Tuesday, October 27, 2009

Disabling Windows Autoplay

Have you ever been infected by a virus from someone’s flash disk even before you have open any file from the flash disk? Ever been inconvenience by your antivirus auto detecting viruses from someone’s flashdisk when all you want to do is to give them a file? I have and the reason is windows’ autoplay feature which starts executing a default program as instructed by the flashdisk the moment you insert it into your computer. This means before you even have a chance to scan the flashdisk, if infected, the flashdisk is already tryin to infect you!

 

To disable autoplay, edit your computer’s group policy by click start -> run then type gpedit.msc and click ok. This should open the group policy console from which you should click computer configuration -> administrative templates->system. After clicking system, scroll down to where it says Turn off Autoplay and doubnle click. A window such as the one below appears.

 

Click Enabled and choose All Drives as show below. Click OK then close the group policy console and that’s it!

Monday, October 26, 2009

Recovering from other Windows XP boot errors

Like they say, windows XP can crash for no apparent reason. Besides the registry, the other likely cause of a crash is a corrupt boot initialization file (boot.ini). To recover from such an error, you may boot into the recovery console and execute the folling commands in sequence to rebuild Windows’boot configuration.

CD \

C:\> ATTRIB -H C:\\boot.ini

·         C:\> ATTRIB -S C:\\boot.ini

·         C:\> ATRIB -R C:\\boot.ini

·         C:\> del boot.ini

·         C:\> BOOTCFG /Rebuild

·         C:\> CHKDSK /R /F

·         C: FIXBOOT

 

That should rebuild the Windows boot configuration and allow you to log into windows, hopefully saving you from doing a repair install or a full fresh installation of Windows.

How to recover from a corrupted registry that prevents Windows XP from starting

http://support.microsoft.com/?scid=307545.
If you access the System Volume Information folder by booting from another operating system, you should be able to view its contents.
After you have access to the System Volume Information folder, you should be able to see one or more folders that have long file names made up of a long string of numbers and letters, such as: _restore{98CD7788-3445-567B-978G-F97G40B3E8F9}. When you click on each of those files, you should see a series of folders called RP1RP2RP3, etc. These are the restore points. To see the date on which each of them was last used, right-click on an empty part of the folder and then choose View => Details.
Choose a restore point that has a suitable date. There should be a folder called snapshot under each of the restore point folders.
Each snapshot folder contains several files, including the following: _REGISTRY_USER_DEFAULT_REGISTRY_MACHINE_SECURITY,_REGISTRY_MACHINE_SOFTWARE_REGISTRY_MACHINE_SYSTEMREGISTRY_MACHINE_SAM.
Replace the corresponding files in windows/system32/config and windows should be able to boot correctly.