- PGP Keys
- Vossen's Law
- Firewall Rules
- Home Net Security
- Snort Books
- Sec Tools
- Honeypot Stats
- Firewall Stats
- IP Calcs
- SME Server
- Backup (DI-30)
- Win Tools
- Win. Shell Scripting
- POSIX Redirection
Does your computer ever do any of the following, "just for the heck of it," with no rhyme or reason? Does it do it a lot? More than once or twice a day?
If so, this page may be able to help. It is intended for novice users, so hopefully everything will be clear. Let me know if it's not.
This page is mostly oriented towards the Win9x code-base, which includes Windows 95, 98 and ME. Some of the material is applicable to Windows NT/2000/XP (such as clearing the temp directory) and some is not. This is indicated in square brackets after each step.
Some of the methods and techniques I talk about can be dangerous to your data! Use this page at your own risk.
Make backups of your important data. I strongly recommend purchasing and using a modern tape drive. They cost between $100 to $500 for typical retail/consumer oriented units. Some of them even plug right into your printer port, so you don't even have to open up the computer to install it, and they may be used on more than one computer. Another solution is a CD Burner. They will not be able to back up the entire system, but your data files will easily fit onto a CD-Rewritable or CD-R disk.
Consumer Tape Units
To be added.
To be added.
Hardware Upgrade/Restore Voodoo
Thanks to Leo for this great info.
Ever try to upgrade hardware on a Windows 2000 or XP system, especially the motherboard or hard drive controller? Bet you regretted it, didn't you? Well, here are some MS TechNet articles that might help. Read the disclaimer!
The Windows TCP/IP networking stack is not the most stable thing in the world. In particular, there is a ability for third-party applications to tie themselves into the stack for various reasons. The advisability of allowing this is questionable at best, but there it is. One of the possible results of this "feature" is that Windows networking can sometimes simply die. Often there is no remedy but reinstalling the entire system from scratch.However, since this is a known issue and such a giant pain there are a couple of tools available to try and help. In particular, LSP-Fix "is a free utility to repair [problems in] Layered Service Provider or LSP, a piece of software that can be inserted into the Windows TCP/IP handler like a link in a chain. However, due to bugs in the LSP software or deletion of the software, this chain can get broken, rendering the user unable to access the Internet."
Crapware & system slowdown or instabilityThere are programs out there that spy on you (spyware), monitor keystrokes, bother you with advertisements (adware) and all kinds of other things. They are often collectively known as "crapware" and they are BAD. Many add-on tool or search bars for IE are crapware! Many of the symptoms above can be cause by crapware, so it's definitely worth it to look into. I recommend reading the following links, then installing and using the free Ad-aware and Spybot programs.
I call these techniques "voodoo" because it is often not clear that they a) should work or b) why they work. They just do. This page is mostly oriented towards the Win9x code-base, which includes Windows 95, 98 and ME. Some of the material is applicable to Windows NT/2000/XP (such as clearing the temp directory) and some is not. This is indicated in square brackets after each step.
I've created a bootdisk that will automate some of these steps for you, if you are using Win9x/ME. See the Boot Disk section below.
Finally, the worst case is that you have to back up your data, reformat your hard drive, and start over.
Boot into DOS Mode
Skip this step if you are using my boot disk.
This applies to Win9x/ME only. In NT, you can't really do this at all, especially if you are using NTFS (which you should be). (Technically, that's not true -- there are ways. But they are far too complicated for this page.) Win2K has something similar, but you probably don't need or want to mess with it.
If you don't get the "Starting Windows 9x." or the menu, there are a couple of reasons why that could be. Lots of computers have annoying manufacturer logos that cover this stuff. Try hitting the ESC key when the logo comes up. Other "F" keys sometimes work too.
You can also going to Start, Shutdown, "Restart in MS-DOS Mode," which will do pretty much the same thing. You type "exit" to end MS-DOS mode and return to windows.
If you get the "Starting Windows 9x." but pressing "F" keys does not work, your c:\MS-DOS.sys file probably has BootKeys=0, BootMulti=0 or something else screwy. Try rebooting and holding down one of the CTRL keys. If that doesn't work you have to edit c:\MS-DOS.sys, which is a bit of a pain to correct that. See MS Technet "Contents of the Windows Msdos.sys File [Q118579]" for details and instructions on how to fix it.
Clean out the "Temp" directory
Read the disclaimer!
Skip this step if you are using my boot disk. Also, see my Sweepup.bat script.
The "temp" directory is used to temporary files. Just about every program uses temp files for something. The operating system uses then, your applications like Word or Excel use them, and utilities use them. What is supposed to happen is that when the program either shuts down, or no longer needs the temp file -- it is deleted. In practice this does not always work. So over time you can build up amazing numbers of junk temp files. I've seen computers with temp files dating back two and three years, wasting hundreds of megs of disk space.
Of course, you can't just randomly delete everything in the temp directory. No. That would be too easy! The problem is that some of the stuff in there might actually be in use and if you delete it, something will break. Usually the system will not let you delete something that is in use, but you can't depend on that. There are two ways around this. The first and best is to boot to DOS, which guarantees that nothing is currently in use, then clear it. The second way is to reboot, and clean out the temp directory before anything has a chance to get started. The problem with that is that many people have all kinds of stuff running in the background on startup, and those programs may open temp files right away (see unnecessary services).
Run ScanDisk and/or Chkdsk
Do this after using the boot disk.
ScanDisk and Chkdsk (Check Disk) perform more or less the same function. The difference is that Chkdsk is the old, DOS, command line tool, which does not really know about long file names. ScanDisk is the more modern graphical tool that can deal with a few more problems than Chkdsk. There is also command line (non GUI) version of ScanDisk.
Run Defrag (Win9x or Win2k only)
Read the disclaimer! If the power goes out while defrag is running, you can lose your data!
Do this after using the boot disk.
NT does not come with a defragger, so you are out of luck. Win9x and Win2k do have them. You want to run it from the GUI (Graphical User Interface) not the command line or DOS prompt.
Remove Unnecessary Services
Do this after using the boot disk.
This is easy to say, but hard to do. There are so many different tools and configurations out there that it's impossible to say what is really needed or not. However, if your system tray (the little area next to the clock) has more than 3-8 items in it, you probably have too many and could get rid of some. Also, some incredibly annoying applications, such as Netscape (which I otherwise like) install crap you probably don't want or need in the system tray -- without asking! For example, Real Player and AIM (AOL Instant Messenger) are often installed. Quicken is another one that runs a bunch of crap most people don't use.
I can't even really tell you how to get rid of them, as they are all different. However, I can tell you where to look.
Win98 (and I assume ME)
If you have Win98 (or I assume ME, but I don't know for sure), go to Start, Programs, Accessories, System Tools, System Information, then get the Tools, System Configuration Utility. Better yet, go to Start, Run and type "msconfig" (without the quotes) and hit enter. This gets you to the same place, a lot faster.
Anyway, the System Configuration Utility has a very cool "Startup" tab. This shows you all the stuff that starts up with your PC. You can go in there and un-check things, then reboot and make sure everything still works. You should check all the other tabs, but unless you see something really obvious (like drivers for an old hardware device you no longer have) you should probably not touch them too much.
Go to Start, Settings, Control Panel, Services. See what is started, and what is automatic. Try stopping things that you know you don't need. For example, you might be running a web server, FTP server, etc. without even knowing it. This is a large security risk as well. If you can stop services with no ill effects, you must change the startup type to manual (which will still allow the service to be started under some circumstances) or disabled (the service is now toast) or they will be restarted the next time you reboot.
Go to Start, Settings, Control Panel, Administrative Tools, Services. See above NT section for the rest of the details.
Consider these after trying the above and/or using the boot disk.
The Boot Disk
This boot disk will work for Win9x/ME. It might work for NT/2000/XP, if
you are using the FAT file-system (which you shouldn't be). This disk uses
only FREE programs -- from the FREEDOS Project!
This boot disk will clean out the TEMP directory and some other junk files, then try to run a command line ScanDisk. Since you are booting from the disk, you do not have to mess with DOS mode -- you're already where you need to be.
It will also clean up some other files that I didn't mention above. If any of the following exist, they will be deleted:
I will add more to this page as time allows. If you have a specific question, let me know, I might be able to help.
Last Modified: $Date: 2007-11-28 02:26:46 -0500 (Wed, 28 Nov 2007) $