Search This Blog

Showing posts with label Device manager. Show all posts

Speeding Up System Boot - What Hardware Devices should I Disable ?

Each user uses (or doesn't use) devices differently,depending on the system setup. Nonetheless, some classes of devices are more commonly disabled than others.Knowing which ones will help you make a decision as to what devices you should disable.The following classes of devices are frequently disabled:

To quickly determine the status of a device, check out the icon next to its name. All devices that are disabled have a red X over the icon. All devices that have a question mark or an explanation point on them are not set up correctly or are having problems. All devices with none of the above additions to the icon are runningññand doing so without any problems.
Network Adapters
Especially on Notebook computers,there are often more than one network device. Disabling the network devices that you do not use will definitely save you some booting time.

Fire wire
If you have 1394 connections,otherwise known as fire wire,you might consider disabling them. Unless you are using your fire wire port to connect your digital
video recorder to your computer,or have other external fire wire devices,you have no need to have this device enabled.

Modems
Do you have a broadband connection? If so,then consider disabling your modem. If you rarely use it,disable it. If you ever need to use it again,just re-enable it.

Multimedia devices
Your computer has lots of multimedia devices. Take a look at the
ìSound,video,and game controllersîsection in Device Manager. You will find a lot of device drivers that are loaded during your boot.Some are used by all users,but others will find a few that they do not use.For example,I do not use my game port or my MIDI device,so I disabled both of those.

PCMCIA
If you are a laptop user,consider disabling your PCMCIA card controller, located under ìPCMCIA adapters."The PCMCIA (Personal Computer Memory Card International Association ) slot is a special expansion slot that is rarely used today on laptops except for wireless and wired network cards and card reader attachments for compact flash and other solid state memory cards.Most laptops now have built-in network adapters and some even have built-in wireless adapters.If you do not use your PCMCIA adapter, it is yet another device that can be safely disabled.
Caution
Do not disable any hardware devices that are located under the Disk Drives, Computer, Display Adapters, IDE Disk Controllers, and the System sections (except for the system speaker) because these hardware devices are critical to the operation of your computer.

Manual Removal of Syshosts.exe

Syshosts.exe (W32.MyDoom.Y/Worm)
This is a virus detection. Viruses are programs that self-replicate recursively, meaning that infected systems spread the virus to other systems, which then propagate the virus further. While many viruses contain a destructive payload, it's quite common for viruses to do nothing more than spread from one system to another.
Damage Level : Low/Medium
Distribution Level: Unknown
Aliases:
Email-Worm.Win32.Mydoom.w (Kaspersky Lab) is also known as: I-Worm.Mydoom.w (Kaspersky Lab), W32/Evaman.gen@MM (McAfee),   W32.Mydoom.Y@mm (Symantec),   Win32.HLLM.MyDoom.39936 (Doctor Web),   W32/MyDoom-Y (Sophos),   Win32/Evaman.C@mm (RAV),   WORM_MYDOOM.GEN (Trend Micro),   Worm/Mydoom.W (H+BEDV),   W32/Mydoom.X@mm (FRISK),   Win32:Mydoom-V (ALWIL),   I-Worm/Mydoom.Y (Grisoft),   Win32.Evaman.D@mm (SOFTWIN),   Worm.Mydoom.Z-unp (ClamAV),   W32/Mydoom.AA.worm (Panda),   Win32/Evaman.D (Eset)

Kaspersky Tool:
Email-Worm.Win32.Mydoom.w Removal Download
BitDefender/Softwin Tool:
Win32.Evaman.A@mm Removal Download

File Not Found!!
Manual Removal Instructions
Recommend Removal from Safe Mode:
How to Start in Safe mode:
Restart your Computer, Press F8 Repeatedly, when your Screen turns on, Select Safe mode, press enter.

The Infected Files Can be Seen in these folders and names also Running in Tasks
End the Following Active Process Before Removal

  • %system%\wintasks.exe
  • %system%\MyNameIsEva 
  • %system%\syshosts.exe
If you have any of these files in running process from task manger, end the process before removal.
Note: if task manager is disabled, Download the following file,Click to Download - Enable Registry.reg
Manually Remove From Registry
Click Start, Run,Type regedit,Click OK.
Note: If the registry editor fails to open the threat may have modified the registry to prevent access to the registry editor. Download and run this UnHookExec.inf, and then continue with the removal.

  • HKEY_LOCAL_MACHINE\ Software\Microsoft\Windows\CurrentVersion\Explorer\Wintasks,
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Wintasks,
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\wintasks.exe and the value %SYSTEM%/wintasks.exe.
Search Registry For Virus File Names listed above to remove completely,
Edit Menu - Find
, enter Keyword and remove all value that find in search
.
Recommended Removal Tools:
Kaspersky Antivirus or Internet Security (Shareware)
Spyware Doctor (Shareware)
AVG Antivirus (Freeware)
Killbox (Freeware)

Manual Removal of Java.exe

Java.exe (Java)
The process called java.exe, is used to run programs written in the Java language. Terminating this process will end any java programs that are running at the time. If you find that it is causing problems from your system, you should terminate it.java.exe is an application that does NOT appear to be a security risk.
The Process Server database currently registers java.exe to Sun Microsystems.
This is part of Java Runtime. java.exe is related to javaw.exe, jucheck.exe, jusched.exe,
Whenever you have a concern about a file like java.exe, feel free to visit our Anonymous Surfing section to help verify your file you are not giving away too much personal information.
The Process Server database is updated often, but inaccuracies may still exist, often caused by viruses named after valid files such as Java. Always verify your results just to play it safe.

Damage Level: Low
Distribution Level: High

Manual Removal Instructions
Recommend Removal from Safe Mode:
How to Start in Safe mode:
Restart your Computer, Press F8 when your Screen turns on, Select Safe mode, press enter.


The Infected Files Can be Seen in these folders and names
Kill the following processes and delete the appropriate files:
Win32.MyDoom.M@mm Free Removal tool

Presence of the following registry key:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\JavaVM
with the following value:
%WINDIR%java.exe


Presence of the following files:

%WINDIR%java.exe
%WINDIR%services.exe


The port 1034 is listening for incoming connections.
This is an internet worm that spreads trough e-mail. When it is run it adds the following registry key:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\JavaVM
%WINDIR%java.exe


It copies itself to %WINDIR%java.exe
where %WINDIR% is a variable representing the Windows directory.


It drops the following file: %WINDIR%services.exe, that is detected by BitDefender as Backdoor.Mydoom.M


It tries to terminate some programs that have windows with the following names: rctrl_renwnd32, ATH_Note, IEFrame.

Close Registry Editor.
Restart your PC.

Recommended Removal Tools:
Kaspersky Antivirus or Internet Security (Shareware)
Spyware Doctor (Shareware)
AVG Antivirus (Freeware)
Hijackthis (Freeware)

Remove Hidden Devices, Drivers, using Device Manager

How to display the hidden devices in system Device Manger?
Normally windows device manager displays the information about the hardware that ever been recognized by windows, whether it is currently present in the computer or not connected to the computer (for example USB or any other removable devices). The "Show hidden devices" option on View menu would not display the all hidden information, so you can force your system to display the detail of all hidden drives.

First you should log onto your computer with administrative rights.

Then Click Start button and type CMD in Run option then press Enter for next.

At the command prompt, type the following command and press Enter button.

set devmgr_show_nonpresent_devices=1

Then again type the following command at command prompt and then press Enter button.

start devmgmt.msc

Now in the Device Manager Console go to View menu and select the "Show hidden devices" option.

Then You are able to view the hidden Devices..

Now expand the different devices and drivers option in devices manger and you will find the devices which have been loaded in the past.

When you finish troubleshooting, close Device Manager and also exit from command prompt to clear the opened sessions.

Hopes This will help Some Body..

More Posts that you may be interested...