6. Caution when enabling the Windows Firewall and UAC
Risk: 3 Benefit: 4
The Windows Firewall and User Account Control (UAC) are protective functions of Windows that are active by default. The firewall has two roles: it prevents unsolicited requests are processed from the web to your computer. They also report any new application that wants to build an Internet connection. Analog UAC prevents Vista from messing with system settings, applications and files. Should an application need these rights, however, integrates the programmer a special control file (manifest) in its application. The manifest file then ensures that the UAC demands from you a confirmation so that the tools actually receive full access to your system.
Confirmation tide: The problem with such protection tools that many users rely blindly on them and totally refrain from further protective measures (updates, antivirus, Brain 1.0). Equally serious are the many confirmation dialogs: If every new tool that you want to use either the UAC or the firewall starts, click eventually annoyed just click on “OK” – and all the protection mechanisms are embedded waste.
Remedy: Take virtually any request from UAC and firewall seriously. You can count but not on the infallibility of these tools or any other protection program. How safe is your PC depends primarily on your own code: you need to know what you are doing and what consequences it can have. Tools you can basically only support.
7. Take care when loading files with a double
Risk: 4 Use: 5
Files on Windows next to the name or an extension, usually with three characters that defines this file type. For example, a file with the EXE is executed as directly, DOC is a Word document, MP3, an audio file and so on. All these and many other enhancements are in the registry so that Windows knows which application for a corresponding file is competent. From the user Windows hides file extensions for known file types by default.
Files under a false flag: The “Love Letter” virus has the peculiarity of Windows beginning of the millennium taken advantage of in order to fool users a harmless text document, in which is, in fact a malicious script. The trick is so simple and effective. The file “two” endings or about “Love Letter For YOU.TXT.vbs. The actual ending VBS, the system default not displayed because it is the known file type “Visual Basic Script is. The harmless TXT contrast appears in the Explorer. The user feels safe, and clicks it takes to execute the malicious script.
Solution: If your Windows does not show extensions, you should be immediately suspicious if you do get even a browse. Alternatively, you can display all entries display. Do this, open the Tools, Folder Options, View “(XP)” Organize, Folder and Search Options, General “or (Vista) and disable the click box before” Hide extensions for known file types “. Some specific file types are due to a registry flags but never shown. This applies, for the PIF may contain dangerous (Program Information File for DOS applications), which, although used as a shortcut, but any machine code that runs when you double. Who really wants to see everything, must be in the registry under “HKEY_CLASSES_ROOT PifFile” (and further, for example lnk shortcut files) eradicate the “NeverShowExt.
8. Be careful when encrypting the Windows Logon database
Risk: 5 Benefits: 2
The Windows Syskey.exe own program offers the option of a key file for the boot to save to disk. Each time you start it must be floppy in the drive, otherwise Windows cannot decrypt the password database. If your PC but do not have a floppy drive A, can be broken off Syskey not more – and you are no longer on your system.
Syskey pitfall: If Syskey in the absence of drive A: insisting that you have something to drive A: may not forcibly exit the program via Task Manager. At this time, the password database is encrypted namely already (!), and without a key-disk you can no longer log.
Remedy: You must absolutely Syskey times a drive A: present . The easiest way to enter in the command prompt (cmd) command subst a:% temp% and confirm the following Syskey dialog with “OK”. Immediately after that call Syskey once again to bring back the option “save startup key locally” and confirm. It is best to dispense with the outdated Syskey (which is still included in Windows 7). However, if you are already tapped into the Syskey trap and shot down the program with Task Manager, you must write back before rebooting a system restore or system checkpoint. Otherwise, only helps to restore a previously backed up registry. This is from a rescue system such as Bart PE and Vista PE (part of a full-fledged Vista DVD).
For all synchronization tool should be prior Minutes pass.
9. Beware of killer classic commands
Risk: 5 Benefits: 4
Experienced users will know and appreciate these useful command line commands. In most cases, however, that the more powerful a command, it is potentially more dangerous, too. And even professionals are not immune to breakdowns.
Diskpart: Where do you use Disk Management to an – thoughtful – set limit, you need the powerful Diskpart. Just so you get about a hidden partition visible (“attributes volume clear hidden”) or remove an exotic file system (“clean”). (“Select”) If you catch the wrong partition, the tool certainly has a devastating effect – all data is gone.
Mountvol: A command like “Mountvol d: / d” is entered quickly. The D: drive is logged to the system. Who is wrong and the letter indicates the system partition, receives no warning and experience the disaster: Windows XP or Vista is slowly dying away under the surface. Although the desktop works out long and colorful splendor, but nothing works: no program call, no start menu item, no context menu, not even shutdown…
Restore points are useless because they are not found. Namely Mountvol has deleted the registry under “HKLM System MountedDevices a small binary value. Competent to repair the damage may have a secondary system (Win PE).
DEL and RD: The command “del / s” and “rd / s” also processed, all subfolders are as efficient as dangerous. ? Am I really the right startup folder “This question should be, in principle twice – not only if you use the commands directly from the command line, but more so in batch files. If there is a folder switch does not work and DEL or RD in the wrong directory romp is extinguished very quickly very much.
Robocopy, Synctoy & Co.: synchronization tools such as Robocopy (“/ me”) and SyncToy 2.0 from Microsoft (“Synchronize” and “Echo”) Copy not only new, delete, but also redundant. The thrust of the tools to safeguard data, since easily turn into its opposite.
Solution: For novice users, we recommend that the Diskpart tool and two Mountvol to touch. “Del / s” and “rd / s” are often essential: If you use the commands and carefully targeted to disappear the data you just really want to get rid. In Robocopy, you should always use the first additional switch / L, in Synctoy the “Preview” option. Both provide a log of all pending actions without realizing it at first. Make sure to Robocopy, that’s the console via the Properties, Layout, Screen Buffer Size “to a few thousand lines can be enabled to view the log from beginning to end.
10. Be careful when encrypting using Encrypting File System
Risk: 4 Use: 5
The versions of Windows XP Pro and Vista Ultimate / Business / Enterprise offer you the option to encrypt comfortable with the “Encrypting File System (EFS) of your private files. When you click in these systems, right-click a file or folder, Properties, General, Advanced, and select “Encrypt contents” checkbox, then Windows sets the first time a key pair for your user account and uses it to encrypt the files. They even recognize EFS-encrypted files only because the file name in Explorer are colored green. Other users can open the data, as long as they do not lose your key, not by an external system.
Risky Encryption: As useful as the EFS encryption is – it carries a significant risk, just make your most important data unusable. If you or your system administrator about your user password with the frequently used command-line command net user <username> <new password> change you cannot open your encrypted files now. The same applies even if the user account is deleted or the system will be installed from scratch. When you click the files you see in the future, only the dialogue “Access denied” – and the means data loss.
Solution: The creation of accounts and passwords, it is always a considered good, stay off action after installing Windows. In an emergency to regain access, you must reset via the control panel applet “User Accounts” your password on the original. To be protected against data loss with EFS, set in addition to always have a recovery agent.
Beware 5 Killer clicks
Killer-Click 1: Wininit.exe in Task Manager End You have on Vista accidentally terminated the Wininit.exe in Task Manager? Tough luck! Vista runs without regard to any unsaved data down immediately. Microsoft has defused potential data Killer now: Windows 7, a warning dialog.
Killer-click 2: <Ctrl> – <A> and <Return> the Explorer
The Well’s on each user at some point: he expresses <Ctrl> – A units in the Explorer (select all) followed by <Return>. Now it all depends on which file was labeled amount and nature of the files are. With some bad luck recovering Windows stops, and forced restart means data loss.
Killer-Click 3: Hasty drag and drop applications
Frivolous drag and drop applications can be fatal: At about determining whether a very large file of unknown type contains readable, seems to offer a drag and drop to Word. Word tries to convert the file. Even if this campaign is about at all: Pre-loaded text in Word may be damaged.
Killer-click 4: Maximum path length exceeding
...
Top 10 most dangerous Windows commands (2)