Security Malware and Your Computer

Computers are practically in every aspect of our lives these days and our reliance on them is heavy. They are used as tools for work, data storage, schoolwork, shopping, and entertainment. Because so much information is typically stored on our computers we must always make sure they are protected from that loss of information. Businesses have to secure information on their computers to protect it from exploitation by hackers. And the home computer user is no exception to the requirement to protect computer information because there can be credit card numbers, social security numbers, and other sensitive personal information stored on their computer or transmitted when doing online shopping. There is a term used for this and it is “computer security risk.” This term refers to the likelihood that some action could cause the loss of information, computer hardware, or denial of service.

When computer security is put at risk intentionally, it becomes criminal in nature or we call this a computer crime. Another relative of the computer crime is the cybercrime. The FBI pays especially close attention to cybercrimes and there are other types of crimes related to them such as corporate spying, unethical computer activity, cyberterrorism, hacking, cracking, and cyberextortion.

Hacking at one time had a positive meaning to it but since computer crimes were introduced, it falls in the bucket with the rest of them. The hacker is the person who gains access to a computer network illegally. They sometimes use the excuse that they were only trying to break a network’s security so as to make the administrator aware of any security deficiencies.

Closely related to the hacker is the cracker. But the cracker never has been viewed in a positive light. The cracker always has had the intent to gain access to computer and its network to do harm to it or commit a crime like stealing information stored on it. The cracker, like the hacker, has to know what he or she is doing so advanced computer skills are needed in order to pull these crimes off.

Then there are the cyberterrorists and cyberextortionists. The cyberterrorist has a political motive behind his or her activities and it is to do harm to computers to adversely affect a political system. Cyberterrorism requires extensive planning, skilled people to carry it out, and money to fund it. It is much like the classic terrorist attack.

The cyberextortionist is the one who commits the crime of extortion via email. They will hold a company hostage by threatening to release sensitive company information or harm a company’s computers and network if not given some confidential information and/or money. Sometimes these criminals are aware of security leaks that will allow them to exploit the computer. It is much like classic extortion except carried out through computers.

Then there is the employee who wants to get revenge on his or her company because of some perceived wrong done to them or they want to pad their pockets. These people are known as the unethical employees and what makes them so dangerous is that they many times know how to get into the system.
Not everyone has the computer skills required to be a cracker or hacker so there is another classification known as the “script kiddie.” This person is usually is a teenager attempts to harm a computer system but cannot do much because he or she does not know much. This person will use canned programs and scripts to attempt to do the hacks and cracks.

Some unethical businesses try to gain an unfair advantage on their competition through an illegal activity known as corporate espionage. The same unethical businesses will hire a corporate spy who is highly-proficient in computers and technology to break into the target corporation’s computers. The corporate spy will then steal information or even sabotage the target computer.

It is imperative that home and business computer users take action to shield their computer from these threats to their security. Computer security methods are not 100% foolproof but they do decrease the risk to computers significantly. As soon as a solution is found to protect against one threat, someone figures out a new way to gain unauthorized access to them. Computer users on home networks are more at risk to have information stolen than are computers on business networks mostly because of the more advanced security on the latter. And the internet is a network even more susceptible and at risk when it comes to security. Another problem with security on the internet is that there is not one centralized point to manage security and safety on the information highway.

You are probably wondering now if your computer is secure from threats such as these. There are ways you can get your system evaluated. You can find sites on the internet that offer services that will access your computer and report to you any security vulnerabilities found either through internet browsing or the e-mail. These same companies many times offer tips and suggestions of ways to protect against the vulnerabilities. Another resource in the fight against computer security threat is the Computer Emergency Response Team (CERT) Coordination Center which also offers suggestions.

Security attacks against computers usually involve things like worms, viruses, denial of service, Trojan horses, and spoofing. All of these, the computer virus is the most famous. A computer virus is basically software that is designed to do damage to the files on your computer once it gets installed on it. All if it is done without the user giving permission and without the user’s knowledge at first. A computer virus, once it gets in your computer, will spread and cause more damage. It will do things like delete files and corrupt your computer’s operating system and render it inoperable. Thus it was tagged with the term “virus” because it acts much the same way as human virus does: it gets in and spreads throughout the body and causes illness or damage in some cases. Protection against viruses is available through anti-virus software.

An offshoot of the computer virus is the computer worm. A computer worm is much like a virus with the exception that it will find some perfectly valid executable program on your computer and attach itself to that program. When the user runs the program, the computer worm will attack. Computer worms can consume a lot of network bandwidth while they replicate across a corporate network.

And now for the famous Trojan horse computer threat that derives its name from the famous story in Greek mythology. What a Trojan horse does is hide itself in a program that looks like a valid program but in reality it is not. Trojan horse programs do not replicate like the viruses and worms do.

All these different types of threat software are known as malware which is term used to refer to malicious-logic programs. Malware, as the name implies, does damage to your computer. There are other variations of worms, viruses, and Trojan horses but we are just discussing these three for this article. And you should know how to suspect you have been attacked by one or more these malicious programs. You should be suspicious that you have been attacked if your computer shows one or more of these signs:

• Programs you use suddenly don’t work like they used to
• Files are missing or corrupted
• Strange music or sounds are heard on your computer
• You start running out of memory for no apparent reason
• Strange files show up on your system
• System properties begin to change
• Popup windows with odd messages and/or images display

The ways in which these malicious programs do their damage or drop their “bombs” can be one any one of the following:
• A user runs a program infected with the virus. This is why virus scanning software that checks a program before running it is so important.
• A user boots a computer and the virus is installed on the boot sector. It is recommended that you remove all media files when you shut down your computer.
• A user connects to a computer that is not protected against viruses on the network (such as accessing a shared drive). So the user opens a virus-infected file on a shared drive and now the user’s client computer has the virus.
• A user opens up an email attachment that contains an executable file with a virus. This is why it is so important to not open up executable email attachments unless you know the sender and the attachment has been scanned by anti-virus software.

And another big problem with malicious logic programs is that new ways to implement them are discovered every day. Security websites try to stay on top of each new malware implementation so that users can be alert for them. Take basic safety measures to protect your computer such as installing a good anti-virus package that gets updated with new malware detection logic automatically. Never open up suspicious email attachments. Be careful of the internet sites you visit (i.e., don’t visit Warez sites), and run anti-spyware programs. Take the media out of any alternate boot devices you have so that a virus cannot get stored on it and be introduced at boot time. Finally, stay informed from security websites as to the latest threats and what to look out for.

Computer Security Measures and Vigilance

Nowadays, countless people depend on computers for executing their work, home assignments and for creating or storing essential information. Hence, it is of the utmost importance for this computer information to be carefully stored and well maintained. Besides, it is equally imperative for people using computers to protect them from probable data loss, abuse and misuse. For instance, it is vital for businesses to retain the information they possess protected in order that hackers cannot get to the data. In addition, home users too are required to take proper measures to ensure that their personal credit card numbers undoubtedly are safe when they partake in online transactions.

Computer security risk refers to any action that possibly could result in loss of data, software, information, processing incompatibilities, or lead to damage to the computer hardware. Many of these are intended to cause damage. A deliberate violation of computer security is called a computer crime and this differs a little from what is called a cyber crime. Now a cyber crime refers to unlawful acts committed on the Web and this is amongst the FBI’s main concern. There are numerous different categories of people that commit cyber crimes, and these people are known as hackers, crackers, cyber extortionists, cyber terrorists, script kiddies, corporate spies and unethical employees.

The term hacker actually was believed to be a decent term but presently there are negative connotations attached to it. A hacker is thought to be someone who gains access to a computer or a computer network illegally. Their regular line of reasoning is that they commit this in order to detect loopholes in the network security. The term cracker never has been linked with something constructive and it denotes someone who deliberately gains entry into a computer or a computer network with criminal intentions. This person is essentially a criminal hacker. Such persons penetrate the computer with the sole purpose of obliterating, or lifting data. Both hackers and crackers have highly developed network skills.

A cyber terrorist refers to a person who makes use of the Web or the computer network to damage computers on political grounds. This resembles a standard terrorist assault since it calls for well-trained persons, millions of dollars of investment, and several years of planning. Next, the term cyber extortionist refers to a person who employs emails as a destructive weapon. Normally such persons dispatch intimidating emails to companies declaring that they would make public certain classified data, take advantage of security slip-ups, or trigger an assault that would damage the networks of companies. They will demand substantial amounts in order not to go ahead with their evil intentions, something akin to black mailing.

An unethical employee refers to an employee who unlawfully makes his way into the company’s network for various reasons. One motive could be money to be obtained from exchanging confidential information, or perhaps a few employees may be harboring a grudge and waiting to settle scores. A script kiddie refers to a person who is similar to a cracker since his aim is to create damage, but is not equipped with the technical skills. Generally they are harebrained teenagers that make use of prewritten hacking as well as cracking programs. Then, a corporate spy is armed with exceptionally advanced network and computer skills and is engaged to force an entry into a particular computer or a computer network in order to lift or erase information and data. Devious companies employ these kinds of persons to take part in what is commonly called as corporate espionage. Now they resort to this so as to have an upper hand over their rivals through unlawful activities.

Home and business users need to put in their best so as to defend or protect their computers from the threat of a security risk. The following section of this article provides you with guidelines on how to help safeguard your computer. Nevertheless, one must keep in mind that nothing can ensure 100% computer protection and therefore there is a greater emphasis on becoming proficient in this field. When you pass on information using a network, there is a higher security risk involved as opposed to information sent through a business network since the administrators generally take certain extreme steps to help defend against security risks. But where the Internet is concerned, there is no controlling administrator and this considerably increases the risk.
In case you are unsure whether your computer is open to a security risk, then you can opt for some kind of web-based security service. This is basically a website that runs a safety check on your computer concerning email & Internet flaws. Then the company will provide a few tips on how to fix these flaws. This can be done at The Computer Emergency Response Team Coordination Center. The standard network assaults that place computers in a risky position include viruses, Trojan horses, spoofing, worms, and disclaimers regarding service attacks.

Every unguarded computer is exposed to threat of a computer virus. This is a potentially destructive computer program, which infects a computer detrimentally and changes the manner in which the computer works without the user’s authorization. The moment the virus enters the computer it is possible for it to spread all the way through, contaminating other files and probably harming even the operating system. In fact it is quite like the bacteria virus, which infects humans as it enters the body through tiny openings and spreads to other regions of the human body and creates damage. This likeness is in fact a fine way to prime yourself for it. Next, a computer worm refers to a program that duplicates itself over and over again and is quite akin to the computer virus. But the difference lies in the fact that the virus has to fasten itself onto executable files and turn out to be a part of the file. Now a computer worm does no such thing but simply copies itself and uses up plenty of bandwidth. Then the Trojan horse, so called after the popular Greek legend, is used to define a program, which clandestinely conceals itself and in fact appears like a genuine program but actually is a phony. A specific action normally activates the Trojan horse. However unlike worms and viruses it does not copy itself. Trojan horses, computer viruses, and worms are all grouped as malevolent-logic programs and these programs are intentionally intended to damage a computer. While these three are the common ones there are several other variations and it is just not possible to list them.

You might suspect a Trojan horse, virus, or worm has attacked your computer, if any of the following occur:
1. Screen shots of bizarre messages or images materialize.
2. You have far less memory available than you anticipated
3. Sounds or music play at random.
4. Files tend to be corrupted
5. Files or programs do not operate well
6. Unidentified files or programs appear at random
7. System properties vary

Trojan horses, computer viruses or worms distribute their instructions or payload in 4 familiar ways. Firstly when a person runs a corrupted program and therefore when you download several things, you always need to scan the files prior to executing, more so where executable files are concerned. Secondly is when a person operates an infected program. Thirdly is when a person boots a computer containing an infected drive. Hence it is vital not to leave behind media files in the computer when you are finished and shut down. Fourthly is when it links an unguarded computer to the network. These days, a Trojan horse, computer virus, or a worm commonly infects computers when people access an infected file via an email attachment.

Now there are virtually countless computer malevolent logic programs and fresh ones appear by the dozens and this is why it is vital to be updated with the new ones, which appear every day. Most websites monitor this. However there is no recognized method for totally defending a computer or a computer network against Trojan horses, computer viruses, and worms but it is possible for people to take various safeguards to considerably lower the likelihood of their computer being infected by any of these malevolent programs.
Every time you switch on the computer, take care to see that there are no removable media present in the drives. Now this applies also to floppy disks, CDs, and DVDs. Once the computer gets underway, it attempts to carry out a boot sector on its drives. In the event that it fails, the hard disk of the computer can be infected. In case you need to start your computer for any specific reason, for instance, when the hard disk does not work and you are attempting to reformat the computer drive, ensure that the disk positively is not infected.

Optimizing Startup Files

Introduction:
Windows XP is a faster booting operating system compared with Microsoft’s previous releases. But after some days the booting time of the system increases due to increase in start-up files and services. Start-up files and services are the background processes which are executed during system booting. Some of these start-up files are daemon applications which run all the time in the background. More start-up files make the system much slower and increases the booting time of the windows.

The following steps give some of the tricks to optimize the system start-up.
If the system installed with multiple OS then on the boot time the first file is boot.ini. The boot menu will wait for nearly 30 seconds. To avoid this, click start -> Run and type Msconfig. There in BOOT.INI tab change the timeout to 5 seconds, which reduces the boot menu waiting time of the system. For latest version like windows vista, windows server 2003, windows server 2008 they incorporate a utility called BCDedit.exe. So to speed up the booting of this operating system the third party tools for Boot Management is used.

Startup programs:
Startup programs are programs that automatically launch during system start up. Some of these files are must for proper execution of the applications, and some others are junk startup files unnecessarily occupying memory which slows down the startup process. To select which one needed and to delete the unwanted entries we have to edit the registry.

To delete unwanted startup programs
Go to Start -> Run; type regedit
There go to the registry key
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]

There the auto run programs listed in the right side of the window. There we can delete the unwanted files.
Prefetcher
Windows XP has a new feature called prefetcher, which monitors the boot process to determine which files are needed, and then preloads those files early in the boot process to optimize startup. We can optimize the startup using registry editor by modifying the prefetcher parameter.

[HKLMSYSTEMCurrentControlSetControlSessionManagerMemoryManagementPrefetchParametersEnablePrefetcher]

The default value of EnablePrefetcher is 3, but changing this value to 2 increases the booting speed.
To see the programs in start-up and the boot time loading services Microsoftrecommends

This software gives the details of start-up and boot time services. The user must know well about the necessary and unwanted start-up in the list and disable the right choice. Disabling mandatory services may lead to system crash. So it is better to leave all the Microsoft corporation services and other application, database server services. Apart from these services the user may disable unwanted services and start-up programs from the system.

Unnecessary services:
Services are background process which helps the user by providing the service when necessary but they run always in the background. Windows has lot of services runs behind the screen. Some of the services are necessary for system functioning and some other are no use at all for the particular system configuration.

To get the services list click Start -> Run and type services.msc
Which will opens checked list box where we can uncheck the unwanted services.

They are:
Alerter – this service send alerts over network to administrator
Computer browser – to browse through available computer in the network
Messenger – provides facility to send NET SEND over network systems.

The above services are unwanted when the system is standalone, without a network connection.
Distributed Link Tracking Client – This service is used in NTFS file system. If the system didn’t use NTFS then it is better to stop this service

Help and Support – This service gives help on pressing F1. If you won’t need this service you can disable this service.

Print Spooler – if you have no printer then you can disable this.

Server – For sharing files and printer among other systems in the network. If you didn’t prefer file sharing you can disable this service.

Task Scheduler- if you are not scheduling tasks it is safe to disable this service.
Smart Card – if you have no smart, then safely disable this service.

Recovering from a Crash

Your Windows Systems can crash due device driver failure, hard drive failure or corruption, buggy applications or application installer, possibly a problematic Registry modification, or a virus attack. We discuss a number of strategies and techniques for troubleshooting and recovering Windows NT, 2000, and XP.

Driver or Service failing to load:
This type of failure is most common in windows after installing some device drivers or large applications which are much oriented to system services. These applications stop some services during their installations and sometimes fail to restore the services which cause this type of failure. In order to recover from this situation, we have to identify which driver installation causes this problem. This can be identified by using event viewer. The system log is written by the system during each critical task is carry on. This is accessed by control panel ->Administrator Tools -> Event viewer. Examine the application and system log for red signs. Then open the red signed and read the error report where, the driver which failed is reported. By knowing this driver uninstall the component associated to the driver which will rectify the problem.
Blue Screen of Death (BSOD):

This is the most common deadly error of windows. It shows a blue screen when the error occurs and automatically restarts the system. If it is the first time of occurrence then the restart may help to get into the system again. But if it occurs at every time of the booting then there are two possibilities to recover. One is fixing the cause and another one is reinstalling the whole OS again.

The main errors for the BSOD are software errors, hardware errors both during windows operation, and installation errors, startup errors and intermittent errors.

Ways to recover from Blue Screen of Death:
If the BSOD error message shows any driver error try to get in to safe mode by pressing F8 during booting of windows. There it shows a menu with the options of safe mode with command prompt. Select it and try to uninstall the driver.

If there is no trace of which driver try to get into the system by pressing F8 during system booting and select Last known good configuration. This may rectify the problem.

Another way is launching system restore wizard in safe mode by pressing F8 during booting and select safe mode. There in Start -> Run type Msconfig.sys. In the system configuration utility select launch system Restore. There a wizard guides to selecting a restoration point. Select a best known date when the system worked fine and restore the system to the selected date. This is the most recommended way to get rid of the BSOD.

If you plugged in any new hardware just before the BSOD occurs means the hardware attached is incompatible with OS. So change the hardware or try to plug-in in alternative slots.
If the BSOD occurs even in the safe mode then just repair the OS using the setup CD.
Sometimes the system in panic and causes boot failure then repairing the windows helps the user to get back the system to working state.

Sometimes windows shows the error report like
Windows could not start because the following file is missing or corrupt:
WINDOWSSYSTEM32CONFIGSYSTEM
You can attempt to repair this file by starting Windows Setup
using the original Setup CD-ROM.
Select ‘R’ at the first screen to start repair.

_________________
NTLDR is Missing
Press any key to restart
_________________
Invalid boot.ini
Press any key to restart
To repair the windows put the windows setup CD into the drive and reboot the system. Ensure that the system Boot sequence is set with CD ROM in first priority. After booting it press any key to boot it from CD. Then press F8 to skip ELUA license agreement. Then press R to repair the windows. The windows setup will repair the windows installation and restores all the system files and boot up files.

Registry Tweaks

Registry:
The Registry is a database that contains all the settings for Windows and installed applications. Where is registry? In windows 9x the registry is contained in two hidden files in Windows directory, called USER.DAT and SYSTEM.DAT. But in Windows 2000 and Windows XP, the Registry is in several Hives, located in the windowssystem32config and Documents and Settings{username} folders.

Structure of registry:
There are six branches, each containing a specific portion of the information stored in the Registry. They are:
HKEY_CLASSES_ROOT – this branch contains all of file types in the system as well as OLE information for all OLE-aware applications.
HKEY_CURRENT_USER – this points to the part of HKEY_USERS for the current user.
HKEY_LOCAL_MACHINE – this contains information about all the hardware and software in the system. Since we can specify multiple hardware configurations, the current hardware configuration is specified in HKEY_CURRENT_CONFIG.
HKEY_USERS – this contains preferences for each of the users of the computer. In Windows 2000/XP, the default branch here contains a template for newly-added users.
HKEY_CURRENT_CONFIG – this branch points to the part of KEY_LOCAL_MACHINE appropriate for the current hardware configuration.
Registry editor is a build-in utility with all windows. To launch registry editor click start-> Run and type “regedit” without quotes. This will launch the registry editor to edit registry values. To access registry editor you , must be administrator or user with the power of administrator.
Tweaks

1. Customize Windows Media Player Title Bar
Change the title bar to read Windows Media Player provided by “your text”
Start->Run->Regedit
Go to [HKEY_CURRENT_USERSoftwarePoliciesMicrosoft]
Create the Key [WindowsMediaPlayer]
Create String value named [TitleBar]
Data Type: REG_SZ // Value Name: TitleBar
Double click TitleBar and Enter the text to be displayed in the title bar.
Exit Registry / Reboot
2. To Increase Start Menu Display Speed
There is some delay to display the start menu contents after clicking star, because of effects. The speed can be changed with a quick registry entry.
The default value of this key is 400. Set it to 0, and then there is no delay to show.
Start->Run->Regedit
Go to [HKEY_CURRENT_USERControl PanelDesktop]
Modify/Create String value of Data type REG_SZ Named [MenuShowDelay]
Value Data: [Default = 400 / Adjust to Preference]
Exit Registry / Reboot
3. Changing the Location of Special Folders
This tweak allows changing the location of special folders in the system. Any of the folders listed in the registry key can be moved.
Start->Run->Regedit
Go to:
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerUserShell Folders]
Modify/Create String value of Data type REG_SZ Named [Various Folder Names]
Data Type: REG_SZ [String Value] // Value Name: Consult RegEdit for Folder Names
Value Data: [Move the folder to the new desired location using explorer, and then edit the matching folder in RegEdit to reflect the new folder location]
Exit Registry and Reboot.
4. Adding Administrator Account to Log In Screen
Once a new user account is created during windows XP installation the name of the default Administrator account vanishes. To Make the Administrator Account always visible in the Login Screen use this Registry Tweak.
Start->Run->Regedit
Go to: [HKEY_LOCALMACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonSpecialAccountsUserList]
Modify/Create DWORD Value of Data type REG_DWORD Named [Administrator]
Setting for Value Data: [0 = Disabled / 1 = Enabled]
Exit Registry / Reboot
5. Hide/Show My Documents folder Icon on Desktop
By default, Windows XP never shows the My Documents folder icon in the Windows desktop. Using this registry tweak allows you to control whether or not My Documents is to be displayed.
Start->Run->Regedit
Go to: [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerCLSID{450D8FBA-AD25-11D0-98A8-0800361B1103}ShellFolder]
Modify/Create DWORD Value of Data type REG_DWORD Named [Attributes]
Setting for Value Data: [Default = 0xf0400174 / Hidden = 0xf0500174]
Exit Registry / Reboot
6. Create a Hidden User Account
This tweak allows creating a hidden account from the welcome screen. To log on using this account it is necessary to use the Log On To Windows dialog box similar to the one in Windows 2000 by pressing CTRL+ALT+DEL twice in the welcome screen
Start->Run->Regedit
Go to: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNTCurrentVersionWinlogonSpecialAccountsUserList]
Modify/Create DWORD Value of Data type REG_DWORD Named [Type Name of Account to be Hidden]
Setting for Value Data: [0 = Account is Hidden / 1 = Enabled]
Exit Registry / Reboot
7. Creating Legal Notice Logon Dialog Box
To create a legal notice during logon time:
Start->Run->Regedit
Go to: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon]
Modify/Create String Value of Data type REG_SZ Named [LegalNoticeCaption]
Value Data for LegalNoticeCaption: [Type the Caption for the Dialog Box]
Modify/Create String Value of Data type REG_SZ Named [LegalNoticeText]
Value Data for LegalNoticeText: [Type the Data for the Legal Notice]
Exit Registry / Reboot
8. To Customize Logon and Security Dialog Title
Start->Run->Regedit
Go to: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NT CurrentVersionWinlogon]
Modify/Create String Value of Data type REG_SZ Named [Welcome]
Value Data: [0 = Disabled / 1 = Enabled]
Exit Registry / Reboot
9. Customize Logon Box Message
This is the message will be displayed on the Classic Logon box and not on the welcome logon screen
Start->Run->Regedit
Go to: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NT CurrentVersionWinlogon]
Modify/Create String Value of Data type REG_SZ Named [LogonPrompt]
Value Data: [Enter the text of the message]
Exit Registry / Reboot
10. To Change the Registered Organization/Owner of Windows XP
This tweak allows changing the registered owner and organization of the Windows XP software.
Note:-This tweak won’t allow bypassing the Windows Product Activation (WPA) and will not allow you to register illegal XP software.
Start->Run->Regedit
Go to: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersion]
Modify/Create String Value of Data type REG_SZ Named [RegisteredOrganization] or [RegisteredOwner]
Setting for Value Data: [Modify the Values to Reflect Current Information]
Exit Registry / Reboot

Optimization Tools

System optimization tools are useful to increase the performance of the computer. There are varieties of tools available over internet to optimize the system performance. But the optimizations are for various types of speed degradation. The reasons for speed degradation in a system are:

• Boot time loading services and start-up,
• Unwanted entries in registry,
• Duplication of files,
• Temporary files,
• Fragmentation,
• Device driver incompatibility,
• Main memory fragmentation etc,

Let us now discuss each of these topic and the tools available in the market and the risk over the optimization.

Boot time loading services:
The services are basic daemon process in background and help the operating system to be user friendly. The start-up programs are the programs that load it when the system starts up. To see the programs in start-up and the boot time loading services Microsoft recommends

http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/Autoruns.mspx

This software gives the details of start-up and boot time services. The user must know well about the necessary and unwanted start-up in the list and disable the right choice. Disabling mandatory services may lead to system crash. So it is better to leave all the Microsoft corporation services and other application, database server services. Apart from these services the user may disable unwanted services and start-up programs from the system.

Registry cleaning:
Registry is the place where all software and other component registration are entered. So many invalid entries in the registry may slowdown the system performance. There are several tools available to clean the registry entries. Registry Mechanic is one of the best software tools to heal the registry. The other software such as clean my registry, registry defrag, registry wizard are available as freeware.

Duplication of files:
Duplicate files may fill up the disk space that leads to the degradation of system performance. This can be overcome by searching the duplication of files by manual search or by using special software which will search for duplication of files and ask us for action to do on it. Some of the software are Duplicate Finder, NoClone search for duplicate files in the system and ask for action.

Temporary files:
Temporary files are the scratch files which are used by the system during some process like installation, and other operations. Sometimes these files are left in the system as junk files. These files can be easily found with its extension *.tmp and some other extension. These files also occupy the disk space unnecessarily and slow down the system performance. Some of the tools used to cure this type of file replication are system cleaner, Cclean, 4Diskclean, and Advanced System Optimizer.

Defragmentation:
Defragmentation is the process of reorganizing the file clusters scattered in the disk. These file fragmentation causes the disk head to move track to track and between platters for single file access which increase the seek time of the file access. So reorganizing the file clusters reduces the file seek time increases the system performance. Windows has its own build-in defragment utility which gives best result. Diskeeper is the commercial version of defragment utility which gives good performance.

Device driver incompatibility:
The system response depends on the compatibility of the device driver we use. This compatibility is verified by some software which will guide us which driver causing problem. The best way to increase the system performance is by updating the device driver regularly.

Memory utility:
Like file fragmentation the memory is also fragmented due to frequent loading and unloading of programs into memory. This also reduces the performance of the system. The recovery of memory from such fragmentation is called memory compaction. There are varieties of tools available for memory optimization. They are memory optimizer, RAM booster, RAM optimizer etc, compacts the memory and increases the system performance.

Tweaking Windows Startup

The word tweaking means to fine tuning the system. Fine tuning a system makes it boot up faster and to attain peak performance of your system. There are some procedures to perform that will decrease the boot speed of the system. Booting time is normally counted from the system switch on time to availability of desktop to the end user. Tweaking the windows for much faster is also somehow danger, because it leaves some important files without loading and causes trouble during operation, and never checks all the peripherals that need to run system at its best.

The following tweaks fasten the system booting process.

BIOS Trick:
When the user switch on the system the first process is POST by the BIOS, POST means Power On Self Test, checks all the devices and peripherals. Enabling the quick boot option in the BIOS fastens the booting time.
Disable Fast User Switching also quickens the startup of the system.

To disable the feature Start -> Run, and type “control userpasswords”launches a dialog; click the way users log on or off. Uncheck the fast user switching, and click on apply options and close the window.

Turning off all the effects
Windows XP and Windows Vista have lot of animations and appearance themes which slows down the system performance. To disable this setting press[windows] + [pause break] which launches the system properties. There click the Advance tab and click settings in performance frame. There a popup window gives you a dialog of visual effects. For best performance click best performance and apply.

Disable compression and indexing:
Storing of files in drive in compression mode makes the system slower. So disabling this feature increases the system startup. To disable this Right click on the drive and select propertied, at the bottom uncheck both check boxes and give apply. Now these disable the compression and indexing and made the system faster.

Disable unneeded devices in device manager:
Windows loads all drivers during the startup. But some of the devices may be unavailable in the system. To avoid the unwanted loading of drivers disable the drivers by click Start -> Run and type “devmgmt.msc”. There disable the devices that you are not owned. This will avoid loading of unwanted drivers during startup.

Remove unwanted fonts and programs:
Installing more fonts in the system increases the system booting time. Removing unwanted fonts and unwanted applications helps to decrease the booting time.

Third-party tool:
A Tune-up utility which gives all types of system optimizing techniques and increases the booting speed. It also gives one click maintenance and automatically clears the problems, optimizes the registry and decreases the booting time of the system.

Disabling unwanted Services:
Windows runs lot of services in background. Some of the process are unwanted and can be disabled from the startup.

To get the services list click Start -> Run and type services.msc
Which will opens checked list box where we can uncheck the unwanted services.

They are:
Alerter – this service send alerts over network to administrator

Computer browser – to browse through available computer in the network

Messenger – provides facility to send NET SEND over network systems.

The above services are unwanted when the system is standalone, without a network connection.

Distributed Link Tracking Client – This service is used in NTFS file system. If the system didn’t use NTFS then it is better to stop this service

Help and Support – This service gives help on pressing F1. If you won’t need this service you can disable this service.

Print Spooler – if you have no printer then you can disable this.

Server – for sharing files and printer among other systems in the network. If you didn’t prefer file sharing you can disable this service.

Task Scheduler- if you not preferring any scheduling task it is safe to disable this service.

Smart Card – if you have no smart, then safely disable this service.

Decreasing Booting Time with BOOTVIS:
A new utility by Microsoft called BOOTVIS analyze the startup files and other optimization tasks. This utility is called BOOTVIS.
Run BOOTVIS
First Trace / Next Boot + Driver Delays
This will reboot the system
Then BOOTVIS retraces the startup drivers and other autoruns
Then run the Trace / Optimize System
Re-Run the Next Boot + Drive Delays
This will decrease the booting time of windows.

In windows vista the booting time is increased by installing the correct updated driver for each devices. This can be checked by compatibility checker given by the Microsoft build-in with vista.
These steps increase the booting time without harm to other applications.

Why Backing up Your Email Files can benefit you in the Long Run

If you own a computer then you should know that backing up your e-mail is an essential part of the ownership process. This is especially true in cases where you have a lot of e-mail and personal files that you can’t stand to lose. There is simply no excuse for you to neglect to back up your computer files.

Types of email
People tend to use a whole lot of e-mail programs. Some of the more popular software programs include Eudora, Microsoft Outlook. Other software programs include web-based e-mail includes Hotmail, Yahoo Mail, Google and Excite or any other web based e-mail programs. Most of these programs have easy option for you in case you want to backup your e-mail files.

Backing up your email
If you want to find out how you can backup e-mail files with any particular software program that you’re using all you have to do is to click the “help” area of your program in order to get the necessary information. Temporary backups may also be needed and if you want to create a temporary backup of a certain e-mail files that you consider important to you. You can always send it to another e-mail address and you can forward any e-mail attachments to your home e-mail and you can use a web-server e-mail system such as that of Yahoo! Mail.

Why backup your email?
Different circumstances may occur which will end up causing you to lose any important e-mails that you have stored on your computer. In some cases you may end up deleting the e-mail accidentally or you may have your computer crash because of infection from one virus or the other. If your computer crashes and you get it back online you may have lost your files. Anything as simple as a lightening storm or a power outage can cause affect your computer, in the end you may lose your e-mail files. These are some of the reasons and the whole lots of other reasons exist why you should backup your e-mail files.

Where should you keep your email backup files?
It all depends of the particular e-mail program that you use; you can use these e-mail programs and export your e-mail files to a computer directory which you can burn to a CD and use a CD-ROM dive. You can also shift your backed up files to an external hard drive as well. You can also take the time out to print copies of all the important e-mail that you have so you can keep records. You should also print our hard copies of your e-mail and ensure that they are kept in a safe place.

How often should you backup your important email files?
You should try as much as you can to backup your files whenever you feel it’s necessary. This is all actually dependent on your personal preferences on the frequency with which you get e-mails. If you get important e-mails every other week then you may want to backup your e-mail on a frequent basis. You can even taking the option of backing up your e-mail every day if you want to.

Developing Backup and Recovery Solution

In this article you will learn how to develop a backup and recovery solution. Data has become a firm’s most valuable asset, and it is your job to protect this data from accidental loss. remember the fundamental questions to ask when developing a solution. What should be backup? What is the recovery point? What is the time frame for recovery? What is the risk tolerance,if any,of the firm? Finding the answers to these questions will help you develop a plan that is appropriate for your firm.

Microsoft Windows includes a very basic but very capable backup solutions, Backup utility for windows. Backup utility for windows now includes the ability to backup data to a file and place the data on a network share, removable media, or other hardware device,such as tape drive. An entire drive, volume, folder, or individual file can be backed up. Also the registry, critical boot files, and active directory can be backed up by selecting to backup system state data.

In case of failure, the system state data can be restored to recover active directory. Under normal circumstances, a domain controller replicates with other domain controllers upon startup, and any changes in active directory are replicated to the domain controller. In case of accidental deletion of active directory object, an authoritative restore can be performed to restore a particular object. By using ntdsutil, a particular object can be authoritatively restores, without disregarding other changes in active directory.

Occasionally servers become sick and have boot failures. Some times a boot failure is due to a hardware failure, such as bad memory, a hard drive failure, or motherboard failure. In these situations, the hardware must be replaced before you can trouble shoot the operating system. In some cases, windows will even have to re-installed. However, there are plenty of situations in which the operating system is not working correctly due to mis-configurations or other software issue. In these situations, the advanced boot options can be used to restore a server to full functionality quickly and easily. In previous version of windows, an emergency repair repair disks was provided to recover from major failure. Microsoft Windows one implements an automated system recovery (ASR) process. Using ASR is an easy way to restore a server to previous operational state. Am ASR disk is created by using backup utility for windows.

Exchange Server Data Recovery

Microsoft exchange servers enjoy great popularity with many businesses, due to their expansive communication and planning features. Email communication forms the flesh and soul of any thriving industry because it proves to be indispensable in the corporate world.

The mails may pertain to hundreds of important things. It may relate to meeting notices, memorandums, important business attachments or simple emails of greetings. If the importance of email communication is underestimated, then there is great danger ahead for any professional or industry. The importance of email has given way to methods for data storage duplication, data archives, and waste of hard drive storage space.
An exchange server refers to a messaging system that facilitates transfer of internal and external electronic messages. This application is widely used in organizations as an organized relational database to manage communication.

So when an Exchange Server goes down, the effects on a company can be dramatic and needless to say, terribly disastrous. Suddenly, all email communications cease, meetings schedules become inaccessible and client lists lost. The pulse of the industry is badly affected which means there is cause for worry and panic. This is a scenario which requires fast action, and a quick return to regular service. Although the rational course of action is to opt for the normal restore operation, where email communication is the most critical application that keeps a business alive and kicking, it becomes necessary to recover exchange data recovery without a second’s delay. So here is a way for exchange data recovery.

Carry out a Dial Tone Delivery: Opt for a dial tone recovery though it is more complicated than a normal restoration. However, if the idea is to get the Exchange Server back to a functional state, this is the most effective tip to assist all users for sending and receiving messages almost immediately. You can then go ahead to recover the actual data without suffering such tremendous pressure.

To learn how this process works, let’s assume that though the Exchange Server data is lost, there are other functional servers on the network and that you do keep a backup of the Exchange Server. Your first step is to use the Active Directory Users And Computers console. You must go on to delete the server’s computer account from this Active Directory. Once this is done, go ahead to the mailbox of each user. No, don’t worry because this isnt too tedious as you imagine. Windows Server 2003 assists this task as it enables you to select multiple user accounts to complete this task without difficulty.

Now your focus is to bring the replacement server online and install Exchange Server on to it. To do this, make sure the Exchange Server is running the same service pack level as the destroyed server. Once you managed to have the new server up and running, get back to the Active Directory Users and Computers console. Go ahead and create mailboxes for all of the users. This way, Windows Server 2003 comes to your assistance again as it allows you to select multiple user accounts. Bingo, now you can surge on to create all mailboxes at one go!

A good practice to follow is that you should make it a point to test your backup files on a monthly basis so that you are familiar with the processes. If the situation arises wherein it would be required for you to restore data to your production environment, this would not become a problem due to your familiarity with the procedure. The other advantage of this is that it would reduce the downtime of your servers.
Using these tips, move ahead with these effective exchange data recovery options.