最新消息:

查看windows系统启动时加载的驱动

技术相关 admin 2158浏览

环境 vmware6.5下winxp? 增加一个串口设备,工具: Named Pipe TCP Proxy ,串口的配置如下

?

配置boot.ini 具体可以参考
Windows XP 和 Windows Server 2003 的 Boot.ini 文件的可用开关选项
http://support.microsoft.com/kb/833721/zh-cn

CMD下执行命令 BOOTCFG /EMS ON /PORT COM1 /BAUD 19200 /ID 1
同时在boot.ini中增加 OS加载选项: /noguiboot /sos /bootlog /redirect
boot.ini配置如下
[boot loader]
timeout=10
default=multi(0)disk(0)rdisk(0)partition(1)WINDOWS
redirect=COM1
redirectbaudrate=19200
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)WINDOWS=”Microsoft Windows XP Professional”? /noguiboot /sos /bootlog /redirect

从systemrootNtbtlog.txt日志中查看记录
Service Pack 211 29 2008 14:24:14.250
Loaded driver WINDOWSsystem32ntkrnlpa.exe
Loaded driver WINDOWSsystem32hal.dll
Loaded driver WINDOWSsystem32KDCOM.DLL
Loaded driver WINDOWSsystem32BOOTVID.dll
Loaded driver ACPI.sys
Loaded driver WINDOWSsystem32DRIVERSWMILIB.SYS
Loaded driver pci.sys
Loaded driver isapnp.sys
Loaded driver compbatt.sys
Loaded driver WINDOWSsystem32DRIVERSBATTC.SYS
Loaded driver intelide.sys
Loaded driver WINDOWSsystem32DRIVERSPCIIDEX.SYS
Loaded driver MountMgr.sys
Loaded driver ftdisk.sys
Loaded driver dmload.sys
Loaded driver dmio.sys
Loaded driver PartMgr.sys
Loaded driver VolSnap.sys
Loaded driver atapi.sys
Loaded driver vmscsi.sys
Loaded driver WINDOWSsystem32DRIVERSSCSIPORT.SYS
Loaded driver disk.sys
Loaded driver WINDOWSsystem32DRIVERSCLASSPNP.SYS
Loaded driver fltMgr.sys
Loaded driver KSecDD.sys
Loaded driver Ntfs.sys
Loaded driver NDIS.sys
Loaded driver Mup.sys
Loaded driver agp440.sys
Loaded driver SystemRootsystem32DRIVERSi8042prt.sys
Loaded driver SystemRootsystem32DRIVERSkbdclass.sys
Loaded driver SystemRootsystem32DRIVERSvmmouse.sys
Loaded driver SystemRootsystem32DRIVERSmouclass.sys
Loaded driver SystemRootsystem32DRIVERSparport.sys
Loaded driver SystemRootsystem32DRIVERSserial.sys
Loaded driver SystemRootsystem32DRIVERSserenum.sys
Loaded driver SystemRootsystem32DRIVERSfdc.sys
Loaded driver SystemRootsystem32DRIVERScdrom.sys
Loaded driver SystemRootsystem32DRIVERSredbook.sys
Loaded driver SystemRootsystem32DRIVERSvmx_svga.sys
Loaded driver SystemRootsystem32DRIVERSvmxnet.sys
Loaded driver SystemRootsystem32DRIVERSCmBatt.sys
Loaded driver SystemRootsystem32DRIVERSprocessr.sys
Loaded driver SystemRootsystem32DRIVERSfsvga.sys
Loaded driver SystemRootsystem32DRIVERSaudstub.sys
Loaded driver SystemRootsystem32DRIVERSrasl2tp.sys
Loaded driver SystemRootsystem32DRIVERSndistapi.sys
Loaded driver SystemRootsystem32DRIVERSndiswan.sys
Loaded driver SystemRootsystem32DRIVERSraspppoe.sys
Loaded driver SystemRootsystem32DRIVERSraspptp.sys
Loaded driver SystemRootsystem32DRIVERSmsgpc.sys
Loaded driver SystemRootsystem32DRIVERSpsched.sys
Loaded driver SystemRootsystem32DRIVERSptilink.sys
Loaded driver SystemRootsystem32DRIVERSraspti.sys
Loaded driver SystemRootsystem32DRIVERSrdpdr.sys
Loaded driver SystemRootsystem32DRIVERStermdd.sys
Loaded driver SystemRootsystem32DRIVERSswenum.sys
Loaded driver SystemRootsystem32DRIVERSupdate.sys
Loaded driver SystemRootsystem32DRIVERSmssmbios.sys
Loaded driver SystemRootSystem32DriversNDProxy.SYS
Did not load driver SystemRootSystem32DriversNDProxy.SYS
Did not load driver SystemRootSystem32Driverslbrtfdc.SYS
Did not load driver SystemRootSystem32DriversSfloppy.SYS
Did not load driver SystemRootSystem32Driversi2omgmt.SYS
Did not load driver SystemRootSystem32DriversChanger.SYS
Did not load driver SystemRootSystem32DriversCdaudio.SYS
Loaded driver SystemRootSystem32DriversFs_Rec.SYS
Loaded driver SystemRootSystem32DriversNull.SYS
Loaded driver SystemRootSystem32DriversBeep.SYS
Loaded driver SystemRootSystem32driversvga.sys
Loaded driver SystemRootSystem32Driversmnmdd.SYS
Loaded driver SystemRootSystem32DRIVERSRDPCDD.sys
Loaded driver SystemRootSystem32DriversMsfs.SYS
Loaded driver SystemRootSystem32DriversNpfs.SYS
Loaded driver SystemRootsystem32DRIVERSrasacd.sys
Loaded driver SystemRootsystem32DRIVERSipsec.sys
Loaded driver SystemRootsystem32DRIVERStcpip.sys
Loaded driver SystemRootsystem32DRIVERSnetbt.sys
Loaded driver SystemRootSystem32driversafd.sys
Loaded driver SystemRootsystem32DRIVERSnetbios.sys
Loaded driver SystemRootsystem32DRIVERSwanarp.sys
Did not load driver SystemRootSystem32DriversPCIDump.SYS
Loaded driver SystemRootsystem32DRIVERSrdbss.sys
Loaded driver SystemRootsystem32DRIVERSmrxsmb.sys
Did not load driver SystemRootsystem32DRIVERSimapi.sys
Loaded driver SystemRootSystem32DriversFips.SYS
Loaded driver SystemRootSystem32DriversCdfs.SYS
Loaded driver SystemRootsystem32DRIVERSndisuio.sys
Loaded driver SystemRootSystem32DRIVERShgfs.sys
Did not load driver SystemRootsystem32DRIVERSrdbss.sys
Did not load driver SystemRootsystem32DRIVERSmrxsmb.sys
Loaded driver SystemRootsystem32DRIVERSmrxdav.sys
Loaded driver SystemRootSystem32DriversParVdm.SYS
Loaded driver SystemRootsystem32DRIVERSsrv.sys
Loaded driver SystemRootSystem32DriversHTTP.sys
?

通过 Named Pipe TCP Proxy可以看到?
? multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32ntkrnlpa.exe
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32hal.dll
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32KDCOM.DLL
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32BOOTVID.dll
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32configsystem
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32c_936.nls
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32l_intl.nls
multi(0)disk(0)rdisk(0)partition(1)WINDOWSFONTSvgaoem.fon
multi(0)disk(0)rdisk(0)partition(1)WINDOWSAppPatchdrvmain.sdb
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32DRIVERSACPI.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32DRIVERSWMILIB.SYS
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32DRIVERSpci.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32DRIVERSisapnp.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32DRIVERScompbatt.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32DRIVERSBATTC.SYS
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32DRIVERSintelide.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32DRIVERSPCIIDEX.SYS
multi(0)disk(0)rdisk(0)partition(1)WINDOWSSystem32DriversMountMgr.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32DRIVERSftdisk.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSSystem32driversdmload.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSSystem32driversdmio.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSSystem32DriversPartMgr.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSSystem32DriversVolSnap.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32DRIVERSatapi.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32DRIVERSvmscsi.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32DRIVERSSCSIPORT.SYS
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32DRIVERSdisk.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32DRIVERSCLASSPNP.SYS
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32DRIVERSfltMgr.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSSystem32DriversKSecDD.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSSystem32DriversNtfs.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSSystem32DriversNDIS.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSSystem32DriversMup.sys
multi(0)disk(0)rdisk(0)partition(1)WINDOWSsystem32DRIVERSagp440.sys

转载请注明:Kermit的网站 » 查看windows系统启动时加载的驱动