Over time, Windows loses stability. If you keep a computer for more than two years, at some point you're going to have to bite the bullet and reinstall Windows from scratch. But contrary to popular belief, you won't have to reformat your hard drive (with one exception, discussed below). The bad stuff you need to get rid of is all in your Windows folder.
Before you begin, gather your Windows and application CD-ROMs. Back up your data files (just to be safe), and then clear two days off your calendar. If everything goes smoothly, you can reinstall Windows in a few hours. But you have to assume something will go wrong: You may not be able to find a necessary CD, or data won't be where you thought it was, or something will simply refuse to work.
There's a difference between a repair reinstall and a complete reinstall. Though a repair (also called a refresh) will let you keep your current settings, a complete reinstall will give you a truly fresh version of Windows. Repairs are fast and easy, but they don't fix anywhere near as many problems. The instructions below are for total reinstalls, except where noted.
Your Vendor's Restore CD
Most computers ship with a vendor-specific restore CD rather than with a Microsoft Windows CD-ROM. (If your PC came with a Microsoft Windows CD, or if you bought a retail copy of Windows, skip to the section for your version.)
Some restore CDs give you all the options of a full Microsoft Windows CD, but with better instructions and the convenience of having all the right hardware drivers. Others can do nothing except reformat your hard drive and restore it to the condition it was in when you bought the PC. (This case is the exception I mentioned above that requires a reformat.)
If your restore CD is reformat-only, back up your data files to a network or a removable medium before reinstalling Windows. If you use Windows 98 or Me, back up C:\My Documents, plus the folders inside C:\Windows discussed in the 98/Me section below. If you have Windows 2000 or XP, back up C:\Documents and Settings. Also back up any other folders in which you store your data files.
Windows 98 and ME CDs
These Windows versions keep some important data inside your soon-to-be-erased Windows folder, so you need to copy several of its subfolders to another location. Right-click My Computer and select Explore. Double-click the C: drive icon (in Me, you may then have to click View the entire contents of this drive). Right-click in the right pane and select New, Folder. Name the new folder oldstuff.
Go to the Windows folder (you might have to click View the entire contents of this folder), hold down Ctrl, and select the following subfolders: All Users, Application Data, Desktop, Favorites, Local Settings, Profiles, SendTo, and Start Menu. If you don't see them all, select View, Folder Options (Tools, Folder Options in Me), click the View tab, select Show all files, and click OK. (If you still don't see them all, don't worry about it.) Press Ctrl and drag the folders to C:\oldstuff (see FIGURE 1).
Restart Windows with a start-up disk in your floppy drive. (To make a start-up floppy, insert a disk, select Start, Settings, Control Panel, double-click Add/Remove Programs, click Startup Disk, Create Disk, and follow the prompts.) At the Startup Menu, select Start computer with CD-ROM support. While the drivers load, insert your Windows CD-ROM.
Unless you're doing a repair reinstall, type the command c:\windows\command\deltree /y c:\windows and press Enter. Deleting your old files could take time, but the /y switch suppresses confirmation prompts, so take a break.
When you're back at the A: prompt, type x:setup, where x is your CD drive letter (it's likely one letter past what it usually is in Windows, so if it's D: in Windows, it's probably E: here). Press Enter and follow the prompts.
Once you're back in Windows, reinstall your graphics card driver. If you have Windows set up for more than one user, you'll also have to re-create each account. Select Start, Settings, Control Panel, Users to do so. It's important that the user names match those in the old installation. If you're not sure, open Windows Explorer and navigate to C:\oldstuff\profiles. There you'll find a folder for each registered user name (see FIGURE 2). Don't worry about passwords. Log off and log back on as each user. When you're done, log off and back on one more time, but instead of choosing a user name and a password, press Esc to enter Windows without being a specific user.
Select Start, Programs, MS-DOS Prompt (in Windows 98) or Start, Programs, Accessories, MS-DOS Prompt (in Windows Me). Type xcopy c:\oldstuff\*.* c:\windows /s /h /r /c and press Enter (if you want to know what the xcopy switches do, enter the command xcopy /?). When xcopy asks if it should overwrite a file, press a for All.
When xcopy is through, reboot and log on (as a particular user, if necessary). Open My Documents to make sure all your personal files are where they belong, including your Internet Explorer favorites and your custom Start menu shortcuts.
Now skip ahead to "Finishing the Job."
Windows 2000 and XP CDs
Boot your computer with your Windows CD-ROM inserted. When you get the 'Press any key to boot from CD' message, do so. (If you don't see that message before Windows starts, restart Windows, press the key you're prompted to enter for your PC Setup program, and change the boot order so your CD drive is first.)
At the 'Welcome to Setup' screen, press Enter. The R (repair) option takes you to the Recovery Module, which is useful if Windows won't boot, but it's no help with a reinstallation. Soon you'll be told that there's already a Windows installation on the computer. Press r for a repair reinstall or Esc to begin a complete, destructive one. For a complete restore, select your C: partition and press Enter. When you get the warning that says an operating system is on that partition, press c. When you are asked your partition preference, select Leave the current file system intact (no changes). When you're told that a Windows folder (or Winnt folder for Windows 2000) already exists, press l ('ell') to delete it and create a new one. Follow the series of prompts. When the installation program asks for your name, enter temp.
Once the installation is complete, your system will reboot into Windows, and you'll be logged on as user Temp. If the screen is difficult to read, reinstall your graphics card driver.
If you are reinstalling Windows XP, skip to "For Both Windows XP and 2000."
If you're reinstalling Windows 2000, log off as Temp and back on as Administrator. Now log off and on again, this time as Temp. Open Windows Explorer and navigate to C:\Documents and Settings. One of the subfolders will be named Administrator. Another will be named something like Administrator.computername.
Select Start, Programs, Accessories, Command Prompt. Type cd "\documents and settings" and press Enter. Then type xcopy administrator\*.* administrator.computername /s /h /r /c, replacing computername with the last part of that folder's name (after "Administrator.") in Documents and Settings. Now press Enter, and when you're asked about overwriting files or folders, press a for All.
If you have any users on the old installation besides Administrator, continue with the "For Both Windows XP and 2000" section. Otherwise, open Windows Explorer and make sure your data files are where they belong. Then go to Control Panel's Users and Passwords applet and delete the user Temp before skipping to "Finishing the Job."
For Both Windows XP and 2000
Reopen Windows Explorer. Select your C: drive (you may have to click Show the contents of this folder). Right-click in the right pane and select New, Folder. Name the new folder oldstuff. In the left pane, choose the Documents and Settings folder. It should have subfolders for each user from the previous install, plus one for Temp and a few others. Move the folders for your previous user names to oldstuff.
Select Start, Control Panel, User Accounts (Start, Settings, Control Panel, Users and Passwords in Windows 2000). Create an account for each user who was registered before the reinstall. Be sure to use the exact names. They are the same names as the folders you just moved to oldstuff (as shown in FIGURE 2). In Windows XP, at least one user must have administrator privileges.
Log off and back on as each user, before logging back on as Temp. Make sure that you select Log Off and not Switch User at Windows XP's Log Off dialog box (this isn't an issue in Win 2000).
Log on as Temp, select Start, Programs, Accessories, Command Prompt (in XP, Start, All Programs, Accessories, Command Prompt), type xcopy c:\oldstuff\*.* "c:\documents and settings" /s /h /r /c, and press Enter. Press a when asked if you want to overwrite a file. Log off Temp and log on to each restored account to make sure everyone's documents and data are where they belong. Log on as an administrator and run Control Panel's User Accounts applet again to remove the user Temp.
Finishing the Job
Now you've got Windows going, but not much else. You may have to reinstall your printer, sound card, and so on. Luckily, if a driver for the gadget came on your Windows or vendor restore CD, it was probably reinstalled automatically.
You'll have to reinstall your applications to reintroduce them to Windows. Some of their settings will not be changed by the reinstallation, but those that were stored in the Registry were wiped out.
Once your Internet connection is running again, browse to Windows Update and download all critical updates for your version (see FIGURE 3). Then visit the sites of your hardware vendors to update your drivers.
After the reinstall, some of your data may not show up where it should. Search for it in both your Application Data and oldstuff folders, and see if you can move it to the folder in which Windows or your apps are looking for it. If you find a folder called Identities with two subfolders whose names are long and indecipherable, try moving the contents of one to the other and see if your data reappears.
You've probably guessed that the final step is deleting the c:\oldstuff folder--and the Administrator folder in Windows 2000. Make this the very last step, however. Wait a couple of days, weeks, or even months until you're confident that all of your needed files are accessible.
Friday, February 22, 2008
How to Reinstall Windows Without Losing Your Data
How to disable or uninstall the pilot version of Microsoft Windows Genuine Advantage Notifications
Disable WGA Notifications
| 1. | Log on to the computer by using an account that has administrative permissions. | ||||||
| 2. | Make sure that the WGA Notifications version that exists on the computer is a pilot version. The version format for the pilot version is 1.5.0532.x. In this case, you can uninstall versions 527-532 only. For example, you can uninstall versions that range from 1.5.0527.0 to 1.5.0532.2. To find the WGA Notifications version, follow these steps.
| ||||||
| 3. | Rename the following files by changing the extension to .old:
| ||||||
| 4. | Restart the computer. |
Manually uninstall WGA Notifications
| 1. | Log on to the computer by using an account that has administrative permissions. | ||||||
| 2. | Make sure that the WGA Notifications version that exists on the computer is a pilot version. The version format for the pilot version is 1.5.0532.x. In this case, you can uninstall versions 527-532 only. For example, you can uninstall versions that range from 1.5.0527.0 to 1.5.0532.2. To find the WGA Notifications version, follow these steps:
| ||||||
| 3. | Rename the following files by changing the extension to .old:
| ||||||
| 4. | Restart the computer. | ||||||
| 5. | Unregister LegitCheckControl.dll by using Regsvr32. To do this, follow these steps:
| ||||||
| 6. | Restart the computer. | ||||||
| 7. | Click Start, click Run, type cmd, and then click OK. | ||||||
| 8. | At the command prompt, delete the following files by typing the Del command. Press ENTER after you type each command.
| ||||||
| 9. | At the command prompt, type regedit. | ||||||
| 10. | Locate and then right-click the following registry subkeys. Click Delete after you locate each subkey.
|
When starting up Windows, before the desktop appears I get a STOP 0x0000007F blue screen error message.
Possible Solution: If you have Symantec’s Norton Anti-Virus, this problem occurs because there is a limited amount of kernel space available for kernel drivers. For Windows 2000, this limit is 12 KB. If the operating system runs out of kernel space, then the computer displays a blue screen error message. See this web site for more information: http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2002071208532048?Open&src=w (See also: KStackMinFree.reg)
Also, turn OFF Windows XP’s Prefetching.
The Prefetcher component in Windows XP is part of the Memory Manager, and helps to shorten the amount of time it takes to start Windows and programs.
In some configurations, the prefetcher can cause errors (such as drivers not loading after bootup, Code 10 errors, etc.). It has also been said that the application prefetcher does not actually speed up application launching.
To disable the Prefetcher component, use Registry Editor (Regedit.exe) to locate the EnablePrefetcher value under the following key in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager\Memory Management\PrefetchParameters
Change the value of the EnablePrefetcher value to 0 , and then quit Registry Editor. The next time you start your computer, the Prefetcher component will not start.
You can also adjust how the Prefetch behaves by chaning the value of "EnablePrefetcher" as follows:
0 ---- Disable Prefetching
1 ---- Enable Application Prefetch
2 ---- Enable Boot Prefetch
3 ---- Enable both Boot and Application prefetching (Default value)
5 is not a valid value for this parameter as it is a 2 bit switch.
Even if you keep the prefetch ON, you should periodically delete the contents of the following folder. It's contents will be refreshed in 3 days or immediately if you run the command below. Be sure to reboot
twice after deleting the contents of the folder.
Contents to Delete: c:\windows\prefetch
Rebuild Now (run):
%windir%\System32\rundll32.exe advapi32.dll,ProcessIdleTasks
System32 Folder Opens When Logging on to Windows
SYMPTOMS
This behavior also occurs if there is a String value that contains only a single quote character (") as the Value data in the following Registry key:
CAUSE
RESOLUTION
Use Registry Editor to view the following two Windows registry keys:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
MORE INFORMATION
Value: ActiveMovie File Extensions
Value Type: REG_SZ
Value Data: ActMovie.exe /Check
You can resolve this behavior by deleting the Remainder value that has "" next to it is in the following registry key:
If you are uncertain whether an entry is incorrect or incomplete, you may want to delete all entries other than the default Windows entry. The following entry to run the System Tray is the only required Windows default entry:
Value: SystemTray
Value Type: REG_SZ
Value Data: SysTray.exe
Increasing Windows XP's performance
Possible Solution: Disable Kernal paging using the following regedit:
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER\Memory Management.
Click on the Memory Management folder and right-click the LargeSystemCache entry. Select Modify, and type 1 in the Value Data field.
If you have 512MB or more of RAM, you should also locate the DisablePagingExecutive entry and ensure it is set to 1 as well. (This setting keeps as much information as possible loaded into RAM rather than to the swap file.)
How To Display, Use, and Clear "My Recent Documents" on the Start Menu in Windows XP
To Display the My Recent Documents Folder
To display the My Recent Documents folder on the Start menu:| 1. | Right-click Start, and then click Properties. Or, if the Start menu is already displayed, right-click an empty area of the Start menu, and then click Properties. |
| 2. | Click Customize. |
| 3. | Click the Advanced tab. |
| 4. | Under Recent documents, click to select the List my most recently opened documents check box, click OK, and then click OK. The next time you click Start, the My Recent Documents command is displayed on the Start menu. |
To Clear the Contents of the My Recent Documents Folder
To clear the My Recent Documents list, follow these steps:| 1. | Right-click Start, and then click Properties. Or, if the Start menu is already displayed, right-click an empty area of the Start menu, and then click Properties. |
| 2. | Click Customize. |
| 3. | Click the Advanced tab. |
| 4. | Under Recent documents, click Clear List, click OK, and then click OK. Your most recently used documents are removed from the My Recent Documents folder. Note that this action does not delete the documents from your hard disk. |
How to connect and disconnect a network drive in Windows XP
Connect a drive from My Network Places
| 1. | Click Start, click My Network Places, click Entire Network, and then double-click Microsoft Windows Network. |
| 2. | Double-click the domain that you want to open. |
| 3. | Double-click the computer that has the shared resource you want to map. All the shared resources for that computer automatically appear in the window. |
| 4. | Right-click the shared drive or folder that you want to map, and then click Map Network Drive. |
| 5. | Click the drive letter that you want to use, and then specify whether you want to reconnect every time that you log on to your computer. Note Network drives are mapped by using letters starting from the letter Z. This is the default drive letter for the first mapped drive you create. However, you can select another letter if you want to use a letter other than Z. |
| 6. | Click Finish. |
Connect a drive from My Computer or Windows Explorer
| 1. | To connect a drive from My Computer, click Start, right-click My Computer, and then click Explore. To connect a drive from Windows Explorer, right-click Start, and then click Explore. |
| 2. | On the Tools menu, click Map Network Drive. |
| 3. | In the Drive box, click a drive letter. |
| 4. | In the Folder box, type the UNC path for the server and shared resource in the following format: \\server name\share name. You can also click Browse to find the computer and shared resource. |
Use the Net Use command to map or disconnect a drive
You can use the net use command for batch files and scripts. To use the net use command to map or disconnect a drive:| • | To map a network drive:
| ||||||
| • | To disconnect a mapped drive:
|
Disconnect from a mapped network drive
| 1. | Click Start, and then click My Computer. |
| 2. | Right-click the icon for the mapped drive. |
| 3. | Click Disconnect. |
How to set performance options in Windows XP
How to manually change the performance of foreground and background programs
| 1. | Click Start, click Run, and then type sysdm.cpl in the Open box. | ||||
| 2. | Click the Advanced tab, and then click Settings under Performance. | ||||
| 3. | Click the Advanced tab, and then use one of the following methods under Processor scheduling:
|
| • | If you click Programs, the foreground program runs more smoothly and responds more quickly. If you want a background task such as a Backup utility to run faster, click Background services. |
| • | The Programs option allocates short, variable time slices (quanta) to running programs, and the Background services option assigns long, fixed quanta. |
How to manually manage computer memory
When your computer is running low on RAM, and you must have more RAM immediately, Windows uses hard disk space to simulate RAM. This is known as virtual memory. It is also known as the paging file. This is similar to the UNIX swapfile. By default, the virtual memory paging file (named pagefile.sys) that is created during installation is 1.5 times the RAM on your computer.You can optimize virtual memory use by dividing the space between multiple drives and by removing space from slow or heavily accessed drives. To best optimize your virtual memory space, divide it among as many physical hard drives as possible. When you select drives, follow these guidelines:
| • | Try to avoid having a paging file on the same drive as the system files. |
| • | Avoid putting a paging file on a fault-tolerant drive such as a mirrored volume or a RAID-5 volume. Paging files do not require fault-tolerance, and some fault-tolerant computers experience slow data writes because they write data to multiple locations. |
| • | Do not put multiple paging files on different partitions on the same physical disk drive. |
How to manually change the size of the virtual memory paging file
You must be logged on as an administrator or as a member of the Administrators group to complete this procedure. If your computer is connected to a network, network policy settings may also prevent you from completing this procedure.| 1. | Click Start, click Run, and then type sysdm.cpl in the Open box. |
| 2. | Click the Advanced tab, and then click Settings under Performance. |
| 3. | Click the Advanced tab, and then click Change under Virtual memory. |
| 4. | Under Drive [Volume Label], click the drive that contains the paging file that you want to change. |
| 5. | Under Paging file size for selected drive, click Custom size, type a new paging file size in megabytes (MB) in the Initial size (MB) or Maximum size (MB) box, and then click Set. |
Notes
| • | To have Windows select the best paging file size, click System managed size. The recommended minimum size is equivalent to 1.5 times the RAM on your computer, and 3 times that figure for the maximum size. For example, if you have 256 MB of RAM, the minimum size is 384 MB, and the maximum size is 1152 MB. |
| • | For best performance, do not set the initial size to less than the minimum recommended size under Total paging file size for all drives. The recommended size is equivalent to 1.5 times the RAM on your computer. It is good practice to leave the paging file at its recommended size. However, you may increase its size if you frequently use programs that use much memory. |
| • | To delete a paging file, set both the initial size and the maximum size to zero, or click No paging file. We strongly recommend that you do not disable or delete the paging file. |
How to manually optimize the memory usage
You can optimize your computer's memory usage. If you use your computer primarily as a workstation instead of as a server, you can devote more memory to your programs. Your programs will work faster and your system cache size will remain the default size that came with Windows XP. You can also set aside more computer memory for a larger system cache if your computer is used primarily as a server, or if you use programs that require a larger cache.| 1. | Click Start, click Run, and then type sysdm.cpl in the Open box. | ||||
| 2. | Click the Advanced tab, and then click Settings under Performance. | ||||
| 3. | Click the Advanced tab, and then use one of the following methods under Memory usage:
|
How to manually change the visual effects
Windows provides several options to set the visual effects of your computer. For example, you can show shadows under menus. Shadows give menus a 3-D look. You can configure Windows to display all the contents of a window while you move the window on your screen. To make large text more readable, you can display the smooth edges of screen fonts.Windows provides options to turn on all the settings (for best appearance), or none of the settings (for best computer performance). You can also restore the default settings.
To change the visual effects, follow these steps:
| 1. | Click Start, click Run, and then type sysdm.cpl in the Open box. | ||||||
| 2. | Click the Advanced tab, and then under Performance, click Settings. | ||||||
| 3. | Click the Visual Effects tab, and then use one of the following methods:
|
Wednesday, February 20, 2008
How to copy data from a corrupted user profile to a new profile
Create a New User Profile in Windows XP Professional
| 1. | Log on as the Administrator or as a user with administrator credentials. |
| 2. | Click Start, and then click Control Panel. |
| 3. | Click User Accounts. |
| 4. | Click the Advanced tab, and then click Advanced. |
| 5. | In the left pane, click the Users folder. |
| 6. | On the Action menu, click New User. |
| 7. | Enter the appropriate user information, and then click Create. |
Create a New User Profile in Windows XP Home Edition
| 1. | Log on as the Administrator or as a user with administrator credentials. |
| 2. | Click Start, and then click Control Panel. |
| 3. | Click User Accounts. |
| 4. | Under Pick a task, click Create a new account. |
| 5. | Type a name for the user information, and then click Next. |
| 6. | Click an account type, and then click Create Account. |
Copy Files to the New User Profile
| 1. | Log on as a user other than the user whose profile you are copying files to or from. | ||||||
| 2. | In Windows Explorer, click Tools, click Folder Options, click the View tab, click Show hidden files and folders, click to clear the Hide protected operating system files check box, and then click OK. | ||||||
| 3. | Locate the C:\Documents and Settings\Old_Username folder, where C is the drive on which Windows XP is installed, and Old_Username is the name of the profile you want to copy user data from. | ||||||
| 4. | Press and hold down the CTRL key while you click each file and subfolder in this folder, except the following files:
| ||||||
| 5. | On the Edit menu, click Copy. | ||||||
| 6. | Locate the C:\Documents and Settings\New_Username folder, where C is the drive on which Windows XP is installed, and New_Username is the name of the user profile that you created in the "Create a New User Profile" section. | ||||||
| 7. | On the Edit menu, click Paste. | ||||||
| 8. | Log off the computer, and then log on as the new user. Note You must import your e-mail messages and addresses to the new user profile before you delete the old profile. |
How to Manually Remove Programs from the Add or Remove Programs Tool
MORE INFORMATION
WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
| 1. | Click Start, and then click Run. | ||||
| 2. | In the Open box, type regedt32, and then click OK. | ||||
| 3. | In Registry Editor, locate the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall | ||||
| 4. | In the left pane, click the Uninstall registry key, and then click Export on the File menu. | ||||
| 5. | In the Export Registry File dialog box that appears, click Desktop in the Save in list, type uninstall in the File name box, and then click Save. | ||||
| 6. | Each key listed under Uninstall in the left pane of Registry Editor represents a program that is displayed in the Currently installed programs list of the Add or Remove Programs tool. To determine which program that each key represents, click the key, and then view the following values in the details pane on the right: DisplayName: The value data for the DisplayName key is the name that is listed in Add or Remove Programs. -and- UninstallString: The value data for the UninstallString key is the program that is used to uninstall the program. | ||||
| 7. | After you identify the registry key that represents the program that you removed but which is still displayed in the Currently installed programs list of Add or Remove Programs, right-click the key in the left pane of the Registry Editor window, and then click Delete. Click Yes in response to the "Are you sure you want to delete this key and all of its subkeys?" message. | ||||
| 8. | On the File menu, click Exit to quit Registry Editor. | ||||
| 9. | Click Start, click Control Panel, and then click Add or Remove Programs. In the Currently installed programs list, verify that the program whose registry key you deleted is no longer listed. | ||||
| 10. | Do one of the following:
|
Disk Cleanup Tool in Windows XP
MORE INFORMATION
| • | Remove temporary Internet files. |
| • | Remove downloaded program files. For example, ActiveX controls and Java applets that are downloaded from the Internet. |
| • | Empty the Recycle Bin. |
| • | Remove Windows temporary files. |
| • | Remove optional Windows components that you are not using. |
| • | Remove installed programs that you no longer use. |
| • | Click Start, and then click Run. In the Open box, type cleanmgr, and then click OK. -or- |
| • | Click Start, point to All Programs, point to Accessories, point to System Tools, and then click Disk Cleanup. -or- |
| • | In Windows Explorer or My Computer, right-click the disk in which you want to free up space, click Properties, click the General tab, and then click Disk Cleanup. |
Remove Files Stored on Your Hard Disk
To remove files stored on your hard disk that you no longer use, follow these steps:| 1. | Click Start, and then click My Computer. |
| 2. | Right-click the disk in which you want to free up space, and then click Properties. |
| 3. | Click the General tab, and then click Disk Cleanup. |
| 4. | Click the Disk Cleanup tab (if it is not already selected), click to select the check boxes next to the files that you want to remove, and then click OK. |
| 5. | Click Yes to the proceed with this action, and then click OK. |
Remove Windows Components
To remove Windows components that you are not using, follow these steps:| 1. | Click Start, and then click My Computer. | ||
| 2. | Right-click the disk in which you want to free up space, and then click Properties. | ||
| 3. | Click the General tab, and then click Disk Cleanup. | ||
| 4. | Click the More Options tab, and then under Windows components, click Clean up. The Windows Components Wizard starts. | ||
| 5. | In the Components list, click to clear the check box next to the component(s) that you want to remove.
| ||
| 6. | Click Next. | ||
| 7. | In the Completing the Windows Components Wizard page, click Finish. | ||
| 8. | Click OK, click Yes to proceed with this action, and then click OK. |
Remove Installed Programs
To remove programs that you no longer use, follow these steps:| 1. | Click Start, and then click My Computer. |
| 2. | Right-click the disk in which you want to free up space, and then click Properties. |
| 3. | Click the General tab, and then click Disk Cleanup. |
| 4. | Click the More Options tab, and then under Installed programs, click Clean up. The Add or Remove Programs dialog box is displayed. |
| 5. | In the Currently installed programs list, click the program that you want to remove, and then click Remove (or Change/Remove). |
| 6. | If you receive a prompt to confirm the removal of the program, click Yes. |
| 7. | Repeat step 5 and 6 to remove other programs that you no longer use, and then click Close. |
| 8. | Click OK, click Yes to proceed with this action, and then click OK. |
Remove Restore Points
To remove all restore points except the most recent restore point, follow these steps:| 1. | Click Start, and then click My Computer. |
| 2. | Right-click the disk in which you want to free up space, and then click Properties. |
| 3. | Click the General tab, and then click Disk Cleanup. |
| 4. | Click the More Options tab, and then under System Restore, click Clean up. |
| 5. | Click Yes to remove all but the most recent restore point. |
| 6. | Click OK, click Yes to proceed with this action, and then click OK. |
Working with drive letter assignments in Windows XP
How to assign a drive letter
To assign a drive letter to a drive, a partition, or a volume, follow these steps:| 1. | Log on as Administrator or as a member of the Administrators group. |
| 2. | Click Start, click Control Panel, and then click Performance and Maintenance. Note If you do not see Performance and Maintenance, go to step 3. Performance and Maintenance appears in Control Panel only if you use Category view. If you use Classic view, Performance and Maintenance does not appear. |
| 3. | Click Administrative Tools, double-click Computer Management, and then click Disk Management in the left pane. |
| 4. | Right-click the drive, the partition, the logical drive, or the volume that you want to assign a drive letter to, and then click Change Drive Letter and Paths. |
| 5. | Click Add. |
| 6. | Click Assign the following drive letter if it is not already selected, and then either accept the default drive letter or click the drive letter that you want to use. |
| 7. | Click OK. |
How to change a drive letter
To change an existing drive letter on a drive, on a partition, or on a volume, follow these steps:| 1. | Log on as Administrator or as a member of the Administrators group. |
| 2. | Click Start, click Control Panel, and then click Performance and Maintenance. |
| 3. | Click Administrative Tools, double-click Computer Management, and then click Disk Management in the left pane. |
| 4. | Right-click the drive, the partition, the logical drive, or the volume that you want to assign a drive letter to, and then click Change Drive Letter and Paths. |
| 5. | Click Change. |
| 6. | Click Assign the following drive letter if it is not already selected, click the drive letter that you want to use, and then click OK. |
| 7. | Click Yes when you are prompted to confirm the drive letter change. |
How to remove a drive letter
To remove an existing drive letter on a drive, on a partition, or on a volume, follow these steps:| 1. | Log on as Administrator or as a member of the Administrators group. |
| 2. | Click Start, click Control Panel, and then click Performance and Maintenance. |
| 3. | Click Administrative Tools, double-click Computer Management, and then click Disk Management in the left pane. |
| 4. | Right-click the drive, the partition, the logical drive, or the volume that you want to assign a drive letter to, and then click Change Drive Letter and Paths. |
| 5. | Click Remove. |
| 6. | Click Yes when you are prompted to confirm the removal. |
Keyboard Shortcuts in Windows XP
General keyboard shortcuts
• CTRL+C (Copy)
• CTRL+X (Cut)
• CTRL+V (Paste)
• CTRL+Z (Undo)
• DELETE (Delete)
• SHIFT+DELETE (Delete the selected item permanently without placing the item in the Recycle Bin)
• CTRL while dragging an item (Copy the selected item)
• CTRL+SHIFT while dragging an item (Create a shortcut to the selected item)
• F2 key (Rename the selected item)
• CTRL+RIGHT ARROW (Move the insertion point to the beginning of the next word)
• CTRL+LEFT ARROW (Move the insertion point to the beginning of the previous word)
• CTRL+DOWN ARROW (Move the insertion point to the beginning of the next paragraph)
• CTRL+UP ARROW (Move the insertion point to the beginning of the previous paragraph)
• CTRL+SHIFT with any of the arrow keys (Highlight a block of text)
• SHIFT with any of the arrow keys (Select more than one item in a window or on the desktop, or select text in a document)
• CTRL+A (Select all)
• F3 key (Search for a file or a folder)
• ALT+ENTER (View the properties for the selected item)
• ALT+F4 (Close the active item, or quit the active program)
• ALT+ENTER (Display the properties of the selected object)
• ALT+SPACEBAR (Open the shortcut menu for the active window)
• CTRL+F4 (Close the active document in programs that enable you to have multiple documents open simultaneously)
• ALT+TAB (Switch between the open items)
• ALT+ESC (Cycle through items in the order that they had been opened)
• F6 key (Cycle through the screen elements in a window or on the desktop)
• F4 key (Display the Address bar list in My Computer or Windows Explorer)
• SHIFT+F10 (Display the shortcut menu for the selected item)
• ALT+SPACEBAR (Display the System menu for the active window)
• CTRL+ESC (Display the Start menu)
• ALT+Underlined letter in a menu name (Display the corresponding menu)
• Underlined letter in a command name on an open menu (Perform the corresponding command)
• F10 key (Activate the menu bar in the active program)
• RIGHT ARROW (Open the next menu to the right, or open a submenu)
• LEFT ARROW (Open the next menu to the left, or close a submenu)
• F5 key (Update the active window)
• BACKSPACE (View the folder one level up in My Computer or Windows Explorer)
• ESC (Cancel the current task)
• SHIFT when you insert a CD-ROM into the CD-ROM drive (Prevent the CD-ROM from automatically playing)
• CTRL+SHIFT+ESC (Open Task Manager)
Dialog box keyboard shortcuts
If you press SHIFT+F8 in extended selection list boxes, you enable extended selection mode. In this mode, you can use an arrow key to move a cursor without changing the selection. You can press CTRL+SPACEBAR or SHIFT+SPACEBAR to adjust the selection. To cancel extended selection mode, press SHIFT+F8 again. Extended selection mode cancels itself when you move the focus to another control.• CTRL+TAB (Move forward through the tabs)
• CTRL+SHIFT+TAB (Move backward through the tabs)
• TAB (Move forward through the options)
• SHIFT+TAB (Move backward through the options)
• ALT+Underlined letter (Perform the corresponding command or select the corresponding option)
• ENTER (Perform the command for the active option or button)
• SPACEBAR (Select or clear the check box if the active option is a check box)
• Arrow keys (Select a button if the active option is a group of option buttons)
• F1 key (Display Help)
• F4 key (Display the items in the active list)
• BACKSPACE (Open a folder one level up if a folder is selected in the Save As or Open dialog box)
Microsoft natural keyboard shortcuts
• Windows Logo (Display or hide the Start menu)
• Windows Logo+BREAK (Display the System Properties dialog box)
• Windows Logo+D (Display the desktop)
• Windows Logo+M (Minimize all of the windows)
• Windows Logo+SHIFT+M (Restore the minimized windows)
• Windows Logo+E (Open My Computer)
• Windows Logo+F (Search for a file or a folder)
• CTRL+Windows Logo+F (Search for computers)
• Windows Logo+F1 (Display Windows Help)
• Windows Logo+ L (Lock the keyboard)
• Windows Logo+R (Open the Run dialog box)
• Windows Logo+U (Open Utility Manager)
Accessibility keyboard shortcuts
• Right SHIFT for eight seconds (Switch FilterKeys either on or off)
• Left ALT+left SHIFT+PRINT SCREEN (Switch High Contrast either on or off)
• Left ALT+left SHIFT+NUM LOCK (Switch the MouseKeys either on or off)
• SHIFT five times (Switch the StickyKeys either on or off)
• NUM LOCK for five seconds (Switch the ToggleKeys either on or off)
• Windows Logo +U (Open Utility Manager)
Windows Explorer keyboard shortcuts
• END (Display the bottom of the active window)
• HOME (Display the top of the active window)
• NUM LOCK+Asterisk sign (*) (Display all of the subfolders that are under the selected folder)
• NUM LOCK+Plus sign (+) (Display the contents of the selected folder)
• NUM LOCK+Minus sign (-) (Collapse the selected folder)
• LEFT ARROW (Collapse the current selection if it is expanded, or select the parent folder)
• RIGHT ARROW (Display the current selection if it is collapsed, or select the first subfolder)
Shortcut keys for Character Map
After you double-click a character on the grid of characters, you can move through the grid by using the keyboard shortcuts: • RIGHT ARROW (Move to the right or to the beginning of the next line)
• LEFT ARROW (Move to the left or to the end of the previous line)
• UP ARROW (Move up one row)
• DOWN ARROW (Move down one row)
• PAGE UP (Move up one screen at a time)
• PAGE DOWN (Move down one screen at a time)
• HOME (Move to the beginning of the line)
• END (Move to the end of the line)
• CTRL+HOME (Move to the first character)
• CTRL+END (Move to the last character)
• SPACEBAR (Switch between Enlarged and
Microsoft Management Console (MMC) main window keyboard shortcuts
• CTRL+O (Open a saved console)
• CTRL+N (Open a new console)
• CTRL+S (Save the open console)
• CTRL+M (Add or remove a console item)
• CTRL+W (Open a new window)
• F5 key (Update the content of all console windows)
• ALT+SPACEBAR (Display the MMC window menu)
• ALT+F4 (Close the console)
• ALT+A (Display the Action menu)
• ALT+V (Display the View menu)
• ALT+F (Display the File menu)
• ALT+O (Display the Favorites menu)
MMC console window keyboard shortcuts
• CTRL+P (Print the current page or active pane)
• ALT+Minus sign (-) (Display the window menu for the active console window)
• SHIFT+F10 (Display the Action shortcut menu for the selected item)
• F1 key (Open the Help topic, if any, for the selected item)
• F5 key (Update the content of all console windows)
• CTRL+F10 (Maximize the active console window)
• CTRL+F5 (Restore the active console window)
• ALT+ENTER (Display the Properties dialog box, if any, for the selected item)
• F2 key (Rename the selected item)
• CTRL+F4 (Close the active console window. When a console has only one console window, this shortcut closes the console)
Remote desktop connection navigation
• CTRL+ALT+END (Open the Microsoft Windows NT Security dialog box)
• ALT+PAGE UP (Switch between programs from left to right)
• ALT+PAGE DOWN (Switch between programs from right to left)
• ALT+INSERT (Cycle through the programs in most recently used order)
• ALT+HOME (Display the Start menu)
• CTRL+ALT+BREAK (Switch the client computer between a window and a full screen)
• ALT+DELETE (Display the Windows menu)
• CTRL+ALT+Minus sign (-) (Place a snapshot of the entire client window area on the Terminal server clipboard and provide the same functionality as pressing ALT+PRINT SCREEN on a local computer.)
• CTRL+ALT+Plus sign (+) (Place a snapshot of the active window in the client on the Terminal server clipboard and provide the same functionality as pressing PRINT SCREEN on a local computer.)
Microsoft Internet Explorer navigation
• CTRL+B (Open the Organize Favorites dialog box)
• CTRL+E (Open the Search bar)
• CTRL+F (Start the Find utility)
• CTRL+H (Open the History bar)
• CTRL+I (Open the Favorites bar)
• CTRL+L (Open the Open dialog box)
• CTRL+N (Start another instance of the browser with the same Web address)
• CTRL+O (Open the Open dialog box, the same as CTRL+L)
• CTRL+P (Open the Print dialog box)
• CTRL+R (Update the current Web page)
• CTRL+W (Close the current window)
宏病毒
宏病毒
是一种寄存在文档或模板的宏中的计算机病毒。一旦打开这样的文档，其中的宏就会被执行，于是宏病毒就会被激活，转移到计算机上，并驻留在 Normal 模板上。从此以后，所有自动保存的文档都会“感染”上这种宏病毒，而且如果其他用户打开了感染病毒的文档，宏病毒又会转移到他的计算机上。
什么是宏病毒
宏病毒是一些别有用心的人，利用Microsoft Office的开放性，即Word中提供的VBA编程接口，专门制作的一个或多个具有病毒特点的宏的集合。其特点是传播极快、制作变种方便、破坏性极大。
大多数宏病毒中含有自动宏或对文档读写操作的宏指令，以BFF（Binary File Format）的加密压缩格式存放在.doc或.dot文件中，每种Word版本格式可能不兼容。
目前发现的几种主要宏病毒有：Wazzu、Concept、13号病毒、Nuclear、July.killer(又名“七月杀手”)。
宏病毒是通过DOC文档及DOT模板进行自我复制及传播。DOC文件被宏病毒感染后，它的属性必然会被改为模板，而不是文档 (尽管形式上其扩展名仍是DOC)。一旦打开这样的文件，宏病毒就会被激活，转移到计算机上，并驻留在 Normal 模板上。从此以后，所有自动保存的文档都会“感染”上这种宏病毒。
查杀宏病毒
因为每个版本的Word BFF格式不完全一样，所以宏病毒在不同版本的Word中被压缩的格式和存放的位置都不同，所以，用杀毒软件杀除宏病毒，关键是杀毒后要能正确、安全地恢复文件参数。
笔者目前使用的是KV300杀毒软件，它的解毒方法有两种。
方法1：在Windows环境下执行kvw3000.exe，任选一可能存在宏病毒的子目录进行查杀。KV300在查出病毒后，为了安全起见，先将其扩展名改为.kv，然后再将原文件中的病毒杀除。
方法2：在DOS环境下，用干净的Windows 98系统软盘引导机器，运行KV300，出现主菜单后，按下可能存在宏病毒的盘符键，就会对宏病毒自动清除，精确地恢复了文件的参数，文件可正常地打开。
当你遇到来历不明的word文档提示有宏存在时,先用杀毒软件查杀一下,不可贸然打开,千万千万,切记切记
一、宏病毒的原理
病毒WORD/EXCEL宏病毒的特性较为相似，因此我们仅以WORD宏病毒为例，说明宏病毒的作用、传染以及发作的机理和特性。
宏病毒的产生，是利用了一些数据处理系统内置宏命令编程语言的特性而形成的。这些数据处理系统内置宏编程语言的存在使得宏病毒有机可乘，病毒可以把特定的宏命令代码附加在指定文件上，通过文件的打开或关闭来获取控制权，实现宏命令在不同文件之间的共享和传递，从而在未经使用者许可的情况下获取某种控制权，达到传染的目的。目前在可被宏病毒感染的系统中，以微软的Word、Excel居多。
二、宏病毒的作用机制
以Word为例，一旦病毒宏侵入WORD，它就会替代原有的正常宏，如FileOpen、FileSave、FileSaveAs和 FilePrint等等，并通过这些宏所关联的文件操作功能获取对文件交换的控制。当某项功能被调用时，相应的病毒宏就会纂夺控制权，实施病毒所定义的非法操作，包括传染操作、表现操作以及破坏操作等等。宏病毒在感染一个文档时，首先要把文档转换成模板格式，然后把所有病毒宏（包括自动宏）复制到该文档中。被转换成模板格式后的染毒文件无法转存为任何其它格式。含有自动宏的宏病毒染毒文档，当被其它电脑的WORD系统打开时，便会自动感染该电脑。例如，如果病毒捕获并修改了FileOpen,那么，它将感染每一个被打开的WORD文件 。目前，几乎所有已知的宏病毒都沿用了相同的作用机理，即如果WORD系统在读取一个染毒文件时遭受感染，则其后所有新创建的DOC文件都会被感染。
三、宏病毒的主要类型
有些宏病毒对用户进行骚扰，但不破坏系统，比如说有一种宏病毒在每月的13日发作时显示出一5个数字连乘的心算数学题。有些宏病毒或使打印中途中断或打印出混乱信息，如Nuclear、Kompu等属此类。有些宏病毒将文档中的部分字符、文本进行替换。但也有些宏病毒极具破坏性，如MDMA.A，这种病毒既感染中文版Word，又感染英文版Word，发作时间是每月的1日。此病毒在不同的Windows平台上有不同的破坏性表现，轻则删除帮助文件，重则删除硬盘中的所有文件。另外还有一种双栖复合型宏病毒，发作可使计算机瘫痪。
四、宏病毒的预防与清除
1、预防
①将常用的Word模板文件改为只读属性，可防止Word系统被感染；DOS下的autoexec.bat和config .sys文件最好也都设为只读属性文件。
②因为宏病毒是通过自动执行宏的方式来激活、进行传染破坏的，所以只要将自动执行宏功能禁止掉，即使有宏病毒存在，但无法被激活，也无法发作传染、破坏，这样就起到了防毒的效果。可以使用下面命令行来使所有自动宏无效：winword.exe/mDisableAutoMacros
2、清除
①手工：以Word为例，选取“工具”菜单中“宏”一项，进入“管理器”，选取标题为“宏”的一页，在“宏 有效范围”下拉列表框中打开要检查的文档。这时在上面的列表框中就会出现该文档模板中所含的宏，将不明来源的自动执行宏删除即可。
②使用专业杀毒软件：目前杀毒软件公司都具备清除宏病毒的能力，当然也只能对已知的宏病毒进行检查和清除, 对于新出现的病毒或病毒的变种则可能不能正常地清除，或者将会破坏文件的完整性，此时还是手工清理为妙。
本节介绍几种常见的宏病毒。
13.2.1 Concept 病毒（又称Prank）
当第一次发现Word 感染该病毒时，会出现一个对话框，对话框中的文本只有一个“1”，按钮也只有一个“OK”键（在中文环境中为“确定”键）。病毒加载之后，就会修改【文件】菜单的【保存】命令所代表的宏，然后在每次保存文件的时候，就会将病毒保存到文件中。
受此病毒感染后，所编辑的文档只能按模板格式保存。Concept 病毒不会造成文件数据丢失。其症状是Word 的Normal 模板中会出现两个名字为AAAZAO 和AAAZFS 的宏命令，如图13-1 所示。另外还有一个PayLoad 宏，该宏只包含一句话“这足以证明我的观点（That’s enough to prove my point.）”，而不做其他事情。
虽然Concept 在这个宏里面没有包含任何内容，但是任何一个对宏有一定了解的人都可以修改这个宏，做一些可怕的事情，例如删除某些文件，修改磁盘上的一些关键参数或生成另外的一个更可怕的病毒。因此，虽然可以认为Concept 是良性病毒，但是必须注意，它随时都可以变成恶性病毒（这也是其他病毒发展的必然过程）。
13.2.2 Nuclear 病毒
该病毒会对文档打印功能造成破坏，并会破坏MS-DOS 系统文件。感染该病毒后，Word 的Normal 模板将出现以下宏命令：AutoExec、 AutoOpen、DropSuriv、FileExit、FilePrint、FilePrintDefault、 FileSaveAs、InsertPayLoad、PayLoad，如图13-2 所示。
Nuclear 宏病毒可能造成以下危害：
（1）如果在任何时间的55~57 秒之间操作文件，病毒会在打印的文档上加入“STOP ALL FRENCH NUCLEAR TESTING IN THE PACIFIC （停止法国在太平洋的所有核试验）”这句话。
（2）如果在下午5 点~6 点（系统时间）打开感染了Nuclear 病毒的文件，这台计算机将被PH33R 病毒感染，PH33R 病毒会产生一个 DOS 驻留程序。
（3）每年4 月5 日，Nuclear 病毒会将计算机中的IO.SYS 和 MSDOS.SYS 两个文件的长度置为零，并删除COMMOND.COM 文件，使 DOS 无法启动。
13.2.3 DMV 病毒
该病毒与Concept 病毒类似，使Word 中的【另存为】命令无效
13.2.4 宏病毒的一些变种
从第一个宏病毒Concept 诞生到1998 年底，Word 宏病毒已经出现了几千个变种，其中不少是恶性病毒，但是万变不离其宗，所有的病毒都需要在宏里面增加一个名字为“AutoLoad”的宏，下面介绍一些另外常见的宏病毒。
1. Alliance
感染.DOC 和.DOT 文件，仅在每月的2、7、11 和12 日感染和复制，并且屏幕显示一个信息窗，提示用户已感染病毒。
2. Boom
感染德文板的MS Word 软件的.DOC 和NORMAL.DOT 文件，每年的 3 月13 日13 时13 分13 秒发作，发作时胡乱更改菜单，显示政治笑话。
3. Clock：DE
感染德文板的MS Word 软件，在每月的1、2、13、21 和27 日，每个整点过后的5 分钟发作，发作时将文件打开和存取功能交替颠倒，并产生混乱。
4. Concept.F
基于Concept 病毒原型的宏病毒，病毒经过自身加密，在每月的 16 日发作，发作时分别用“，”、“e”和“not”替换文本中所有的“.”、“a”和“and”，并且屏幕显示一个信息窗，提示用户已感染病毒。
5. Concept.L
感染.DOC 和.DOT 文件，每月的17 日发作，发作时将删除“C：” 根目录下的有关文件，并且屏幕显示一个信息窗，提示用户已感染病毒。
6. Helper
感染.DOC 和.DOT 文件，在每月的10 日发作，发作时所有经过打开和创建操作后关闭的文件将被设置一个加密口令。
7. Kompu
该病毒是一个使用了加密、隐性技术的宏病毒。感染.DOC 和.DOT 文件，在每月的6 日和8 日发作。发作时在屏幕上显示一个信息窗，提示用户输入口令，用户必须输入“KOMM”以关闭此窗口，否则，病毒将通过打印机打印出混乱的信息。
8. MDMA.A
每月的1 日发作，可感染多种操作系统（Windows、Windows 95、 Macintosh 和Windows NT），在Windows 3.x 下发作时，会在 AUTOEXEC.BAT 文件中加入“deltree /Y C:”的恶意指令，后果严重。
9. MDMA.C
上述病毒的一个变种，每月的20 日后的任何一天都可能发作，可感染Windows、Windows 95 和Windows NT，设置密码口令，删除 C:\Windows\system\*.CPL 文件。
10. Nuclear.B
有三种可能的发作方式：
（1）4 月5 日，删除Command.com 文件。
（2）17~18 日使用，释放一个DOS 的可执行文件病毒PH33R.1332。
（3）在某时某分的54~59 秒间打印文件时，将会加入下面一行文字：“STOP ALL FRENCH NUCLEAR TESTING IN THE PACIFIC（停止法国在太平洋的所有核试验）”。
11. Phardera
发作时屏幕显示一个信息窗，干扰用户正常工作，同时从【工期】菜单中删除【宏】和【自定义】命令，阻碍用户手工杀毒。
12. Saver:DE
德文版宏病毒，4 月21 日发作。
13. Taiwan.Theatre
双字节宏病毒，每月的1 日发作，破坏系统硬盘数据。
14. TW-No.1（台湾1 号）
每月的13 日发作，发作时在屏幕上显示一个窗口，要求用户做4 位数连乘，若做错，将连续打开窗口，让用户继续做题，由于系统资源不断消耗，系统运行速度将越来越慢。
重装XP系统之前 必须进行的备份
杀毒软件病毒库的备份
即便是号称目前最稳定的操作系统，WinXP也会由于各种天灾人祸，如软件损坏、病毒侵袭、黑客骚扰，甚或是我们自己的误操作而造成崩溃的危险在时刻威胁着我们。系统崩溃或产生了重大错误以后，最好的办法就是重装系统，但是，在重装之前，我们首先应该做哪些工作呢?大家一定会说:“备份!”然而，我们应该备份哪些东西呢?
本人因为很多原因也重装过好多次系统，这次给大家例举出来，希望给大家备份的时候提个醒，别忘了重要数据。
一、病毒库的备份
1.卡巴的备份
1、Kaspersky（一直都很喜欢它）
（1）卡巴5.0
病毒库位置在“系统盘:Documents and SettingsAll UsersApplication DataKaspersky Anti-Virus Personal5.0Bases”下，重装系统前备份到别处，重装后在卡巴的“设置－配置－更新－更新类型”中选择“从本地文件夹”（备份文件夹）就可以升级到原来的病毒库了。
（2）卡巴6.0
一般情况下，卡巴的病毒库放在此文件目录里：C:Documents and SettingsAll UsersApplication DataKaspersky Lab 只需要把AVP6备份到其他的盘（Application Data文件夹的属性是隐藏，要修改才能找到），然后在还原或重装后，把你备份AVP6覆盖到这个目录下就可以了。（注意关掉卡巴的自我保护，否则有可能不能复制进去）。然后退出卡巴，再进入卡巴，他会提醒你重新启动电脑以完成更新，这样就可以方便的把以前更新过的病毒库再直接使用（记得开启“自我保护”）！若不按以上内容备份，那你的病毒库将被还原在你以前设还原点的那个地方，你将重新更新病毒库，时间会长些！
顺便说一下：卡巴斯基dmp文件是由于卡巴斯基程序中断后生成的临时文件，可以放心删除，丝毫不影响使用。
2、Norton Antivirus
病毒库位置在“系统盘:Program FilesCoMMon FilesSymantec SharedVirusDefs”下，备份里面最新的一个以时间命名的文件夹，重装系统后，将备份文件夹copy到“系统盘:Program FilesCommon FilesSymantec SharedVirusDefsincoming”下，重新启动Norton即可。
3、McAFee（现在用的人也不少啊）
病毒库位置在“系统盘:Program FilesCommon FilesNetwork AssociatesEngine”目录中，备份其中的三个dat文件，重装系统后，将这三个备份的dat文件copy回“系统盘:Program FilesCommon FilesNetwork AssociatesEngine”目录，重启即可。
4、瑞星
备份：“工具－制作硬盘安装备份”，选择好目录即可备份正在使用的版本，重装后，打开备份目录，运行其中的“setup.exe”就能恢复到重装前的最新版本。
5、KV3000
病毒库在安装目录的Temp目录下，备份该文件夹，重装后，一次选择“工具－设置－升级”，选择“从局域网升级”，选择备份的目录，点“立即升级”即可。
6、金山毒霸
病毒库在安装目录的“UPDATE”文件夹中，备份该文件夹，重装后，一次选择“在线升级－从本地、局域网升级”，选择备份的文件夹即可。
系统注册表的备份
二、备份注册表
注册表中存放着计算机的所有设置和各种软硬件的注册信息，所以它的重要性是不言自明的，因而及时备份注册表是一项极其重要的工作。备份方法很简单， 只需在“运行”对话框中输入“Regedit”并回车，然后在“注册表编辑器”中选择“注册表”菜单下的“导出”命令就行了，当然别忘了将这个备份的注册 表文件存放在非系统分区中。或者直接将C:Windows目录中的User.dat和System.dat两个文件复制出来也能达到备份注册表的目的。
好多软件的注册表内容在HKEY_CURRENT_USERSoftware和HKEY_LOCAL_MACHINESoftware之下,具体情况请大家仔细查找，不再详细谈，提醒一下，因为注册表比较复杂，希望不是很懂的人不要随便乱动！
其实像我们这一类的用的大多数都是盗版软件，就没有这个必要了，当然了，如果你花了好多钱买了正版软件，千万要记住他的CD-KEY啊！
三、备份驱动程序
重装WinXP系统后，就需安装各种硬件的驱动程序，而查找、安装各类显卡、声卡的 驱动实在是一大麻烦，如果丢失了驱动光盘，那更会让我们急得如“热锅上的蚂蚁”一般。此时，“驱动程序备份专家”就能帮助我们解决这个问题，它可以快速检 测计算机中的所有硬件设备，提取并备份硬件设备的驱动程序。它还附带了一个INF脚本安装器，可以简化硬件设备的安装过程，当我们需要重新安装WinXP 系统时，这些提取出来的驱动程序将派上大用场。
“驱动程序备份专家”的操作非常简单，只需在其主界面中点击“快速收集”按钮，选择某个硬件设备后点击“备份”按钮，再指定备份文件的存放路径及文 件名，点击“开始”按钮就行了。而如果想更快捷地备份全部的驱动，那么就可以依次点击“快速收集”、“备份全部”按钮，这样，系统中所有的驱动就将被全部 “克隆”出来。需要提醒的是，在备份全部驱动的过程中，请不要按任何键或按钮。
本人用的windows优化大师，也有这个功能。
四、备份邮件帐号
许多上网的朋友都拥有多个邮件帐号，对于它们的备份工作，我们可以借助于注册表，在注册表中依次展开到HKEY_CURRENT_USERSoftwareMicrosoftInternet Account ManagerAccounts分支，如果OE中有五个邮件帐号，那么在Accounts键下就会有00000001～00000005五个子键(如图 3)。点击“Accounts键，在菜单中选择“注册表-导出”命令，在“导出范围”中选择“选择的分支”，输入备份文件名，按“确定”按钮即可将它们备 份出来。
五、备份个人资料
勿庸置疑，个人资料是计算机用户最重要的数据，它包括个人文件、下载资料、个人邮件、OICQ或ICQ数据等。
尤其是“我的文档”。关于个人上论坛的用户名和密码，各自要保护好哦~~
对于个人文件、下载资料的备份来说，我们只需将它们复制到硬盘的非系统分区或刻录到光盘等地方就行了。
对于个人邮件的备份来说，如果使用的是Outlook Express，那么，就应该将“C:Documents and SettingsUser nameLocal SettingsApplication DataIdentities{数字串}MicrosoftOutlook Express”目录中的“收件箱.dbx”和“发件箱.dbx”两个文件复制到非系统区。
当然，最好是平时就将邮件位置自定义到其它地方，具体的步骤是:依次单击“工具”-“选项”-“维护”-“存储文件夹”，改为希望备份的邮件目录即可。而对于备份Fox mail邮件来说则比较简单，只需将Fox mail安装目录下的Mail子目录中的文件复制到非系统区就行了。
至于QQ，个人觉得在安装的时候，别放在C盘，因为这一类的软件复制过来就能用，重装了只要新建一个快捷方式即可，像这一类的软件还有TTplay（千千静听），KMplay，WINrar，kugoo（酷狗），bitcomet（bt软件）。
IE收藏夹已经个人数据的备份
六、备份IE收藏夹
IE收藏夹中的BOOKMARKS存放在X:Documents and Settings用户名Favorites目录中的许多URL链接，把它们复制出来即可完成备份工作，而当重新安装好系统后再将其复制到原来的目录下即可完成恢复。除此以外，我们还可以利用IE的“导出”功能、改变收藏夹存放路径来实现备份。
利用IE的“导出”功能:当您整理完收藏夹后，选择IE“文件”菜单下的“导入和导出”命令，点击“下一步”按钮后，选择“导出收藏夹”项，再次点击“下一步”按钮，然后按照提示输入备份文件存放的路径及文件名即可。
改变收藏夹存放路径:在注册表编辑器中展开到HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerShell Folders分支，在右窗口中找到“Favorites”键值项，双击它后，在“数据数值”中输入“E:favorites”即可。这样，以后收藏夹中的内容都存放到了E区中(如果E区是非系统区)。
七、备份系统分区
备份系统分区，一个是用Ghost备份整个系统盘，另外一个方法是使用WinXP自带的“系统还原”功能来备份。这些方法以及应注意的问题在好多论坛的帖子里都有所述及，这里就不赘述了。
有了以上各个方面的备份工作，相信广大的计算机用户对于“系统崩溃”就再也不会“胆颤心惊”了!为了系统的安全，也为了每个人的心血，请做好数据的备份工作，未雨绸缪，防患未然。
最后想说一下关于：如何备份WinXP系统升级补丁
再网上搜了一下，方法不是非常的爽，可能有点勉强，不过可以试试：
可以尝试使用一些小软件来帮助升级和备份系统补丁。推荐你使用WUtool这个软件可以帮助你安装和备份系统补丁，而且使用很简单。软件可以http://www.onlinedown.net/soft/21882.htm下载。（如果地址失效了，可以搜索一下）这里简单说一下这个软件的使用方法，安装完成后软件会自动打开Microsoft Windows Update，你按照以往的方法按部就班的进行升级，Microsoft Windows Update下载完成后，在进行安装时选择“取消”，然后进入WUtool的安装界面。选择“File→Install updates→All Enabled”，即可自动安装所有更新程序。也可以选中要安装的程序，在右键菜单上选择“Install→Selection”，进行逐一安装。 而刚才下载的补丁文件则可以在C:Documents and SettingsAdministratorMy DocumentsWUtooLWUtooL_files文件夹中找到。
第二种方法：妙用Windows Update加快系统升级速度
如果你是局域网用户，且局域网中的某台电脑已经更新到最新状态，那么可以在这台电脑的“%systemroot%Windows” 下找到“Windows Update.log” 文件(“%systemroot%”为系统安装的盘符，一般为“C:”)，用记事本打开该文件 ，可以看到里面包含了所有更新过的程序记录，其中格式形如http://download.windowsupdate.com/msdownload/update.../耸.exe”的链接就是补丁程序的下载地址。新建一个文本文件，命名为“Update.lst”，再将日志中记录的下载地址按照每行一个地址的格式复制到该文本文件中，启动FlashGet下载工具，点击“文件→导入列表”命令，选择“Update.lst”即可。当任务全部下载完成后，按照日志中记录的顺序(通常是从上往下)逐个双击并安装补丁即可。
如果是单机用户，先点击“开始→Windows Update”命令，然后在打开的页面左边列表中点击“扫描以寻找更新”，再点击“复查并安装更新”查看需要更新那些补丁。接下来再点击“立即安装”按 钮，当出现开始下载补丁的对话框后，选择“取消”,接下来就可以在资源管理器中找到“%systemroot%Windows”目录下的“Windows Update.log”文件了!再按照以上所说的方法将补丁程序下载并安装即可。
其实，当系统自动更新完毕后，那些补丁程序已经下载到本地磁盘的临时文件夹中了，具体的位置在“Windows update.log”日志文件中也有记录，如果没有删除这些文件，就可以根据所记录的临时文件夹找到这些补丁程序。