Online and many magazines have spread a lot about Windows XP optimization, set Raiders, skills, etc., many of them are "classic", "Bible", in fact, when we carefully distinguish these so-called "ultimate skills", it will find many of them It is not responsible. These things have largely misleading the user of Windows XP, and even brought the loss that they are difficult to recover. "Practice is the only standard of testing truth!", Today let us unveil the mystery of these rumors, tell you what is the truly solving. Classic misunderstanding one: "High-stroke" classic degree after forgetting the password: ★★★★ DAN ★ ★★★★ 1. Wrong solution Description When you use Windows XP, accidentally forget the administrator password, What to do? This way is popular online: using the DOS boot disk (if the partition of Windows XP is NTFS partition, you need to support the NTFS DOS boot disk) Enter the DOS real mode, bring the% systemroot% / system32 / config directory in SAM Document delete. Restart the system, the Sign-in password of Administrator is empty, we can easily log in to the system. Small knowledge: The management of user accounts in Windows NT / 2000 / XP adopts the mechanism of security account manager (Security Account Manager, SAM). The mechanism is not based on the form of accounting of the account, but is secured by directly confirming the username and password. Identification (SID) is performed. The SID number is created at the same time when the account is created, once the account is deleted, the SID is also deleted. The SID information of the system is saved in the% systemroot% / system32 / config / sam file in the form of "SID S-1-5-21-XXXXXXXXXXXXXXXXX-005". 2. The origin of the program and the consequences of this error method derived from the previously handling of the WINDOWS 2000 forgot the password, and users who have not installed the service pack can use this method to successfully crack the login password. The theory of this program supports: Windows XP password storage in the SAM file, when we log in to the system, the system will automatically verify the SAM database information. If this password and the username and the encrypted data in the user name are consistent, The system will log in smoothly. Conversely, you cannot log in. If you delete the file, the SAM database will be emptied. The administrator's login password is also emptied, naturally you can escape the login password verification mechanism for Windows XP. In fact, this method has been invalid for Windows 2000 SP1-SP4. It is more useless to Windows XP. If you follow this scenario to operate Windows XP, there will be unable to start, bringing our operation to our operation. Trouble. 3. Correct solution: When Windows XP login password is lost, we can use different ways to solve them for different situations: (1) If you install Windows XP, the Administrator password is set to empty. Everyone can press F8 to enter the security mode when the system is guided. The Administrator password here is empty, and can be directly entered, and the account and password are set directly after entering.
(2) If the Administrator password is set, the method of crack is not that simple, we can use a super Windows 2000 / XP system maintenance CD --ERD Commander 2003. After using the CD Start System, run the "Start → Administration" command to open the "Erd Commander 2003 Locksmith Wizard" window, enter the account name you want to crack in the "Account" box, then enter the new password is OK. . Tip: ★ Erd Commander is shared software, its official home page is: http://www.winternals.com/erd Commander 2003 Chinese version of the ISO file download address is: http://soft.0zones.com/softdown .asp? id = 21081, can buy the startup CD of Erd Commander on the market. Classic Misunderstanding 2: Starting progress? Quot; Johri "secret classic degree: ★★★★★ Hazardous degree: ★ 1. Error solution Description (1) Right-click" My Computer ", select" attribute "Menu Open the System Properties settings window, switch to the Advanced tab, click Settings, click" Settings "in the Startup and Faults, click Edit button in the pop-up window, will" [Operating systems] Multi (0) DISK (0) PARTIN / Windows = "FastDetect" in Microsoft Windows XP Professional "/ FastDetect" is modified to "NodeTect". (2) Using Microsoft's "Acceleration" software bootvis You can speed up the startup process of WindowsXP. The method is as follows: After downloading the software, run the "Tools → Options" command, set "Symbol" to Bootvis installation path, click "Save". Run "TRACE → Next boot" command to open "Trace Repetitions" window, click "OK". 2. The origin of the program and the first "optimization" method is comparable to funny, you can try to search in "NodeTect" in Google, get the web page Most are the "Windows XP Optimization Skills" page reprinted by the China website. According to the truth, so magical optimization skills, foreign sites cannot be mentioned. In fact, the answer is that this parameter is pure "Ziwu", really Know that the trick is the most invenous invented in China. Although the system does not see the system, it can achieve "optimization" effect is definitely a nonsense or psychological role. The second method mentioned Microsoft In fact, this free software is active to be visual performance tracking for the system's launch. Developers can use this tool to track the system started or wake up. Ted: Microsoft has clarified "use bootvis Acceleration system start "rumors, and has stopped technical support for this tool, you can refer to http://www.microsoft.com/whdc/hw ... stboot / bootvis.mspx.
3. Correct solution: For the modification of the Boot.ini file mentioned in the first optimization method, you should remain default, that is, the parameter is "/ fastdetect", which indicates that the system does not detect serial mouse during startup. In addition, you can try: (1) If you are using the owner of the Intel chipset, you can install the Intel Publishing Program Acceleration Package - Intel Application Accelerator, its download address is: http: //aiedownloadownload.intel .com / DF-support / 4857 / A08 / IAA23_MULTI.exe, and upgrade your motherboard to the latest version. If you are using the NFORCE chipset, install the latest version 3.43 of the integrated driver. (2) The device (such as MODEM) that is not used in the BIOS is set to "disabled". If your machine has multiple IDE devices, turn on the device manager to find the "Main IDE channel" and "Secondary IDE channel" below "Ide ATA / ATAPI Controller", which is in both "Properties" windows, respectively. Under the Advanced Settings tab, the "device type" of the IDE device will be set to "None". This system does not waste time on the hard disk that is not wasted on the detection IDE channel when starting. (3) Run the msconfig command, remove the unnecessary startup items, the author's setup is to cancel the full launcher, you can adjust it according to your own situation. (4) Manually set up a network card IP address, many friends react After entering Windows XP, the system will "fake death" for a few minutes, actually because the system is in searching the DHCP server, and the IP address of the network card can be set. Effectively solve this problem. (5) In addition, regular disk fragmentation, close unnecessary system services, and organize the registry to speed up the start speed of the system. Tip: ★ Windows XP will use the system BIOS's SBF (Simple Boot Flag to speed up the startup process, if your motherboard BIOS supports SBF, XP start will be much faster. ★ There is also a classic skill: "[HKEY_LOCAL_MACHINE / SYSTEM / CURRENTCONTROLSET / CONTROL / SYSTEM / CURRENTCONTROLSET / PREFETCHPARETER / MEMORYMANAGEMENT / PrefetchParameters]", set to "1". The optimization principle is to use the system's pre-reading technology (prepatch), when set to "1", the system is only read only when the application is started, allowing the progress bar of Windows XP to run a few turns, and everyone uses it Methods can be obvious. But actually the system will not decrease, even longer, so please use this trick carefully. The other parameter settings of "EnablePrefetcher" is: 0-- Do not use pre-read function, 2-pre-read starting part, 3 - Read-read start and application part.
Classic misunderstanding: 灵 一 一 指"Computer Configuration → Management Templates → Network → QoS Packet Scheduler" one, double-click "Restriction Reserved Bandwidth", select the "Enable" button and set its value to "0%". 2. The origin of the program and the consequences of this network optimization skill is purely "alone". QoS (networked service quality) refers to various communication or program type priority technologies applied across the entire network connection. Microsoft's experts pointed out: "Like Windows 2000, in Windows XP, the program can also use QoS App Programming Interface (API) to use QoS. All programs can share hundred percent of network bandwidth, except for programs with bandwidth priority. Other programs can also use this "reserved" bandwidth, except for requesting programs that are transmitted. By default, the bandwidth of the program reserves the basic link speed of each interface of the terminal computer. If retained The amount of data sent by the bandwidth is not completely bandwidth, and the unused part of the reserved bandwidth can be used for other data streams on the same host. "That is, if we don't need to manually ban this part of the reservation, the system will automatically assign the remaining Bandwidth to the corresponding program access to the network. 3. The correct solution is actually the network speed is mainly determined by the bandwidth provided by the ISP. Many software played "Let your network speed multiplied" banner, you can't believe it. Classic misunderstanding four: virtual memory is so "scientific"! Classic degree: ★★★★★ Hazardous level: ★★ 1. Error solution Description (1) In "My Computer" "Properties" window, switch to "Advanced → Performance → Virtual Memory" window, will virtual memory The initial value and the maximum value are set to the same value to reduce disk fragments and improve system operation efficiency. (2) Set part of the virtual memory on each partition of the hard disk can improve the performance of the system. 2. The programs and consequences of Windows use dynamic methods to manage virtual memory, that is, when executing programs that have a larger memory, such as Photoshop, MS Office et al., The system automatically enlays the volume of page files for virtual memory. To get more available resources, in turn, if physical memory has more free space, the system automatically reduces the volume of the page file. This is where we look at the PageFlie.sys (Windows 2000 / XP) or Win386.SWP (Windows 9x / ME) file in the system, the file is sometimes a small reason. In theory, if the initial value and maximum value of the virtual memory are set to the same value, the magnetic head can be read continuously, and disk fragmentation is not easily displayed, thereby increasing the operating efficiency of the system. But in the process of actual use, we will find that when we read a big file, often encounter? Quot; memory overflow "error, the system is unstable.
For the so-called "virtual memory of each partition of the hard disk", due to the uncertainty of file distribution on each partition, the inevitability of disk fragments, although Windows will give priority to read and write operations The page file in the partition, but this will increase the burden of system memory management, although it is not a lot of false, at least the best solution. Small knowledge: The so-called "virtual memory", popular speaking, when our physical memory is not enough, the system simulates the partial space on the hard disk into memory usage, and stores the programs or data for the temporarily to this part of space. It is convenient for timely call when needed. The virtual memory has corresponding data temporary storage files for WIN386.SWP (we calls swap files, swapfile), and the data in Windows 2000 / XP is temporarily stored in PageFile.sys (we call file file) Or paging files, pagefiles. The page file is saved in the root of the hard disk partition, and the file properties are "hidden", and we need to "display all files" in the "Folder option" to see it. 3. Correct solution: For the problem of how virtual memory is set, Microsoft has given us official solution. For general circumstances, we recommend the following settings: (1) Partitioning page files in the Windows system The size of the file is determined by your settings for the system. The specific setting method is as follows: Open "My Computer" "Properties" setting window, switch to the Advanced tab, "Write the Debug Information" bar in the Startup and Failure Recovery window, if you use "no ", Set the page file size to about 2MB, if" core memory storage "and" fully stored storage "are used, the page file value is set, and it is possible to comply with physical memory. Tip: For the system partitions set the page file, there is a contradiction: if set, the system may often read this section file, thereby increasing the load of the track where the system disk is located, but if not, when the system appears When the blue screen crash (especially STOP is wrong), the dump file cannot be created, so that procedural debugging and error report cannot be performed. Therefore, the folding method is to set a smaller page file in the system disk, as long as it is enough. (2) Establish a blank partition separately, set the virtual memory in this partition, and the minimum value is set to 1.5 times the physical memory, the maximum value is set to 3 times the physical memory, the partition is specifically used to store the page file, do not store other Any file. The reason why it is divided into a partition used to set virtual memory, mainly based on two points: one, because there is no other file on the partition, this partition does not generate disk fragments, which guarantees the data read and write of the page file without disk. Debris interference; Second, according to Windows's memory management technology, Windows will prioritize page files on the partitions that are not accessed, which also reduces the chance of reading the page files in the system disk, reducing the pressure of the system disk. . (3) Other hard disk partitions do not set any page files. Of course, if you have multiple hard drives, you can create a page file for each hard disk. When the information is distributed on multiple page files, the hard disk controller can perform read and write operations on multiple hard drives simultaneously.
Such system performance will be improved. Tip: Allow the set virtual memory minimum to 2MB, the maximum value cannot exceed the remaining space value of the current hard disk, and it is not more than the 32-bit operating system's memory address range - 4GB. Classic misunderstanding seven: IE This operation is "safe"! Classic degree: ★★★★★ Hazardous degree: ★★★★ 1. Errors Solution Description After using IE to browse the webpage, in order to prevent local users to steal our privacy information, just do the following: in IE Run the "Tools → Internet Option" Open the Internet Properties window, remove the IE offline file, history, cookies S, clear the form, and restart your computer. 2. The origin of the program and the consequences may we think that the above privacy protection program is perfect. In fact, your browsing record is lying in the computer! The problem is in a file called index.dat! This index.dat (this file is hidden) in your Temporary Internet Files, History, the small cookie S folder, the file size from dozens of KB to dozens MB, it records your visit The URL, access time, and pointing it to several subfolders of the browser cache folder to increase the Browse speed of IE. When we execute "Delete Offline File", "Clear History", "Clear Form" command in IE, the index.dat file in the system will not be deleted, and more annoyed is when we try to delete it. The system will prompt the file that is being used and cannot perform the delete operation. Its safety hazard is that some unknown virgin can view it through special tools (such as Index.dat Viewer, its download address: http://www.exits.ro/DWL/indexView.exe) to view it included The content is thus known to know our browsing record. 3. Correct solution If you are very concerned about privacy information, in addition to the removal of IE temporary files, we will need to delete index.dat after the next network. We can use some software to delete it, such as Spider, its download address is: http://www.fsm.nl/ward/spider116.zip. After installing the software, first run the "option" command, check "Remove All The Cake S", "Remove the Temporary Internet Files Remove The History Files", confirm that "Start" on the toolbar after confirmation The Search button starts scanning. After the scan is completed, click the "Clean Up" button to completely clear the privacy file. If you don't want to install the software, you can also manually delete it. The specific method is: New an account with administrator privileges, log in to this account, open the resource manager, search "index.dat", pay attention to the high-level options for the search Select "Search System File" and "Search Hidden Files and Folders" to remove all the results of the search. Delete it, then delete the account. After performing the following delete steps, the system will re-establish a new empty index.dat file in the corresponding directory at the next startup, and will not affect our normal use.
Tip: ★ Some of the INDEX.DAT files will be prompted to be useless, not to pay, that is because these index.dat files are all current users. ★ Windows 9x also exists this security risks, users who use the system can remove index.dat files like this: In DOS real mode, use the del command separately to delete C: / Windows / Sweet cookies S / INDEX.DAT, C: / Windows / History / INDEX.DAT, C: / Windows / Temporary Internet Files / Index.dat three files. Classic misunderstanding six: kill the SVCHOST.EXE process! Classic degree: ★★★★ Hazardous degree: ★★ 1. Error Solution Description When we press Alt Ctrl Del Open Task Manager, it is found that there are multiple svchost.exe in the process, indicating system poisoning, we first End all SVCHOST and then use the associated anti-virus tool to kill viruses. 2. Solutions and consequences in many people's impression, each application generally only corresponds to one process, such as QQ corresponds to QQ.exe process, notepad, corresponds to Notepad.exe process, etc. So when you see a process with multiple names of the same name, it will always be alimed as a virus or Trojan. If you don't think, barbaric will end out of some of the SVCHOST.EXE processes, which will make the system run unstable. 3. The correct solution process is divided into independent processes and shared processes, and svchost.exe belongs to the latter. Windows XP is started by SVCHOST.exe in order to save system resources. SVCHOST itself is just as a service host, does not implement any service functions, SVCHOST launches the service by calling the Dynamic Link Library (DLL) of the corresponding service, and Windows divides these services into several groups, shared a SVCHOST process in the same group. The SVCHOST pointed to different groups is different. Typically, Windows XP has 4 service groups that are started by SVCHOST, that is, Windows XP systems typically have four SVCHOST.EXE processes. Of course, some applications or services may also call SVCHOST, so when you see there are excess four svchost.exe processes in the system, do not blindly determine the virus in the system. In fact, the number of SVCHOST.EXE processes is not directly related to poisoning. Tip: ★ The author has made the following very interesting test: Open the task manager, switch to the "Process" tab, first manually end the third SVCHOST.EXE process from the top to the end, the system will immediately Re-establish the process, then we manually end the last SVCHOST.EXE process from the top to the next, and the system will appear a dialog window in which the impact wave virus is hit, and the time is turned down, which is because the SVCHOST.EXE process boot RPC. Service, termination of the process causes the RPC service to be interrupted, and the system will naturally be restarted. ★ WINDOWS 2000 generally has two SVCHOST.EXE processes, and Windows Server 2003 is very large, usually there are 6. Since the number of svchost.exe processes in the system is not related to whether to poison, how do we distinguish between normal and virus forged SVCHOST processes? We can use the following two methods to identify: Method 1: Search in the partition of the system, if multiple SVCHOST.EXE files are found, the system is very likely to poison.
Normal svchost.exe is located in the% Windir% / System32 directory, you have to be careful if you have SVCHOST.EXE files in other directories. For example, a variant of the shock wave Win32.welchia.worm will be under the% WINDIR% / System32 / Wins directory species. Method 2: Look at the path to the corresponding file of the SVCHOST.exe process. Windows XP comes with the task manager that we need to use third-party tools, such as Windows Optimize the process management tools that come with the master, run it after running it to the svchost.exe process, you can see the true functions of its corresponding run files. path. Tip: ★ Many Trojans will use the file names that will be mounted to be similar to common processes, but the extensions are different, if you see SCVHost.exe, SVCH0st.exe, etc. in Task Manager. It is sure to have Trojans already implant your system. ★ Many friends are viewing the CPU usage, and a process called "system idle process" is often displayed 90-99%. Don't worry, in fact, it is the opposite is that 90-99% here is the resources that CPU resources have arrived. The larger the number here, the more resources available, and the smaller the number, the more tense the CPU resource. Other erroneous statements and programs 1. After installing Windows XP, remove all files under C: / Windows / System32 / DLLCACHE, which can save approximately 200MB of disk space. Comments: Saved in this folder is the DLL file for system backup. Windows may use the files inside when installing drivers, software, and upgrades. If you delete it, you will bring us more inconvenience. 2. Since the system space is more precious, many friends are installed in other partitions, but the default installation paths that are prompted each time I install the software is C: / Program Files, we can open the registry, locate "[HKEY_LOCAL_MACHINE / SOFTWARE / Microsoft / Windows / CurrentVersion] ", modify the programfilesdir string value in the right window to the path we want. Comments: This setting does make us more convenient. But it brings a lot of drawbacks, such as opening OUTLOOK Express, reporting the C disk disk or insufficient memory, and prompts "MSOE.DLL can not initialize", and other system programs such as Media Player can also cause operational failures of system programs such as Media Player. 3. Modify the host.sam file under the / DRIVERS / ETC folder ...... Reviews: Many friends use the way to modify the Host file to block the malicious website, this is right. But many people don't figure out which file is "host file". There is a host.sam file in Windows 98, which is only a sample file made by Microsoft to modify the Host file. If we modify the host.sam files, the real host file is a name "Host). "No extension file. Under Windows XP, the so-called "host.sam" file does not exist at all, and we modify the Host file should be the Host file in the /% systemroot% / system32 / drivers / etc directory with Notepad (the same extension).
