Table of Contents

Gaming Speed Tweaks

Click start and type msconfig, services.msc or regedit to access most of the options in this section.

The checklist is roughly:

  • Disable unneeded services.
  • Disable indexing and search services.
  • Disable redundant operating system protections (UAC, etc…).
  • Disable themes and fancy operating system graphics.
  • Get rid of the wallpaper in favor of solid colors.
  • Disable page file and add more RAM instead.
  • Change power plan to maximum performance.
  • Remove 3rd party programs in favor of natively bundled software.
  • Remove unnecessary features (such as Windows Games, Media Player, etc…).
  • Optimize the registry using registry cleaners.
  • Move the operating system files to fast storage (SSD, flash, etc…).
  • Switch to 16-bit colors instead of 24.

Using Command Prompt

From a command prompt (cmd.exe), by issuing the following:

bcdedit /set BOOTUX disabled
vssadmin delete shadows /All /Quiet 
Powershell disable-computerrestore -drive c:\
netsh advfirewall set allprofiles state off 
powercfg -H OFF
fsutil behavior set DisableLastAccess 1
fsutil behavior set DisableEncryption 1
fsutil behavior set EncryptPagingFile 0
fsutil behavior set Disable8dot3 1
bcdedit.exe /set {current} nx AlwaysOff

the following actions will be performed:

  • shadow copies will be disabled.
  • computer restore will be disabled on the C: drive.
  • the firewall will be disabled.
  • power management will be turned off.
  • last access times for files will be disabled.
  • encryption will be disabled on the volume.
  • the paging file will not be encrypted.
  • 8.3 file names will be disabled.

Disable Services

A list of services that can be switched to manual for better performance. Note that these disable features such as printing, themes and firewalls and are meant only for a dedicated gaming machine. Some services may not be available depending on the Windows version.

Application Experience
Background Intelligent Transfer Service
Base Filtering Engine
IPHelper
IPsec Policy Agent
IKE and AuthIP IPsec Keying Modules
Offline Files
Print Spooler
Program Compatibility Assistant
Security Center
Superfetch
Themes (Aero will be gone)
Windows Image Acquisition (Cameras and scanners will stop working)
Windows Firewall
Security Center
Secondary Logon
Windows Search
Windows Update
WinHTTP Web Proxy Auto-Discovery
Wireless Zero Configuration (Not needed unless the machine has to connect through wireless)

Disable Core Parking

Core parking enables the operating system to put cores to sleep when they are not being used. Sometimes this procedure is pretty aggressive and may put a core to sleep when it could be used. Disabling the core parking will make sure that all the cores are active at all times.

For each power profile, find:

0cc5b647-c1df-4637-891a-dec35c318583

in the registry using regedit and set both ValueMax and ValueMin to the same value 0.

Disable Paging File

With sufficient RAM, you can disable the paging file. Right click My Computer go to Advanced Properties and Advanced. Set the paging file on drive C to No paging file. Worse than that, move the paging file to a different drive.

Disable Kernel Dumps

Go to System Properties, Advanced and Startup and Recovery and set the Write debugging information to (none).

Enable Write Caching

Right-click the main drive, go to Hardware and select your harddrive and press Properties. Got to Policies and tick both boxes Enable write caching on the device and Turn off Windows write-cache buffer flushing on the device and save.

Use TCP Optimizer

TCP Optimizer is a freeware tool that allows you to tweak your network parameters.

God Mode

God Mode gives you full control over all the settings in control panel.

Create a folder on the desktop and rename it to:

God Mode.{ED7BA470-8E54-465E-825C-99712043E01C}

The name must be exact.

Windows Activation Trojans

These windows updates should be removed in order to avoid WAT:

KB971033

Can be done by going to Control Panel and Remove Windows Components.

To uninstall the update from the command line, issue:

wusa /uninstall /kb:971033 /quiet

Users Auto-Login

For Windows XP, use userpasswords2, for Windows 7 use netplwiz.

Taskbar Shortcuts Folder

Taskbar shortcuts for Windows 7 onward can be found in:

C:\Users\USERNAME\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar

where USERNAME is the username of the currently logged-in user.

Fix Windows Update

If you get "Windows Update cannot currently check for updates, because the service is not running.", then deleting the Windows Update logs from:

C:\Windows\SoftwareDistribution\DataStore\Logs\

May solve the problem.

Restore Windows Files

To restore boot files, overwriting any Windows loaders that may have been installed, run as an Administrator:

sfc /scannow

Batch Script to Insert Values into The Registry

The following batch script will insert a REG_SZ called Test at HKEY_CURRENT_USER\Software\Test with the value Succeeded. The batch file essentially interprets itself as a .reg file and given the Windows Registry Editor Version 5.00 at the beginning will merge the payload with the registry.

This example works for Windows 7, however the line Windows Registry Editor Version 5.00 can be replaced by REGEDIT4 for previous versions of Windows. For adding keys to the registry (generating the payload), it is useful to first create the values using Regedit and then export the .reg file and copy and paste the payload into this script at the bottom.

Windows Registry Editor Version 5.00
 
; @ECHO OFF
; CLS
; REGEDIT.EXE /S "%~f0"
; EXIT
 
[HKEY_CURRENT_USER\Software\Test]
"Test"="Succeeded"

Boot in Safe Mode from Command Line

Run the following command:

bcdedit /set {current} safeboot minimal

in order to boot in safe-mode on the next restart.

In order to boot in safe mode with only networking enabled:

bcdedit /set {current} safeboot network

Finally, to boot back into normal mode, run the command:

bcdedit /deletevalue {current} safeboot

Disable Routing Through VPN Connection

When creating a new VPN connection, Windows assumes that you want to route your entire traffic through the VPN. This may not be desirable, in case you just want to access some services over VPN and the rest of your traffic is meant to go out through your default interface.

In order to prevent Windows from routing through the VPN connection, follow these steps:

  1. click the network icon in the notification area (or go to the network adapter settings from control panel) and then click Connect or disconnect….
  2. right-click the VPN connection and select Properties
  3. click the Networking tab
  4. double-click Internet Protocol Version 4 (TCP/IPv4) to open up the properties window (the same applies to IPv6).
  5. on the main tab, click the Advanced… button
  6. and untick Use default gateway on remote network.
  7. click Ok to apply the settings.

Turn off DEP

Data-execution prevention is a frontend to the processor's NX flag and is turned on by default on Windows XP (and onward) for system executables. However, it seems to interfere with some programs and can be turned off by issuing the command:

bcdedit.exe /set {current} nx AlwaysOff

Turn on Compound TCP

netsh int tcp set global congestionprovider=ctcp

Get Operating System Architecture

wmic os get osarchitecture

Restart Windows from Command Line

shutdown /r

Get Domain Name

To get the domain of a computer, issue the following command:

systeminfo | findstr /B /C:"Domain"

In order to get the domain for the currently logged-on user, issue:

echo %userdomain%

Allow Programs to Bind to Network URLs

In cases where HttpListener is used to listen on an URL prefix, the program has to be started with administrative privileges. However, using the following command, we can whitelist a certain URL such that the program does not have to start in administrative mode:

netsh http add urlacl url=http://+:8080/ user=DOMAIN\user

where:

  • http://+:8080/ is the URL to whitelist (the trailing / is necessary).
  • DOMAIN\user is the user for which to whitelist the URL for.

Note that this command needs administrative privileges.

Programatically Capture Console Close Button

Capturing the console exit buttons can be performed on Windows by importing the SetConsoleCtrlHandler from Kernel32.dll:

        /// <summary>
        ///     Import console handler for windows.
        /// </summary>
        [DllImport("Kernel32.dll")]
        private static extern bool SetConsoleCtrlHandler(EventHandler handler, bool add);
 
        // A delegate for SetConsoleCtrlHandler.
        private delegate bool EventHandler(CtrlType ctrlType);
        // Set to static in order to avoid garbage collection.
        private static EventHandler ConsoleEventHandler;
 
        // An enumerated type for the control messages
        // sent to the handler routine.
        private enum CtrlType
        {
            CTRL_C_EVENT = 0,
            CTRL_BREAK_EVENT,
            CTRL_CLOSE_EVENT,
            CTRL_LOGOFF_EVENT = 5,
            CTRL_SHUTDOWN_EVENT
        }
 
        private static bool ConsoleCtrlCheck(CtrlType ctrlType)
        {
 
            // Perform cleanup.
            // ...
 
            // Wait for threads to finish.
            Thread.Sleep(60000);
            return true;
        }
 
        // Main entry point.
        public static void Main()
        {
            // SetConsoleCtrlHandler supported on Windows 2000 or later.
            switch (Environment.OSVersion.Platform)
            {
                case PlatformID.Win32NT:
                    // Setup console handler.
                    ConsoleEventHandler += ConsoleCtrlCheck;
                    SetConsoleCtrlHandler(ConsoleEventHandler, true);
                    break;
            }
 
            // Rest of the program
            // ...
        }

This is particularly useful when you want to clean up before having the application shutdown. The handler in the code above that takes care of the cleaning is called ConsoleCtrlCheck. Also note that the event-handler ConsoleEventHandler is set to static otherwise the garbage-collector may clean up the delegate before it has a chance to run.

Erase Disk Partitions

Windows lets you create or format partitions when you go to Start→(Right Click)My Computer→Manage and then go to the Disk Management section in the left-hand pane. However, if you are looking to delete all partitions, you will find that you cannot accomplish that and that you must use the DiskPart command-line tool. Note that the DiskPart command-line tool contains a bug in Windows XP which will not let you delete anything and will bail-out with the error:

The selected partition may be neccessary to the operation of your computer, and may not be deleted.

the neccessary misspelling aside, you will need to use at least Windows 7 if you encounter this problem.

The first thing to do is to go to Start→(Right Click)My Computer→Manage→Disk Management and eject the partition (not the drive). This effectively unmounts the partition but leaves the device connected to the system.

Click Start and type Command and you will see Command Prompt in the menu. Right-click the item and select Run As Administrator in order to open a command prompt with administrator privileges.

Next, issue on the command line:

C:\Windows\system32>diskpart
 
Microsoft DiskPart version 6.1.7601
Copyright (C) 1999-2008 Microsoft Corporation.
On computer: JOJO
 
DISKPART>

Next, issue list volumes in order to get a list of volumes:

DISKPART> list volume
 
  Volume ###  Ltr  Label        Fs     Type        Size     Status     Info
  ----------  ---  -----------  -----  ----------  -------  ---------  --------
  Volume 0     D                       CD-ROM          0 B  No Media
  Volume 1         System Rese  NTFS   Partition    100 MB  Healthy    System
  Volume 2     C                NTFS   Partition     63 GB  Healthy    Boot
  Volume 3     E                FAT32  Removable   3823 MB  Healthy
 
DISKPART> 

Now, let us assume that we want to remove all partitions from volume E, we issue select volume E:

DISKPART> select volume E
 
Volume 3 is the selected volume.

We can now list the disks with list disk:

DISKPART> list disk
 
  Disk ###  Status         Size     Free     Dyn  Gpt
  --------  -------------  -------  -------  ---  ---
  Disk 0    Online           64 GB      0 B
* Disk 1    Online         3823 MB      0 B

As we can see, the Disk 0 is the 64GB drive, which is most likely the operating system, and the drive that interests us is Disk 1. So, we issue select disk 1:

DISKPART> select disk 1
 
Disk 1 is now the selected disk.

And we list the partitions with list partitions on Disk 1:

DISKPART> list partition
 
  Partition ###  Type              Size     Offset
  -------------  ----------------  -------  -------
* Partition 1    Primary           3823 MB      0 B

Now, for every partition, we select them with select partition N, where N is the partition number and we execute either clean or delete partition override:

DISKPART> clean
 
DiskPart succeeded in cleaning the disk.

After that, DiskPart can be exited by issuing quit.

Enable Wallaper on Remote Desktop Connections

Usually, this setting should be enabled on the connecting client. Otherwise, you need to connect to the computer that should show the wallpaper and run gpedit.msc, navigate to: Local Computer Policy→Computer Configuration→Administrative Templates→Windows Components→Remote Desktop Services→Remote Desktop Session Host→Remote Session Environment and disable or set the Enforce Removal of Remote Desktop Wallpaper option to Disabled.

Windows Installer Version

If you get the error:

This installation package cannot be installed by the Windows Installer service. You must install a Windows service pack that contains a newer version of the Windows Installer service.

You will need to download the update WindowsXP-KB942288-v3-x86.exe from Microsoft.

Remove Windows 10 Upgrade Trojan on Windows 7

It's that time again where Microsoft chose to advertise its new products at your expense and you get an annoying pop-up telling you to "Get Windows 10". If you are here, you most likely do not want to "Get Windows 10" but you want to put an end to the pop-ups and the icon in your system tray telling you to.

In order to do that, go to the Control Panel and select the Uninstall a program tool. Then, select View installed updates and look for:

KB3035583

You can sort the list by date such that it will be easier to follow the numbers and locate KB3035583. When you find the update, uninstall it by right-clicking and selecting Uninstall.

The next step is to start Windows Update, select Check for updates and then click the "[..] important updates are available" to locate KB3035583. Once found, right-click the update with KB3035583 in the name and select Hide update.

Disable Dial-Home-Device in Windows XP Search Function

The Start→Search function in Windows XP is rigged. It calls home to sa.windows.com which is now provided by AKAMAI. You should be able to block sa.windows.com using any firewall software - note that blocking by hostname is preferred due to the hostname resolving to multiple IP addresses.

Enable Legacy Boot Menu Option for Windows 10

Windows 10 cannot be booted into safe mode by default which is a problem in case you need to solve an issue that cannot be solved in normal boot mode. Nevertheless Windows 10 does have a boot menu but it needs to be activated by issuing the following command from a command-line prompt:

bcdedit /set {default} bootmenupolicy legacy 

Issuing this command can also be performed by booting off a rescue or boot medium such as a DVD or USB stick.

Restore Boot after Moving System Partition

If you use a partitioning tool in order to move a system partition (the one on which Windows resides - usually C:), then Windows will fail to boot since the BCD on the Windows partition will have a stored UUID that will not match the newly moved partition.

In case you have shrunk the Windows system partition (from the end), then this error will most likely not occur. However, if you have freed-up space before the Windows partition, such that the Windows system partition had to be moved, then you most likely will not be able to boot Windows again resulting in stop errors such as 0xc0000225.

To fix this issue, you will need either a bootable USB or DVD of Windows (you can create a bootable USB using Rufus). You would then boot off the bootable USB or DVD and, when the Windows installation starts, select the Repair option. Now, you want to follow the Advanced menus and reach Command Prompt (using the Boot Repair utility will just fail).

With a command prompt open, you have to:

  1. Use the diskpart utility in order to make the Windows partition active. This involves using the select disk diskpart command in order to select your Hard-Drive and then the select volume diskpart command in order to select the Windows partition. Finally, you would issue active that will make the Windows partition active. You can then exit diskpart.
  2. In the command prompt, you can make a backup of the BCD by issuing bcdedit /export C:\boot\bcd.backup - just in case.
  3. Next, either delete the bcd file or, better, rename it to something else: ren C:\boot\bcd C:\boot\bcd.old.
  4. Finally, tell the rescue disk to rebuild the BCD with the command bootrec /rebuildbcd.

You can now exit the command prompt and reboot your machine - Windows should boot fine now.

Enable and Disable Remote Desktop

To enable remote desktop, change the DWORD HKEY_LOCAL_MACHINE→SYSTEM→CurrentControlSet→Control→Terminal Server→fDenyTSConnections to the value 0 (conversely, 1 to disable remote desktop).

Enabling remote desktop also requires that the necessary rules be added to the firewall:

netsh advfirewall firewall set rule group="Remote Desktop" new enable=yes

Enable Administrator Account

Windows has an administrator account that is built-in but is not active. To enable the administrator account, issue:

net user administrator /active:yes

Make sure to remember to change the password for the Administrator account.

Automatic Shutdown

A nice trick is to create a scheduled task that will automatically turn the computer off when it is not being used. This can be accomplished via the built-in Windows task manager without requiring extra software to be installed.

Roughly, the procedure involves using the Windows Task Scheduler application to create a new task and execute shutdown /s /t 0 /f as the SYSTEM user whenever the machine has been idle. Under the covers, the gallery shows that the Task Scheduler executes a task every 5 minutes to check whether the machine has been idle for more than 1 minute. In fact, Windows 7 only updates the idle state every 15 minutes such that the minimal value will not be overridden by these settings.

Associate URLs with Programs

To register a custom URL such as a magnet link to open with an user-specified program, open the registry editor (Start→Run and type regedit), navigate to HKEY_CLASSES_ROOT\Magnet and add the keys shell, open and command in order to create the path HKEY_CLASSES_ROOT\Magnet\shell\open\command. Click on the last key (command) and edit the Default string to point to the program executable plus the link variable, for instance set the value of Default:

"C:\Program Files\Transmission\transmission-qt.exe" "%L"

in order to open magnet links with the Transmission client.

Resolve Unrecognized Bluetooth Devices

Aside from installing the manufacturer's drivers and regardless of Bluetooth device type, Windows may list some devices in Device Manager as Bluetooth Peripheral Device and is unable to install a driver for it.

In such cases, right-click the device in Device Manager and then update the driver by picking the option to select the driver from a list. Select Ports (COM & LPT) as the device type and Microsoft as the manufacturer and install Standard Serial over Bluetooth Link in the model list.

Set Adapter Maximum Transfer Unit (MTU)

Open a privileged command prompt (with Administrator permissions) and issue the command:

netsh int ipv4 show subinterface

then pick one of the interfaces and set the MTU:

netsh int ipv4 set subinterface "Local Area Connection" mtu=9000 store=persistent

Hide Username and Picture from Windows 7 Login Screen

  1. Start gpedit.msc by either navigating to Start→Run and typing in gpedit.msc.
  2. Browse to Local Computer Policy→Computer Configuration→Windows Settings→Security Settings→Security Options and enable the following options:
    1. Interactive logon: Display user information when the session is locked set to Do not display,
    2. Interactive logon: Do not display last user name set to Enabled.

The unfortunate side-consequence is that a blank picture frame will appear in place of the user picture on the login screen. To prevent the blank picture frame from appearing, the file authui.dll in Windows\System32 has to be edited with a Windows resource editor to set height=0 for every instance of the frame.

For Windows 7 (all editions), the following authui.dll file can be used to overwrite the original in Windows\System32:

and, here is the original, un-modified version:

for backup purposes.

Force-Install BootCamp Drivers on PC

The bootcamp drivers will not install on the machine unless the installer detects Apple hardware. To work around the issue, open an elevated command prompt, change directory to where the MSI file BootCamp.msi is located and execute:

msiexec /i BootCamp.msi

The installation should now proceed beyond the unsupported hardware prompt.

Disable and Enable BitLocker from Command Line

To enable bit locker on driveC::

manage-bde -protectors -enable c:

to disable:

manage-bde -protectors -disable c:

Update to add support for TPM 2.0 in Windows 7 and Windows Server 2008 R2

This vaporware is hosted locally and will allow the usage of a 2.0 TPM on Windows 7 without having to downgrade the TPM firmware to 1.2.

Re-Enable SMBv2 Shares and Browsing

KB4480970 released in January 2019 breaks SMBv2 shares: either the computers cannot be browsed or attempting to mount a network share results in the error The handle is invalid.

To remedy the issue, run the command:

reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f

Map Network Drives from Command Prompt

Open a command prompt and issue:

net use Y: \\server\share

to map the share share on the server server to drive Y:.

Conversely, type:

net use Y: /delete

to remove the share.

Note that Windows maps the share under the account that is currently logged-in such that accessing the share from a non-elevated prompt may not allow read or write permissions.

To map a share under a different user on the target server, issue:

net use Y: \\server\share /user:[domain\]username [password] [/persistent:yes]

where:

  • Y: is the network drive to map the share to,
  • server is the computer serving the share,
  • share is the name of the share on the remote server,
  • domain is the domain name,
  • username is the username,
  • password is the password,
  • /persistent:yes can be added to make the share mount on boot.

Attempt to Fix Broken Windows Icons by Deleting Cache

taskkill /F /IM explorer.exe
cd /d %userprofile%\AppData\Local
attrib –h IconCache.db
del IconCache.db
start explorer.exe

Full Recycle Bin Reset

In case the Windows 7 recycle bin on the desktop manifests the following behaviours:

  • the icon seems blank or does not change when the recycle bin is full nor empty,
  • right-clicking the recycle bin on the desktop does not provide any options

then it may be that the Recycle Bin is corrupt and needs fixing.

Attempting Icon Restore

Open Control Panel, search for "Personalization" and select the option to change the desktop icons. Select the Recycle Bin icons, for both full and empty and click the button to restore the default icon.

Open up a command prompt as administrator, then execute the code to remove the icon cache and reboot the machine.

Deleting the Hidden Recycle Bin Folder

Execute in a command prompt with administrator rights:

rd /s /q C:\$Recycle.bin

and restart the system.

Restoring Recycle Bin Registry Keys

Lastly, if nothing else worked, the registry keys may have been deleted or are corrupt, in which case they need to be restored with defaults. Open Notepad, copy and paste the following lines into a file on the desktop named Recycle Bin Restore.reg:

Windows Registry Editor Version 5.00
 
[HKEY_CLASSES_ROOT\CLSID\{48527bb3-e8de-450b-8910-8c4099cb8624}]
@="Empty Recycle Bin verb invocation"
 
[HKEY_CLASSES_ROOT\CLSID\{48527bb3-e8de-450b-8910-8c4099cb8624}\InProcServer32]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,\
  65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,00,00
"ThreadingModel"="Apartment"
 
[HKEY_CLASSES_ROOT\CLSID\{4a04656d-52aa-49de-8a09-cb178760e748}]
@="Recycle Bin Manager"
 
[HKEY_CLASSES_ROOT\CLSID\{4a04656d-52aa-49de-8a09-cb178760e748}\InProcServer32]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,\
  65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,00,00
"ThreadingModel"="Apartment"
 
[HKEY_CLASSES_ROOT\CLSID\{5ef4af3a-f726-11d0-b8a2-00c04fc309a4}]
@="Recycle Bin Cleaner"
 
[HKEY_CLASSES_ROOT\CLSID\{5ef4af3a-f726-11d0-b8a2-00c04fc309a4}\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,\
  65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,33,00,33,\
  00,00,00
 
[HKEY_CLASSES_ROOT\CLSID\{5ef4af3a-f726-11d0-b8a2-00c04fc309a4}\InProcServer32]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,\
  65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,00,00
"ThreadingModel"="Apartment"
 
[HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}]
@="Recycle Bin"
"InfoTip"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,\
  6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\
  00,73,00,68,00,65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,\
  2d,00,32,00,32,00,39,00,31,00,35,00,00,00
"LocalizedString"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,\
  6f,00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,\
  00,5c,00,73,00,68,00,65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,\
  2c,00,2d,00,38,00,39,00,36,00,34,00,00,00
"AppID"=hex(2):7b,00,45,00,31,00,30,00,46,00,36,00,43,00,33,00,41,00,2d,00,46,\
  00,31,00,41,00,45,00,2d,00,34,00,41,00,44,00,43,00,2d,00,41,00,41,00,39,00,\
  44,00,2d,00,32,00,46,00,45,00,36,00,35,00,35,00,32,00,35,00,36,00,36,00,36,\
  00,45,00,7d,00,00,00
"SortOrderIndex"=dword:00000078
 
[HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,69,00,6d,00,\
  61,00,67,00,65,00,72,00,65,00,73,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,35,\
  00,35,00,00,00
"Empty"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,\
  00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,69,00,\
  6d,00,61,00,67,00,65,00,72,00,65,00,73,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,\
  00,35,00,35,00,00,00
"Full"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,\
  00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,69,00,\
  6d,00,61,00,67,00,65,00,72,00,65,00,73,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,\
  00,35,00,34,00,00,00
 
[HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,\
  65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,00,00
"ThreadingModel"="Apartment"
 
[HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell]
 
[HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\empty]
"MUIVerb"="@shell32.dll,-10564"
"Icon"="shell32.dll,-254"
"Description"="@shell32.dll,-31332"
"CommandStateHandler"="{c9298eef-69dd-4cdd-b153-bdbc38486781}"
 
[HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\empty\command]
"DelegateExecute"="{48527bb3-e8de-450b-8910-8c4099cb8624}"
 
[HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex]
 
[HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex\PropertySheetHandlers]
 
[HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex\PropertySheetHandlers\{645FF040-5081-101B-9F08-00AA002F954E}]
 
[HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\ShellFolder]
"Attributes"=hex:40,01,00,20
"HideOnDesktopPerUser"=""
 
[HKEY_CLASSES_ROOT\CLSID\{c9298eef-69dd-4cdd-b153-bdbc38486781}]
@="State of verb Empty Recycle Bin"
 
[HKEY_CLASSES_ROOT\CLSID\{c9298eef-69dd-4cdd-b153-bdbc38486781}\InProcServer32]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,\
  65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,00,00
"ThreadingModel"="Apartment"
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{48527bb3-e8de-450b-8910-8c4099cb8624}]
@="Empty Recycle Bin verb invocation"
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{48527bb3-e8de-450b-8910-8c4099cb8624}\InProcServer32]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,\
  65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,00,00
"ThreadingModel"="Apartment"
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{4a04656d-52aa-49de-8a09-cb178760e748}]
@="Recycle Bin Manager"
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{4a04656d-52aa-49de-8a09-cb178760e748}\InProcServer32]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,\
  65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,00,00
"ThreadingModel"="Apartment"
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{5ef4af3a-f726-11d0-b8a2-00c04fc309a4}]
@="Recycle Bin Cleaner"
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{5ef4af3a-f726-11d0-b8a2-00c04fc309a4}\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,\
  65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,33,00,33,\
  00,00,00
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{5ef4af3a-f726-11d0-b8a2-00c04fc309a4}\InProcServer32]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,\
  65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,00,00
"ThreadingModel"="Apartment"
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}]
@="Recycle Bin"
"InfoTip"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,\
  6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\
  00,73,00,68,00,65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,\
  2d,00,32,00,32,00,39,00,31,00,35,00,00,00
"LocalizedString"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,\
  6f,00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,\
  00,5c,00,73,00,68,00,65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,\
  2c,00,2d,00,38,00,39,00,36,00,34,00,00,00
"AppID"=hex(2):7b,00,45,00,31,00,30,00,46,00,36,00,43,00,33,00,41,00,2d,00,46,\
  00,31,00,41,00,45,00,2d,00,34,00,41,00,44,00,43,00,2d,00,41,00,41,00,39,00,\
  44,00,2d,00,32,00,46,00,45,00,36,00,35,00,35,00,32,00,35,00,36,00,36,00,36,\
  00,45,00,7d,00,00,00
"SortOrderIndex"=dword:00000078
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,69,00,6d,00,\
  61,00,67,00,65,00,72,00,65,00,73,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,35,\
  00,35,00,00,00
"Empty"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,\
  00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,69,00,\
  6d,00,61,00,67,00,65,00,72,00,65,00,73,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,\
  00,35,00,35,00,00,00
"Full"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,\
  00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,69,00,\
  6d,00,61,00,67,00,65,00,72,00,65,00,73,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,\
  00,35,00,34,00,00,00
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,\
  65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,00,00
"ThreadingModel"="Apartment"
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell]
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\empty]
"MUIVerb"="@shell32.dll,-10564"
"Icon"="shell32.dll,-254"
"Description"="@shell32.dll,-31332"
"CommandStateHandler"="{c9298eef-69dd-4cdd-b153-bdbc38486781}"
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\empty\command]
"DelegateExecute"="{48527bb3-e8de-450b-8910-8c4099cb8624}"
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex]
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex\PropertySheetHandlers]
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex\PropertySheetHandlers\{645FF040-5081-101B-9F08-00AA002F954E}]
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\ShellFolder]
"Attributes"=hex:40,01,00,20
"HideOnDesktopPerUser"=""
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{c9298eef-69dd-4cdd-b153-bdbc38486781}]
@="State of verb Empty Recycle Bin"
 
[HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{c9298eef-69dd-4cdd-b153-bdbc38486781}\InProcServer32]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,\
  65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,00,00
"ThreadingModel"="Apartment"
 
[HKEY_CURRENT_USER\AppEvents\EventLabels\EmptyRecycleBin]
@="Empty Recycle Bin"
"DispFileName"="@mmres.dll,-5831"
 
[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin]
 
[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\.Current]
@="C:\\Windows\\media\\Windows Recycle.wav"
 
[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\.Default]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,00,\
  77,00,73,00,20,00,52,00,65,00,63,00,79,00,63,00,6c,00,65,00,2e,00,77,00,61,\
  00,76,00,00,00
 
[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\Afternoon]
@="C:\\Windows\\Media\\Windows Recycle.wav"
 
[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\Calligraphy]
@="C:\\Windows\\Media\\Windows Recycle.wav"
 
[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\Characters]
@="C:\\Windows\\Media\\Windows Recycle.wav"
 
[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\Cityscape]
@="C:\\Windows\\Media\\Windows Recycle.wav"
 
[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\Delta]
@="C:\\Windows\\Media\\Windows Recycle.wav"
 
[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\Festival]
@="C:\\Windows\\Media\\Windows Recycle.wav"
 
[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\Garden]
@="C:\\Windows\\Media\\Windows Recycle.wav"
 
[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\Heritage]
@="C:\\Windows\\Media\\Windows Recycle.wav"
 
[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\Landscape]
@="C:\\Windows\\Media\\Windows Recycle.wav"
 
[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\Quirky]
@="C:\\Windows\\Media\\Windows Recycle.wav"
 
[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\Raga]
@="C:\\Windows\\Media\\Windows Recycle.wav"
 
[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\Savanna]
@="C:\\Windows\\Media\\Windows Recycle.wav"
 
[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\Sonata]
@="C:\\Windows\\Media\\Windows Recycle.wav"

then right-click the file, select the option to merge with the registry and reboot the machine.

Disable Meltdown and Spectre Mitigations

The following commands must be ran to disable the meltdown and spectre mitigations on a Windows machine:

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 3 /f
 
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 3 /f
 
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 1 /f
 
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 3 /f
 
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 3 /f
 
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 3 /f
 
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 3 /f
 
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 3 /f

Disable DisplayPort Blanking

The DisplayPort connector, unlike HDMI, is an active two-way interface such that Windows can automatically detect displays and query information from them (DCC). When a DisplayPort monitor is "detached" from the operating system, it triggers PnP events that will then propagate to the display drivers. In turn, when the display drivers sense that a monitor has been removed, it will re-query all other available displays to detect changes and automatically adapt to the situation - for instance, by shrinking a multi-monitor virtual desktop.

Unfortunately, it is often the case that various computer components use APM to lower the power consumption (including monitors) however extra software is sometimes needed, and not always reliable, to turn monitors off such that people prefer to leave the computer running but manually turn off monitors.

The effect with DCC and EDID enabled is that when a monitor turns off, either nVidia or ATI driver software will adjust the desktop - in case of nVidia, features such as multi-monitor desktops will have been turned off by turning monitors off. This results in very frustrating behavior such as on-screen windows being resized, bunched together and thrown into the upper left corner of the screen whilst multi-monitor is disabled and it will require the user to turn the monitors on and redo the entire configuration.

A solution to this problem is to use the driver software and, after a proper and acceptable configuration has been established, disable automatic EDID and force a well-known configuration.

The procedure is roughly as follows for nVidia:

  • Open the nVidia control panel and locate the View system topology setting on the left-hand panel,
  • For all known monitors connected to the computer, export the EDID to a file and place the file somewhere local to the current computer wherefrom it can be accessed by clicking the Export EDID… button.
  • Finally, for all known monitors, load the files that have been exported in the previous step and set the EDID to forced via the exported files.

Now, powercycling monitors should not disrupt the setup and will prevent the computer from re-organizing and re-configuring the displays. Please note that these steps should be performed if and only if the displays have already been setup and when the user is happy with the configuration; it follows that if the monitors are to be replaced with different hardware, the EDID forcing has to be turned off to prevent damage to the new displays.

Fix Broken Drive Icons

If one or more drive icons appear with a default icon, try deleting the key at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\DriveIcons and restart explorer.exe.

Remove a Network Drive that Cannot be Disconnected

In case a network drive refuses to be disconnected and doing so yields an error message such as the network connection does not exist, then the fix may consist in adding the drive to the registry and then attempting to disconnect it.

Create a key (folder) at HKU→Network→DRIVE where DRIVE is the letter of the network drive using a registry editor. In that key, add the following values:

Name Type Value
ConnectionType REG_DWORD 1
DeferFlags REG_DWORD 4
ProviderName REG_SZ Microsoft Windows Network
ProviderType REG_DWORD 20000
RemotePath REG_SZ UNC path, ie: \\server\share
UserName REG_SZ N/A, leave empty

After adding the values, load up My Computer, right-click the drive and select Disconnect. The drive should now be removed.

Running Executable Files from Samba Shares

Newer Samba releases disallow running executable files (ie: EXE, MSI, BAT, etc.) from shares unless the files have the POSIX execute ACL bit set. This results in a misleading error on the client side claiming that the user does not have permissions to access the file. To work around the issue, the following line can be added to the Samba configuration inside the [Global] section:

acl allow execute always = yes

Remove Windows Default Beep

The Windows default beep:

can be removed by changing the default beep sound file to a silent WAV file:

silent.wav


fuss/windows.txt · Last modified: 2020/03/30 14:49 by office

Access website using Tor Access website using i2p


For the copyright, license, warranty and privacy terms for the usage of this website please see the license, privacy and plagiarism pages.