Summary of the invention:
Defective in view of the prior art existence, the purpose of this invention is to provide a kind of new computer system restoration methods, backup of this method call recovers computer system in the operating system of hidden partition, thereby reaches the purpose of recovering computer system quickly and easily.
For reaching above-mentioned purpose, the present invention adopts following technical scheme:
A kind of restoration methods of computer system may further comprise the steps:
1. computer hard disc information is provided with, comprises:
A. system disk is divided into ordinary magnetic disc subregion and the user can't have access under the normal operations system the hidden partition HPA of system subregion two parts, described HPA subregion comprises:
System HPA subregion: remain with a basic operating system backup;
Function HPA subregion: store the software that is used for system's rescue;
Real pattern system: be positioned at the first address of HPA, be used for whole HPA subregion is defined and implement to load;
B. 0 track system boot sector at hard disk writes the real pattern boot, and read path is pointed to HPA subregion first address;
2. host computer starts, and enters the real pattern system under the guide of described real pattern boot;
3. the real pattern system is according to the trigger pip of user's startup, the operating system that backs up in the loading system HPA subregion, and start the software of storing in the function HPA subregion that is used for system's rescue, the operating system of storing in the ordinary magnetic disc subregion is replaced with the operating system that backs up in the HPA subregion.
Further, the restoration methods of above-mentioned computer system, described HPA subregion is divided into a plurality of, and each function HPA subregion stores the functional software of using corresponding to concrete, and described system rescue software is one of them functional software.
Further, the restoration methods of above-mentioned computer system, size, number of partitions and each section post of the described real pattern system definition HPA subregion size that takes up space.
Further, the restoration methods of above-mentioned computer system, in the described step (3), the operating system that described real pattern system backs up in the loading system HPA subregion as follows:
(1) described trigger pip is that the user passes through the startup of a startup module, and this trigger pip forms after a reception and parsing module identification and triggers code;
(2) establish triggering code-jump address corresponding tables in the described real pattern system, the real pattern system obtains triggering code and carries out redirect according to the jump address that triggers the code correspondence from described reception and parsing module, start the backup operation system in the HPA subregion.
Further, the method of above-mentioned scanning and killing computer virus, described real pattern system adopts following method to start system's rescue software in the function HPA subregion: described real pattern system with the mirror image of system backup in the HPA subregion virtual in the Mount mode be the C of system drive, be other drives of system with the function HPA subregion that stores system rescue software is virtual, and the operating system image file that backs up in the reading system HPA subregion and store the function HPA subregion of system rescue software, enter system and start-up system rescue software.
Advantage of the present invention and good effect:
Computer system restoration methods of the present invention, what call during recovery system is a normal operations system of HPA subregion backup, WINDOWS operating system for example only needs to adopt the operating system of backup to cover a computer system of having paralysed and gets final product, thereby reaches quick recovery, easy-to-use purpose.Because the operating system of backup is stored in the HPA subregion, can't be accessed under the normal operations system, can not write, and avoids virus infections.
Embodiment:
Below in conjunction with accompanying drawing, the specific embodiment of the present invention is described in detail.
As shown in Figure 2, be for the subregion synoptic diagram of computer hard disc among the present invention.
System disk is divided into HPA subregion and ordinary magnetic disc subregion two parts.HPA (Hidden Protected Area) is after the ATA-5 agreement is established; introduced " main protection zone " notion; realize by directly a zone at hard disk rear portion being protected with ata command; not only operating system can't be seen this zone, even mainboard BIOS all can't read " the main protection zone " that is under the guard mode.The HPA subregion belongs to system's hidden partition, and (WINDOWS operating system) user can't have access under the normal operations system.In the HPA subregion, be divided into following three parts:
(1) HPA of system subregion: for the user keeps a complete basic operating system backup (WINDOWS operating system).
(2) function HPA subregion: be assigned to concrete functional module as the functional module district, comprised the functional software of each required function.Comprise the rescue platform that is specifically designed to system's rescue in this embodiment, be specifically designed to the virus killing platform of virus killing, be specifically designed to a plurality of concrete application platforms such as amusement platform of amusement.
(3) real pattern system: whole HPA subregion is defined and implement to load, and the real pattern system is positioned at the first address of HPA.The real pattern system can define the size of the whole subregions of HPA, number of partitions and each section post size that takes up space.
Secondly, write the real pattern boot at 0 track system boot sector of hard disk, it is the real pattern system that read path is pointed to HPA subregion first address.
In this embodiment,, created the HPA subregion in new MBR the inside by the mode of revising hard disk information, and set up the boot of real pattern by revising the disk MBR information of acquiescence.Boot is directed to system's progress in the HPA subregion.
As shown in Figure 1, be method particular flow sheet of the present invention.
1. the user starts module by one and starts a trigger pip, and this trigger pip produces 2 responses.First is a power-on command, and this signal can be Windows key value under Window operating system, also can be the high-low level signal, directly is transferred to the mainboard starting module, makes host-initiated.Another response is this trigger pip through receiving and parsing module identification back forms one and triggers code in order to the startup purpose that the expression user selects, and promptly enters the normal running system or enters the specific function system and enter which concrete function system (platform of killing virus, give first aid to platform or other platforms).This triggers code storage in the register of reception and parsing module.Described startup module can be arranged on the shortcut on the keyboard, the button on cabinet surface, perhaps other enabling signal devices that can trigger; Reception and parsing module can be a specific circuit board or one section program.
2. system start-up, the reading of data in proper order since 0 sector jumps to the first address of HPA, i.e. real pattern system according to the address jump instruction in the real pattern boot.
3. the real pattern system reads the triggering code, carries out the address redirect and loads to select the normal running system according to triggering code, and perhaps the backup operation system in the selective system HPA subregion loads and starts functional software in the corresponding function HPA subregion.Specific as follows:
Set up to trigger code-jump address corresponding tables in the real pattern system, will trigger code and jump address and carry out correspondingly, the real pattern system jumps to corresponding address according to triggering code judgement user's operation, starts corresponding system or function platform.Following table is an object lesson that triggers code-jump address corresponding tables:
If the user does not carry out function selecting, promptly trigger the code representative and directly enter the normal running system, then jump to normal running system start-up address, for example point to the address that normal Windows begins, to load normal operating system.
If the user carries out function selecting, promptly trigger code and represent certain certain functional modules, then real pattern is pointed to system backup mirror image among the HPA with the address.Real pattern with the mirror image of system backup in the HPA of the system subregion virtual in the Mount mode be the C of system drive, with the function HPA subregion of incident correspondence virtual be other drives of system, and system image file that prestores in the read functions HPA subregion and function HPA subregion, enter the application software in system and the operation function HPA subregion, realize the loading of the system of band concrete function.
Adopt above method, the mirror image load mode that the real pattern system is different according to different event definitions, by loading function corresponding HPA subregion, and the software that makes this function HPA subregion is given the different application scenarios of user along with system loads is moved.
In this embodiment, function HPA subregion comprises the rescue platform that is specifically designed to system recovery, store the functional software that is used for system's rescue under the rescue platform, this software is carried out a kind of operation, with operating system copy and the covering normal operations system that backs up in the HPA of the system subregion.In the normal operations system because virus infections or other reasons when causing paralysing, can be given first aid to the method for recovery to computer system.That is:
When the operating system that is stored in the ordinary magnetic disc subregion is paralysed because of infective virus or other reasons, the trigger pip that the real pattern system starts based on system's rescue purpose according to the user, the operating system that backs up in the loading system HPA subregion, and the software of storing in the startup function HPA subregion that is used for system's rescue, the function that this functional software is finished is: with operating system copy and the covering normal operations system that backs up in the HPA of the system subregion, thereby the operating system of storing in the ordinary magnetic disc subregion is replaced with the operating system that backs up in the HPA subregion, reach the purpose of system's rescue.
In this embodiment, function HPA subregion also comprises the virus killing function platform that stores antivirus software, and antivirus software comprises master routine and virus base file.The antivirus software interface can customize, and also can be the conventional software of antivirus software provider.Consider user experience and avoid misoperation of users, software interface is redesigned, and Windows system registry list item is revised, make the user under the virus killing platform, can't call the shortcut of other Windows acquiescences.Specify the process that starts the virus killing platform below in conjunction with accompanying drawing 3:
When the user need start the system of band virus killing function, at first press the trigger button that starts module, after receiving and parsing module receive the relative trigger signal, host-initiated, and generate a triggering code, and be temporarily stored in the register of reception and parsing module.
System loads is at first moved the real pattern boot from disk 0 magnetic track, and the address jumps to the first address of HPA subregion.Real mode programs brings into operation, and program at first reads the triggering code from receive the parsing module register, judge according to the incident address corresponding tables that writes in advance in the HPA real pattern subregion.Code representative virus killing function, then the HPA function division address of virus killing function correspondence under the real pattern system log (SYSLOG).
The real pattern system utilizes the Mount mode that the C that the system backup mirror image invents disk is coiled, and load images.According to the address of virus killing function HPA subregion the virtual D of being of this function HPA subregion is coiled simultaneously.
Move the antivirus software of installing in this function HPA subregion, just can call its virus database after the antivirus software operation, the user can kill virus under the virus killing platform of this special use.
If virus base is not up-to-date, can upgrade by the online upgrading function that antivirus software carries, the function HPA subregion at virus base place is defined as read-write when loading, and software is sought virus base file and auto-update virus base according to default virus server address automatically.Virus base in the HPA subregion has just obtained upgrading like this.
In addition, when the user normally starts the normal operations system, since user installation antivirus software, the virus base that is stored in the antivirus software in the function HPA subregion also can be called when system loads, for reaching the purpose of the virus base of can upgrading, when loading virus base subregion HPA, the real pattern system is read-write with this function HPA definition space.When the user upgrades virus base by Internet new virus base file is write in the HPA subregion, also be loaded when the user selects to enter the virus killing platform owing to store the function HPA subregion of virus base, so two virus bases are actually synchronous.