Tuesday, September 2, 2008

Adjust these performance options to speed up Windows XP

Performance Options dialog box

The most useful Windows XP performance-tuning options are on the Visual Effects and Advanced tabs of the Performance Options dialog box. You’ll find this box via the System Properties control panel by clicking the Settings button under Performance (Start | Control Panel | System | Performance | Settings). Figure A shows both the Visual Effects and Advanced tabs with the performance options you can easily modify.

Figure A

Performance Options — Visual Effects and Advanced tab

Visual Effects tab

The Visual Effects tab is the easiest place to start when troubleshooting certain performance problems. By default, Windows XP enables visual effects, such as the “scroll” option for the Start menu. These effects consume system resources, though. If you’re troubleshooting a sluggish system, you can potentially improve its performance by choosing the Adjust For Best Performance option, which will disable many of these visual effects settings. Of course, you’ll lose the cool visual effects, but there’s always a tradeoff for performance.

Advanced performance settings

For troubleshooting something more than sluggish screen redraws, you’ll need to adjust the performance options on the Advanced tab of the Performance Options dialog box. There are three sections: processor scheduling, memory usage, and virtual memory. Each of these sections’ settings has a major impact on how your system operates.

Processor scheduling

The processor scheduling section controls how much processor time Windows XP devotes to a program or process. The processor has a finite amount of resources to divide among the various applications. Choosing the Programs option will devote the most processor time to the program running in the foreground. Choosing Background Services allocates equal processor time to all running services, which can include print jobs and other applications running in the background. If your users complain about slow-running programs, you could try setting the processor scheduling to Programs.

On the flip side, if users complain that print jobs never print or are very slow to print, or if they run a macro in one application while working in another, you may want to assign equal time slices (called quanta) to each process by choosing the Background Services option. If you use the Windows XP machine in question as a server, you’re better off choosing the Background Services option.

Memory usage

The next section, memory usage, details how Windows XP uses system RAM. The first option in the section, Programs, allocates more RAM to running applications. For desktop systems with very little RAM, this selection gives the best performance. In systems with less RAM, you need to devote as much RAM as possible to just running Windows and your applications. For a server or a desktop with a lot of RAM, however, choosing the System Cache setting will yield better performance. When set to System Cache, the system will use most of the available RAM as a disk cache, which can result in major performance improvements on systems that depend on disk I/O.

Virtual memory

Finally, there are a number of settings in the virtual memory section that affect how Windows XP performs. Virtual memory is an area on the disk that Windows uses as it if were RAM. Windows requires this type of system in the event that it runs out of physical RAM. The virtual memory space is used as a swap space where information residing in RAM is written to the virtual memory space (also called the page file or swap file) in order to free RAM up for other processes.

When the system needs the information in the swap file, Windows puts it back into RAM and writes something else out to the disk in its place. Figure B shows the virtual memory settings for my laptop.

Figure B

Virtual Memory

Windows XP has a recommended default page file size of 1.5 times the amount of system RAM. Since I have 1GB of RAM in my laptop, the recommended size is 1.5GB, although I only have 768MB currently allocated for this purpose. I allow the paging file to grow as needed, up to a maximum size of 1.5GB. You can also choose to let Windows completely manage this file, or to have no file at all. I highly recommend that you do not remove the paging file because you’ll experience a noticeable degradation of system performance without it.

One way to boost system performance is to place the paging file on a separate physical hard drive from the operating system. The only caveat is if the second drive is slower than the primary drive, you’d want to leave the paging file where it is.

You can also span the paging file across multiple disks to increase performance. To make changes to the virtual memory, click the Change tab on the advanced performance options screen, make your desired changes, and click Set. Any changes you make won’t take effect until you reboot the machine.

Power users tip

If you want to get every last ounce of power out of your machine but you don’t want to sacrifice any unnecessary disk space, you can use the Windows XP performance monitor to see how much of your paging file is taken up during normal usage and adjust its size accordingly. For example, if you have a 1-GB page file, but only 40 percent of it is used during normal operations, you may want to set it to 512MB instead. You can gather this information by watching the % Usage and % Usage Peak counters for the paging file (Figure C).

Figure C

Windows XP Performance Monitor

I only recommend these changes if you have time to tinker. Most of the time, the operating system’s recommendations will work just fine.

Installing Exchange 2007 SP1 on Windows Server 2008

This is post is my attempt to bring all the materials of importance I could find about installing Exchange 2007 SP1 onto a Windows 2008 platform into one location. This post will be updated from time to time as new resources are made available. The known issues are slated to be addressed once Microsoft releases Update Rollup 4 for Exchange 2007 SP1.

Recommended Reading:
Known Issues:
Server Software:

Testing

  • Trial download of Exchange 2007 SP1 available here. The trial software is only available is 32-bit.

Production:

  • You will need to download a licensed copy of Exchange 2007 SP1 (Std or Ent) 64-bit.
Installation:

Pre-requisites

  • Install the Exchange pre-requisites according to the guidelines here.
  • For a new Install simply launch the Setup and perform the install in the same manner as you would with Windows Server 2003.
  • If you are going to migrate your Exchange 2007 services from Windows Server 2003 to Windows Server 2008 you’ll want to take a read this. There are some extra steps that you will need to undertake to ensure all the necessary services are migrated over correctly.

Post-Installation

  • It appears that for now you will have to disable IP6 on the Exchange Client Access Server. Read more about this problem here. This issue will be resolved when Exchange 2007 SP1 Rollup 4 is made available in Q3 2008.

    To get right to it: (snippet taken from here)

How do you turn off IPv6 ? It depends on whether you are running CAS and Mailbox on the same server or different ones.

If you’re in a multi-server scenario where the RPCProxy is not on the same server as the Mailbox, then you need to do the following:

  1. Unselect IPv6 from the properties of your NIC (on the RPC-over-HTTP Proxy machine); that will force the RPC-over-HTTP Proxy to use IPv4 to talk to Exchange and everything will be fine. In most cases, this step suffices. If it does not, continue with steps 2 and 3.
  2. Under the regkey HKLM\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters, add a 32 bit DWORD with the name Disabled Components and value 0xFF
  3. Reboot the machine

If you’re in a single-server scenario where the RPCProxy and Mailbox are on the same machine, then the above does not work since the loopback interface still uses IPv6. In this case, you need to make the following changes in the system32\drivers\etc\hosts file:

  1. Comment out the line ":::1 localhost"
  2. Add the following two lines:

  • Adjust IIS7 authentication to stop endless logon prompts when using Outlook Anywhere with NTLM. Full details on this issue can be found here. The command to execute on the Client Access Server:

    %Windows%\inetsrv\appcmd.exe set config /section:system.webServer/security/authentication/
    windowsAuthentication /useKernelMode:false

That’s about it for now. I’ll update this post from time to time as new information comes available.

Monday, September 1, 2008

VIRUS REMOVAL [Computer Troubleshooting... [amvo.exe amvo0.dll ampo.exe amvol.dll xfoolavp.com and autorun.inf] virus issues…]

[UPDATE] Download USB FIREWALL to protect your computer from this virus or remove it.

Recently I had a big time trouble with my computer as all the drives failed to open on double clicking and showed me a application selection window instead. After searching through the running processes and other settings I found that the show hidden files options in the folder options was also not working.

With the help of one of my friends [MOHIT] I fixed the issues.

The problem was due to amvo.exe amvo0.dll ampo.exe amvol.dll xfoolavp.com usdeiect.com and autorun.inf present in every drive’s root.

The fix works as follows…

open task manager (if ur task manager doesnt open and shows errors and warnings then use this tool ) and end task the above mentioned processes if u see them in the running process list from the processes pane. Then goto applications pane and click on new task and type in cmd or command. Once at the command prompt type in “cd\” without the quotes to goto the root of the current drive. Then type “del /f /a /s /q”

where of the files above mentioned (this menthod can also be used to force delete any unwanted file ) use this method to delete all above mentioned from the root of every drive.

After this open registry editor by clicking on new task and typing in “regedit” without quotes. Then goto HKCU > software >microsoft >windows >current version > explorer > advanced > then look for the hidden key in the right pane and change the value to 1 from 2.

And to fix the issues with drives not opening or search opening up on double click download this .reg (right click and save target as) file and double click it and add to your registry.

or do this…

copy every under this line paste in notepad save with .reg extension on ur desktop and double click it

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\Directory\shell]

@=”Open”

[HKEY_CLASSES_ROOT\Directory\shell\Explore]

[HKEY_CLASSES_ROOT\Directory\shell\Explore\command]

@=”%SystemRoot%\\Explorer.exe /e,/root,\”%1″

[HKEY_CLASSES_ROOT\Directory\shell\Explore\ddeexec]

@=”[ExploreFolder(\"%l\", %I, %S)]“

“NoActivateHandler”=”"

[HKEY_CLASSES_ROOT\Directory\shell\Explore\ddeexec\application]

@=”Folders”

[HKEY_CLASSES_ROOT\Directory\shell\Explore\ddeexec\topic]

@=”AppProperties”

[HKEY_CLASSES_ROOT\Directory\shell\find]

“SuppressionPolicy”=dword:00000080

[HKEY_CLASSES_ROOT\Directory\shell\find\command]

@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\

00,5c,00,45,00,78,00,70,00,6c,00,6f,00,72,00,65,00,72,00,2e,00,65,00,78,00,\

65,00,00,00

[HKEY_CLASSES_ROOT\Directory\shell\find\ddeexec]

@=”[FindFolder(\"%l\", %I)]“

“NoActivateHandler”=”"

[HKEY_CLASSES_ROOT\Directory\shell\find\ddeexec\application]

@=”Folders”

[HKEY_CLASSES_ROOT\Directory\shell\find\ddeexec\topic]

@=”AppProperties”

[HKEY_CLASSES_ROOT\Directory\shell\Open]

“BrowserFlags”=dword:00000010

“ExplorerFlags”=dword:00000012

[HKEY_CLASSES_ROOT\Directory\shell\Open\command]

@=”%SystemRoot%\\Explorer.exe /idlist”

[HKEY_CLASSES_ROOT\Directory\shell\Open\ddeexec]

@=”[ViewFolder(\"%l\", %I, %S)]“

“NoActivateHandler”=”"

[HKEY_CLASSES_ROOT\Directory\shell\Open\ddeexec\application]

@=”Folders”

[HKEY_CLASSES_ROOT\Directory\shell\Open\ddeexec\topic]

@=”AppProperties”

[HKEY_CLASSES_ROOT\Directory\shell\Openddeexec]

[HKEY_CLASSES_ROOT\Directory\shell\Openddeexec\ifexec]

@=”[]“

[HKEY_CLASSES_ROOT\Folder\shell]

@=”open”

[HKEY_CLASSES_ROOT\Folder\shell\explore]

“BrowserFlags”=dword:00000022

“ExplorerFlags”=dword:00000021

[HKEY_CLASSES_ROOT\Folder\shell\explore\command]

@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\

00,5c,00,45,00,78,00,70,00,6c,00,6f,00,72,00,65,00,72,00,2e,00,65,00,78,00,\

65,00,20,00,2f,00,65,00,2c,00,2f,00,69,00,64,00,6c,00,69,00,73,00,74,00,2c,\

00,25,00,49,00,2c,00,25,00,4c,00,00,00

[HKEY_CLASSES_ROOT\Folder\shell\explore\ddeexec]

@=”[ExploreFolder(\"%l\", %I, %S)]“

“NoActivateHandler”=”"

[HKEY_CLASSES_ROOT\Folder\shell\explore\ddeexec\application]

@=”Folders”

[HKEY_CLASSES_ROOT\Folder\shell\explore\ddeexec\ifexec]

@=”[]“

[HKEY_CLASSES_ROOT\Folder\shell\explore\ddeexec\topic]

@=”AppProperties”

[HKEY_CLASSES_ROOT\Folder\shell\open]

“BrowserFlags”=dword:00000010

“ExplorerFlags”=dword:00000012

[HKEY_CLASSES_ROOT\Folder\shell\open\command]

@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\

00,5c,00,45,00,78,00,70,00,6c,00,6f,00,72,00,65,00,72,00,2e,00,65,00,78,00,\

65,00,20,00,2f,00,69,00,64,00,6c,00,69,00,73,00,74,00,2c,00,25,00,49,00,2c,\

00,25,00,4c,00,00,00

[HKEY_CLASSES_ROOT\Folder\shell\open\ddeexec]

@=”[ViewFolder(\"%l\", %I, %S)]“

“NoActivateHandler”=”"

[HKEY_CLASSES_ROOT\Folder\shell\open\ddeexec\application]

@=”Folders”

[HKEY_CLASSES_ROOT\Folder\shell\open\ddeexec\ifexec]

@=”[]“

[HKEY_CLASSES_ROOT\Folder\shell\open\ddeexec\topic]

@=”AppProperties”

[HKEY_CLASSES_ROOT\Drive\shell]

@=”open_[1]“

[HKEY_CLASSES_ROOT\Drive\shell\find]

“SuppressionPolicy”=dword:00000080

[HKEY_CLASSES_ROOT\Drive\shell\find\command]

@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\

00,5c,00,45,00,78,00,70,00,6c,00,6f,00,72,00,65,00,72,00,2e,00,65,00,78,00,\

65,00,00,00

[HKEY_CLASSES_ROOT\Drive\shell\find\ddeexec]

@=”[FindFolder(\"%l\", %I)]“

“NoActivateHandler”=”"

[HKEY_CLASSES_ROOT\Drive\shell\find\ddeexec\application]

@=”Folders”

[HKEY_CLASSES_ROOT\Drive\shell\find\ddeexec\topic]

@=”AppProperties”

[HKEY_CLASSES_ROOT\Drive\shell\open]

[HKEY_CLASSES_ROOT\Drive\shell\open\command]

@=”%SystemRoot%\\Explorer.exe /idlist,%I,%L”

[HKEY_CLASSES_ROOT\Drive\shell\open\ddeexec]

[HKEY_CLASSES_ROOT\Drive\shell\open\ddeexec\topic]

@=”AppProperties”

_______________________________________ dont copy this line only till the above line.

These methods fixed all my issues without reinstalling windows which no i don’t like a all. I am thankful to Google and MOHIT.

find some more about this issue

This is the best explanation and solution

1. here

2. here

3. here

4. here

29 Responses to “VIRUS REMOVAL [Computer Troubleshooting... [amvo.exe amvo0.dll ampo.exe amvol.dll xfoolavp.com and autorun.inf] virus issues…]”

  1. for me the file name was amvo1.dll

  2. Visit this site….to remove amvo virus…
    http://www.en.mygeekside.com/?p=18#comment-193

  3. Plese send me above tool

  4. Download by clicking the link above….

  5. Plese send me Download antivirus files

  6. Download antivirus files

  7. Thanks Ramana
    Your VB programme is very good i get rid off by it for the virus of amvo.exe
    thanks

  8. This solution deletes/modifies registry keys/entries added/modified by this malware. Before performing the steps below, make sure you know how to back up the registry and how to restore it if a problem occurs. Refer to this Microsoft article for more information about modifying your computer’s registry.

    1. Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
    2. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>
    Windows>CurrentVersion>Run
    3. In the right panel, locate and delete the entry:
    amva = “%System%\amvo.exe”
    (Note: %System% is the Windows system folder, which is usually C:\Windows\System on Windows 98 and ME, C:\WINNT\System32 on Windows NT and 2000, or C:\Windows\System32 on Windows XP and Server 2003.)

    Restoring Modified Registry Entries

    1. Still in Registry Editor, in the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows> CurrentVersion>Explorer>Advanced
    2. In the right panel, locate the entry:
    Hidden = “1″
    3. Right-click on the value name and choose Modify. Change the value data of this entry to:
    2
    4. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Windows> CurrentVersion>Explorer>Advanced
    5. In the right panel, locate the entry:
    ShowSuperHidden = “0″
    6. Right-click on the value name and choose Modify. Change the value data of this entry to:
    1
    7. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows> CurrentVersion>Explorer>Advanced>Folder>Hidden>SHOWALL
    8. In the right panel, locate the entry:
    CheckedValue = “0″
    9. Right-click on the value name and choose Modify. Change the value data of this entry to:
    1

    Removing Other Malware Key from the Registry

    1. Still in Registry Editor, in the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID
    2. In the left panel, locate and delete the key:
    MADOWN
    3. Close Registry Editor.

    Deleting Malware-created AUTORUN.INF/s

    1. Right-click Start then click Search… or Find…, depending on the version of Windows you are running.
    2. In the Named input box, type:
    AUTORUN.INF
    3. In the Look In drop-down list, select a drive, then press Enter.
    4. Select the file, then open using Notepad.
    5. Check if the following lines are present in the file:
    [AutoRun]
    ;{Garbage}
    open=xn1i9x.com
    ;{Garbage}
    shell\open\Command=xn1i9x.com
    ;{Garbage}
    shell\open\Default=1
    ;{Garbage}
    shell\explore\Command=xn1i9x.com
    ;{Garbage}
    6. If the lines are present, delete the file.
    7. Repeat steps 3 to 6 for AUTORUN.INF files in the remaining removable drives.
    8. Close Search Results.

    Deleting the Malware File(s)

    1. Right-click Start then click Search… or Find…, depending on the version of Windows you are running.
    2. In the Named input box, type:
    %System%\amvo.exe
    3. In the Look In drop-down list, select My Computer, then press Enter.
    4. Once located, select the file then press SHIFT+DELETE.
    5. Repeat steps 2 to 4 to delete the following file:
    %System%\amvo0.dll
    %Temp%\zhklagpv.dll
    (Note: %Temp% is the Windows Temporary folder, which is usually C:\Windows\Temp or C:\WINNT\Temp.)