I cannot update my guide here because it is in 10 parts. Each part requires one post because of its length. The guides forum here only allows to update the first post of my guide. You can view the fully updated guide in its entirety here...

SLIMMING DOWN WINDOWS XP: THE COMPLETE GUIDE

MY BATCH FILES ARE AVAILABLE HERE

UPDATE:

My site went down for the full month of September. I really haven't much control over the site, because it really isn't "my" site. The site belongs to a generous lady named Sadie who lives in England. She gave it to me to support my work on Slimming Down Windows XP: The Complete Guide.

The guide was always for you. That is why I created it. It is my gift to those who always wanted to know which files they can delete from Windows XP, but couldn't find their answers. My site was only an afterthought.

Should the unforeseen happen, should my site go down again, whether temporarily or permanently, you should know that two other sites now host my guide for you, WinCert.net and Jan's Graphix an Stuff.

Slimming Down Windows XP: The Complete Guide has always been and will always be a work in progress. I edit and make changes to its contents on a continuous basis. I will continue my work on my guide on my site as well as on the above two sites.

Sincerely,

Bold_Fortune






Thanks go out to Fred Langa for his acknowledgment of Slimming Down Windows XP: The Complete Guide in The LangaList.

Bold,

Awesome job on the "Slimming Down XP" article. I especially like the fact that your penchant for deleting files is tempered by the idea that (1) the OS should still work as required and (2) that there be zero errors in the Event Viewer. Like you, I can't stand errors in the Event Viewer; makes me feel dirty! And any schmuck can delete files willy-nilly, but it takes real talent, thought, and patience to do it the way you did. I can only imagine how long all the trial and error must have taken. Years, I'd bet.

Anyway, just wanted to drop a note letting you know that your efforts are appreciated.

Ugly Genius

From Gizmo's Top Picks, Ian Richards' Support Alert Newsletter:

If you want to slim down your version of Windows, I suggest you read Bold_Fortune's "Complete Guide to Slimming Down Windows XP" first. It will not only tell you what to do, but also alert you to the pitfalls you need to avoid. Highly recommended.


Why I Don't Use Programs Like XPLite and nLite

Sure, programs can be written that will remove some applications and their specifics. Many programmers use the "inf file method". That is to say, if files are listed within the .inf file for a certain Windows component, all you have to do is remove those particular files, and wallah! component gone.

Deleting whole components, however, oftentimes also removes some files that are necessary to an individual's use of a computer.

Users put their computers to many different uses. And all have very different needs from another.

Let me give you a couple of examples of what I'm talking about.

You decide you no longer want Windows Media Player on your system.

You set your file removal program to delete all files associated with WMP. ...Which would mean you also won't be needing the codecs installed for WMP. So you set the program to also delete all WMP codecs.

But you're also a big fan of Yahoo Chat.

Only now, you can't get Yahoo Chat to work properly. You want to talk with your friends in Voice, but you no longer have the ability...because along with all the other WMP codecs, you've deleted the specific codecs that allow this function.

So now we're talking about a program that would have to have a setting to delete Windows Media Player and all its codecs, while keeping only the codecs needed by Yahoo Chat.

There are many other variables that would also need to be written into the program. It would have to take into consideration all of the many individual users who all put their computers to all very different uses.

You don't play games on the Internet.

Then you won't be needing all the DirectX files. Unless you decide you like Windows Media Player after all. Then you're going to need to keep nine specific DirectX files on your system.

In this instance, you would need have incorporated into your file removal program a special setting that would single out and keep the specific DirectX files needed for WMP, while deleting the other ninety-six DirectX files that you won't be needing, because you don't play games on the Internet.

You elect to remove DirectX with your file-removal program.

You don't play games on the Internet. You could care less if Windows Media Player needs nine specific DirectX files. Because you never use it anyway, and you had the program remove WMP too.

Then you make yourself a nice TV dinner. Grab a bottle of pop from the refrigerator. And make yourself comfortable in front of your computer. It's movie time!

You pop in a DVD. Up springs NVDVD Player. Only it's telling you, "Sorry, you don't seem to have the proper files installed on your system."

You see, NVDVD Player needs seven specific DirectX files to work.

So you decide to re-install DirectX so you can watch your movie.

And now you've defeated your purpose (Remember your purpose?) to remove all unnecessary files from your system. ...Because now you have ninety-eight DirectX files installed on your system that you really don't need.

File removal programs give you a choice: keep an entire Windows component and all its associated files, or remove the component completely, and lose functionality elsewhere.

You set your program to remove the Computer Management and Disk Management.

(The only reason I personally would have for accessing Computer Management would be to utilize Disk Management. The only reason I would have for utilizing Disk Management would be to format a drive. I do that with XP's installation disc during the installation process. The only utilities I need in Computer Management are the Services and Event Viewers, and I can access both from my Start Menu.)

Your program takes out these files:

capesnpn.dll....Microsoft Certificate Template Management Extension
certmgr.dll.....Certificate MMC (Microsoft Management Console) Snap-In Tool
certmgr.msc.....
compmgmt.msc....Computer Management Console
diskmgmt.msc....Disk Management Console
DISKPART.EXE....
DmAdmin.exe.....Local Disk Manager Administrative Service
dmconfig.dll....Logical Disk Manager Configuration Library
dmdlgs.dll......Disk Management Snap-in Dialogs
dmdskmgr.dll....Disk Management Snap-in Support Library
dmdskres.dll....Disk Management Snap-in Resources
dmintf.dll......Disk Management DCOM Interface Stub
dmocx.dll.......TreeView OCX
DMREMOTE.EXE....Logical Disk Manager
DmServer.dll....Logical Disk Manager service dll
dmutil.dll......Logical Disk Manager Utility Library
dmview.ocx......Disk Management Snap-in
fsmgmt.msc......Microsoft Common Console Document (Shared Folders)
localsec.dll....Local Users and Groups MMC Snapin
lusrmgr.msc.....Microsoft Common Console Document
mmcshext.dll....MMC Shell Extension DLL
mycomput.dll....Computer Management
ntmsapi.dll.....Removable Storage Public Interfaces
ntmsmgr.dll.....Removable Storage Service
osuninst.dll....Uninstall Interface
sendcmsg.dll....Send Console Message
smlogcfg.dll....Performance Logs and Alerts Snap-in

Oops! Now you can't get into your Device Manager, because Device Manager is dependent upon the dmocx.dll.

See what I mean? There are just too many variables involved. It is impossible to have a file removal program remove whole components without disrupting an individual's use of a computer. Many times, while removing components, these programs remove along with them files that also have other uses.

"Aha!" you say. "nLite has an 'additional files to keep' box. Why not use this nLite feature to keep all the files you don't want it to remove along with certain whole components?"

With some 1,800 individual system32 files alone, a person would have quite a few decisions to make. You would really need to know your stuff to setup that program effectively.

And it is not always just about the choices we make about which files to keep or delete. It is also about which registry entries should be intact after the installation.

Some files we delete should never be UnRegistered...meaning their registry entries, or at least some of them, should never be removed. The files themselves can be removed, but UnRegister them, and you've got problems.

If certain files are removed before the installation, their registry entries are not delivered to the registry. Would it not follow, that if some of their registry entries are needed, they would not be present?

Some people refuse to look at this, or choose to ignore it. I personally believe it is one of the reasons programs that remove files pre-installation are doomed to forever leave the individual user with post-installation problems.

Take for example my favorite (or at least one of the more interesting) .OCX files, the daxctle.ocx.

This one .OCX file is attached to 11,741 Registry Keys and 12,864 Values under HKEY_CLASSES_ROOT\Interface...and every one of them will be removed by UnRegistering it.

11,741 Registry Keys and 12,864 Values That's a lot. ...No, that's really a lot. And those numbers show up after I have run registry cleaners. I have seen it associated with as many as 13,583 Registry Keys before any registry cleaner was used.

It's not so much I need the daxctle.ocx on my system, I don't. But UnRegistering it removes registry entries that belong additionally to other files that I do need on my system. I can delete the daxctle.ocx, no problem. But UnRegister it, and Windows Media Player will not play...anything.

Here are a few other examples of files I delete, but I do not UnRegister.

initpki.dll.....(Microsoft Trust Installation and Setup). Contains functions that support encryption. Should I UnRegister this file, I experience a few problems with Internet Explorer displaying certain items on Webpages, and also some problems entering certain Websites. I can delete the initpki.dll and no such problems will occur...just so long as I do not UnRegister it.

mssip32.dll.....(MSSIP32 Forwarder DLL). Should I UnRegister this file, Microsoft Update will not function. I can delete the mssip32.dll and Microsoft Update will still function...just so long as I do not UnRegister it.

softpub.dll.....(Softpub Forwarder DLL). Contains functions that support encryption. Should I UnRegister this file, I experience a few problems with Internet Explorer displaying certain items on Webpages, and also some problems entering certain Websites. I can delete the softpub.dll and no such problems will occur...just so long as I do not UnRegister it.

---------------------------------------

Many people have asked for my personal batch files. I have declined to release them to the general public. I will however help you get started making your own batch files. You can then add any individual files you want to them. Which individual files you choose to remove from your system will be entirely up to you.

I have incorporated a failsafe feature into my batch files.

Files and folders will be moved and saved (Not deleted permanently. Later that will be up to you.) to a backup folder on C:\. The backup folder is simply named "Backup".

Within the Backup folder, you will find the files and folders you removed, in smart placement. Their order of appearance will be identical to how XP's files and folders appear on your C Drive.

When you remove files and folders from the WINDOWS and system32 directories, in the Backup folder you will first see a WINDOWS folder. Within the WINDOWS folder you will see the individual files and subfolders you removed, including the system32 folder. And within the system32 folder you will see its individual files and subfolders you removed. The same applies to the Documents and Settings and the Program Files directories.

I created this smart placement so you would always know exactly where these files and folders came from should you decide to replace any to their original locations.

Note: Be sure to temporarily delete the Backup folder filled with files and subfolders before using any registry
cleaners. The registry cleaners will more than likely correct the files paths to the Backup folder, rather than remove their paths.

This batch file I designed with individual system32 files in mind.

Copy and Paste between the lines to Notepad. Save as "any name you choose.bat" Then insert your file choices where I have mine.


I designed this particular batch file below a little differently, with the inf folder files in mind. As with the system32 batch file above, it will "move and save" (not delete) files to a Backup folder on C:\.

This one, however, will move all files in the inf folder (C:\WINDOWS\inf), and will instantaneously return the inf files you choose to keep to the inf folder. All this takes place so fast you'll think the files you chose to keep never moved at all.


---------------------------------------

One very important step before we set about deleting files together.

Create a full system backup image using a good backup program like Acronis or Ghost.

This backup image should be of a full install of XP. It should include all of your programs, drivers, setting changes, and tweaks applied...everything you normally do to make your Windows experience an enjoyable one.

So now when you set about deleting files, you'll always have a the perfect safeguard. And you should never have to say on a forum, "I deleted this, and now that doesn't work!"

Well, revert back to your backup image, and don't delete that anymore.

---------------------------------------

The first thing I do is download the "Preview Version of XPLite." It's really makes it easy to disable Windows File Protection.

Go to this page. In the upper right-hand corner click on "Download Preview".

http://www.litepc.com/xppreview.html

Open its zip folder and copy the "XPLite_TRIAL.exe" to your Desktop or a folder of your choice.

Open it and go to its "Windows File Protection" tab. Select "Disabled" and then "Apply". Close the program and reboot your computer.

---------------------------------------

This registry tweak helps me easily UnRegister DLL and OCX Files I remove.

It puts two entries into the right-click context menu: "Register" and "UnRegister" when you highlight and right-click on a single DLL or OCX File, or when you highlight and right-click on multiple DLL and OCX Files.

It really makes Registering and UnRegistering DLL and OCX Files very easy. Plus it gives me the ability to UnRegister multiples (even hundreds) of these files at once.


I normally do not use any registry cleaners, or UnRegister any DLL and OCX files, for a very long time after I have Slimmed Down my installation. I want to be certain everything is A-OK first.

---------------------------------------

One final word before we get started. What you will find in this Guide are the "possibilities" of which files and folders can be removed from a Windows XP Installation, while maintaining stability and keeping functionality in Microsoft's operating system.

The "possibilities" of what can be removed. That is very important to keep in mind before proceeding from here.

I could not expect anyone other than myself to remove everything listed in the guide. It would be practically impossible for anyone to duplicate what I do without running into problems.

Yes, I delete every file and every folder you will see listed....but my computing needs are different from yours. My system is different from yours. The programs I have installed are different from yours.

Which files and folders to remove from your own Windows XP Installations, you will have to make these choices for yourself. I have given you as much information about these files and folders as I could, given the limitations of my knowledge and understanding of their uses and functions.

---------------------------------------

Now let's remove some files.


Slimming Down Windows XP: The Complete Guide PART 1

TEMP and Junk Files


There are a lot of very good TEMP and Junk File Cleaners out there. I use two: IE Privacy Keeper and CCleaner. I think they are both great. TEMP and Junk File Cleaners will remove most TEMP and Junk Files. There are some TEMP and Junk Files they do may miss, though.

This is a list of TEMP and Junk Files I delete on my own because my TEMP and Junk File Cleaners miss them:

*.bak Files...Backup Files

---------------------------------------

*.chk Files...Lost Cluster Log Files

NOTE: If the edb.chk is deleted from the C:\WINDOWS\SoftwareDistribution\DataStore\Logs folder, you will need to reboot your computer before your next visit to the Microsoft Update Website...otherwise, the Microsoft Update Website will not function. The same holds true for the edb.log located in this folder. Further note: the edb.chk can be deleted only after your system settles in from after rebooting, or after a time from a visit to the Microsoft Update Website.

---------------------------------------

*.cnt Files

*.diz Files
*.doc Files

---------------------------------------

*.edb Files...Exchange Server store (a database)

This system *.edb file can usually be deleted after a reboot:

C:\WINDOWS\system32\CatRoot2\tmp.edb

These system *.edb files can be deleted only after your system settles in from after rebooting, or after a time from a visit to the Microsoft Update Website:

C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.edb

C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp.edb

---------------------------------------

*.gid Files......Windows Help Index Files

*.lic Files

---------------------------------------

*.log Files

I delete all *.log files I find. However, these system *.log files cannot be deleted:

C:\WINDOWS\WindowsUpdate.log. (The WindowsUpdate.log can only be deleted if the Automatic Updates Service is stopped.)

C:\Documents and Settings\USERNAME\NTUSER.DAT.LOG

C:\Documents and Settings\USERNAME\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG

C:\Documents and Settings\NetworkService\ntuser.dat.LOG

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG

C:\WINDOWS\Debug\PASSWD.LOG

---------------------------------

C:\WINDOWS\SoftwareDistribution\ReportingEvents.log

If you look through the ReportingEvents.log in Notepad you will notice time-stamped, Microsoft Update installation information, which can date back quite awhile. Normally the ReportingEvents.log cannot be deleted, nor can its text be altered.

However, something interesting about the ReportingEvents.log file was discovered by nataliecv one of our forum members.

"If you go into Services and STOP Automatic Updates Service for a moment, ReportingEvents.log CAN be deleted. A fresh copy of the ReportingEvents.log will be created upon your next visit to the Microsoft Update Website, and it starts anew. NOTE: Do not forget to restart the Automatic Updates."

---------------------------------

C:\WINDOWS\system32\config\default.log
C:\WINDOWS\system32\config\SAM.LOG
C:\WINDOWS\system32\config\SECURITY.LOG
C:\WINDOWS\system32\config\software.LOG
C:\WINDOWS\system32\config\system.LOG

These system *.log files can usually be deleted after a reboot:

C:\WINDOWS\Sti_Trace.log
C:\WINDOWS\wiadebug.log
C:\WINDOWS\wiaservc.log

C:\WINDOWS\system32\CatRoot2\edb.log
C:\WINDOWS\system32\CatRoot2\edbtmp.log

These system *.log files can be deleted only after your system settles in from after rebooting, or upon a visit to the Microsoft Update Website:

C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edbtmp.log

C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.log

NOTE: If the edb.log is deleted from the C:\WINDOWS\SoftwareDistribution\DataStore\Logs folder, you will need to reboot your computer before your next visit to the Microsoft Update Website...otherwise, the Microsoft Update Website will not function. The same holds true for the edb.chk located in this folder. Further note: the edb.log can be deleted only after your system settles in from after rebooting, or after a time from a visit to the Microsoft Update Website.


I DO NOT DELETE any INSTALL.LOG or UNINSTALL.LOG files. Without them I cannot uninstall certain programs.

---------------------------------------

*.old Files....Backup Files

*.query Files

*.sav Files....Backup Files

---------------------------------------

*.txt Files

I delete all *.txt files I find. However, these system *.txt files cannot be deleted:

C:\WINDOWS\SchedLgU.Txt. (The SchedLgU.Txt can only be deleted if the Task Scheduler Service is stopped.)

C:\WINDOWS\SoftwareDistribution\WebSetup\wuident.cab\wuident.txt (The "wuident.txt" can only be deleted if the Automatic Updates Service is stopped.)

I DO NOT DELETE these program *.txt files:

C:\Program Files\RAXCO\PerfectDisk\Readme.txt because PerfectDisk 6 will not operate without its "Readme.txt" or "Register.txt" files. (PerfectDisk 8 does not include this file.)

C:\Program Files\RAXCO\PerfectDisk\Register.txt because PerfectDisk 6 will not operate without its "Register.txt" or "Readme.txt" files. (PerfectDisk 8 does not include this file.)

You yourself might want to take a look in any program's folder to consider which, if any, *.txt files just might be important to them.

Additional Note: Windows Genuine Advantage installs the WGAErrLog.txt to the C:\WINDOWS\Temp folder. Should you delete this file, be sure to reboot your system, so that a new WGAErrLog.txt can be created. Otherwise, Microsoft Update may not work for you.

---------------------------------------

Make Your Own TEMP and Junk File Cleaner

You can make your own TEMP and Junk File cleaner using Search Assistant.

In Notepad, make a list of TEMP and Junk File extensions you would like to remove.

Like so:

*.bak, *.chk, *.cnt, *.diz, *.doc, *.edb, *.gid, *.lic, *.gid, *.log, *.old, *.query, *.sav, *.txt

Copy and Paste your list into the search box of Search Assistant.

Be sure that under Search Options you have checked "Advanced Options."

Under Advanced Options check "Search system folders," "Search hidden
files and folders," and, "Search Subfolders."

Now run your search by clicking on Search Now.

Now, at the top of the Search Assistant, select File then Save Search.

Next time you want to search for those particular TEMP and Junk files, just click on your new search file.

Search Assistant will automatically popup, and your ready. Just click Search Now.

---------------------------------------

Here's an extensive list of TEMP and Junk Files I compiled. You may find it useful.

*.~* ......Temporary Files
*.~mp......

*.^* ......Temporary Files
*.^........Temporary Files

*.---......Setup Temporary Files

*.__.......Temporary Files
*__ofidx*.*...Microsoft Find Fast Indexer File

*._dd......Lost Cluster Files
*._detmp...Temporary Files

*.&db......Temporary Files (dBASE IV)

*.?$?......Temporary Files(st Reader)
*.?~?......Temporary Files
*.??$......Temporary Files

*.$$$......MS-DOS Temporary Files

*.!!!......

*.000......sequential file in split Zip archive?
*.001......sequential file in split Zip archive?
*.002......sequential file in split Zip archive?

*.1st......(system.1st is a Windows diagnostic file)

*.b~k......Backup File, some text editors
*.bak......Backup Files
*.bk.......Backup File
*.bk?......Potential junk
*.bmk......
*.bsc......Visual Studios Temp File

*.cam......
*.cb.......
*.chk......Lost Cluster Log Files
*.cln......
*.cnt......
*.cpy......Backup Files

*.da1......
*.da2......
*.db$......Temporary Files (dBASE)
*.diz......
*.dmp......Potential junk
*.doc......

*.edb......Exchange Server store (a database)
*.err......Error File

*.fic......Potential junk
*.fix......
*.fnd......Find Result Files
*.ftg......Word List File of *.HLP
*.fts......Word List File of *.HLP

*.gid......Windows Help Index Files

*.ign......
*.ilc .....Borland Temporary File
*.ild .....Borland Temporary File
*.ilf .....Borland Temporary File
*.ilk......Visual Studios Temp File
*.ils......Borland Temporary File
*.ink......

*.lgc......
*.lge......
*.lhx......
*.lic......
*.license.txt...Potential junk
*.log......
*.log.txt...Log Files Windows diagnostic files

*.mp.......Temporary Files
*.MS.......Microsoft Product Backup Files

*.nav......Backup Files
*.new......
*.nu3......Symantec Backup File

*.old......Backup Files
*.out......

*.par......
*.pch......Visual Studios Temp File
*.pvt......
*.prv......Backup Files (bootlog.prv: Windows diagnostic file)

*.query....

*.res......Visual Studios Temp File

*.sav......Backup File
*.sdi......Archive Content File
*.sik......Potential junk
*.spc......Temporary Files (WordPerfect for Windows)
*.syd......Backup Files

*.tds......Borland Temporary File
*.temp.....Temporary Files
*.tmp......Temporary Files
*.txt Files

*.umb......

*.wbk......Word Backup Files


*modemlog.txt...Windows Modem Log File

*install*.txt...Potential junk

*order*.txt...Potential junk

*whatsnew*.txt...Potential junk


0*.nch....Temporary Files created by MS Outlook Express

ABEND.LOG...Novell Abend Log
anti-vir.dat...Created by F-Prot Anti-Virus

chklist.*...Lost Cluster Files

eula.txt...Microsoft end-user license agreement

file_id.diz...Description of Shareware

ghosterr.txt...Norton Ghost Error File

iebak.dat...Internet Explorer Junk File

modemdet.txt...Windows Diagnostic File
mscreate.dir...Setup Temporary File
msoe.txt...Readme for Microsoft Outlook™ Express
mssecure.xml...Microsoft Baseline Security Analyzer File

readme.txt...Potential junk

pq_debug.txt...PowerQuest PartitionInfo file
pspbrwse.jbf...Paint Shop Folder Image Information Cache File

suhdlog.dat...Windows diagnostic File
system.st...Windows diagnostic File

twain???.mtx...TWAIN Temporary File

ws_ftp.log...WS_FTP Temporary File

--------------------

Slimming Down Windows XP: The Complete Guide is my gift to those who always wanted to know which files they can delete from Windows XP, but couldn't find their answers. I have always offered my guide freely, and never asked anything in return.

Those of you who wish to make a donation, showing your support and appreciation for Slimming Down Windows XP: The Complete Guide, My Batch Files Are Available Here

Slimming Down Windows XP: The Complete Guide PART 2

Disabled Services




25 Services remain showing in my Services window:



14 Automatic:

Acronis Scheduler2 Service
Automatic Updates
DCOM Server Process Launcher
DHCP Client
Event Log
IMAPI CD-Burning COM Service
Plug and Play
Remote Procedure Call (RPC)
Shell Hardware Detection
System Event Notification
Task Scheduler
Themes

User Profile Hive Cleanup...(This Service I installed to help me with faster shutdowns. It really works, too.)

Windows Audio


1 Disabled:

Windows Time


10 Manual:

Application Management
Background Intelligent Transfer
Cryptographics Services
Help and Support
Local Disk Manager
Local Disk Manager Administrative Service
Network Connections
PDEngine...(Belongs to PerfectDisk)
PDScheduler...(Belongs to PerfectDisk)
Windows Installer



When I delete a Service, I do not just delete that one file considered to be the Service itself. I delete other files too that are associated with that Service either directly or indirectly.

For example, I remove Performance Logs and Alerts Service by deleting its direct file, SMLOGSVC.EXE. But then, I no longer have use for all the Performance Counters and Performance Monitoring files that go along with it. So I'll remove those files, too.

Whether you choose to disable some, or all of the same Services I do, you are bound to start experiencing a few DCOM Errors in the Event Viewer upon first rebooting your machine.

I personally don't recieve any DCOM errors when I disable any of my Services. I'm just lucky, I guess.

Not really. I'll get them, too. But I'm going to show you how to eliminate these errors at the bottom of this page.



These then are the Services I disable on my system:

----------------------------------------

Alerter Service

Delete this file from C:\WINDOWS\system32:

alrsvc.dll.....Alerter Service DLL

----------------------------------------

Application Layer Gateway Service

Delete this file from C:\WINDOWS\System32:

ALG.EXE........(Application Layer Gateway Service). Used to configure the different accessibility options of your system.

----------------------------------------

Clipbook

Delete these 2 files from C:\WINDOWS\system32:

CLIPBRD.EXE....(Clipboard Viewer). Used to view the contents of the object or data currently copied into memory (also known as the Clipboard).

CLIPSRV.EXE....(Clipboard Server). The network dynamic data exchange (DDE) clipboard service used by Clipboard Viewer to access objects or data copied into memory.

---------------------------------------

COM+ Event System & COM+ System Application


Delete these 18 files from C:\WINDOWS\system32:

catsrv.dll
catsrvps.dll
catsrvut.dll
clbcatex.dll

clbcatq.dll.....<< This file may or may not delete for you. Windows won't allow it to be deleted on my system.

colbact.dll
comaddin.dll
comrepl.dll
comsnap.dll
comsvcs.dll
comuid.dll

DCOMCNFG.EXE....(DCOM Configuration). Used to display and configure DCOM settings and configuration.

es.dll

mtxdm.dll
mtxex.dll
mtxlegih.dll

stclient.dll

txflog.dll


Then delete this folder and its contents:

C:\WINDOWS\system32\Com

It contains these 6 files:

comadmin.dll
comempty.dat
comexp.msc
comrepl.exe
comrereg.exe

mtsadmin.tlb

---------------------------------------

Computer Browser

Delete this file from C:\WINDOWS\system32:

browser.dll.....Computer Browser Service DLL

---------------------------------------

Distributed Link Tracking Client

Delete these 2 files from C:\WINDOWS\system32:

dfsshlex.dll...Distributed File System shell extension

trkwks.dll.....Distributed Link Tracking Client

---------------------------------------

Distributed Transaction Coordinator

Delete these 9 files from C:\WINDOWS\system32:

MSDTC.EXE......(DTC Console Program). The console for the Distributed Transaction Coordinator (DTC).

msdtclog.dll...MS DTC log manager DLL
msdtcprf.h.....
msdtcprf.ini...
msdtcprx.dll...MS DTC OLE Transactions interface proxy DLL
msdtctm.dll....MS DTC transaction manager DLL
msdtcuiu.dll...MS DTC administrative component DLL
mtxclu.dll.....MS DTC amd MTS clustering support DLL

xolehlp.dll....MS DTC helper APIs DLL

---------------------------------------

DNS Client

Delete this file from C:\WINDOWS\system32:

dnsrslvr.dll...DNS Caching Resolver Service

---------------------------------------

Error Reporting Service

Delete these 4 files from C:\WINDOWS\system32:

DUMPREP.EXE....(Windows Error Reporting). A dump reporting tool.

DWWIN.EXE......(Microsoft Application Error Reporting). The application used to report errors in Microsoft applications.

ersvc.dll......Windows Error Reporting Service

faultrep.dll...Windows Error Reporting

---------------------------------------

Fast User Switching Compatibility

Has no file to delete (that I'm aware of anyway).

---------------------------------------

Fix-It Task Manager

Belongs to my Ontrack Registry Cleaner

I delete this file in C:\Program Files\Ontrack\Fix-It:

mxtask.exe

---------------------------------------

Http SSL

Delete this file from C:\WINDOWS\system32:

w3ssl.dll......SSL service for HTTP

---------------------------------------

Human Interface Device Access

Has no file to delete (that I'm aware of anyway).

---------------------------------------

Indexing Service

Delete these 14 files from C:\WINDOWS\system32:

ciadmin.dll...CI Administration (MMC)
ciadv.msc.....
cic.dll.......CIC - MMC controls for Taskpad

CIDAEMON.EXE..(Content Index Filter Daemon). Process that determines which files will be indexed on the hard disk for faster search queries.

ciodm.dll.....Indexing Service Admin Automation Objects

CISVC.EXE.....(Content Index Service). The Content Index engine that performs file indexing to improve performance of resource searches.

idq.dll.......Indexing Service ISAPI Extension
infosoft.dll..Wordbreaker and stemmer dll
ixsso.dll.....Indexing Service Server-side Object

LangWrbk.dll..English wordbreaker

mimefilt.dll..Microsoft ® IMimeFilter Persistent Handler DLL

nlhtml.dll....Net Library HTML filter

offfilt.dll...OffFilt

webhits.dll...Indexing Service Webhits

---------------------------------------

IPSEC Services

(See Routing and Remote Access below)

---------------------------------------

Messenger

Delete this file from C:\WINDOWS\system32:

msgsvc.dll....NT Messenger Service


Then delete this folder and its contents:

C:\Program Files\Messenger

---------------------------------------

MS Software Shadow Copy Provider

---------------------------------------

Netmeeting Remote Desktop Sharing

Delete these 7 files from C:\WINDOWS\system32:

mnmdd.dll.....Application Sharing Display Driver

MNMSRVC.EXE...(NetMeeting Remote Desktop Sharing). Allows authorized users to remotely access your desktop.

msconf.dll....Conferencing Utility Dll
msh261.drv....Microsoft H.261 ICM Driver
msh263.drv....Microsoft H.263 ICM Driver

nmevtmsg.dll..NetMeeting Event Logging DLL
nmmkcert.dll..NetMeeting Event Logging DLL


Then delete the Netmeeting folder and its entire contents:

C:\Program Files\Netmeeting

---------------------------------------

Network DDE

and

Network DDE DSDM

Delete these 5 files from C:\WINDOWS\system32:

ddeml.dll......DDE Management library

DDESHARE.EXE...(DDE Share). Displays the active DDE shares and enables property editing for these shares.

NDDEAPIR.EXE...The server-side application programming interface (API) for the Network DDE Agent.

nddenb32.dll...Network DDE NetBIOS Interface

NETDDE.EXE...(Network DDE). A background network DDE provider.

---------------------------------------

Network Location Awareness (NLA)

Has no file to delete (that I'm aware of anyway).

---------------------------------------

Network Provisioning Service

Delete these 2 files from C:\WINDOWS\system32:

xmlprov.dll...Network Provisioning Service
xmlprovi.dll..Network Provisioning Service Client API

---------------------------------------

NVDIA Display Driver Service

Delete this file from C:\WINDOWS\system32:

nvsvc32.exe

---------------------------------------

Performance Logs and Alerts

Delete these 23 files from C:\WINDOWS\system32:

DISKPERF.EXE...(Disk Performance Counters). Used to switch performance counters for the disk subsystem on and off.

LODCTR.EXE.....(Load Counters). Used to add new counters to Performance Monitor.

logman.exe.....Performance Log Utility

perfc009.dat...
perfci.h.......
perfci.ini.....
perfctrs.dll...Performance Counters
perfd009.dat...
perfdisk.dll...Windows Disk Performance Objects DLL
perffilt.h.....
perffilt.ini...
perfh009.dat...
perfi009.dat...
perfmon.exe....Performance Monitor Command Line Shell

perfmon.msc....Microsoft Common Console Document (System Performance Monitor). I delete this file, and in Control Panel/Administration Tools I delete its shortcut, "Performance".

perfnet.dll....Windows Network Service Performance Objects DLL
perfproc.dll...Windows System Process Performance Objects DLL

PerfStringBackup.INI

perfwci.h......
perfwci.ini....

prflbmsg.dll...Perflib Event Messages

SMLOGSVC.EXE...(Performance Logs and Alerts Service). An application that allows statistics to be monitored and collected on local and remote PCs.

UNLODCTR.EXE...(Unload Counter). Used to unload Performance Monitor counters.

---------------------------------------

Portable Media Serial Number Service

---------------------------------------

Print Spooler

I do not have a printer, so I remove every system32 file associated with the printing process.

I delete these 19 files from C:\WINDOWS\system32:

cnbjmon.dll..Language Monitor for Cannon Bubble-Jet Printer

htui.dll.......Common halftone Color Adjustment Dialogs

icm32.dll......Microsoft Color Management Module (CMM)
icmui.dll......Microsoft Color Matching System User Interface DLL

inetpp.dll.....Internet Print Provider DLL
inetppui.dll...Internet Print Client DLL

localspl.dll...Local Spooler DLL
lprhelp.dll....LPR Print Monitor
lprmonui.dll...LPR Print Monitor UI

msw3prt.dll....ISAPI dll for Web Printing

ntprint.dll....Spooler Setup DLL

photowiz.dll....Photo Printing Wizard

PRINT.EXE.......(Print). A command-line print utility used to send print jobs to a port.

printui.dll.....Print UI DLL

spoolss.dll.....Spooler SubSystem DLL

SPOOLSV.EXE.....(Spooler SubSystem App. Print Spooler Service). The spooler service for the print subsystem.

win32spl.dll....32-bit Spooler API DLL

winspool.exe....Windows 16-bit WOW Psuedo Printer Driver (loaded as WINSPOOL.DRV)

wpnpinst.exe....Support exe for Internet Printing


Then I delete this folder and its contents:

C:\WINDOWS\system32\spool

---------------------------------------

Protected Storage

Delete these 3 files from C:\WINDOWS\system32:

psbase.dll......Protected Storage default provider
pstorec.dll.....Protected Storage COM interfaces
pstorsvc.dll....Protected storage server

---------------------------------------

QoS RSVP

Delete these 6 files from C:\WINDOWS\system32:

RSVP.EXE......(Resource Reservation Protocol. QoS RSVP Service.). A protocol that sets up a reserved pathway with a specific quality of service for a set of data packets.

rsvp.ini......
rsvpcnts.h....
rsvpmsg.dll...RSVP Messages DLL

rsvpperf.dll..Microsoft® Windows™ RSVP Performance Monitor

rsvpsp.dll....Microsoft Windows Rsvp 1.0 Service Provider

---------------------------------------

Remote Access Connection Manager

and

Remote Access Auto Connection Manager


Delete these 17 files from C:\WINDOWS\system32:

rasauto.dll....Remote Access AutoDial Manager

RASAUTOU.EXE...(Remote Access Dialer). A program that allows remote dial-up connections between PCs.

raschap.dll....Remote Access PPP CHAP
rasctrnm.h.....
rasctrs.dll....Windows NT Remote Access Perfmon Counter dll
rasctrs.ini....
RASDIAL.EXE....(RAS Command-Line Dialer). A client-side user interface.

rasmans.dll....Remote Access Connection Manager

rasmontr.dll...RAS Monitor DLL

rasmxs.dll.....Remote Access Device DLL for modems, PADS and switches

RASPHONE.EXE...(RAS Phone). The Dial-Up Networking Phonebook application.

rasppp.dll.....Remote Access PPP
rasrad.dll.....Remote Access Service NT RADIUS client module
rassapi.dll....Remote Access Admin APIs dll
rasser.dll.....Remote Access Media DLL for COM ports
rastapi.dll....Remote Access TAPI Compliance Layer
rastls.dll.....Remote Access PPP EAP-TLS

---------------------------------------

Remote Desktop Help Session Manager

Delete these 6 files from C:\WINDOWS\system32:

MSTSC.EXE......(Remote Desktop Connection). An application that enables a computer to be accessed remotely.

racpldlg.dll...Microsoft Remote Assitance
rcbdyctl.dll...Microsoft Remote Assistance

RCIMLBY.EXE....(Remote Assistance). A program used to help another user with a computer problem over the network or Internet.

RDSADDIN.EXE...(Remote Desktop Addin). A Remote Desktop Terminal Services session add-in.

sessmgr.exe....Microsoft® Remote Desktop Help Session Manager

---------------------------------------

Removable Storage

Delete these 8 files from C:\WINDOWS\system32:

ntmsdba.dll...Removable Storage Manager DB Object APIs
ntmsevt.dll...Removable Storage Manager Event Logger
ntmsmgr.msc...Removable Storage Console
ntmsoprq.msc..Removable Storage Console
ntmssvc.dll...Removable Storage Manager

RSM.EXE.......(Removable Storage Manager). Command-line interface for the Removable Storage Manager.

RSMSINK.EXE...(Removable Storage Manager). Sink layer for the Removable Storage Manager.

RSMUI.EXE.....(User Interface). A Removable Storage Manager component.

---------------------------------------

Routing and Remote Access

Delete these 32 files from C:\WINDOWS\system32:

adptif.dll......IPX Interface via WinSock

ALG.EXE.........(Application Layer Gateway Service). Used to configure the different accessibility options of your system. (Application Gateway Service...This Service is required for Windows Firewall.)

IPCONFIG.EXE....(IP Configuration). A TCP/IP command-line tool that displays the IP configuration for all installed interfaces and can be used to renew and release DHCP leases.

ipmontr.dll.....IP Router Monitor DLL
ipnathlp.dll....Microsoft NAT Helper Components
ippromon.dll....IP Protocols Monitor DLL
iprtprio.dll....IP Routing Protocol Priority DLL
iprtrmgr.dll....IP Router Manager

IPSEC6.EXE......(Ipv6 Security Configuration Utility). A tool for configuring IPv6 security.

ipsecsnp.dll....Internet Protocol Security Policy Management
ipsecsvc.dll....Windows IPSec SPD Server DLL
ipsmsnap.dll....IP Security Monitor Snapin

IPV6.EXE........(Ipv6 Configuration Utility). A tool to install and configure IPv6.

ipv6mon.dll.....IF Monitor DLL
ipxmontr.dll....IPX Router Monitor DLL
ipxpromn.dll....IPX Router Monitor DLL
ipxrip.dll......IPX RIP

IPXROUTE.EXE....(IPX Route). A utility used to display and control the IPX routes when using the IPX protocol.

ipxrtmgr.dll....IPX ROUTER MANAGER
ipxsap.dll......SAP Agent DLL
ipxwan.dll......IPXWAN

mprddm.dll......Demand Dial Manager Supervisor
mprdim.dll......Dynamic Interface Manager
mprmsg.dll......Multi-Protocol Router Service Messages DLL
mprui.dll.......Multiple Provider

NETSH.EXE.......(Routing and Remote Access Service Configuration Tool). Used to configure RRAS settings.

PING6.EXE.......(Ipv6 Ping Command). A utility that verifies connectivity to a specific IP address or hostname.

ROUTEMON.EXE....(Router Console Monitor). A utility that is no longer supported. Refers you to the netsh command.

rtm.dll.........Routing Table Manager

TRACERT6.EXE....(Ipv6 Traceroute Tool). A tool to trace the route a packet would take to get from the source host to the destination host.

winipsec.dll....Windows IPSec SPD Client DLL

wship6.dll......IPv6 Helper DLL


Then delete these 5 files from C:\WINDOWS\system32\drivers:

ipfltdrv.sys....IP FILTER DRIVER
ipinip.sys......IP in IP Encapsulation Driver
ipnat.sys.......IP Network Address Translator

nwlnkflt.sys....NWLINK2 Traffic Filter Driver
nwlnkfwd.sys....NWLINK2 Forwarder Driver

---------------------------------------

Secondary Logon

Delete these 2 files from C:\WINDOWS\system32:

sclgntfy.dll....Secondary Logon Service Notification
seclogon.dll....Secondary Logon Service DLL

---------------------------------------

Security Accounts Manager

---------------------------------------

Security Center

---------------------------------------

Smart Card

Delete these 9 files from C:\WINDOWS\system32:

scarddlg.dll.....SCardDlg - Smart Card Common Dialog
scardssp.dll.....Smart Card Base Service Providers

SCARDSVR.EXE.....(Smart Card Resource Management Server). Smart Card Server component.

sccbase.dll......Infineon SICRYPT® Base Smart Card CSP

sccsccp.dll......Infineon SICRYPT® Smart Card Crypto Provider COM Objects

scredir.dll......Smart Card Redirection for TS
slbcsp.dll.......Schlumberger Smart Card CryptoAPI Library

slbiop.dll.......Schlumberger Smart Card Interoperability Library v2

slbrccsp.dll.....Schlumberger Smart Card CryptoAPI Resource File

---------------------------------------

SSDP Discovery Service

---------------------------------------

System Restore Service

Delete this file from C:\WINDOWS\system32\drivers:

sr.sys...........System Restore Filesystem Filter Driver


Then delete the Restore folder and its entire contents:

C:\WINDOWS\system32\Restore


Then delete these 3 individual files from C:\WINDOWS\system32:

srclient.dll.....SR CLIENT DLL
srrstr.dll.......System Restore Restore Operation Library
srsvc.dll........System Restore Service

---------------------------------------

TCP/IP NetBIOS Helper

Delete these 19 files from C:\WINDOWS\system32:

ARP.EXE.......(ARP). The Address Resolution Protocol command-line utility used to manage the ARP cache on TCP/IP systems.

FINGER.EXE....(Finger). A TCP/IP utility used to obtain information about a user account via a remote system.

HOSTNAME.EXE..(Hostname). A TCP/IP command-line utility that displays the hostname of the current system.

lmhsvc.dll....TCPIP NetBios Transport Services DLL

LPQ.EXE.......(Line Printer Queue). Displays printer queue information on a printer hosted on a Unix system.

LPR.EXE.......(Line Printer.) Prints to a printer hosted on a Unix system.

NBTSTAT.EXE...(NBT Statistics). Displays NetBIOS over TCP/IP statistics.

NETSTAT.EXE...(Network Statistics). Displays TCP/IP network statistics.

PATHPING.EXE..(PathPing Command). A command for verifying an IP route that enables the user to specify options to test for along the path.

PING.EXE......(PING). A TCP/IP utility used to test the existence of, or the capability to communicate with, remote systems.

RCP.EXE.......(Remote Copy). A TCP/IP utility used to copy files between the current system and a remote RSHD (Remote Shell) server.

REXEC.EXE.....(Remote Execute). Used to issue commands on remote systems running the REXEC service.

ROUTE.EXE.....(Route). Used to view and edit the local routing table.

RSH.EXE.......(Remote Shell). Issues commands on remote systems running the RSH service.

tcpmib.dll....Standard TCP/IP Port Monitor Helper DLL
tcpmon.dll....Standard TCP/IP Port Monitor DLL
tcpmon.ini....
tcpmonui.dll..Standard TCP/IP Port Monitor UI DLL

TCPSVCS.EXE...(TCP Services). The TCP Services provider.

TRACERT.EXE...(Traceroute). Used to identify the route between the local system and a remote system on a TCP/IP network.

---------------------------------------

Telephony

Delete these 8 files from C:\WINDOWS\system32:

tapi3.dll........Microsoft TAPI3
tapi.dll.........Microsoft® Windows™ Telephony Server1

tapiperf.dll.....Microsoft® Windows™ Telephony Performance Monitor

tapisrv.dll......Microsoft® Windows™ Telephony Server
tapiui.dll.......Microsoft® Windows™ Telephony API UI DLL
termmgr.dll......Microsoft TAPI3 Terminal Manager

TCMSETUP.EXE.....(Telephony Client Setup). Used to set up the Telephony configuration on a Windows XP client.

telephon.cpl.....Telephony Control Panel

---------------------------------------

Terminal Services

First, Disable Security Accounts Manager Service so no errors report to Event Viewer.

Delete these 6 files from C:\WINDOWS\system32\drivers:

rdpcdd.sys......RDP Miniport
rdpdr.sys.......Microsoft RDP Device redirector

rdpwd.sys.......RDP Terminal Stack Driver (US/Canada Only, Not for Export)

tdpipe.sys......Named Pipe Transport Driver
tdtcp.sys.......TCP Transport Driver
termdd.sys......Terminal Server Driver


Delete these 2 files from C:\WINDOWS\system32\wbem:

tscfgwmi.mfl
tscfgwmi.mof


Delete these 41 files from C:\WINDOWS\system32:

cdmodem.dll....Modem Connection Driver
cfgbkend.dll...Configuration Backend Interface

drprov.dll.....(Microsoft Terminal Server Network Provider) This file may or may not delete for you. Windows won't allow it to be deleted on my system.

icaapi.dll.....DLL Interface to TermDD Device Driver

LOGOFF.EXE.....(Session Logoff Utility). A utility to terminate a user's session on the PC.

MSG.EXE........(Message Utility). A utility for sending messages to other users.

mstlsapi.dll...

MSTSC.EXE......(Remote Desktop Connection). An application that enables a computer to be accessed remotely.

mstscax.dll....Terminal Services ActiveX Client

perfts.dll.....Windows 2000 Terminal Services Performance Objects

QAPPSRV.EXE....(Query Terminal Server Utility). Identifies terminal servers on the network.

QPROCESS.EXE...(Query Process Utility). Displays processes running on a machine. Can be sorted by username and other criteria.

QWINSTA.EXE....(Query Session Utility). Displays session information and related statistics, such as connect and flow control settings.

rdchost.dll....RDSHost Client Module

rdpcfgex.dll...Terminal Server Connection Configuration Extension for the RDP protocol

RDPCLIP.EXE....(RDP Clip Monitor). A Remote Desktop Protocol component.

rdpsnd.dll.....Terminal Server MultiMedia Driver
rdpwsx.dll.....RDP Extension DLL

RDSADDIN.EXE...(Remote Desktop Addin). A Remote Desktop Terminal Services session add-in.

RDSHOST.EXE....(RDSHost Server Module). A Remote Desktop Service module.

REGINI.EXE.....(Registry Initializer). A utility to change Registry values from a command line or script.

remotepg.dll...Remote Sessions CPL Extension

RESET.EXE......(Reset Utility). A Terminal Services reset utility.

RWINSTA.EXE....(Reset Session Utility). A utility to reset a hardware or software session.

SHADOW.EXE.....(Session Utility). A Session Remote Control utility.

termsrv.dll....Terminal Server Service
tsappcmp.dll...Terminal Services Application Compatibility DLL
tscfgwmi.dll...Terminal Server Configuration WMI provider

TSCON.EXE......(Session Connection Utility). Attaches a user session to a terminal session.

TSCUPGRD.EXE...(Setup Custom Action DLL). The Terminal Services setup component.

tsddd.dll......Framebuffer Display Driver

TSDISCON.EXE...(Session Disconnect Utility). A Terminal Services utility for disconnecting a session.

TSKILL.EXE.....(End Process Utility). A utility to terminate a Terminal Services process on a session-by-session basis or for all sessions.

tslabels.h.....
tslabels.ini...

TSSHUTDN.EXE...(System Shutdown Utility). A Terminal Services utility to perform a controlled shutdown of the server. Includes variables for rebooting or powering down the server.

usrlogon.cmd
utildll.dll....WinStation utility support DLL

winsta.dll.....(Winstation Library) This file may or may not delete for you. Windows won't allow it to be deleted on my system.

wscsvc.dll.....Workstation Service DLL

---------------------------------------

Uninterruptible Power Supply

Delete this file from C:\WINDOWS\system32:

UPS.EXE........(UPS Service). The uninterruptible power supply service.

---------------------------------------

Uninversal Plug and Play Device Host

Delete these 5 files from C:\WINDOWS\system32:

ssdpsrv.dll....SSDP Service DLL

udhisapi.dll...UPnP Device Host ISAPI Extension

UPNPCONT.EXE...(UPnP Device Host Container). A Universal Plug and Play component.

upnphost.dll...UPnP Device Host ISAPI Extension
upnpui.dll.....UPNP Tray Monitor and Folder

---------------------------------------

Volume Shadow Copy

Delete these 5 files from C:\WINDOWS\system32:

eventcls.dll..Microsoft® Volume Shadow Copy Service event class

swprv.dll.....Microsoft® Volume Shadow Copy Service software provider

vss_ps.dll....Microsoft® Volume Shadow Copy Service proxy/stub

VSSADMIN.EXE..(Shadow Copy Service). Command-line interface for the Volume Shadow Copy Service.


VSSVC.EXE.....(Volume Shadow Copy Service). Manages and implements a volume shadow copy for backup purposes.

---------------------------------------

WebClient

Delete this file from C:\WINDOWS\system32:

webclnt.dll....Web DAV Service DLL

---------------------------------------

Windows Firewall/Internet Connection Sharing (ICS)

Before I disable Windows Firewall/Internet Connection Sharing (ICS), I first turn off Windows Firewall: Start > Control Panel > Firewall > Put a tick in "Off (not reccomended)"

Then delete these 2 files from C:\WINDOWS\system32\drivers:

ip6fw.sys.....IPv6 Windows Firewall Driver

tcpip6.sys....IPv6 driver


Then delete these 5 files from C:\WINDOWS\system32:

firewall.cpl..Windows Firewall Control Panel
fwcfg.dll.....Windows Firewall Configuration Helper

IPSEC6.EXE....(Ipv6 Security Configuration Utility). A tool for configuring IPv6 security.

ipsecsvc.dll..Windows IPSec SPD Server DLL

IPV6.EXE......(Ipv6 Configuration Utility). A tool to install and configure IPv6.

---------------------------------------

Windows Image Acquistion (WIA)

Delete these 10 files from C:\WINDOWS\system32:

camocx.dll.....WIA Camera View DLL

WIAACMGR.EXE...(Windows Picture Acquisition Wizard). A program that steps you through downloading pictures from a digital device to a file location.

wiadefui.dll...WIA Scanner Default UI
wiadss.dll.....WIA TWAIN comptibility layer
wiavusd.dll....WIA Video Stream device USD
wiascr.dll.....WIA Scripting Layer
wiaservc.dll...Still Image Devices Service
wiashext.dll...Imaging Devices Shell Folder
wiavideo.dll...WIA Video


Then, to delete the Scanners and Cameras Control Panel Applet Icon:

Delete this registry key...

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
\Explorer\ControlPanel\NameSpace\{E211B736-43FD-11D1-9EFB-0000F8757FCD}

---------------------------------------

Windows Management Instrumentation

IMPORTANT: First, move the "framedyn.dll" from C:\WINDOWS\system32\wbem to C:\WINDOWS\system32. It is the only important file in the folder.

Sometimes when you run System Restore you'll get the error 'System restore was unable to start due to a missing framedyn.dll. Please reinstall the application to fix this problem'.

Without "framedyn.dll" you might also get an error when right-clicking on My Computer. Keeping this file in the system32 folder prevents this from happening.

You will also need to disable Windows Management Instrumentation in Services.

When you go to disable WMI in Services, you will also be disabling Windows Firewall/Internet Connection Sharing (ICS). Windows will pop up window up telling you that when you go to disable WMI.

Before I disable Windows Firewall/Internet Connection Sharing (ICS), I first turn off Windows Firewall itself:

Start > Control Panel > Firewall > Put a tick in "Off (not reccomended)"


The files listed below belong to Windows Firewall/Internet Connection Sharing (ICS).

From C:\WINDOWS\system32\drivers:

ip6fw.sys.....IPv6 Windows Firewall Driver
tcpip6.sys....IPv6 driver

From C:\WINDOWS\system32:

firewall.cpl..Windows Firewall Control Panel
fwcfg.dll.....Windows Firewall Configuration Helper

IPSEC6.EXE....(Ipv6 Security Configuration Utility). A tool for configuring IPv6 security.

ipsecsvc.dll..Windows IPSec SPD Server DLL

IPV6.EXE......(Ipv6 Configuration Utility). A tool to install and configure IPv6.


Then go into safemode and delete the entire contents of C:\WINDOWS\system32\wbem.

I've found it best to delete the contents of the wbem folder in safemode, because there are about three of its files that will not delete for me unless I do.


Upon rebooting, delete these 5 additional files from C:\WINDOWS\system32:

cmprops.dll....WMI Snapins

licwmi.dll.....Windows Product Activation Configuration WMI provider

mmfutil.dll....WMI Snapin Helpers

servdeps.dll...(WMI Snapins) The "servdeps.dll" file may not delete for you until you reboot. It may not even delete after a reboot. Either way, it's not all that important.)

wmimgmt.msc....


You might as well delete this folder and its contents, too:

C:\Program Files\Common Files\Microsoft Shared\MSInfo

And its shortcut here:

C:\Documents and Settings\All Users\Start Menu\Programs\Accessories

The System Information Utility will not work without WMI.

I use "EVEREST Home Edition" for my system information needs. It's much better, I think. It offers many more details.

http://www.lavalys.com/products.php?lang=en

---------------------------------------

Windows Time

I keep this file from C:\WINDOWS\system32 (It will not delete anyway for me):

w32time.dll...Windows Time Service


I delete this file from C:\WINDOWS\system32:

w32tm.exe.....Windows Time Service Diagnostic Tool

---------------------------------------

Windows User Mode Driver Framework

Delete these 2 files from C:\WINDOWS\system32:

wdfapi.dll...Windows User Mode Driver Framework API
wdfmgr.exe...Windows User Mode Driver Manager

---------------------------------------

Wireless Zero Configuration

Delete these 2 files from C:\WINDOWS\system32:

irprops.cpl..Wireless Link Control Panel Applet

wzcdlg.dll...Wireless Zero Configuration Service UI

---------------------------------------

WMI Performance Adapter

Delete this file from C:\WINDOWS\system32\wbem:

wmiapsrv.exe

---------------------------------------


Whether you choose to disable some, or all of the same Services I do, you are bound to start experiencing a few DCOM Errors in the Event Viewer upon first rebooting your machine.

DON'T PANIC! I'm going to fix that for you right now.

(Even though we know that DCOM Error are benign, right?)


When I am done with the above...

I run my registry cleaners to pickup what could not be unregistered with the "Register - Unregister This DLL v1.0.0.1" app I told you about in PART 1.

Then I make sure to purge the Prefetch folder of all its files, (C:\WINDOWS\Prefetch), because I want a new Layout.ini file created that does not point to some of the files I have removed.

Windows will remake the Layout.ini file automatically after a couple of reboots of your system, and some up time in an idle state (usually in around twenty minutes or so).

There is a neat little app called "Service Installer.exe" (which I can't find on Google right now for you) that can eliminate the registry entry for Services you've disabled. Then their entries will no longer show up in the Services Window.

Slimming Down Windows XP: The Complete Guide PART 3

Documents and Settings Folders


-----------------------------------------------------------

C:\Documents and Settings...

-----------------------------------------------------------

I completely delete the Default User folder, not just its contents.

Whenever a new user logs on for the first time, Windows copies settings from the Default User profile to the newly created user profile. Basically, the Default User profile is as a blueprint that Windows uses to initialize new logins.

I completely delete the LocalService folder, not just its contents.

I completely delete the NetworkService folder, not just its contents.

ALTHOUGH, I notice that the NetworkService folder will no longer delete for me, even with System File Protection disabled. It either has something to do now with SP2, or because I am now using DSL.

-----------------------------------------------------------

C:\Documents and Settings\All Users...

-----------------------------------------------------------

C:\Documents and Settings\All Users\DRM

Digital Rights Management (DRM) provides functions relating to Digital Rights.

Per Microsoft: The Windows Media DRM platform enables the secure delivery of protected content for playback on a computer, portable device, or network device.

I find I can still burn a music cd off my computer using Windows Media 10 without the DRM files and the cd will still play on my home cd player.

I delete the DRM folder and its contents.

Then I delete these files from C:\WINDOWS\system32:

drmclien.dll...DRM Client DLL
drmstor.dll....DRM Store DLL
drmv2clt.dll...DRMv2 Client DLL

msnetobj.dll...DRM ActiveX Network Object
mssap.dll......DRM

WMDRMdev.dll...Windows Media DRM for Network Devices Registration DLL

WMDRMNet.dll...Windows Media DRM for Network Devices DLL

C:\Documents and Settings\All Users\Documents (or Shared Documents)\My Pictures
I delete the My Pictures folder and its contents.

(When you delete the desktop.ini file from Shared Documents, the folder is renamed to simply Documents.)

-----------------------------------------------------------

Removing the subfolders in Documents (or Shared Documents) Permanently...

In order to permanently delete the My eBooks, My Music, My Pictures, My Videos subfolders from appearing in the Documents (or Shared Documents) folder in C:\Documents and Settings\All Users\Documents (or Shared Documents) and in My Documents in C:\Documents and Settings\USERNAME\My Documents, you first have to unregister the mydocs.dll, and then delete the folders.

(Although, it's very difficult to stop the Shared Music folder from returning in C:\Documents and Settings\All Users\Documents (or Shared Documents). We'll get to that down below.)

To unregister:

Start > Run > type in - regsvr32 /u mydocs.dll and click OK

Then go here and delete their subfolders folders:

C:\Documents and Settings\All Users\Documents (or Shared Documents)

and here

C:\Documents and Settings\USERNAME\My Documents

Now, about the "Shared Music" folder in C:\Documents and Settings\All Users\Documents (or Shared Documents)....

Go to Windows Media Player Tools > Options > Library tab > Click on Monitor Folders > Highlight C:\Documents and Settings\All Users\Documents\My Music > then click Remove. You can even remove any other paths to folders you may see in there.

Now...

Again in WMP go to Tools > Options > Rip Music tab. Under "Rip music to this location" click the Change button. Then create your own special folder in a location of your choice. I made a folder called Temporary Downloads on my D Drive.

(Keep this in mind, if at some point you clear the MUI cache for ripping and burning Cd's, the new designated folder path you created in WMP could very well disappear, and WMP will default to the path C:\Documents and Settings\All Users\Documents\My Music.)

While you're in WMP, go to Tools > Options > Privacy and take the tick out of "Update music files by retrieving media info from the internet." I do this mostly to stop album cover art from cropping up on my computer. You may like the album art.

The "Shared Music" folder in C:\Documents and Settings\All Users\Documents (or Shared Documents), is the most difficult folder to keep from returning.

However, you can delete the Value data of a certain registry string. (Let me say here, this is to be done in addition to what I have outlined above.)

Navigate in the Registry Editor to...

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders.

In the right panel look for this entry...

My Music REG_SZ C:\Documents and Settings\USERNAME\My Documents\My Music

You will notice that since you unregistered the mydocs.dll as I outlined above, that the Value data for "My Pictures" and "My Video" have already been removed.

Double click on My Music, and delete the Value data. Don't delete the entire String, just the value data.

Now navigate also to here:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

In the right panel look for this entry...

CommonMusic REG_SZ C:\Documents and Settings\All Users\My Documents\My Music

Just as you did above, Double click on CommonMusic, and delete the Value data. Don't delete the entire String, just the value data.

NOTE: If you use MRU Blaster, the Value Data you just removed will return here:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders.

...and also, the My Music folder in C:\Documents and Settings\USERNAME\My Documents will return.

...and, the "Rip music to this location" you chose in Windows Media Player will revert back to C:\Documents and Settings\USERNAME\My Documents\My Music.

NOTE: Using Ad-aware to remove the MRU (Most Recently Used), the Value Data you just removed will return Here:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

...and, the Shared Music folder back to C:\Documents and Settings\All Users\Documents will return.

There is one another part of this tweak that needs some work. I don't have it figured out yet, so if you have any ideas, let me know...

When you rip a music CD, the "Shared Music" folder will return to C:\Documents and Settings\All Users\Documents (or Shared Documents) ...no matter what. But this is the only time, as far as I can see.

-----------------------------------------------------------

C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Accessibility
I delete the Accessibility folder and its contents.

Then I delete these additional files that belong to Accessibility Options...

From C:\WINDOWS\Help:

acc_dis.chm
access.chm
access.hlp
accessib.chm

magnify.chm
magnify.hlp

osk.chm
osk.hlp

utilmgr.chm
utilmgr.hlp

From C:\WINDOWS\system32:

access.cpl
accwiz.exe

mag_hook.dll
magnify.exe

narrator.exe
narrhook.dll

osk.exe

sethc.exe

utilman.exe

C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Communications
I delete the Communications folder and its contents.

This removes its shortcuts from my desktop. I rarely access them anyway. If I do I'll usually enter the Control Panel to get to them.

C:\Documents and Settings\All Users\Templates
I delete the Templates folder.

-----------------------------------------------------------

C:\Documents and Settings\All Users\Application Data\Microsoft...

-----------------------------------------------------------

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto
I delete the Crypto folder and its subfolders.

C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson
I delete the Dr Watson folder.

The Dr Watson folder will eventually return unless you disable Dr Watson.

To Disable Dr. Watson go to this location in your registry:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AeDebug

Delete the AeDebug key.

C:\Documents and Settings\All Users\Application Data\Microsoft\HTML Help
You can delete this folder.

However, the HTML Help folder will return should you open an HTML Help File (.chm extention file).

C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\Quick Launch

I delete the shortcuts I never use in Quick Launch. Then I move the ones I do use to C:\Documents and Settings\USERNAME\Application Data\Microsoft\Internet Explorer\Quick Launch

I keep the Quick Launch folder in case certain programs look for it when they are installing.

C:\Documents and Settings\All Users\Application Data\Microsoft\Media Index
I delete the Media Index folder.

C:\Documents and Settings\All Users\Application Data\Microsoft\Media Player
I delete the Media Player folder and its contents.

C:\Documents and Settings\All Users\Application Data\Microsoft\Network

Inside the Network folder are two subfolders, Connections and Downloader.

You can the delete the Network folder and its contents.

However, the Network folder will be re-generated upon your next visit to Windows Update, along with one of its subfolders, Downloader.

The subfolder, Connections, and its contents, will not be re-generated. Since one of the subfolders within the Connections folder, the Pbk folder, contains a sharedaccess.ini file, I personally leave the Network folder alone.

C:\Documents and Settings\All Users\Application Data\Microsoft\User Account Pictures
I delete all the avatars.

C:\Documents and Settings\All Users\Application Data\Microsoft\User Account Pictures\Default Pictures
I delete the avatars I will probably never use, but keep the folder in case I want to place a few of my avatars in the folder.

-----------------------------------------------------------

C:\Documents and Settings\USERNAME...

-----------------------------------------------------------

C:\Documents and Settings\USERNAME\Favorites
I delete "MSN.com" and "Radio Station Guide".

C:\Documents and Settings\USERNAME\Favorites\Links
I delete the Links folder and it's contents.

You need to apply this reg tweak to delete the Links folder permanently:

-----------------------------------------------------------

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar]
"LinksFolderName"=""

-----------------------------------------------------------

C:\Documents and Settings\USERNAME\My Documents\My eBooks
I delete this folder.

C:\Documents and Settings\USERNAME\My Documents\My Music
I delete this folder and its contents.

C:\Documents and Settings\USERNAME\My Documents\My Pictures
I delete this folder and its contents.

C:\Documents and Settings\USERNAME\SendTo
I delete any SendTo items in the right-click context menu I will never use, and place a few of my own here I'd rather have.

C:\Documents and Settings\USERNAME\Start Menu\Programs\Accessories\Entertainment

I take the Windows Media Player shortcut here and cut and move it to the C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Entertainment, just to keep everything together.

Then I come back and delete the...

C:\Documents and Settings\USERNAME\Start Menu\Programs\Accessories folder

C:\Documents and Settings\USERNAME\Templates
I delete the contents of the Templates folder but keep the folder, as it will not delete.

C:\Documents and Settings\USERNAME\UserData
You can delete the contents of this folder, but keep the folder.

New contents for the UserData folder will be re-generated upon your next visit to Windows Update.

------------------------------------------------------------

C:\Documents and Settings\USERNAME\Application Data...

------------------------------------------------------------

C:\Documents and Settings\USERNAME\Application Data\Help
I delete the Help folder.

C:\Documents and Settings\USERNAME\Application Data\Identities
I delete the Identities folder and its contents.

------------------------------------------------------------

C:\Documents and Settings\USERNAME\Application Data\Microsoft...

------------------------------------------------------------

C:\Documents and Settings\USERNAME\Application Data\Microsoft\Credentials
You can delete the Credentials folder and its contents.

However, the Credentials folder and its contents will be re-generated by Windows immediately upon rebooting. So there's really not much point in deleting it.

C:\Documents and Settings\USERNAME\Application Data\Microsoft\CryptnetUrlCache\Content

and

C:\Documents and Settings\USERNAME\Application Data\Microsoft\CryptnetUrlCache\MetaData

I delete the files in the sub-folders of the CryptnetUrlCache: Content and MetaData.

I find the files in Content and MetaData, the sub-folders of the CryptnetUrlCache folder, really interesting.

The very first time I deleted all the files within these two folders, it really blew my mind...

I looked in some of the files in these folders using Notepad, and it looked like a record of URL History of some kind.
By the name of the folder, "CryptnetUrlCache," I figured they must logically be cache-type files.

I deleted all the files within these two folders. Then I cleaned up my system as usual with my Temp File Cleaners. Rebooted, and defragged. Zowie! My browser windows started opening up so much faster it was simply unbelievable.

So, I asked my friend, 2McAbre, about them...

Per 2McAbre:

Those folders are where XP stores a "verified and certified" websites security certificates for such things like SSL (Secure Socket Layers) logins for if you are paying a bill, or shopping at Amazon.com.

If you want to empty these folders (with msie open) "Click on Tools", select "Internet Options" then click on the "Content" tab.

In the center area where it says "Certificates"… Just click on the Clear SSL button to empty these folders of any temporary certificates.

P.S. The reason it it seems to slow IE down is because XP sort of validates each certificate and sort of "Checks" to make sure they are still valid. So its a good idea to empty the SSL cache every once and awhile.

I took it one step further...

Tools > Internet Options > Content > Certificates button > Intermediate Certification Authorities tab > Highlight an entry > Click on Remove.

Tools > Internet Options > Content > Certificates button > Trusted Root Certification tab > Highlight an entry > Click on Remove.

Tools > Internet Options > Content > Certificates button > Untrusted Publishers tab > Highlight an entry > Click on Remove.

Same here...

Tools > Internet Options > Content > Publishers button > Trusted Root Certification tab > Highlight an entry > Click on Remove.

Tools > Internet Options > Content > Publishers button > Untrusted Publishers tab > Highlight an entry > Click on Remove.

Per 2McAbre:

Yes you can highlight and remove all the others too if you "Really want too. Those are things like when you get the security window when you install windows update site stuff? Where you can check the box that will always "trust" Microsoft?

If you have ever checked one of those boxes there will be a "trust" certificate in one of these areas. Also trusted sites are kept recorded in one of these areas as well as "sites you don't want anything to do with".

Probing deeper, figured out all this has to do with Tools > Internet Options > Advanced > Scroll down to Security section >
"Check for server certificate revocation (requires restart)"

Specifies whether you want Internet Explorer to check an Internet's site certificate to see if it has been revoked before accepting it as valid.

I chose to UNCHECK that particular option.

As it turned out, it doesn't hurt to clear all that out. Because I did, and then I went directly to Windows Update...and what do you suppose happened? The entries needed for Windows Update were recreated.

Not only that, but I noticed a lot of those entries had very old expiration dates, that have since expired.

-----------------------------------------------------------

C:\Documents and Settings\USERNAME\Application Data\Microsoft\Crypto
You can delete the Crypto folder and its contents.

However, the Crypto folder and its contents will be re-generated by Windows a short time after rebooting.

C:\Documents and Settings\USERNAME\Application Data\Microsoft\HTML Help
You can delete the HTML Help folder and its contents.

However, the HTML Help folder and its contents will return should you open an HTML Help File (.chm extention file).

C:\Documents and Settings\USERNAME\Application Data\Microsoft\Internet Explorer\Quick Launch
I delete the shortcuts I never use in Quick Launch.

C:\Documents and Settings\USERNAME\Application Data\Microsoft\MMC
You can delete the MMC folder and its contents.

However, the MMC folder may be re-generated will be re-generated upon your next visit to Windows Update.

C:\Documents and Settings\USERNAME\Application Data\Microsoft\Protect
You can delete the Protect folder and its contents.

However, the Protect folder and its contents will be re-generated upon your next visit to Windows Update.

C:\Documents and Settings\USERNAME\Application Data\Microsoft\SystemCertificates
You can delete the SystemCertificates folder and its contents.

However, the SystemCertificates folder and its contents will be re-generated upon your next visit to Windows Update.

------------------------------------------------------------

C:\Documents and Settings\USERNAME\Local Settings\Application Data...

------------------------------------------------------------

C:\Documents and Settings\USERNAME\Local Settings\Application Data\Help
You can delete the Help folder.

However, the Help folder will return should you open a Help file (.hlp extention file.)

C:\Documents and Settings\USERNAME\Local Settings\Application Data\Microsoft...

C:\Documents and Settings\USERNAME\Local Settings\Application Data\Microsoft\CD Burning
You can delete the CD Burning folder.

However, the CD Burning folder will be re-generated by Windows immediately upon rebooting your system.

C:\Documents and Settings\USERNAME\Local Settings\Application Data\Microsoft\Credentials
You can delete the Credentials folder and its contents.

However, the Credentials folder and its contents will be re-generated by Windows immediately upon rebooting your system.

C:\Documents and Settings\USERNAME\Local Settings\Application Data\Microsoft\HelpCtr
You can delete the HelpCtr folder.

However, the HelpCtr folder will return should you click on a Help and Support Center link. For example, in Event Viewer, when you double-click on an event or error, and then click on the link displayed in the Event Properties.

C:\Documents and Settings\USERNAME\Local Settings\Application Data\Microsoft\Media Player
You can delete the Media Player folder and its contents.

However, the Media Player folder, along with new content will be re-generated by Windows just as soon as you use Windows Media Player.

C:\Documents and Settings\USERNAME\Local Settings\Application Data\Microsoft\Windows Media
I delete the Windows Media folder and its contents.

Slimming Down Windows XP: The Complete Guide PART 4

Program Files Folders


---------------------------------------

C:\Program Files...

---------------------------------------

C:\Program Files\ComPlus Applications
I delete the ComPlus Applications folder.

ComPlus Applications. This folder contains files used by ComPlus applications. If there are no ComPlus applications installed on your XP machine, this folder will be empty. COM+ builds on the Microsoft Component Object Model (COM) integrated services and features, making it easier for developers to create and use software components in any language, using any tool.

---------------------------------------

C:\Program Files\Internet Explorer...

Internet Explorer. This folder contains the files and executables for Internet Explorer


C:\Program Files\Internet Explorer\Connection Wizard
I delete the Connection Wizard folder and its contents.

C:\Program Files\Internet Explorer\PLUGINS
I delete the PLUGINS folder.

C:\Program Files\Internet Explorer\SIGNUP
I delete the SIGNUP folder and its contents.

I also these files that belong to them in C:\WINDOWS\system32:

icfgnt5.dll....Internet Connection Wizard
icwdial.dll....Internet Connection Wizard Autodialer
icwphbk.dll....Internet Connection Wizard
inetcfg.dll....Internet Connection Wizard Library
isign32.dll....Internet Signup

---------------------------------------

C:\Program Files\Messenger
I delete the Messenger folder and its contents.

C:\Program Files\microsoft frontpage
I delete the microsoft frontpage folder and its contents.

C:\Program Files\Movie Maker
I delete the Movie Maker folder and its contents.

C:\Program Files\MSN
I delete MSN folder and its contents.

C:\Program Files\MSN Gaming Zone
I delete the MSN Gaming Zone folder and its contents.

C:\Program Files\Netmeeting
I delete the Netmeeting folder and its contents.

I also delete these files that belong to NetMeeting in C:\WINDOWS\system32:

mnmdd.dll

MNMSRVC.EXE...(NetMeeting Remote Desktop Sharing). Allows authorized users to remotely access your desktop.

msconf.dll
msh261.drv
msh263.drv

nmevtmsg.dll
nmmkcert.dll

C:\Program Files\Online Services
I delete the Online Service folder and its contents.

Online Services. This folder contains files used to establish Internet connectivity. These files enable you to set up Internet access through MSN or to select another available Internet service provider.

C:\Program Files\Uninstall Information
I delete the Uninstall Information folder.

C:\Program Files\Windows Media Player\Skins
You can delete here any Windows Media player skins you will never use.

C:\Program Files\WindowsUpdate
I delete the WindowsUpdate folder.

This WindowsUpdate folder once belonged to Windows Update before SP2. Now it is no longer used by Windows Update. Instead Windows Update now uses C:\WINDOWS\SoftwareDistribution.

C:\Program Files\xerox
I delete the xerox folder and its contents.

Xerox. This folder contains all the files used by Xerox applications. By default, this folder is empty.

---------------------------------------

C:\Program Files\Common Files...

Common Files. This folder contains files shared with the Microsoft applications.

---------------------------------------

Let's do the folders for MSAC separately so you'll have a better understanding of what it is we are removing.

MSAC (MS Data Access Components)

Per X-teq: Microsoft Data Access Component (MDAC) includes a service DataFactory, that allows developers to easily access data over the internet on this machine.

However, it can happen that this technique is a security problem. If configured in "Unsafe Mode", it allows hacker to execute code, query data and other ugly things. This bug was fixed with MDAC 2.0, but can still be a problem.

C:\Program Files\Common Files\Microsoft Shared\DAO
I delete the DAO folder and its contents.

C:\Program Files\Common Files\MSSoap
I delete the MSSoap folder and its contents.

C:\Program Files\Common Files\System\ado
I delete the ado folder and its contents.

C:\Program Files\Common Files\System\msadc
I delete the msadc folder and its contents.

C:\Program Files\Common Files\System\Ole DB
I delete Ole DB folder and its contents.

---------------------------------------

C:\Program Files\Common Files\Services
I delete Services folder and its contents.

C:\Program Files\Common Files\SpeechEngines
I delete the SpeechEngines folder and its contents.

---------------------------------------

C:\Program Files\Common Files\Microsoft Shared...

---------------------------------------

C:\Program Files\Common Files\Microsoft Shared\MSInfo
I delete the MSInfo folder and its contents.

This is the System Information Utility.

I use "EVEREST Home Edition" for my system information needs. I think it's much much better. It offers many more details.

http://www.lavalys.com/products.php?lang=en

C:\Program Files\Common Files\Microsoft Shared\Speech
I delete the Speech folder and its contents.

C:\Program Files\Common Files\Microsoft Shared\Stationary
I delete any stationary in the Stationary folder I most likely won't use.

C:\Program Files\Common Files\Microsoft Shared\Web Folders
I delete the Web Folders folder and its contents.

Slimming Down Windows XP: The Complete Guide PART 5

WINDOWS Folders


-------------------------------------------------------

C:\WINDOWS...

-------------------------------------------------------

Individual Files I remove from C:\WINDOWS:


any *.bak Files

All *.bmp Files

any *.log Files (I regularly delete any ".log" Files that turn up in this folder.) "WindowsUpdate.log" will not be deleted in SP2.

any *.old Files

any *.tmp Files

any *.txt Files ("SchedLgU.txt" will not delete. It belongs to Task Scheduler)

_default...Shortcut to MS-DOS Program. Which is an invalid 16-bit program in XP.

clock.avi

control.ini (zero-length file)

desktop.ini

NOTEPAD.EXE (There is another one in system32 I keep.)

----------------------------------------------

soundman.exe (Realtek Audio Configuration Utility)

If I were to keep soundman.exe, I would also need to keep hid.dll (Hid User Library) in C:\WINDOWS\system32, as it needs this file to open.

----------------------------------------------

system.ini (XP doesn't use this. However it will usually return after awhile anyway.)

TASKMAN.EXE (There is a duplicate in system32.)

twain.dll ....Twain Source Manager (Image Acquisition Interface) I don't have a scanner.

twain_32.dll..Twain_32 Source Manager (Image Acquisition Interface) I don't have a scanner.

twunk_16.exe..(Twain Working Group) Thunking Server. Allows 16-bit DOS applications to make 32-bit calls.

twunk_32.exe..(Twain Working Group) Thunking Server. Allows 32-bit DOS applications to make 16-bit calls.

win.ini (XP just ignores it anyway.)

WINHELP.EXE....(Windows Help). A 16-bit Windows Help reader.

-------------------------------------------------------

C:\WINDOWS\$hf_mig$
I delete the $hf_mig$ folder and its contents.

Per Microsoft: When a security update, critical update, update, update rollup, driver, or feature pack installs GDR (General Distribution Releases) version files, the hotfix files are also copied to the %windir%\$hf_mig$ folder. This supports migration to the appropriate files if you later install a hotfix or service pack that includes earlier versions of these files. For example, consider the following scenario:

1. You apply a security update that installs a GDR version of File.dll with a version number of 5.2.3790.1000 and copies a hotfix version of File.dll with a version number of 5.2.3790.1000 to the %windir%\$hf_mig$ folder.

2. You apply a hotfix that includes a hotfix version of File.dll with a version number of 5.2.3790.0000.
In this scenario the hotfix installation in step 2 installs the hotfix version of File.dll (version number 5.2.3790.1000) from the %windir%\$hf_mig$ folder instead of the hotfix version of File.dll (version number 5.2.3790.0000) from the hotfix package.

C:\WINDOWS\$NtUninstallKBxxxxxx$
I delete all the $NtUninstallKBxxxxxx$ folders and their contents.

These $NtUninstallKBxxxxxx$ folders contain the uninstall files for the Windows Updates.

They have nothing to do with the Updates being in good working order on your system. If you are certain that you won't need to uninstall any of these Updates, by all means, delete these folders.

C:\WINDOWS\addins
I delete the addins folder.

ActiveX controls (.ocx) files. The addins folder is always empty on my system.

C:\WINDOWS\AppPatch
You can delete the AppPatch folder and its contents.

The AppPatch folder contains application compatibility .dlls and Appfix packages.

Personally, I don't delete the AppPatch folder and all its contents. When I do, I start receiving Application Popup Error messages in the Event Viewer when I open certain applications.

These are benign error messages for the most part. Your applications will usually still work and function properly under most circumstances.

Myself, I will not tolerate ANY error messages on my system.

I will not delete from my system ANY file or any folder that will cause ANY errors...in the Event Viewer, or anywhere else on my system.

I really dislike seeing error messages on my system...even if they are only benign Application Popup errors...or even the most benign of all errors, DCOM errors.

However, I've found that if I keep these 3 files in the AppPatch folder and delete the other 7 files, I do not recieve any Application Popup errors in the Event Viewer when I open certain programs:

ACGENRAL.DLL

DRVMAIN.SDB

SYSMAIN.SDB

C:\WINDOWS\Config
I delete the Config folder.

The Config folder contains configuration .idf files used by the MIDI sound system. Depending on system configuration, this folder might be empty.

C:\WINDOWS\Connection Wizard
I delete the Connections Wizard folder.

Connection Wizard. Files used for establishing Internet connectivity. Can be an empty folder.

C:\WINDOWS\Cursors
I delete any cursors and animated cursors in here I will never use.

Contains static and animated cursor files. You can use these files by configuring the Mouse applet in the Control Panel.

C:\WINDOWS\Debug

The Debug folder contains .log files that can be used to debug network connectivity and other setup functions.

I delete the Usermode subfolder folder

I delete the WPD subfolder and its contents.

C:\WINDOWS\Downloaded Installations
I delete the Download Installations folder and its contents.

C:\WINDOWS\Downloaded Program Files

Contains ActiveX controls and Java applets that have been downloaded from the Internet.

I delete the contents of the Download Installations folder, and, every so often, I check there for any ActiveX controls or Java applets installed I don't want there.

Alternatively, you can view and delete these ActiveX controls or Java applets by going to Internet Properties -> under Temporary Internet files click on Settings -> then under Temporary Internet files folders click on View Objects.

C:\WINDOWS\Driver Cache\i386

The Driver Cache folder contains a platform subdirectory and a copy of the driver.cab file so that new devices can be easily installed without needing the Windows XP CD. Might contain sp1.cab or sp2.cab if installing an integrated copy of the operating system (Sliptreamed CD).

I delete the drivers.cab and the sp2.cab

I have backup copies of the drivers.cab and the sp2.cab on a backup image I have saved on another partition. Should I ever need one of their original files, I can get it from this backup image.

I DO NOT DELETE ANY NEW FILES EVER CREATED IN i386. As new Updates arrive from Microsoft, newer versions of files are sometimes placed in the "i386" folder. These would then be the only copies of these newer files I will have.

-------------------------------------------

C:\WINDOWS\Fonts

Many .fon extension fonts (The red A fonts) hide, so you need to run a search for *.fon in Search Assistant.

Open Search Assistant.

Be sure under "More Advanced Options" you have "Search for hidden files and folders" selected.

Do a search for *.fon

About 138 of these Fonts should show up.

Highlight these specific 15 Fonts...

cga40woa.fon
cga80woa.fon

coure.fon

dosapp.fon

ega40woa.fon
ega80woa.fon

modern.fon

roman.fon

serife.fon

smalle.fon

sserife.fon

symbole.fon

vgafix.fon
vgaoem.fon
vgasys.fon

At the top of Search Assistant click on "Edit". Then select "Invert Selection". Now you can delete all the other 123 unnecessary Fonts all at once because they will now be the ones highlighted, and the fonts you want to keep won't be.

TTF Font Extentions:

Here is a list of the 19 remaining *.ttf Fonts (The blue-green O fonts) I have in C:\WINDOWS\Fonts.

To see them all the *.ttf fonts, because some are hidden, you need to do a search with your Search Assistant for *.ttf

You can do the Search Assistant trick above to keep these and remove all the others.

arial.ttf
arialbd.ttf
arialbi.ttf
ariali.ttf

framd.ttf
framdit.ttf

lucon.ttf

marlett.ttf

micross.ttf

tahoma.ttf
tahomabd.ttf

times.ttf
timesbd.ttf

trebucbd.ttf

verdana.ttf
verdanab.ttf
verdanai.ttf
verdanaz.ttf

NOTE: To delete the wingding.ttf font, you may have to open the Fonts folder itself, and first delete the Webdings.ttf font, and then the wingding.ttf font.

-------------------------------------------

C:\WINDOWS\Help
You can delete all individual help files in the Help folder.

Personally, I keep most of the HELP Files in the Help folder, and only delete those I know I won't be using or maybe contain subject matter I'm not interested in.

C:\WINDOWS\Help\Tours
I delete Tours folder and its contents.

Then I delete this file that belongs to it in C:\WINDOWS\system32:

tourstart.exe

C:\WINDOWS\ime

The ime folder contains files to support the Input Method Editor. Provides language support for Windows XP.

I delete the ime folder and its contents.

C:\WINDOWS\inf

I delete all the .PNF files in the inf folder.

PNF files, are cache-type files that help making the opening of some applications quicker and more responsive.

These are files when deleted will re-create themselves should its corresponding .inf file by the same name be called upon.

Per Rob Elder: "It's a "pre-compiled" version of the ASCII .INF file that gets created when the Setup first processes a particular .INF file. It's done to speed up searches of the .INF files (as you've noticed there are LOTS of those on the system in Windows 2000/XP); if the dates of the .INF and .PNF files compare favorably (.PNF is later than .INF) the corresponding .PNF file will be used (if present)."

Here's what I do...

If, after I give it some time, (30 days or more), I see that corresponding .PNF files are not re-created alongside the .INF files of the same name, (That would mean my system isn't using those particular .INF files.), I will then go ahead and delete the never-used INF files.

Some people will tell you that it is okay to delete the entire contents of the inf folder, including all the .INF files.

I totally disagree with that. INF files aren't just about installing new hardware. Just to be able to get into the Windows Component Wizard, your system needs 36 INF files.

Here are a couple of examples:

Acronis True Image's Explore Image function needs these 3 .INI Files in C:\WINDOWS\inf:

certclas.inf
layout.inf
volume.inf

Windows Disk Cleanup needs these 36 .INI Files in C:\WINDOWS\inf:

accessor.inf

certclas.inf
communic.inf
comnt5.inf

dtcnt5.inf

fp40ext.inf
fxsocm.inf

games.inf

ieaccess.inf
igames.inf
iis.inf
ims.inf

layout.inf

msmsgs.inf
msnmsn.inf
multimed.inf

netbeac.inf
netiprip.inf
netlpd.inf
netoc.inf
netsnmp.inf
nettpsmp.inf
netupnp.inf

oeaccess.inf
optional.inf

p2p.inf
pinball.inf

rootau.inf

setupqry.inf
startoc.inf
sysoc.inf

tsoc.inf

wbemoc.inf
wbemsnmp.inf
wmaccess.inf
wmpocm.inf

In the meantime, however...

I picked this tip up from NeoMayhem.

Do a search for mdm*.* and delete all the *.inf files that comes up. There were 181 mdm*.* files in my inf folder.

These are all modem drivers, and it is very unlikely you will ever need them. You either have a modem already installed, or if you don't, and decide to add one later, it will come with its own set of drivers.

C:\WINDOWS\java
I delete the java folder and its contents. It is no longer used for Microsoft's (Java) Virtual Machine after SP2.

C:\WINDOWS\lastgood
I delete the lastgood folder and it's contents.

Usually the lastgood folder and its contents will delete on its own after a reboot, after the installation of something or other. But every once in awhile it doesn't.

C:\WINDOWS\Media
I delete most of the sounds Windows makes here.

C:\WINDOWS\msagent

The msagent folder contains Microsoft agent files, which are software services that support using animated characters in the Windows interface to assist users in manipulating the operating system.

I delete the msagent folder and its contents.

Then I delete these help files that belong to it in C:\WINDOWS\Help:

agt0c0a.hlp
agt040b.hlp
agt040c.hlp
agt040e.hlp
agt041d.hlp
agt041f.hlp
agt0405.hlp
agt0406.hlp
agt0407.hlp
agt0408.hlp
agt0409.hlp
agt0410.hlp
agt0413.hlp
agt0414.hlp
agt0415.hlp
agt0416.hlp
agt0419.hlp
agt0816.hlp

C:\WINDOWS\msapps

The msapps folder contains files for backward-compatibility with applications that use shared components.

I delete the msapps folder and its contents.

C:\WINDOWS\msdownld.tmp
I delete the msdownld.tmp folder and its contents.

C:\WINDOWS\mui

MUI (Multilingual-User Interface) Packs give companies flexibility in making language options available to users.

I delete the mui folder.

C:\WINDOWS\nview
I delete the nview folder and its contents.

C:\WINDOWS\Offline Web Pages

Any Web pages designated as offline accessible are stored in the Offline Web Pages folder, along with any images and other files that go with it.

I delete the Offline Web Pages folder and its contents.

C:\WINDOWS\OPTIONS
I delete the OPTIONS folder and its contents.

These are the cab files for my Fast Ethernet NIC Driver Setup Utility.

C:\WINDOWS\PCHealth
I delete all the contents in the PCHealth folder, but I keep the folder.

PCHEALTH. Contains files and subfolders to support the Microsoft Help Center Service. These files support all the Windows XP Help services, including features such as Remote Desktop Assistance.

IMPORTANT: Before you do this "move" msconfig (not copy) from inside the C:\WINDOWS\PCHEALTH\HELPCTR\Binaries to inside the System32 folder, or you will loose it.

Also, you will no longer be able to view System Information. I use the free program "Everest - system information, system diagnostics and benchmarking" instead. It's much better than Windows System Information.

C:\WINDOWS\PeerNet
I delete the PeerNet folder and its contents.

Per Microsoft: The optional Windows Peer-to-Peer networking component provides a framework for peer-to-peer programs to communicate directly between computers over Network Address Translation (NAT) devices and over the Internet.

C:\WINDOWS\PIF
I delete the PIF folder and its contents.

C:\WINDOWS\Profiles
I delete the Profiles folder and its contents.

Seemingly useless folder created by Adobe Reader.

C:\WINDOWS\Provisioning
I delete the Provisioning folder and its contents.

C:\WINDOWS\pss
I delete the pss folder and its contents.

C:\WINDOWS\RegisteredPackages
I delete the RegisteredPackages folder and its contents.

The RegisteredPackages folder contains installation files. They looked to me like mostly belonging to Windows Media Player 10.

C:\WINDOWS\Registration

In the Registration folder I delete all the *.clb files--one at a time--except the one that Windows will not allow me to delete.

C:\WINDOWS\Registration\CRMLog
I delete the CRMLog folder

C:\WINDOWS\repair
I delete the repair folder and its contents.

Registry backup files. These files are updated if you use NTBackup and choose to back up system state files.

Per Rob Elder: "There are backup copies of the hive files in the systemroot\repair directory. But if you are not running MSBackup, they are from the day that the operating system was installed. If you're using MSBackup then they are from the date of the last backup."

C:\WINDOWS\security
I delete the security folder and it's contents

The security folder contains subfolders and files related to security. Includes log files that define the default security applied during setup and templates for assigning new security privileges.

C:\WINDOWS\setupupd
I delete the setupupd folder and its contents.

Dynamic Update storage location

C:\WINDOWS\ShellNew
I delete the ShellNew folder.

C:\WINDOWS\SoftwareDistribution

The "ReportingEvents.log" file will not delete.

I delete all the contents of these 4 subfolders of SoftwareDistribution...

DataStore
Download
EventCache
SelfUpdate < This folder is always empty on my system.

The contents of WebSetup and WuRedir subfolders will be restored upon your each and every visit to Windows Update...so there is really no reason to delete their contents.

C:\WINDOWS\srchasst
I delete the srchasst folder and its contents.

The srchasst folder contains files and subfolders for the Search Companion. I like the way Search Companion performs without these XP updates. (Even though the little puppy is kind of cute.)

-------------------------------------------

C:\WINDOWS\system

System. Contains 16-bit versions of protected and real mode drivers and .dll files used by applications. These files are provided for backward-compatibility with older applications. Additional 16-bit driver files can be stored in this folder.

Some older applications you install might look for files contained in the system folder. However, most program