From-scratch step-by-step install strategy - criticism please!

Hi all,

this is going to be long enough already - but hopefully worth it, please bear with me - so straight to the point:

Would call myself an advanced computer user, but far from being a real geek. Installing and working with loads of different applications quite frequently without major problems, and so far reasonably successful at keeping my machines clean and running ok.

Inherited an old laptop that I decided needs a format and reinstall before I can use it. This will be the first time I do that this comprehensively.

I've done some reading and came up with below plan how to do that, step by step. I am aware that this is probably far from the ideal way though, so I would highly appreciate any criticism, suggestions and other thoughts as to what I could or should do better - since I'd prefer to do it once and do it right.

I am aware that this is a lot of reading and thinking for you; I am hoping that possibly, maybe, you might be able to use this as a starting point to build an instruction tutorial along the lines of "from an empty computer to your very own perfect machine in 97 easy steps" or the like (which I have searched for, but didn't really find anywhere). If that's not of interest, I just hope that someone still has a few minutes to help me optimise this

Here goes:

I have:
- nec versa e680 laptop with intel pentium m 1400mhz
- original win xp pro cd of the laptop
- original driver cd of the laptop
- other computers with internet access

I also have:
- solid dose of worry whether I will shoot myself in the foot by doing this rather than "just" cleaning up the laptop as good as possible and call it a day
- solid dose of excitement of the anticipation of having a properly installed, clean and lean machine soon

Some initial questions:
- how difficult and / or expensive will it be to add memory to this laptop?
- does it make any difference whether I add memory before or after setting up the system? when best?
- after reading my plan below: anything else you personally would recommend to do re security / performance / utility?
- which of these settings in my router firewall should I enable; esp. the third one means nothing to me:
-- Block WAN Request
-- Filter Multicast
-- Filter Internet NAT Redirection
-- Filter IDENT(Port 113)
- is it normal that my router interface in the browser does not have a log out button?
- am I paranoid in thinking it would be better NOT to connect the laptop to the internet even for a windows update until I have installed security software and taken all other precautions I want to take; or can I do that as first thing and trust I will be fine?
- generally, do you see any loop hole security wise that might prevent me from setting up a clean machine?

You will find more particular questions throughout the following list of steps.

So here's my battle plan:

1. Make hardware inventory
- with device manager
- additionally with Belarc Advisor

2. Insert windows xp pro cd, shut down, boot from cd

3. Step through the windows installation, choose fresh install.
Q: any opinions on whether or not I should create partitions, or leave all space for c? I will not be storing much if any data on the laptop hard drive itself and mostly work with external drives. I am contemplating a c just for windows (how large?), and a d for all other software, but am not sure if that has any real advantages or disadvantaegs.

4. Check which drivers are not working after the install. Work with device manager, original driver cd, internet search and driver downloads from manufacturers to get everything going again.
Q: any other tools that could help with this?

5. Update windows xp pro.
Q: There are many ways to Rome. How should I best do that? What updates, patches, fixes etc. exactly do I need? Or will windowsupdate.com answer those questions for me automatically and satisfactorily?

6. Update sun java.

7. Disable windows firewall.

8. Enable system restore.

9. Make IE safer (I use Opera, but need IE for testing of web pages)
- update it
- set safe active x security settings
- choose all other safe settings

10. Set safer and less privacy intrusive settings in win media player.

>>> Make a disk image for system-only recovery (without applications). <<<
Q: Any advice?

>>> create restore point, back up registry <<<

11. Install firewall.
Q: Still undecided between comodo free and outpost free, any opinions?

12. Install real time antivirus.
- avira antivir free

13. Install non real time protection.
- spyware blaster free
- spybot search and destroy free (immunize, sdhelper, NOT using tea timer)

14. Disable auto run to protect usb and cd drives from autorun malware.
Q: Is doing it this way http://forums.majorgeeks.com/showthread.php?t=186542 equivalent with doing it using panda usb vaccine? If not, what is the difference, and what is preferrable and why? If I use panda usb vaccine, do I still have to patch windows as described in above link to do the disabling of autorun correctly? I assume yes.

>>> create restore point, back up registry <<<

15. Create administrator account password.

16. Create user accounts.

>>> create restore point, back up registry <<<

17. Install secondary security software in case I need it at any point, as per mg read and run instructions.
- super anti spyware
- defogger
- mgtools (to C:/; disable avira antivirus for download and any running of this)
- malwarebytes anti-malware (rename)
- combofix.exe (without actually running it unless really needed
- hijack this
- ad aware
- root repeal

18. Create desktop button to windowsupdate.com.

19. Create desktop buttons to all security software that I intend to run or change settings of regularly.

>>> create restore point, back up registry <<<

20. Install performance optimisation tools.
- startup control panel
Qa: any recommended optimisation settings here?
- ccleaner (no using its startup manager or uninstall manager)
- defragmentation
Qb: Either I will put a shortcut on the desktop to the windows defragmentation tool, or install a third party one if there is a good reason to do so - is there one? Which one? Why?
Qc: Any other performance optimisation programs that really make sense?

>>> create restore point, back up registry <<<

21. Install all my needed applications.
Q: Any specific suggestions to improve security of:
- opera
- thunderbird
- skype
- google earth
?

>>> create restore point, back up registry <<<

22. Customise windows.

23. Set up wireless connection.
Q: Any general security tip aside from the obvious (secure connection etc.)? What type of connection protection should I use, how, and why?

>>> Make a disk image for full scale recovery. <<<
Q: Any advice?

>>> create restore point, back up registry <<<

DONE (...I think???)

I know this is a lot of stuff to read through, but when you're reading this, you have obviously done that - THANKS!

So, what do you think? I would really appreciate any and all feedback and suggestions that you have for me, and am very keen to get this started.

THANKS ALL OF YOU!

Have a great day,

Matt

 

Greetings, Mariku.

Wow - kudos for a good Saturday morning read. I skipped my regular MSNBC perusal because you pretty much caught me up on the latest headlines...

I'll just throw in some casual observations, in no particular order - I'm sure others (both from myself and from fellow MGs) will follow.

1. Partitioning: what size HD are you planning to use? Personally, I like the C: (operating system) + D: (data) format, but size does matter in this case.

2. Ad-aware has become redundant - SAS and Malwarebytes should be sufficient.

3. Normal caveat about HijackThis: it will break a machine if not used carefully.

4. There have been several threads here lately about defraggers: do a search through the MG forums, get some opinions.

5. Careful with Google Earth: if left unchecked, it can quickly gobble up hd space.

6. RAM - IMO, get your memory and any other hardware sorted before delving into the software world.

*****

I'm already tired of typing: to be continued...Good luck to you!

 

:wave


My choice for image back up is Macrium Reflect. It's freeware and very easy to use.

http://majorgeeks.com/Macrium_Reflect_FREE_Edition_d6034.html

 

Phew! I'll just add what I consider to be the early steps:-

Umm, first, how much RAM does it have currently? How large, 20, 40, 80GB? and fast is the hard drive, 4,200, 5,400 or 7,200?

XP SP3 runs best on 1GB+ RAM, if the hard drive is only small, consider steering well clear of any .NET software and think over and plan your partitioning strategy***, the faster the hard drive, the better your experience will be.

The 'best' route to a clean install is by using your XP CD to create a slipstreamed version to get it to SP3 from the get go. This will make future repairs simpler, as well as reducing the time needed updating it on Windows Update. Post-install, install the drivers from your CD, or, preferably, grab the latest versions in advance via another PC and install Chipset first then graphics driver, network driver(s), soundcard, etc.

Don't connect it to the 'net until you have an active firewall, PCTools, Online Armor or Outpost Free usually work well with XP.

Once Windows is updated, check the Windows setup error log = C:\Windows\setuperr.log and deal with any errors listed, if there are none, look for errors in the Windows Update log = C:\Windows\WindowsUpdate.log, if all is clear, you're all set to create and test your first, basic image.


*** This might be the best long-term partitioning and backup/restore strategy, it looks complex, but it's probably not so hard to follow if you're careful

 

I've never been a fan on partitioning hard drives. You can search the forums with the problems that can come out with this.

I personally, rather use a fast primary drive, and a 2nd drive for storage. Nowadays, if I were to rebuild, it would be a nice ssd for OS and maybe some apps, and 2 TB for storage. Course, soon 2x vertex 3 240GB ssd raid-0 will be mine. Using my 2 10k drives as storage.

 

On, xp, I've built decent computers running on 1 Gig ram, with 10GB hdd space, though, these are heavily modified for VMware View (VDI) computers. Typically full install, with office 2010, and certain virtual apps.

 

Hi again,

wow, thanks for your quick responses, that's a great first dose of information! I've already improved my whole strategy quite a bit due to your feedback.

If you don't mind, let's try and push that a bit further - I promise I will pass on what I learn to spread the goodness!

Here goes:


@Caliban:

Thanks, I'm flattered

With 80 GB the hard drive is not that big, and I think I'm not going to change any hardware except probably adding memory. I'm sure the hard drive will be big enough for just Windows and my applications though.

Data storage is not an issue for me because I store data almost exclusively on external hard drives. It makes me less dependent on the computer that I use, if it dies for whatever reason or gets stolen, I just plug my hard drive (which I never store together with the laptop) into any other machine and continue working without any significant time loss.

Thanks for the hint re ad aware, almost thought so.

You are right about hijack this, but I am not planning on using hijack this at all; I just want to have it ready to go in case I need to use it, which I would only do on detailed advice and with support of someone who knows how not to mess it up.

Will do defragger search, thanks.

Google earth is one of my worries. I use it a lot for many reasons and would find it hard to do without it, but am at a total loss how to install and work with it best, from a performance and security / privacy point of view. Amongst other things, the permanently running google updater that comes with the current version of google earth and runs almost continuously whether you use the application or not is really annoying me and goes against my idea of how the user should have control over software.

Q: Any good pointer or link how to best tame google earth in that regard?

Will sort the memory question before starting.


@oneeyejack:

Thanks, will check that out!


@satrow:

RAM: 224 MB
HD: 80 GB
HD speed: 5400 (hitachi HTS541280H9AT00)

My gut feeling is that obviously adding a fair chunk of RAM would be more than useful, but HD capacity and speed is more than sufficient for what I need.

Don't quite understand the aim of the partitioning strategy that you linked to; is it in order to have "my documents" etc. in a non-c partition, but still be able to use the windows functionality related to those folders?

If that's the case, that's irrelevant to me, since I am almost exclusively storing data on external drives. Q: Given that fact, is there any reason for creating multiple partitions? Currently tending to just keep it all in one partition.

Thanks heaps for pointing out slipstreaming, will very most likely do it that way, sounds like exactly the lean-ness that I'm after in all aspects.

Will not connect until all shields are up Wasn't planning on doing that anyway, was just surprised that there are a lot of "tutorials" online that don't seem to see any problem with that.

Only potential problem I see is that despite my other machines being pretty clean as far as I can tell, I can't be 100% certain, so despite all caution and scanning of downloaded install files etc., I could still get an infection when transferring those files to the laptop that I am setting up.

Q: Any idea how to deal with that, aside from "using 100% clean machines to download install files for the new one" - which will likely not be something I can guarantee to have?


@thefool:

Will do that search, thanks for one more hint that tends to confirm my gut feeling not to partition, especially since so far I can't really see any actual benefit in doing so for my situation - Q: unless someone points one out to me?

I'm not going to risk too heavy modding at this point in time - what I'm attempting here is already quite a learning curve for me, and if I manage to pull this off satisfactorily, I'll be very happy for the time being


I am hoping that this will result in a laptop that will work well, reliably and safely for about a year and a half at least, at which point it will become a backup machine and will be replaced by a shiny new one with windows 7, which I am very much looking forward to. From all I have experienced with Vista on machines that are not mine, I'll just skip that - can't be bothered dealing with it.

THANKS HEAPS everyone for your feedback and input so far, still very much interested to hear what else you can recommend or think of!

Cheers,

Matt

 

As to the RAM question: Unfortunately I just found out that the laptop only has one slot for up to 384 MB - wow, that's not a lot. Given though that I'm currently running my applications on a 224 RAM desktop and things work, well, not super fast, but fast enough for me, that should still work though.

Q: Should I "upgrade" to 384 MB, or is it not worth it? Is that even possible? I have never heard of that RAM size.

Q: Is there a type of RAM that I could use that is faster than what I currently have? Currently the laptop has 256 MB SDRAM, PC133, SDRAM (non-ECC) (copy-paste from crucial.com RAM advisor tool).

Q: Is there any other way to put more ram in that I'm not aware of? Don't think so, but I thought I'd better ask.

Pity, looks like RAM wise, there's nothing I can do; but for a year or so it will just have to do.

@thefool:

I am hoping that what you call "decent" I would call "quite satisfactory". Otherwise, I'm just screwed with this laptop.

Cheers,

Matt

 

Your Laptop will only take 1gb of ram this is its max amount of load!! there is two available slots that will hold 512mb each ....

http://www.offtek.co.uk/ram-memory-2/nec/nec-laptop-memory/versa-e680/mid36367

RAM is usually under a small removable panel on the back of your laptop - check your manual. Some laptops have the RAM under the keyboard as well; this is especially common on older laptops.

I would not partition the drive,as you say that you use externals for data/files/programs.Reformatting and doing a clean install of OS is pretty straight forward, especially for you as you have all the original discs which is a god send .chasing drivers is a pain in the preverbial :-D. There is nothing better than having a lovely fesh/clean machine that runs without the hiccups!!

iain.t :major

 

Check out recommendations HERE for running a lean machine.

 

Check Tools > Options > Cache. If left at defaults, the file can seriously balloon if you use the program a lot.

 

Hi again,

thanks heaps again for all your suggestions and information!

To all of you helpful souls: Last call for suggestions! I'm going to set up that lap top pretty soon; if you have any other thought, idea, suggestion, warning or whatever else input that could become part of my setup, performance and security strategy, I would still be very keen to hear it.


@iain.t:

In the meantime, I have successfully upgraded to a total of 768 MB RAM, which I'm pretty excited about. That should run nicely for a year or two with what I'm doing - YAY!

Have decided not to partition the drive.


@lbmest:

The linked services configuration table is a great help, thanks heaps, also to the author, of course! Will work my way through that and create my own assortment of services, using one of the table's suggeted configurations as a starting point.


@Caliban:

Thanks again, very useful tip, will choose quite low settings to keep google earth under control in that regard.

Q: any idea how I can prevent googleupdater.exe from running even when google earth is not running? I am not using any other google application either that could cause it to run. This is ridiculous, even when I terminate in task manager, it just restarts soon after. It's not malware and actually part of google earth, although I would consider calling it malware, given this behaviour.


Have a really great day everyone!

Cheers,

Matt

 

Good morning.

I suggest installing Startup CPL (which will install as a Control Panel applet) - with that you can safely and efficiently manage the updater and any other startup applications. Very handy little program.

******

You mentioned earlier your concerns about router and internet security - one quick "firewall" is to create a limited user account and surf the 'net as that user.