Windows 0.1

21
XP, VISTA , 7 WINDOWS Some tips and tricks Md. Kabir Hossain 18-Dec-09

description

 

Transcript of Windows 0.1

  • 1. XP, VISTA , 7WINDOWSSome tips and tricksMd. Kabir Hossain18-Dec-09
  • 2. 2 About Deep Freeze 5Deep Freeze is very useful Software in my look. If you want that your PC is completely freefrom Virus, Spyware, Malware & other suspicious programs that can harm to your PC you candepend on this software confidently.How to install it:Run the Software. Then click on install. Next your PC will be restarted.How to uninstall it:Pressing Shift+Ctrl double click on the Deep Freeze icon which is visible at the right side onthe Task bar. Next your PC will be restarted. Now Run the Software again and click onuninstall button.***If demand password press Enter.*** Hide a folderCreate a New Folder on Desktop. Rename it 0160 with pressure on Alt key. Then you will seethis Folder name is not visible. Now Right click on this Folder & selectProperties >Customize > Change icon > Blank item (select) > Apply > ok.To see this Folder Click on Ctrl+A Speed the RAM**Start-Run-gpedit.msc(Type)-Ok-Local Computer policy-Computer configuration-Windowssettings-Security settings-Local policies-Shutdown:Clear virtual memory pagefile-Enabled**Start-Run-Tree (type)-Ok Totally turn off USB PortHKEY_LOCAL_MACHINE SYSTEM Current Control Set Services USB Stor StartREG_DWORD (3~4) How to write protect your pen drive?Startrunregedit(type)okHKEY_LOCAL_MACHINE SYSTEM Current Control SetControlOn right panel just right clickNew/KeyStorageDevicePolicies(type)again Onright panel just right clickNew/DWORD Valuewriteprotect(type)click onwriteprotect(1~0) How to remove virus from pendriveAt first turnoff your Autoplay function.Open the Command Prompt by typing cmd in the runbox. In the command prompt type the drive letter: and press enter . Now type dir /w/a andpress enter.This will display a list of the files in the pen drive. Check whether the following files are thereor notAutorun.infRavmon.exeNew Folder.exesvchost.exeHeap41aor any other exe file which may be suspicious.If any of the above files are there, then probably the USB drive is infected. In commandprompt type attrib -r -a -s -h *.* and press enter. This will remove the Read Only, Archive,
  • 3. 3System and hidden file attribute from all the files. Now just delete the files using thecommand del filename. example del Ravmon.exe. Delete all the files that are suspicious. Tobe on a safer side, just scan the USB drive with an anti virus program to check whether it isfree of virus or not. Now remove the drive and plug it again. In most of the cases, the realculprit turns out to be the Autorun.inf file which mostly gets executed when someone clicksOk in the dialog window which appears above. Thus the infections can spread How to access as an administratorOn the Welcome screen press Ctrl+Alt+Del. In the user name box, type Administrator If youdo not know your password leave the password box blank. Then click OK. Repair Windows explorerThat may be because of Virus infection. Try thisGo to Run >gpedit.mscUser Configuration > Administrative Templates > Windows Components > WindowsExplorerEnable and then Disable Removes Folder Options menu from Tools menuClose all windows explorer windows and then open again.. Hopefully it will come back Repair cmdIf the command prompt refuse to open this means that the virus put an entry key to registryto block the command prompt to open. HKCU orHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem > DisableCMD if Imright. And this means your PC is infected. If you cannot open command prompt you cannotopen regedit and Task Manager either. The best you can do is to boot up your PC in safemode or use ERD commander Boot CD to freeze up windows and delete those virus fromyour computer and USB Stick.What anti-virus did you use? I use Kaspersky Internet Security Monthly Key activated,USvIrus Scan 1.7.2 for auto full scan USB stick when inserted and USB Threat Defender toscan autorun.inf from USB stick What is CTFMON.EXEIf you have opened the Windows Task Manager or used Hijackthis to track down a problem,you have probably run across a file called CTFMON.EXE. Disabling it from MSCONFIG doesntmake it go away and it definitely feels like a virus, so what exactly this file is?It turns out that CTFMON.EXE is a file that is installed with Office XP applications. It activatesthe Alternative User Input Text Input Processor and the Language Bar. The programmonitors the active windows and provides text input service support for speech recognition,handwriting recognition, keyboard, translation, and other alternative user input technologies. It also starts the language bar that appears next to the system tray (shown below).A Hijackthis log will show CTFMON in this wayO4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exeHow to Disable the Language Bar and Remove CTFMON.EXEFollow the directions below to disable the Advanced Text Services to remove the LanguageBar1) Open the Control Panel2) Double-click on Regional and Language Options (if you are in Classic View)
  • 4. 4or Double-click on Date, Time, Language, and Regional Options in Category View3) Click on the Languages tab, then click on Details5) Click on the Advanced Tab6) Finally, place a checkmark in the box "Turn off advanced text services" and Click OkThe language bar next to the System Tray should disappear, and CTFMON.EXE will unloadfrom memory.If you wish to bring back the language bar, simply follow the procedure above and UNCHECKthe box to turn off advanced text services.Microsoft has more information and a Frequently Asked Questions document aboutCTFMON.EXE, click on the link below to review it.Therefore, CTFMON.EXE is not a virus or a piece of malware, but its also not a program thatyou NEED running, especially if you dont use Microsoft Office XP applications. How to Start Windows in Safe ModeMany times in order to remove a piece of spyware or troubleshooting and diagnosticpurposes; youll have to start Windows in Safe Mode. While in Safe Mode, only specificprograms and files needed to run the operating system are loaded. Some functions, such asconnecting to the Internet, will not be active in Safe Mode and a standard video driver will beloaded causing a washed out look and a possible change in resolution.However, because just the essential programs and files are loaded in Safe Mode, this allowsus to remove some spyware, adware, viruses and such that cannot be removed in NormalMode. Follow the instructions below to Start Safe Mode for your specific version of Windows.Windows 7 Turn the computer on or Restart the computer Start tapping the F8 key. The Windows Advanced Boot Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again. Ensure that the Safe mode option is selected, not Repair Your Computer Press Enter. The computer then begins to start in Safe mode. When you are finished with troubleshooting, close all programs and restart the computer as you normally wouldWindows VistaWindows Vista is similar to Windows XP for starting in Safe Mode.Windows XPIf Windows XP is the only operating system installed on your computer, booting into SafeMode with these instructions. If the computer is running, shut down Windows, and then turn off the power Wait 30 seconds, and then turn the computer on. Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
  • 5. 5 Ensure that the Safe mode option is selected. Press Enter. The computer then begins to start in Safe mode. When you are finished with all troubleshooting, close all programs and restart the computer as you normally would.To use the System Configuration Utility method Close all open programs. Click Start, Run and type MSCONFIG in the box and click OK The System Configuration Utility appears, On the BOOT.INI tab, Check the "/SAFEBOOT" option, and then click OK and Restart your computer when prompted. The computer restarts in Safe mode. Perform the troubleshooting steps for which you are using Safe Mode. When you are finished with troubleshooting in Safe mode, open MSCONFIG again, on the BOOT.INI tab, uncheck "/SAFEBOOT" and click OK to restart your computer How to change drive letter and paths Log in as an Administrator. Insert your removable disk. Right click on My Computer and select manage. Select disk management. Right click on removable drive partition and select change drive letter and paths. How to Bypass BIOS PasswordsBIOS passwords can add an extra layer of security for desktop and laptop computers. Theyare used to either prevent a user from changing the BIOS settings or to prevent the PC frombooting without a password. Unfortunately, BIOS passwords can also be a liability if a userforgets their password, or changes the password to intentionally lock out the corporate ITdepartment. Sending the unit back to the manufacturer to have the BIOS reset can beexpensive and is usually not covered in the warranty. Never fear, all is not lost. There are afew known backdoors and other tricks of the trade that can be used to bypass or reset theBIOSDISCLAIMERThis article is intended for IT Professionals and systems administrators with experienceservicing computer hardware. It is not intended for home users, hackers, or computerthieves attempting to crack the password on a stolen PC. Please do not attempt any of theseprocedures if you are unfamiliar with computer hardware, and please use this informationresponsibly. LabMice.net is not responsible for the use or misuse of this material, includingloss of data, damage to hardware, or personal injury.Before attempting to bypass the BIOS password on a computer, please take a minute tocontact the hardware manufacturer support staff directly and ask for their recommendedmethods of bypassing the BIOS security. In the event the manufacturer cannot (or will not)help you, there are a number of methods that can be used to bypass or reset the BIOSpassword yourself. They include:Using a manufacturers backdoor password to access the BIOSUse password cracking softwareReset the CMOS using the jumpers or solder beads.Removing the CMOS battery for at least 10 minutes
  • 6. 6Overloading the keyboard bufferUsing a professional service:Please remember that most BIOS passwords do not protect the hard drive, so if you need torecover the data, simply remove the hard drive and install it in an identical system, orconfigure it as a slave drive in an existing system. The exception to this are laptops,especially IBM Thinkpads, which silently lock the hard drive if the supervisor password isenabled. If the supervisor password is reset without resetting the and hard drive as well, youwill be unable to access the data on the drive.Backdoor passwords:Many BIOS manufacturers have provided backdoor passwords that can be used to access theBIOS setup in the event you have lost your password. These passwords are case sensitive,so you may wish to try a variety of combinations. Keep in mind that the key associated to"_" in the US keyboard corresponds to "?" in some European keyboards. Laptops typicallyhave better BIOS security than desktop systems, and we are not aware of any backdoorpasswords that will work with name brand laptops.WARNING: Some BIOS configurations will lock you out of the system completely if you typein an incorrect password more than 3 times. Read your manufacturers documentation for theBIOS setting before you begin typing in passwordsAward BIOS backdoor passwords:ALFAROME ALLy aLLy aLLY ALLY aPAf _award AWARD_SW AWARD?SW AWARD SW AWARDPW AWKWARD awkward BIOSTAR CONCAT CONDO Condo d8on djonet HLT J64 J256 J262j332 j322 KDD Lkwpeter LKWPETER PINT pint SER SKY_FOX SYXZ syxz shift + syxz TTPTHAZAAADA ZBAAACA ZJAAADC 01322222589589 589721 595595 598598AMI BIOS backdoor passwords:AMI AAAMMMIII BIOS PASSWORD HEWITT RAND AMI?SW AMI_SW LKWPETER A.M.I.CONDOPHOENIX BIOS backdoor passwords:phoenix, PHOENIX, CMOS, BIOSMISC. COMMON PASSWORDSALFAROME BIOSTAR biostar biosstar CMOS cmos LKWPETER lkwpeter setup SETUP SyxzWodjOTHER BIOS PASSWORDS BY MANUFACTURERManufacturer PasswordVOBIS & IBM merlinDell DellBiostar BiostarCompaq CompaqEnox xo11nEEpox centralFreetech PosterieIWill iwill
  • 7. 7Jetway spoomlPackard Bell bell9QDI QDISiemens SKY_FOXTMC BIGOToshiba ToshibaTOSHIBA BIOSMost Toshiba laptops and some desktop systems will bypass the BIOS password if the leftshift key is held down during bootIBM APTIVA BIOSPress both mouse buttons repeatedly during the bootPassword cracking software:The following software can be used to either crack or reset the BIOS on many chipsets. Ifyour PC is locked with a BIOS administrator password that will not allow access to the floppydrive, these utilities may not work. Also, since these utilities do not come from themanufacturer, use them cautiously and at your own risk.Cmos password recovery tools 3.1!BIOS (get the how-to article)RemPassKILLCMOSUsing the Motherboard "Clear CMOS" Jumper or Dipswitch settings:Many motherboards feature a set of jumpers or dipswitches that will clear the CMOS andwipe all of the custom settings including BIOS passwords. The locations of these jumpers /dipswitches will vary depending on the motherboard manufacturer and ideally you shouldalways refer to the motherboard or computer manufacturers documentation. If thedocumentation is unavailable, the jumpers/dipswitches can sometimes be found along theedge of the motherboard, next to the CMOS battery, or near the processor. Somemanufacturers may label the jumper / dipswitch CLEAR - CLEAR CMOS - CLR - CLRPWD -PASSWD - PASSWORD - PWD. On laptop computers, the dipswitches are usually found underthe keyboard or within a compartment at the bottom of the laptop.Please remember to unplug your PC and use a grounding strip before reaching into your PCand touching the motherboard. Once you locate and rest the jumper switches, turn thecomputer on and check if the password has been cleared. If it has, turn the computer off andreturn the jumpers or dipswitches to its original position.Removing the CMOS Battery:The CMOS settings on most systems are buffered by a small battery that is attached to themotherboard. (It looks like a small watch battery). If you unplug the PC and remove thebattery for 10-15 minutes, the CMOS may reset itself and the password should be blank.(Along with any other machine specific settings, so be sure you are familiar with manuallyreconfiguring the BIOS settings before you do this.) Some manufacturers backup the powerto the CMOS chipset by using a capacitor, so if your first attempt fails, leave the battery out(with the system unplugged) for at least 24 hours. Some batteries are actually soldered ontothe motherboard making this task more difficult. Unsoldering the battery incorrectly maydamage your motherboard and other components, so please dont attempt this if you areinexperienced. Another option may be to remove the CMOS chip from the motherboard for aperiod of time.
  • 8. 8Note: Removing the battery to reset the CMOS will not work for all PCs, and almost all of thenewer laptops store their BIOS passwords in a manner which does not require continuouspower, so removing the CMOS battery may not work at all. IBM Thinkpad laptops lock thehard drive as well as the BIOS when the supervisor password is set. If you reset the BIOSpassword, but cannot reset the hard drive password, you may not be able to access the driveand it will remain locked, even if you place it in a new laptop. IBM Thinkpads have specialjumper switches on the motherboard, and these should be used to reset the system.Overloading the KeyBoard Buffer:On some older computer systems, you can force the CMOS to enter its setup screen on bootby overloading the keyboard buffer. This can be done by booting with the keyboard or mouseunattached to the systems, or on some systems by hitting the ESC key over 100 times inrapid succession.Jumping the Solder Beads on the CMOS:It is also possible to reset the CMOS by connecting or "jumping" specific solder beads on thechipset. There are too many chipsets to do a breakdown of which points to jump onindividual chipsets, and the location of these solder beads can vary by manufacturer, soplease check your computer and motherboard documentation for details. This technique isnot recommended for the inexperienced and should be only be used as a "last ditch" effort.Using a professional service:If the manufacturer of the laptop or desktop PC cant or wont reset the BIOS password, youstill have the option of using a professional service. Password Crackers, Inc., offers a varietyof services for desktop and laptop computers for between $100 and $400. For most of theseservices, youll need to provide some type of legitimate proof of ownership. This may bedifficult if youve acquired the computer second hand or from an online auction. How to make a computer faster: 6 ways to speed up your PCBy following a few simple guidelines, you can maintain your computer, help increase your PCspeed, and help keep it running smoothly. This article discusses how to use the toolsavailable in Windows 7, Windows Vista, and Windows XP Service Pack 3 to help make yourcomputer faster, maintain your computer efficiently, and help safeguard your privacy whenyoure online.Note: Some of the tools mentioned in this article require you to be logged on as anadministrator. If you arent logged on as an administrator, you can only change settings thatapply to your user account.1. Remove spyware, and help protect your computer from viruses:Spyware collects personal information without letting you know and without asking forpermission. From the websites you visit to user names and passwords, spyware can put youand your confidential information at risk. In addition to privacy concerns, spyware canhamper your computers performance. To combat spyware, you might want to consider usingthe PC safety scan from Windows Live OneCare. This scan is a free service that helps checkfor and remove viruses.Download Microsoft Security Essentials for free to help guard your system in the future fromviruses, spyware, adware, and other malicious software (also known as malware). MicrosoftSecurity Essentials acts as a spyware removal tool and includes automatic updates to helpkeep your system protected from emerging threats.The Microsoft Windows Malicious Software Removal Tool is another utility that checkscomputers running Windows 7, Windows Vista, Windows XP, Windows 2000, and WindowsServer 2003 for infections by specific, prevalent malicious software, including Blaster,Sasser, and Mydoom, and helps remove any infection found.
  • 9. 92. Free up disk space:The Disk Cleanup tool helps you to free up space on your hard disk to improve theperformance of your computer. The tool identifies files that you can safely delete and thenenables you to choose whether you want to delete some or all of the identified files.Use Disk Cleanup to: Remove temporary Internet files. Delete downloaded program files, such as Microsoft ActiveX controls and Java applets. Empty the Recycle Bin. Remove Windows temporary files, such as error reports. Delete optional Windows components that you dont use. Delete installed programs that you no longer use. Remove unused restore points and shadow copies from System Restore.Tip: Typically, temporary Internet files take the most amount of space because the browsercaches each page you visit for faster access later.3. Speed up access to data:Disk fragmentation slows the overall performance of your system. When files arefragmented, the computer must search the hard disk as a file is opened (to piece it backtogether). The response time can be significantly longer.Disk Defragmenter (sometimes shortened to Defrag by users) is a Windows utility thatconsolidates fragmented files and folders on your computers hard disk so that each occupiesa single space on the disk. With your files stored neatly end to end, without fragmentation,reading and writing to the disk speeds up.When to run Disk Defragmenter:In addition to running Disk Defragmenter at regular intervals (weekly is optimal), there areother times you should run it, too, such as when: You add a large number of files. Your free disk space totals 15 percent or less. You install new programs or a new version of the Windows operating system.Running Disk Cleanup and Disk Defragmenter on a regular basis is a proven way to helpkeep your computer running quickly and efficiently. If youd like to learn how to schedulethese tools and others to run automatically, please read Speed up your PC: Automate yourcomputer maintenance schedule.4. Detect and repair disk errors:In addition to running Disk Cleanup and Disk Defragmenter to optimize the performance ofyour computer, you can check the integrity of the files stored on your hard disk by runningthe Error Checking utility.As you use your hard drive, it can develop bad sectors. Bad sectors slow down hard diskperformance and sometimes make data writing (such as file saving) difficult or evenimpossible. The Error Checking utility scans the hard drive for bad sectors and scans for filesystem errors to see whether certain files or folders are misplaced.If you use your computer daily, you should run this utility once a week to help prevent dataloss.5. Upgrade to Windows 7:
  • 10. 10If you try all the previous remedies and your computer still isnt as fast as you would like itto be, you may want to consider updating to Windows 7. Using software to make a bootable pen drive Users who have been struggling to follow our command prompt based install Windows 7 from USB flash drive and make bootable USB guides have a good reason to rejoice. Now you can create Windows 7, Vista, or the old XP bootable USB key with a few clicks. Yup, this is true. Read to know more! Lets begin the guide without wasting time. Just make sure that you have a pen drive with 4GB + capacity if you are making a bootable USB flash drive. Requirements to create bootable Windows USB: # Windows 7 or Vista ISO # Pen drive with 4GB+ (2 GB is sufficient for XP) # 15 Minutes of free time Procedure: 1. Insert your USB flash/pen drive to your system and backup all the data from the USB as your USB drive will be formatted during the process. 2. Now download WinToFlash tool (free) from here. 3. Run the tool, and browse to your Windows 7, Vista, or XP DVD files (make sure that your USB drive letter is correct). 4. Click Create button to begin the bootable USB process. Wait for few minutes to see the bootable USB. 5. Thats all! Using cmd to make a bootable pendriveHaving a bootable USB is very essential, especially if you are a Netbook user. Usingbootable USB to install an operating system (OS) not only makes the installation faster, butalso saves a DVD.
  • 11. 11Creating or using an USB drive to install Windows operating systems is very easy if youfollow the below mentioned steps.If you are planning to use bootable USB to install Windows 7 or Vista please refer ourguides:Install Windows 7/Vista using bootable USB guideAnd also, you can refer install Windows 7 on Acer Aspire One guideComing back to bootable USB guide, here we assume that you are using either Vista orWindows 7 to create a bootable USB.1. Insert your USB (4GB+ preferable) stick to the system and backup all the data from theUSB as we are going to format the USB to make it as bootable.2. Open elevated Command Prompt. To do this, type in CMD in Start menu search field andhit Ctrl + Shift + Enter. Alternatively, navigate to Start > All programs >Accessories > rightclick on Command Prompt and select run as administrator.3. When the Command Prompt opens, enter the following command:DISKPART and hit enter.LIST DISK and hit enter.Once you enter the LIST DISK command, it will show the disk number of your USB drive. Inthe below image my USB drive disk no is Disk 1.4. In this step you need to enter all the below commands one by one and hit enter. Asthese commands are self explanatory, you can easily guess what these commands do.SELECT DISK 1 (Replace DISK 1 with your disk number)CLEANCREATE PARTITION PRIMARYSELECT PARTITION 1ACTIVEFORMAT FS=NTFS(Format process may take few seconds)ASSIGNEXITDont close the command prompt as we need to execute one more command at the nextstep. Just minimize it.5. Insert your Windows DVD in the optical drive and note down the drive letter of theoptical drive and USB media. Here I use D as my optical (DVD) drive letter and H as myUSB drive letter.6. Go back to command prompt and execute the following commands:D:CD BOOT and hit enter. Where D is your DVD drive letter.CD BOOT and hit enter to see the below message.BOOTSECT.EXE/NT60 H:(Where H is your USB drive letter)7. Copy Windows DVD contents to USB.
  • 12. 12You are done with your bootable USB. You can now use this bootable USB as bootable DVDon any computer that comes with USB boot feature (most of the current motherboardssupport this feature).Note that this bootable USB guide will not work if you are trying to make a bootable USB onXP computer. REMOVING USERNAME IN THE STARTMENUOpen Registry Editor Then Go To :"HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer".On The Right, Make A New Entry With Right Click On Your Mouse Then Choose "New |DWORD Value" Change The Entrys Name Into "NoUserNameInStartMenu", Double Click InThe New Entry And Fill The "Value Data" With "1". Press OK, Exit From The Registry Editor.Restart Your Computer. CLEANUP STARTUP ITEMS IN MSCONFIG.Do you ever uninstall programs and they are still listed under startup items in msconfig?Personally, I found myself with 30 such items from old installs. Microsoft leaves you no wayto clean up this list, but have no fear, I have figured it out for you.1. Open MSconfig and click on the startup items tab2. Open Regedit and naviate to HKLM/Software/Microsoft/Sharedtools/MSconfig/startupreg3. Compare the list of registry keys under startup reg with their counterparts in msconfig.4. Delete the keys which are no longer valid.5. Voila! Youve cleaned up msconfig. HOW TO REAL GET RID OF UNNECESSARY SOFTWAREto uninstall things like msn messenger and other hidden installs thru add remove programs,do this: find sysoc.inf (you might have to enable "show hidden files" and "showhidden/protected system folders" in explorer) and open it in notepad replace all ",hide" with"," (both with out quotes) which is easiest to do with the replace all command under editthen in add/remove programs under add/remove windows compnents and whole new list ofthings to uninstall and add are now listed (such as internet explorer) REGISTRY METHOD FOR REMOVING STARTUP ITEMS.I prefer to use MSCONFIG selective startup to troubleshoot. To remove entries for good,open the registry:HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRUN andHKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRUNDelete entries of unwanted startup daemons and tray procedures. SHUTDOWN XP FASTER 1.Like previous versions of windows, it takes long time to restart or shutdown windows xpwhen the "Exit Windows" sound is enabled. to solve this problem youmust disable this useless sound. click start button then go to settings -> control panel ->Sound,Speech and Audio devices -> Sounds and Audio Devices -> Sounds, then underprogram events and windows menu click on "Exit Windows" sub-menu and highlight it.nowfrom sounds you can select,choose "none" and then click apply and ok. now you can seesome improvements when shutting down your system. SHUTDOWN XP FASTER 2.Start Regedit.Navigate to HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control.Click on the "Control" Folder.
  • 13. 13Select "WaitToKillServiceTimeout"Right click on it and select Modify.Set it a value lower than 2000 (Mine is set to 200). SPEED UP MENU DISPLAY.When using the start menu the you will notice a delay between different tiers of the menuhierarchy. For the fastest computer experience possible I recommend changing this value tozero. This will allow the different tiers to appear instantly. Start Regedit. If you are unfamiliarwith regedit please refer to our FAQ on how to get started.Navigate to HKEY_CURRENT_USERControl PanelDesktopSelect MenuShowDelay from the list on the right.Right on it and select Modify.Change the value to 0.Reboot your computer. System InformationIt boasts how long it can stay up. Whereas previous versions of Windows were coy abouthow long they went between boots, XP is positively proud of its stamina. Go to the CommandPrompt in the Accessories menu from the All Programs start button option, and then typesysteminfo. The computer will produce a lot of useful info, including the uptime. If you wantto keep these, type systeminfo > info.txt. This creates a file called info.txt you can look atlater with Notepad. (Professional Edition only). Balloon TipsWindows XP can be very insistent about you checking for auto updates, registering aPassport, using Windows Messenger and so on. After a while, the nagging goes away, but ifyou feel you might slip the bonds of sanity before that point, run Regedit, go toHKEY_CURRENT_USER/Software/Microsoft/Windows/Current Version/Explorer/Advanced andcreate a DWORD value called EnableBalloonTips with a value of 0. To delete temporary Internet filesInternet Explorer 6 will automatically delete temporary files, but only if you tell it to. Startthe browser, select Tools / Internet Options... and Advanced, go down to the Security areaand check the box to Empty Temporary Internet Files folder when browser is closed. Password Recovery DiskTake preventive measures against losing user-level passwords.It doesnt matter if you never again remember a Windows user password. Thanks to XPsForgotten Password Wizard, your conscience will be free and clear -- should your mindhappen to accidentally misplace your user password.I highly suggest you create a password recovery disk the minute you create your useraccount. Why? In order to create a password recovery disk youre going to need yourpassword. Write it down the minute you create your user account and then proceed tocreating your very own password recovery disk.Heres how to launch the Forgotten Password Wizard:Single-click Start menu, Control Panel, and User Accounts.Click your user account name.Under Related Tasks on the left, click "Prevent forgotten password" to launch the wizard.
  • 14. 14Now that youve launched the wizard, let it walk you through creating the recovery disk.Make sure the disk you use is formatted and in the drive. After its finished creating the disk,label it and stash it away for an emergency.If you happen to forget your password, all you need to do is click your user icon at the logonscreen. Even though you dont have your password, go ahead and click the green arrow justlike you would to finish logging on to your computer. This will launch a little yellow dialog boxdirecting you to use your pass Simple Steps for Removing Spyware from Your ComputerRestart computer in Safe Mode (with Networking)How to Restart Computer in Safe Mode :Some computers have a progress bar that refers to the word BIOS. Others may not let youknow what is happening. As soon as the BIOS loads, begin tapping the F8 key on yourkeyboard. Do so until the Windows Advanced Options menu appears. If you begin tappingthe F8 key too soon, some computers display a "keyboard error" message. If this happens,restart the computer and try again. Using the arrow keys on the keyboard, select Safe mode(with Networking)Download CWShredder and save it to your Desktop.Download Spybot - Search & Destroy and install itDownload Ad-Aware and install it. Make sure you click on check for updates before scanningDownload HijackThis from hereCWShredder (Freeware) CWShredder finds and removes traces of CoolWebSearch.CoolWebSearch is a name given to a wide range of different browser hijackers. Though thecode is very different between variants, they are all used to redirect users tocoolwebsearch.com and other sites affiliated with its operators.The CoolWebSearch Trojan installs dozens of links in Favourites, mostly to porn sites on yourdesktop; it also adds toolbar to Internet Explorer and changes your homepage withoutasking you. and it also significantly slows down the performance of your computer, and itmodify some files which cause Windows to freeze, crash, random reboot etc.Start CWShredder and you can choose "Fix"
  • 15. 15If your computer has Trojans then you can fix it by clicking Next."CoolWebSearch encompasses a wide family of browser hijacker spyware programs. Thisspyware is frequently updated, to avoid anti-spyware software from removing it.CWShredder is widely regarded as the only solution to effectively remove CoolWebSearchspyware. " - (PC Magazine, August 2004)Spybot - Search and Destroy (Freeware):Spybot - Search and Destroy is an Spyware andAdware Detection and Removal Tool. It can detect and remove spyware of different kindsfrom your computer. This includes removal of certain advertising components, and detectionof various keylogging and other spy utilities.If you see new toolbars in your Internet Explorer that you didnt intentionally install, if yourbrowser crashes, or if you browser start page has changed without your knowing, you mostprobably have spyware. But even if you dont see anything, you may be infected, becausemore and more spyware is emerging that is silently tracking your surfing behaviour to createa marketing profile of you that will be sold to advertisement companies.In addition, it also securely removes PC and Internet usage tracks, including browser history,temporary pages, cookies (with option to keep selected) and more.The first time SpyBot launches, you will be asked if you wish to create a backup of registry,check for updates (they regularly update the list of spyware that SpyBot detects), andimmunize your system from known spyware. Say "yes" to all of these.Now click Search & Destroy from the navigation bar and then select Check for problems.After scanning your hard drive, SpyBot will list all Spyware, Adware, Exploits and trackingcookies that it finds. Make sure all items are selected and then click Fix selectedproblems.SpyBot may not be able to remove some items that are currently running, in thatcase it will ask if you want to run again the next time the computer is restarted.HijackThis (Freeware):Hijackthis is a program that is designed for the advanced removal ofmalware, spyware, worms and Trojans from your system. Basically it scan the registry andother locations of your computer where spyware is commonly found. It therefore lists areaswhere spyware and adware could be found like items contained in the system startup, hostsfile that may call up unwanted websites as well as all browser objects like Toolbars etc.
  • 16. 16Hijackthis can help in hard to remove items of spyware and adware that spyware removalprograms may not be able to detect yet. It is an advanced software and is recommended foradvanced users since you have to manually remove only some items from your systembecause some are needed for system functionality. You can save the log file and getassistance from advanced users.This tutorial is designed to give you an overview of how the program works. If you areunsure about something you should leave it and ask for help. Remember before usingHijackThis, Scan with at least two spyware removal (Ad-aware and Spybot S&D)R0, R1, R2, R3 - Internet Explorer Start/Search pages URLsF0, F1 - Autoloading programsF2, F3 - Autoloading programs mapped to the RegistryN1, N2, N3, N4 - Netscape/Mozilla Start/Search pages URLsO1 - Hosts file redirectionO2 - Browser Helper ObjectsO3 - Internet Explorer toolbarsO4 - Autoloading programs from RegistryO5 - IE Options icon not visible in Control PanelO6 - IE Options access restricted by AdministratorO7 - Regedit access restricted by AdministratorO8 - Extra items in IE right-click menuO9 - Extra buttons on main IE button toolbar, or in IE Tools menuO10 - Winsock hijackerO11 - Extra group in IE Advanced Options windowO12 - IE pluginsO13 - IE DefaultPrefix hijackO14 - Reset Web Settings hijackO15 - Unwanted site in Trusted ZoneO16 - ActiveX Objects (aka Downloaded Program Files)O17 - Lop.com domain hijackersO18 - Extra protocols and protocol hijackersO19 - User style sheet hijackO20 - AppInit_DLLs Registry value autorunO21 - ShellServiceObjectDelayLoad (SSODL) autorun Registry keyO22 - SharedTaskScheduler autorun Registry keyO23 - NT Services
  • 17. 17Start HijackThis and Click on Do System Scan only. When the scan is complete check all theunnecessary items which should be removed, and Click on the Fix checked button. Aconfirmation box will appear. Click Yes. HijackThis will now remove the checked items. , , ? , ( ) , , , , , ( ) ? , , , , , , , ......) ) (,,,) ) MY computer (Alt+Ctrl+Delete ) , ) new task create new task ) Browse
  • 18. 18) , , , open ) create new task ok ) , , new task->browse-> open ok How to remove other operating systems in windows XPMy Computer>Properties(right click)>Advance>Startup and Recovery(settings)>Edit>multi(0)disk(0)rdisk(0)partition(1)WINDOWS="Windows XP Professional"/fastdetect(default)multi(0)disk(0)rdisk(0)partition(2)WINNT="Windows XP Professional" /fastdetect(other OS)Delete other OS>Save>Restart. autorun.inf start>run cmd del /a:h /fc:autorun.* "c" wink open with : Show Hidden files and folders Hide Extension andHide protected operating system file. (ctrl-shift-esc) wscript.exe Start -> Search autorun.inf. MS32DLL.dll.vbs SHIFT + DELETE . (C:WINDOWS MS32DLL.dll.vbs) Start -> Run -> Regedit HKEY_LOCAL_MACHINE > Software >Microsoft >Windows > Current Version> Run. MS32DLL HKEY_CURRENT_USER > Software > Microsoft > Internet Explorer > Main. Hacked by Godzilla Start > Run -> gpedit.msc . Group Policy. User Configuration > Administrative Templates > System > Turn off Auto play . Enabled All drives. Group Policy Start > Run -> msconfig -> Startup. MS32DLL, Enable All, MS32DLL
  • 19. 19System Configuration Utility Exit without Restart My Computer -> Tools -> Folder Options -> View. Hide Extension and Hide protected operating system file dont show hiddenfiles and folders.Recycle bin Restart The device Generic volume cannot be stopped right now: My Computer -> Right click on drive icon hardware - > Device -> Policies Optimize for quick performanceUSB drive will not appear in your Computer : * Start -> Run -> diskmgmt.msc * USB Drive -> . Change Drive Letter andpaths * * * Double click on drive opens new window : : * Start -> Run and regsvr32 /i shell32.dll. * DllRegisterServer DllInstall in shell32.dll succeeded : * Start >> Run regedit * HKEY_CLASSES_ROOT/Directory/Shell. the default key none * HKEY_CLASSES_ROOT/Drive/Shell. the default key none - - safely remove option :
  • 20. 20 ( ) (C: ) Mini XP HBCD Menu Menu Backup>Ghost 32* OK About Ok Local>Partition>To Image Ok (C:) Ok (No | Fast | High) ( No , Fast High ) Proceed YES ( ) Mini XP HBCD Menu Ghost 32* Local>Partition>From Image Ok (C:) Ok Proceed YES Scanning with XP CD , start run run sfc /scannow windows xp (, ) ( ) How to disable or enable the Administrator account statusRun gpedit.msc (type) Computer configuration Windows settings security settings Local Policies security options Account : Administrator account status. Hide the specific drive in My ComputerRun gpedit.msc (type) user configuration Administrative Templates windowscomponents >windows explorer Hide this specific drives in My computer.
  • 21. 21 Prevent access to drives from My computerRun gpedit.msc (type) user configuration Administrative Templates windowscomponents >windows explorer Prevent access to drives from My computer. .To be continued