c:\windows\ime\imkj6_1
c:\windows\system32\ime\CINTLGNT
c:\windows\system32\ime\TINTLGNT

12M
12M
12M
12M

3M
3M

c:\windows\temp\*

c:\windows\prefetch\*
c:\windows\Downloaded Installations\*

msi

c:\windows\msagent
c:\windows\softwareDistribution\download\*

ClassicalLuna.ThemeXP 8M
)
8MC:\windows\srchasstmui

3MC:\windows\msagentintl
60M

c:\windows\system32\oobe

XP 8M

c:\windows\web\wallpaper\*

bliss.bmp 2M

c:\windows\cursors\

IE

upiea.exe

IE

.exe(NTFS)

c:\windows\resources\themes\*
c:\windows\srchasst

services.mscDHCP client ,,
WINDOS XP .batby ,,
..
Server,
,.
.
ip
MessengerAlerter

3 10

autoit(Free51ct).exe

inf/sysoc.infhide
.

windows
Windows
msn

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\windows\CurrentVersion\E
xplore\RomteComputer\NameSpace{2227A280-3AEA-1069- ,
A2DE-08002B30309D}{D6277990-4C6A-11CF-8D8700AA0060F5BF}
Windows Registry Editor Version 5.00
,
XX.regXP

realrealOnereal player 10
realsched.exe

windows

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanman
server\parameters]
"AutoShareServer"=dword:00000000
"AutoSharewks"=dword:00000000
C:\Program Files\Common
Files\Real\Update_OB
realsched_bak.exe.
OK

Advanced Configuration Power Interface(ACPI) Standard PCIDE

ATA/ATAPIStandard
Standard PC

2Standard PC

GHOST
IDE ATA/ATAPI XPGHOST
Inter VIA

SISIDE PCI
IDE

4 10

4
5

GHOST

2--REGEDIT-
F3
Microcode Update DevicePCI
busPlup and Play Software Device Enumerator

5 10

GHSOTXP

CDrivers

BrowseDriversSET PATH,

Drivers

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
DevicePath
sysprep.inf[Unattended]

[Unattended]
OemSkipEula=Yes
OemPreinstall=Yes
WinXP
Drivers
DriverSigningPolicy=Ignore

.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
DevicePath,
c://DRIVERS
2.sysprep
;SetupMgrTag
[Unattended]
OemSkipEula=Yes
OemPreinstall=Yes
DriverSigningPolicy=Ignore
OemPnPDriversPath="Drivers\BOARD\nForce;Drivers\BOARD\Intel\
ICH;Drivers\SATA_VIA;Drivers\Camera\301P;Drivers\LAN\Broadco
m4401;Drivers\LAN\BroadcomBCM5751;Drivers\LAN\Marvell;Driver
s\LAN\Realtek8139;Drivers\LAN\VIAVT6105;Drivers\LAN\Intel;Dr
ivers\LAN\nForce;Drivers\LAN\SIS900;Drivers\modem\ECOM56HAM;
Drivers\modem\ESS_ES2838_2839;Drivers\modem\Conexant_HCF;Dri
vers\modem\Conexant_HSF;Drivers\modem\Intel5628;Drivers\mode
m\Intel5690;Drivers\Sound\AD188X;Drivers\Sound\ALC;Drivers\S
ound\CMI8738;Drivers\Sound\CMI9738;Drivers\Sound\VIA;Drivers
\Sound\SiS7012;Drivers\VGA\ATi_Radeon;Drivers\VGA\ATi_Radeon
\B_20640;Drivers\VGA\Intel_845G;Drivers\VGA\SIS650-760"

OemPnPDriversPath="c:\Drivers\BOARD\nForce;c:\Drivers\BOARD\In
tel\ICH;c:\Drivers\Camera
\301P;c:\Drivers\LAN\Broadcom4401;c:\Drivers\LAN\BroadcomBCM57
51;c:\Drivers\LAN\Marvell;c:\Drivers\LAN\Realtek8139;c:\Driver
s\LAN\VIAVT6105;c:\Drivers\LAN\Intel;c:\Drivers\LAN\nForce;c:\
Drivers\LAN\SIS900;c:\Drivers\modem\ECOM56HAM;c:\Drivers\modem
\ESS_ES2838_2839;c:\Drivers\modem\Intel5628;c:\Drivers\Sound\A
D188X;c:\Drivers\Sound\ALC;c:\Drivers\Sound\CMI8738;c:\Drivers
\Sound\CMI9738;c:\Drivers\Sound\VIA;c:\Drivers\Sound\SiS7012;c
:\Drivers\VGA\ATi_Radeon;c:\Drivers\VGA\ATi_Radeon\B_20640;c:\D
DriverSigningPolicy = Block

6 10

DEPLOY.CABSysprep.exe
S&R&S_V9.5.0828Sysprep.exe

S&R&S_V9.5.0828longhorn
detecthalhal100%

sysprep.inf
sysprep

convert
c:/FS:NTFS /xNTFS
YNS&R&S_V9.5.
NTFS

GHOST

DllCache

Ghost
Standard PC

HAL

Ghost

sysprep.inf
syprep.ini[Unattended]
InstallFilesPath=C:\sysprep\i386
Win2000sp4/xp

c:\sysprep

C:\windows(XP)/winnt(2k)
S&R&SDllCacheManager
DllCacheManager.exe DllCache
runonceS&R&SIDE
300M
Standard PCrunonce
DllCacheManager.regXP
DllCacheManagerDllCache

DllCachedll300M

7 10

ghost
DOS

ghost

.SRS8.0Csysprep
sysprepmsprep.exe

S&R&SV8.8.exe

GHOSTCOK!

S&R&S_V9.5
[9.5.AMD 64CPUAMD 64
WINDOWS XP Home EditionWIN 2000
HALUSBPS/2

S&R&S9.5
sysprep
\SUPPORT\TOOLSDEPLOY.CABsysprep

DllCacheManager_V1.0Dllcache
DllCacheManager.rarDllCacheManager.exeZProgBar.ocx%systemroot%(XPC:/windows2K
C:/winnt
(DllCacheManager1.51 CDllCacheManager1.51
)S&R&SDllCacheManager.exe
Dllcacheautohal.exeDllCacheManagerS&R&S
DllCacheManagerSysprep.inf
DllcacheManager /restore /autodelete /timeoutDllCacheManager.rar
DllCacheManager.exe
)

8 10

Ghowinnt\msprep.cmd
4Windows2000-KB904368-v3-x86-CHS.exe
KB904368.exemsprep.cmd2
%systemdrive%
cd\
cd %systemroot%
regedit /s wmp.reg
RASPPPOE.exe /s
KB891861.exe
KB904368.exe /q /norestart /nobackup
del /q wmp.reg
del /q RASPPPOE.exe
del /q KB891861.exe
del /q KB904368.exe
del /q msprep.cmd
msprep.cmdKB904368.exeGho\winnt
iso
GhoGhost
gho

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"restrictanonymous"=dword:00000000
"restrictanonymoussam"=dword:00000001
"forceguest"=dword:00000000
"limitblankpassworduse"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanman
server\parameters]
"autoshareserver"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lanman
Server\Parameters]
"AutoShareWksAutoShareWks"=dword:00000001

(Administrator): CAdministrator

AdministratorAdministratorxp
ALT+ESCALT+F4Administrator

Windows 98Windows ME IDE ATA/ATAPI

Windows 2000XP2000
sysprep.inf
Windows 2003 VOLXP
2003 PNP (2000XP 2003
)

9 10

1EASYBOOT
2EZBOOTEASYBOOT

3EASYBOOTISOULTRAISOISO
GHO

4VM

OK

10 10