[Post] poke n classic rumors about Windows XP Optimization

On the Internet and in many magazines, there are many optimizations, setup strategies, and techniques related to Windows XP. Many of them are regarded as "classic" and "Bible". in fact, when we carefully identify these so-called "ultimate skills", we will find that many of them are irresponsible. These things mislead users of Windows XP, and even bring irreparable losses to them. "Practice is the only criterion for testing truth! "Today, let's unveil the secrets of these rumors and tell you what is the true solution.
　　
Classic misunderstanding 1: The "trick" after the password is forgotten
Classic level:★★★★
Severity:★★★★★
　　
1. Error solution description
　　
When you are using Windows XP, you accidentally forget the administrator password. What should I do? There is a popular method on the Internet: Use the DOS boot disk (If Windows XP is located in the NTFS partition, you need to support the NTFS dos boot disk) to enter the DOS real mode, delete the file named Sam in the directory % SystemRoot % \ system32 \ config. Restart the system. The Administrator Logon password is empty. You can log on to the system easily.
　　
TIPS:
　　
In Windows NT/2000/XP, Security Account Manager (SAM) is used to manage user accounts, this mechanism manages Accounts not by directly verifying the user name and password, but by using the security identifier (SID. The SID number is created at the same time when the account is created. Once the account is deleted, the SID is also deleted. The system Sid information is saved in the % SystemRoot % \ system32 \ config \ SAM file in the form of a Sid s-1-5-21-xxxxxxxxxxxxxx-xxxxxxxxxxxxxx-005.
　　
2. Origin and consequences of the Solution
　　
This error occurs when you forget your password for Windows 2000. If you forget your administrator password for Windows 2000 (without a Service Pack Installed), you can use this method to crack the logon password. The theoretical support of this solution is that Windows XP passwords are stored in Sam files. When we log on to the system, the system automatically verifies the SAM Database information, if you find that the password and user name match the encrypted data in the SAM file, the system will log on smoothly. Otherwise, you cannot log on. If the file is deleted, the Sam database will be cleared and the Administrator's logon password will be cleared. This will naturally escape the Windows XP Logon password verification mechanism.
　　
In fact, this method for Windows 2000 SP1-SP4 has been invalid, Windows XP is useless, if you follow this solution for Windows XP, will appear unable to start, it brings us more trouble.
　　
3. Correct Solution:
　　
When the Windows XP Logon password is lost, we can use different solutions for different situations:
　　
(1) If the administrator password is set to null when Windows XP is installed. You can press F8 to enter the safe mode during system boot. The administrator password here is blank and you can enter it directly. Then, you can set the account and password.
(2) If the administrator password is set, the cracking method is not that simple. We can use the Windows 2000/XP system to maintain the CD-ERD Commander 2003. After starting the system with the CD, run the "Start> Management> Tools> Password Change" command to open the "ERD Commander 2003 locksmith wizard" window, and enter the account name to be cracked in the "Account" box, then, enter the new password.
　　
TIPS:
　　
★ERD commander is shared software, its official homepage is: http://www.winternals.com/,ERD Commander 2003 Chinese version of ISO file: asp? Id = 21081 "> http://soft.0zones.com/SoftDown.asp? Id = 21081. You can buy a boot disc integrated with ERD commander on the market.

Classic misunderstanding 2: The secret to start the progress bar "only one lap"
Classic level:★★★★★
Severity:★
　　
1. Error solution description
　　
(1) Right-click "my computer" and select "properties" to open the "System Properties" setting window. Switch to the "advanced" tab, in the "Start and fault" recovery bar, click "Settings". In the displayed window, click the "edit" button to set "[operating systems] multi (0) disk (0) RDISK (0) Partition (1) \ Windows = "fastdetect" in "Microsoft Windows XP Professional"/fastdetect "is changed to" nodetect ".
　　
(2) Microsoft's "acceleration" software bootvis can accelerate the Startup Process of Windows XP. The method is as follows: after downloading the software, run the "Tools → options" command, set "symbol" to the bootvis installation path, and click "save". Run the "trace → next Boot" command to open the "trace repetitions" window and click "OK.
　　
2. Origin and consequences of the Solution
　　
The first "optimization" method is quite funny. You can try to search by using the "nodetect" keyword on Google. Most of the webpages you get are the "Windows XP optimization Tips" Page reprinted on Chinese websites. It is reasonable to say that foreign sites cannot mention such magical optimization techniques. In fact, the answer is that this parameter is purely a "virtual". I really don't know which of the top Chinese experts invented this trick. After the modification, although there is no system problem, it is absolutely nonsense or psychological to achieve the "optimization" effect.
　　
The bootvis launched by Microsoft mentioned in the second method. In fact, the free software is used to visually track the startup performance of the system, developers can use this tool to track system startup or wakeup problems.
　　
TIPS:
　　
Microsoft has clarified rumors about "using bootvis to accelerate system startup", and has stopped the technical support for this tool, you can refer to the http://www.microsoft.com/whdc/hw... stboot/bootvis. mspx.
　　
3. Correct Solution:
　　
The method for modifying the boot. ini file mentioned in the First optimization method should be kept by default, that is, the parameter is "/fastdetect", which indicates that the system does not detect the serial mouse during startup. You can also try the following methods:
　　
(1) If you are using an Intel chipset motherboard, you can install intel application accelerator, the Program Acceleration Package released by Intel. If you are using the nforce chipset, install its latest 3.43 integrated driver.
　　
(2) In the bios, set the devices (such as modem) that are not normally used to "disabled". If your machine has multiple ide devices, open the Device Manager and find "Main ide channel" and "secondary ide channel" under "Ide ATA/atapi controller". in the "Advanced Settings" tab of the "properties" window, you can set the "device type" of the IDE device to "NONE". In this way, the system will not waste time on the hard disk that is not found on the IDE channel during startup.
　　
(3) run the msconfig command to remove unnecessary startup items. I always set to cancel all the startup programs. You can adjust them as needed.
　　
(4) manually set the IP address of the NIC. Many of my friends say that after entering Windows XP, the system will be "suspended" for several minutes. In fact, this is because the system is searching for the DHCP server on the network, you can manually set the IP address of the NIC to effectively solve this problem.
　　
(5) In addition, regular disk fragmentation, unnecessary System Service shutdown, and registry sorting can speed up system startup.
　　
TIPS:
　　
★Windows XP uses the SBF (simple boot flag) of the system BIOS to accelerate the startup process. If your motherboard BIOS supports SBF, XP will start much faster.
　　
★Another classic technique: in the Registry Editor's "[HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ Session Manager \ memorymanagement \ prefetchparameters, set the DWORD key value named enableprefetcher to "1". The optimization principle is to use the system pre-read Technology (prepatch). When it is set to "1", the system only needs to read the Application Section at startup, this method can reduce the progress bar of Windows XP by a few laps. But in fact, the entire system startup time will not be much reduced or even longer, so please use this technique with caution. Other parameters of "enableprefetcher" are set to: 0 -- no pre-read function is used, 2 -- pre-read start part, 3 -- pre-read start part, and application part.

Classic misunderstanding 3: The network is "fast"
Classic level:★★★★★
Severity:★
　　
1. Error solution description
　　
Run "gpedit. MSC "command to open the Group Policy Management window of Windows XP, go to" Computer Configuration> management template> network> QoS packet scheduler ", and double-click" restrict retained bandwidth ", select the enabled button and set its value to 0%.
　　
2. Origin and consequences of the Solution
　　
This network optimization technique is purely "independent. QoS (Network Service Quality) refers to various communication or program type priority technologies applied to the entire network connection. Microsoft experts pointed out: "like Windows 2000, in Windows XP, QoS can also be used by applications through QoS application programming interfaces (APIS. All programs can share of the network bandwidth, except for programs that require bandwidth priority. Other programs can also use this "Reserved" bandwidth, except for the request programs that are sending data. By default, the total bandwidth reserved by the program can reach 20% of the basic link speed of each interface of the terminal computer. If the data volume sent by the program with the reserved bandwidth is not completely used up, the unused portion of the reserved bandwidth can be used for other data streams on the same host. "That is to say, if we do not need to manually disable the reserved bandwidth, the system will automatically allocate the remaining bandwidth to the corresponding program to access the network.
　　
3. Correct Solution
　　
In fact, the speed of the network is mainly determined by the bandwidth provided by the ISP. A lot of software is under the banner of "doubling your network speed", so you don't have to believe it.

Classic misunderstanding 4: virtual memory is the most "scientific"!
Classic level:★★★★★
Severity:★★
　　
1. Error solution description
　　
(1) In the "properties" Window of "My Computer", switch to the "advanced → performance → Virtual Memory" window, setting the initial value and maximum value of the virtual memory to the same value can reduce disk fragments and improve system operation efficiency.
(2) set a part of virtual memory on each partition of the hard disk to improve the system performance.
　　
2. Origin and consequences of the Solution
　　
Windows uses a dynamic method to manage virtual memory. That is to say, when executing programs that consume a large amount of memory (such as Photoshop and MS Office, the system automatically expands the page file size of the virtual memory to obtain more available resources. Otherwise, if the physical memory has more free space, the system automatically reduces the size of the page file. This is why we check the pageflie. sys (Windows 2000/XP) or win386.swp (Windows 9x/ME) file in the system.
　　
Theoretically, if the initial value and maximum value of the virtual memory are set to the same value, the head can be read continuously, which is not prone to disk fragments, thus improving the operating efficiency of the system. But in actual use, we will find that when we read a large file, we often encounter a "memory overflow" error, but the system is not stable.
　　
For the so-called "virtual memory is set for each partition of the hard disk", due to the uncertainty of the file distribution in each partition, the disk fragmentation is inevitable, although Windows will prioritize the use of page files in partitions that do not frequently read and write files, this will increase the burden of system memory management, although not a lot of errors, but at least not the best solution.
　　
TIPS:
　　
The so-called "Virtual Memory", in general, is that when our physical memory is not enough, the system will simulate part of the hard disk space into memory usage, store unused programs or data in this space for convenient and timely calling. The temporary data storage file in Windows 9x/me is win386.swp (called swapfile), and the temporary data storage file in Windows 2000/XP is pagefile. sys (called a page file or a paging file ). The page file is saved in the root directory of the hard disk partition and its attribute is "hidden". You need to select "show all files" in "Folder Options" to see it.
　　
3. Correct Solution:
　　
Microsoft has provided us with an official solution to the problem of how to set the virtual memory. In general, we recommend the following settings:
　　
(1) On the partition settings page of the Windows system, the file size is determined by your system settings. The specific setting method is as follows: Open the "properties" setting window of "My Computer", switch to the "advanced" tab, and in the "Write debugging information" column of the "Start and fault recovery" window, if you use "NONE", set the page file size to about 2 MB. If you use "core memory storage" and "full memory storage", set the page file value to a greater value, which is similar to the physical memory.
　　
TIPS:
　　
Whether or not to set page files for system partitions has a conflict: If set, the system may frequently read this part of page files to increase the load on the track where the system disk is located, however, if this parameter is not set, the system cannot create a dump file (memory. (DMP), so that program debugging and error reporting cannot be performed. Therefore, you can set a small page file on the system disk as long as it is enough.
　　
(2) create a blank partition and set the virtual memory in the partition. The minimum value is 1.5 times the physical memory, and the maximum value is 3 times the physical memory, this partition is used to store page files instead of any other files. The reason for dividing a partition to set virtual memory is mainly based on two considerations: first, because there are no other files in the partition, the partition will not produce disk fragments, this ensures that the Data Reading and Writing of page files is not affected by disk fragments. Second, according to the memory management technology of windows, Windows preferentially uses the page files on infrequently accessed partitions, this reduces the chances of reading page files from the system disk and reduces the pressure on the system disk.
　　
(3) No page files are set for other hard disk partitions. Of course, if you have multiple hard disks, you can create a page file for each hard disk. When information is distributed across multiple page files, the hard disk controller can simultaneously read and write data on multiple hard disks. In this way, the system performance will be improved.
　　
TIPS:
　　
The minimum value of the virtual memory allowed to be set is 2 MB. The maximum value cannot exceed the remaining space of the current hard disk, and cannot exceed the memory addressing range of the 32-bit system-4 GB.

Classic misunderstanding 5: IE is "secure!
Classic level:★★★★★
Severity:★★★★
　　
1. Error solution description
　　
After using IE to browse the Web page, to prevent local users from stealing our privacy information, you only need to do the following: run the "Tools> Internet option" in IE to open the "Internet properties" window, clear ie machine files, history records, cookies, clear the form, and restart the computer.
　　
2. Origin and consequences of the Solution
　　
You may think that the above privacy protection solution is perfect. In fact, your browsing history is still lying in the computer! The problem lies in a file named index. dat! This index. dat (this file is hidden) exists in your Temporary Internet Files, history, and cookies folders. The file size ranges from dozens of KB to dozens of MB, it records the URL and access time of the Web site you have accessed, and points it to several subfolders in the browser cache folder to improve ie browsing speed. When we run the "delete Server File", "Clear history", and "clear form" commands in IE, the index in the system. the DAT file will not be deleted, and it is annoying that when we try to delete it, the system will prompt that the file is in use and cannot be deleted. The security risk is that some unidentified hackers can use special tools (such as index. dat viewer, which is: http://www.exits.ro/dwl/IndexView.exe) view the content it contains to learn about our browsing history.
　　
3. Correct Solution
　　
If you are very concerned about privacy information, in addition to often used temporary IE File Deletion and other protection errors, we also need to delete index. dat after going offline. We can use some software to delete it, such as Spider, Which is http://www.fsm.nl/ward/spider116.zip. After installing and running the software, run the "option" command. In the displayed window, select "Remove all the cookies" and "Remove the Temporary Internet Files remove the history files". after confirmation, click the start search button on the toolbar to start scanning. After scanning, click the clean up button to completely clear the privacy file.
　　
If you do not want to install the software, you can also manually delete it. The specific method is to create an account with administrator permissions, log on to the account, open the resource manager, and search "index. dat ", note that in the advanced search options, select" search system files "and" Search hidden files and folders "to delete all search results. Delete the account after deletion. After you perform the following deletion steps, the system will re-create a new empty index. dat file in the corresponding directory at the next startup, without affecting our normal use.
　　
TIPS:
　　
★Some of the index. DAT files prompt that they are in use and cannot be deleted. Ignore this because these index. DAT files are owned by the current user.
★Windows 9x also has this security risk. users using this system can delete the index. DAT file: in DOS mode, run the del command to delete c: \ windows \ cookies \ index. dat, c: \ windows \ history \ index. dat, c: \ windows \ Temporary Internet Files \ index. DAT files.

Classic misunderstanding 6: svchost.exe process failure
Classic level:★★★★
Severity:★★
　　
1. Error solution description
　　
When we press altuncctrluncdelto open the task manager and find multiple svchost.exe in the process, it indicates that the system is poisoned. First, we end all svchost and then use the relevant anti-virus tool to kill the virus.
　　
2. Origin and consequences of the Solution
　　
In many scenarios, each application generally only corresponds to one process, for example, QQ or qq.exe, or notepad.exe. So when we see that the system has multiple processes with the same name, we always think of them as viruses or Trojans. If you stop some of the svchost.exe processes, the system will become unstable.
　　
3. Correct Solution
　　
The process for Windows is divided into two types: independent and shared. svchost.exe belongs to the latter. For Windows XP, multiple system services are shared by svchost.exe. Svchost itself acts as a service host and cannot implement any service functions. svchost calls the dynamic link library (DLL) of the corresponding service to start the service, and Windows divides these services into several groups, services in the same group share a svchost process. Different Groups Point to different svchost processes. Generally, Windows XP has four service groups started by SVCHOST. That is to say, Windows XP generally has four svchost.exe processes. Of course, some applications or services can also be used to call svchost. as you can see, there are more than four svchost.exe processes in the system, and you should not blindly judge the virus in the system. The number of svchost.exe processes on supervisor has no direct relationship with whether the process is poisoned.
　　
TIPS:
　　
★I did the following interesting test: the RPC service is guided by the callback process. Terminating this process causes the RPC service to be interrupted and the system will restart.
　　
★In Windows 2003, there are generally two svchost.exe processes. In Windows server, there are many, generally six.
　　
Even though the number of svchost.exe processes in the system has nothing to do with viruses, how can we distinguish normal and virus-forged svchost processes? We can use the following two methods for identification:
　　
Method 1: search in the system partition. If multiple svchost.exe files are found, the system may be poisoned. The normal svchost.exe directory is located in the % WinDir % \ system32directory. If you find that its directory contains the svchost.exe file, you should be careful. For example, the shock wave variant win32.welchia. worm will file svchost.exe in the % WINDIR % \ system32 \ winsdirectory.
　　
Method 2: Check the path of the file corresponding to the svchost.exe process. Windows worker process, you can see the actual path of the corresponding running file.
　　
TIPS:
　　
★Trojans and other processes must have been implanted into your system.
★When viewing CPU usage, a process called "system idle process" is usually shown as 90-99%. Don't worry. In fact, the opposite is that the 90-99% here is the resources with idle CPU resources. The larger the number, the more CPU resources are available. The smaller the number, the more CPU resources are available.
　　
Other false statements and Solutions
　　
1. After Windows XP is installed, delete all files under c: \ windows \ system32 \ dllcache to save about MB of disk space.
　　
Comments: The DLL file backed up by the system is saved in this folder. Files in the DLL file may be used when drivers, software, and upgrades are installed in windows, deleting it will cause us more inconvenience.
　　
2. because the system space is precious, many friends install the software in other partitions, but every time the software is installed, the default installation path is c: \ Program Files. We can open the registry, go to [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion] and change the value of programfilesdir in the right window to the desired path.
　　
Comment: This setting makes it much easier for us. However, it brings many drawbacks. For example, when you enable Outlook Express, the system reports an error that the disk of the C disk is full or the memory is insufficient, and prompts "msoe. DLL cannot be initialized. In addition, it can cause system program running failures such as media player.
　　
3. Modify the host. Sam file in the \ % SystemRoot % \ system32 \ drivers \ etc folder ......
　　
Comment: many friends use the host file modification method to block malicious websites. That's right. However, many people have not figured out which file is the "host file". There is a host in Windows 98. sam file. This file is only an example file that Microsoft has made for us to modify the host file. If we modify host. the Sam file has no effect at all. The real host file is a file named "host" without an extension. In Windows XP, the so-called "host. sam "the file does not exist. We should use NotePad to open the host file under the \ % SystemRoot % \ system32 \ drivers \ etc directory (there is no extension ).
　　
4. to associate a JPG file with the ACDSee version (earlier than 4.0), run the "regsvr32/u shimgvw. dll" command.
　　
Comment: This method does allow ACDSee to establish file associations with JPG files, but this command uninstalls the image preview function of Windows XP, which is a bit overkill. The correct method is to delete the "[hkey_classes_root \ systemfileassociations \ image]" item in the registry.