WinSafe XP

View WinSafe Product
This page is a copy of the help file for WinSafe XP

by Easy Desk Software
http://www.easydesksoftware.com

CONTENTS
Adding Optional Files
Auto Check
Getting Started
Installing the Recovery Console
Registry Text Version
Removing worms and Hijackers
Uninstalling

LABELS
        Backup Tools
       
Restore Tools
       
System Tools
       
File Tools
       
Information
       
WinSafe
       
XP

 


Getting Started

WinSafe XP is for Windows XP only. WinSafe not only makes Registry backups, it watches over your entire system for worms, Trojans, spyware, and hijacked home pages. When WinSafe is first installed it will check all the settings, any new setting that starts a program, changes a page, adds a file to the System or Windows folder will be reported to you when you exit windows with the WinSafe Exit Icon.

In order to get the most value from WinSafe you need to allow WinSafe to log the System at bootup and to use the WinSafe Exit Icon to shut down. WinSafe by default will log files on bootup.

If you do not reboot your computer everyday you should select Auto Check located in the Advanced Setting. You should reboot your computer before making a new backup, this will ensure that the files being backed up are not corrupt.

WinSafe XP also will create a text version of the Registry, the default name is Backup.reg and is stored in the Windows folder. This tool can be used for reference if you want to view what a setting was and what is in the Registry now. It can also restore all the Registry Keys. As an example, let's assume you are surfing the Internet and a Web Site changes your home page. You could simply double click on the file Backup.reg and your home page would be restored.

For Registered users call Tech Support free: 291963 - with FreeWorld Dialup - - Get your free copy of FreeWorld Dialup
This phone is staffed 9 AM to 5 PM EST Monday - Friday. We will answer only if we are not currently on with another customer.


Auto Check

Auto Check is automatically enabled during the setup if you answer no to the question "Do you reboot everyday?". This feature will perform a simulated shut down - complete system check without shutting down the computer. It will check for added, changed, and modified files. It will check for hijacked home page, worms and spyware that may have entered you computer.

The system check compares the information from the last reboot log to the present time. It is recommended that once the system check is completed and you have approved any changes made to your system, you should Relog System Files. The Relog System Files can be found on the WinSafe interface - click on the word XP and then select Relog System Files.

When you use the Relog System Files, WinSafe assumes that any files or system changes up to this point are OK and a new system snapshot is made. This will also allow you to backup the Registry again without rebooting.

In the event that you have a situation that requires you to reboot and you do not wish to overwrite the current system snapshot place a check in the box labeled "Stop Bootup Logging".


Installing the Recovery Console

The Recovery Console is only required to be installed if your C: drive and/or Windows Drive is NTFS (New Technology File System).

If WinSafe needs to install the Recovery Console it will look in the Registry for the location of the I386 folder. In most cases your computer manufacture will install this folder either to C:\I386 or to a sub folder of Windows. If WinSafe is unable to locate the I386 folder you can do a search for I386 on your Windows CD and all your hard drives. 

The file that is needed to install the Recovery Console is the Winnt32.exe file, this is the file WinSafe will be looking for.

If you elect to install the Recovery Console later you will need to have the I386 folder available, in the run Windows type E:\I386\Winnt32.exe /cmdcons - change the E: to the drive letter your I386 folder is on.

If you do not wish to use a password to enter the Recovery Console you can use the Advanced Setting to disable the password request. Click on "XP" to enter the Advanced Settings.


Adding Optional Files

You can have WinSafe check optional files for changes by click on WinSafe's Exit icon and selecting Optioanl Files. In the Optional Files window you can click on "Add To List" and place any file in the list that you want WinSafe to check for changes on before shutting down. I use this feature to check my personal files and my Virus scanner dat files, this way I know if someone has altered them.

There is also a "Watch For" button. Here you can enter files that you know that are spyware, Trogans, or other files that you do not want on your system. If that file shows up on your system, WinSafe will offer to delete it for you. If you do not enter a path WinSafe will check for the file in C:\, the Windows and System32 folders only.


Backup Tools

This group consists of 4 items in the context menu, the first item in the menu will tell you when it is OK to backup a newer version of the Registry. WinSafe refers to this backup as WinSafe' Backup Files. This backup is the most current backup files. WinSafe will not automatically make backups, it dose not know if you are having a system problem or if you are playing with settings and do not wish to overwrite the existing backups. WinSafe will  also backup the current users settings, this information is stored in the NTUser.dat file. Each user of your PC has their only NTUser.dat file.

The second item in the menu refers to the Safe files. This backup will always be older than the WinSafe's Backup Files. WinSafe will never allow you to have the same set of backups file in both the Safe and WinSafe's Backup Files. When you select to update the Safe, WinSafe marks the most recent backup, WinSafe's Backup Files, to be moved to the Safe the next time WinSafe backups up the Registry. WinSafe will also move the current users NTUser.dat file to the Safe.

The third item in the menu will display a report listing the file dates and byte sizes of each of the current Registry backup files, Safe backup files, and current System files.

The fourth item in the menu will open the Backup Utility to allow you to backup any or all files on your system.

Back to Table of Contents


Restore Tools

Windows XP's Registry cannot be restore while you are in Windows. It must be installed from the Recovery Console or in MSDOS. MSDOS is unavailable if your C drive or Windows Folder is on an NTFS partition.

If you need to install the Recovery Console you will need to locate your I386 folder. In this folder is a file named Winnt32.exe. In your Start/Run windows enter the path to Winnt32.exe and the switch /cmdcons. Example E:\I386\Winnt32.exe /cmdcons

Back to Table of Contents


System Tools

This group contains 6 items in the context menu. The first 5 are self explanatory. The last menu item is "Reset Users Permissions....". This menu item will allow you to deny or grant access to a file or folder on your computer to any user. You must have NTFS file system on the drive you want to change permissions on. Note: It is highly recommended that you do not Deny access to the System or Administrator accounts to any file or folder.

Back to Table of Contents


Files Tools

 

This group is self explanatory. The Replace a file item can install a missing file or replace any existing file with the Windows installation files. If you have installed a Service Pack and still have the SP installation files in a folder you can use the advanced settings ( Click on the word XP) and show WinSafe where the are stored.

The Delete a file - will delete any file you select, if the file is in use it will be deleted when you reboot. This is the ideal way to kill a worm or Hijacker program.

 

Back to Table of Contents


Information

The System File Report is a report of all files that have been added, deleted, or modified since your last boot into Windows. The Report covers the Windows, System32, System32\Drivers, C:\, and Program Files folders. It only checks the Program Files folder and not the sub folders, as this is where many worms hide themselves.

Back to Table of Contents


WinSafe

The first choice in this context menu will force WinSafe to reset all settings, any option you have already set for WinSafe will be lost. You will be presented with an option to update WinSafe. If you are have any problem with backing up files you should not use the update only feature.

Back to Table of Contents


XP

The XP label opens the advanced settings window, from here you can control WinSafe. Tell WinSafe where to find your Windows installation files and Service Pack update files.

The "Find other Registries to install" button should be used only if you understand the effects of installing an older Registry can cause.

You will also find an option here to stop WinSafe from checking System Files on reboot. This option should be used only when you do not want to change the System snapshot. Example: You discover that you have been infected with a worm. Make a System Report and delete all the added files and Registry start keys pointing to the worm. Have WinSafe delete any file that is in use that belongs to the worm. Stop WinSafe from logging the System files on reboot. Now reboot, if the worm multiples and/or adds a new file or replaces the Registry Startup Key during shut down, WinSafe will be able to detect the new files and Registry Key. If you do not disable WinSafe, WinSafe will log these entries and files and not know they have been added.

Back to Table of Contents


Removing Worms and Hijackers

WinSafe can help you remove worms, hijackers spyware and more. When WinSafe tells you that a program has been added to the Startup group, and or a file(s) have been added to a folder, it is time to verify what was added. WinSafe will only tell you when you use the Exit Icon or if you select Auto Check, WinSafe will tell at the time you have selected for WinSafe to check the System.

WinSafe will tell you what Program has added itself to the startup group, if you did not install any program then you you know your infected. Have WinSafe first do a System File report, delete all the added files, then remove or have WinSafe remove the added startup entry in the Registry. Uncheck the option in the Advanced Setting "Have WinSafe check system files at bootup", more on this here.

If your home page was Hijacked follow the directions above, reboot and then allow WinSafe to fix your Home page. Fixing you Home page before removing the Hijacker may result in the Hijacker re-hijacking your home page.

Once you have successfully removed the worm, Trojan or Hijacker be sure to re- enable Checking system files on reboot and then use the Relog System Files or reboot again.


Uninstalling WinSafe

To properly uninstall WinSafe you should right click the WinSafe folder and select Uninstall from the context menu. If you use the Add/Remove Applet in the Control Panel it will not remove files and data that have been added to WinSafe since you installed it.

Back to Table of Contents