C. Explain the following
1.What is the function of SCVHOST.EXE in system32?
2. Give the correct procedure in removing scvhost.exe in registry files. (step by step)
3. Explain what is the couse of BSoD?
-
Subscribe to:
Post Comments (Atom)
21 comments:
Monday, August 18, 2008
FINAL EXAMINATION
ACADEMIA DE DAVAO COLLEGE
TAGUM CITY
CT 212 (Instrumentation)
MR. HECTOR S. BANSI
GENERAL INSTRUCTION:
Answer first in Microsoft Word then copy and post in comments.
TEST I: EXPLANATION
DIRECTION: Explain the following given scenario. (10 pts each)
1. What is the function of DISK ADMINISTRATOR?
Disk administrator is help your computer arrange your files. just like the Defragment it arrange your hard disk drive.
2. Give the disadvantage of NTFS between FAT 32?
NTFS is a higher version than Fat 32 the higher version operating system is compatible for NTFS, but the lower version is compatible for FAT 32.
EXPLAIN THE FOLLOWING STORAGE DEVICES (5 pts each )
1. FDD –floppy drive it read the diskette by using your floppy drive, It can also help when you save data in your diskette.
2. HDD –HDD or hard disk drive it has contain files data software and hard disk is a primary device in your computer.
3. CD/CDRW –it is the Cd containing data that use for copy for your computer and storing data
4. DVD/DVDRW –DVD is use for read data and DVDRW is a rewritable it can use in your computer if you want to copy files from your computer it easy to copy if you had rewritable DVD.
5. Removable storages – just like for example Flash drive. Removable storage use for copying files from your computer. And save into your Flash drive.
TEST II: COMPLETION TYPE
DIRECTION: Complete the following.
A. Connectors type.
1.I.D.E connector
2.Sata connector
B. Port types
1.Usb port
2.parrallel port
3.internet port
4.printer port
5.keyboard/mouse port
C. Serial types
1.Db-9
2.Rj45
3.Rj11
4.Db-25
5Db-8.
D. Cooling system
1.cooling fan for “power supply”
2. “system unit”
3. “microprocessor”
4. “add in video card”
E. Types of Power supply
1.AT
2.ATX
F. Types of Motherboard
1. p9 motherboard, AT
2. p1 motherboard, ATX
FINAL EXAMINATION
ACADEMIA DE DAVAO COLLEGE
TAGUM CITY
CT 212 (Instrumentation)
MR. HECTOR S. BANSI
GENERAL INSTRUCTION:
Answer first in Microsoft Word then copy and post in comments.
TEST I: EXPLANATION
DIRECTION: Explain the following given scenario. (10 pts each)
1. What is the function of DISK ADMINISTRATOR?
-disk administrator is where you can make some problem of the trouble shooting. And it will also help you to remove certain trouble shooting if you encounter such problem.
2. Give the disadvantage of NTFS between FAT 32?
-NTFS is faster than the FAT32 then NTFS can read the higher version while the FAT32 will be installed with another higher version, it cannot read the higher version. That’s why NTFS is better than the FAT32.
EXPLAIN THE FOLLOWING STORAGE DEVICES (5 pts each)
1. FDD –is the floppy disk drive it is the type of storage device where you can save certain data and it is the secondary storage device.
2. HDD –it is the hardisk drive it the main storage device in the computer.
3. CD/CDRW – it where you may use CD tapes to store/read data and CDRW is the rewritable CD that is used to store/save data you want to retain.
4. DVD/DVDRW –DVD is also use to read data and CDRW or rewritable DVD that is also use in saving data and files you want.
5. Removable storages – it is the other type storage where you can transfer data. Like for example USB it may also help you to save some data/files you want to retain.
TEST II: COMPLETION TYPE
DIRECTION: Complete the following.
A. Connectors type.
1. IDE connector
2. SATA connector
B. Port types
1.USB port
2.mouse port
3.keyboard port
4.printer port
5.audio port
C. Serial types
1. DB 9
2. DB 25
3. DB 8
4. RJ 11
5. RJ 45
D. Cooling system
1.cooling fan for power supply
2.heatsink
3.cooling fan for microprocessor
4. cooling fan for system unit
E. Types of Power supply
1. AT
2. ATX
F. Types of Motherboard
1.P9 motherboard AT
2.P1 motherboard ATX
Ivie C. Isolan Comtech II
Monday, August 18, 2008
FINAL EXAMINATION
ACADEMIA DE DAVAO COLLEGE
TAGUM CITY
CT 212 (Instrumentation)
MR. HECTOR S. BANSI
GENERAL INSTRUCTION:
Answer first in Microsoft Word then copy and post in comments.
TEST I: EXPLANATION
DIRECTION: Explain the following given scenario. (10 pts each)
1. What is the function of DISK ADMINISTRATOR?
The function of disk administrator is to change or to delete the password and to locate the virus in your system unit..
2. Give the disadvantage of NTFS between FAT 32
The disadvantage of the FAT 32 in NTFS is the Fat 32 is only windows 98 below that you can use in your system unit…
But the NTFS is you can use any of the operating system, like windows vista, windows XP ect…
EXPLAIN THE FOLLOWING STORAGE DEVICES (5 pts each )
1. FDD – FDD is use to save a file in disk, you can use also to create a partition in your system unit using FDD..
2. HDD – HDD is the main memory in your system unit,its contain files data..
3. CD/CDRW – is use to save a files in using cd..also use to format your system unit..
4. DVD/DVDRW – The dvdrw is to burn a dvd disk, also burn a cd disk..
5. Removable storages – USB is like a small hard disk that you can save a file…but the USB is easy to bring..
TEST II: COMPLETION TYPE
DIRECTION: Complete the following.
A. Connectors type.
1. SATA
2.EIDE
B. Port types
1.parallel port
2serial port.
3.USB port
4 Keyboard port.
5. Printer port
C. Serial types
1Rj-45.
2.
3.Db-25
4.Ethernet
5. fireware
D. Cooling system
1. Cooling fan
2.Heat zinc
3.
4.
E. Types of Power supply
1. ATX
2.AT
F. Types of Motherboard
1 Full ATX.
2. Baby AT
By: Mark Laurence R. Quintano
FINAL EXAMINATION
ACADEMIA DE DAVAO COLLEGE
TAGUM CITY
CT 212 (Instrumentation)
MR. HECTOR S. BANSI
GENERAL INSTRUCTION:
Answer first in Microsoft Word then copy and post in comments.
TEST I: EXPLANATION
DIRECTION: Explain the following given scenario. (10 pts each)
1. What is the function of DISK ADMINISTRATOR?
the disk administrator is where you can make same problem of the trouble shooting will also help you can remove certain trouble shooting.
2. Give the disadvantage of NTFS between FAT 32?
the NTFS is higher version between fat 32. then fat 32 it cannot read the higher version
why NTFS is better than FAT 32
EXPLAIN THE FOLLOWING STORAGE DEVICES (5 pts each )
1. FDD –is the type of storage device where you can save certain data and secondary storage device.
2. HDD –is the hardisk that can operating installation.
3. CD/CDRW –CD tape store some files you want to save and copy the files.
.
4. DVD/DVDRW –it is also with DVDRW you me also DVD make another copy of the files you can burn using the DVDRW.
5. Removable storages –is the other types storage where you can transfer data.for example USB.
TEST II: COMPLETION TYPE
DIRECTION: Complete the following.
A. Connectors type.
1.parallel
2.serial
B. Port types
1.keyboard port
2.serial port
3.printer port
4.mouse port
5.audio port
C. Serial types
1.RJ 45
2.RJ 11
3.DB 9
4.DB 25
5.DB
D. Cooling system
1.coolingfan for power supply
2heatsink
3.coolingfan for microprocessor
4.coolingfan for system unit
E. Types of Power supply
1.AT
2.ATX
F. Types of Motherboard
l. P9 MOTHER BOARD AT
2.PI AT MOTHER BOARD ATX
LIZSAN REGUA P.
amthonyvann t. israel
.What is the function of SCVHOST.EXE in system32?
SVCHOST not a good thing to do as it serves multiple functions in the windows environment. It is a legitimate part of windows
2. Give the correct procedure in removing scvhost.exe in registry files. (step by step)
first go to regedit and thin click to hkey local machine and thin click to software and click to microsoft and thin click to windows nt and thin click current version and thin click win log on and thin click shell regz explorer.exe
3. Explain what is the couse of BSoD?one of the couse of BSoD is hardware problem or software problem or virus problem.
ASSIGNMENT # 3 (INTSTRUMENTATION)
C. Explain the following
1.What is the function of SCVHOST.EXE in system32?
Svchost.exe is a valid generic host process name for services that run from dynamic-link libraries. At startup, Svchost.exe checks the services part of the registry to construct a list of services that it must load. Multiple instances of Svchost.exe can run at the same time.
• Executes a Process
• Registers a Dynamic Link Library File
• The Process is packed and/or encrypted using a software packing process
• The Process is polymorphic and can change its structure
• Disables the built in Windows File Protection System
• Adds a Registry Key (RUN) to auto start Programs on system start up
• Modifies Windows Security Policies to restrict/expand User Privileges on the machine
• Disables Access to the Windows Registry Editor
• Disables Access to the Task Manager built into Windows
• This Process Deletes Other Processes From Disk
• This Process Creates Other Processes On Disk
• Can communicate with other computer systems using HTTP protocols
• Writes to another Process's Virtual Memory (Process Hijacking)
• Creates a new Background Service on the machine
• Looks at the contents of the autoexec.bat file
• Reads email address and phone book details
• Visits web sites on your PC without you knowing
• Makes outbound connections to other computers using NETBIOSOUT protocols
• Terminates Processes
• Enables the system to use a Communications Proxy Server
• Can make outbound communication to other computers, IM chat rooms and other services using IRC protocols
• Communicates with other computers using FTP connections
• This Process Contains User
2. Give the correct procedure in removing scvhost.exe in registry files. (step by step)
1. Run, type regedit then enter.
2. Look for HKEY_LOCAL_MACHINE then click
3. Look for software then click
4. Look for Microsoft then click
5. Look for windows then click
6. Look for win logon then click
7. Click shell then remove the scvhost.exe file then restart your pc.
3. Explain what is the couse of BSoD?
One of the most dreaded error messages for a
Windows user is the blue screen, or the Blue Screen of Death
(BSOD) as it is popularly known, which suddenly pops up informing
you that something is seriously wrong with Windows. What this
screen essentially means is that Windows has crashed and needs
to reboot to recover.
1. Corrupted startup files, hardware and driver software during
Windows startup can also be the cause. This type of error
will always require troubleshooting before Windows can start
up normally.
2. A hardware device is malfunctioning, or was removed while
Windows was running, or does not fully support Windows. On older
machines, outdated BIOS information can also cause errors.
By: Francisco, Desiree P.
ASSIGNMENT # 3 (INTSTRUMENTATION)
C. Explain the following
1.What is the function of SCVHOST.EXE in system32?
Svchost.exe is a valid generic host process name for services that run from dynamic-link libraries. At startup, Svchost.exe checks the services part of the registry to construct a list of services that it must load. Multiple instances of Svchost.exe can run at the same time.
• Executes a Process
• Registers a Dynamic Link Library File
• The Process is packed and/or encrypted using a software packing process
• The Process is polymorphic and can change its structure
• Disables the built in Windows File Protection System
• Adds a Registry Key (RUN) to auto start Programs on system start up
• Modifies Windows Security Policies to restrict/expand User Privileges on the machine
• Disables Access to the Windows Registry Editor
• Disables Access to the Task Manager built into Windows
• This Process Deletes Other Processes From Disk
• This Process Creates Other Processes On Disk
• Can communicate with other computer systems using HTTP protocols
• Writes to another Process's Virtual Memory (Process Hijacking)
• Creates a new Background Service on the machine
• Looks at the contents of the autoexec.bat file
• Reads email address and phone book details
• Visits web sites on your PC without you knowing
• Makes outbound connections to other computers using NETBIOSOUT protocols
• Terminates Processes
• Enables the system to use a Communications Proxy Server
• Can make outbound communication to other computers, IM chat rooms and other services using IRC protocols
• Communicates with other computers using FTP connections
• This Process Contains User
2. Give the correct procedure in removing scvhost.exe in registry files. (step by step)
1. Run, type regedit then enter.
2. Look for HKEY_LOCAL_MACHINE then click
3. Look for software then click
4. Look for Microsoft then click
5. Look for windows then click
6. Look for win logon then click
7. Click shell then remove the scvhost.exe file then restart your pc.
3. Explain what is the couse of BSoD?
One of the most dreaded error messages for a
Windows user is the blue screen, or the Blue Screen of Death
(BSOD) as it is popularly known, which suddenly pops up informing
you that something is seriously wrong with Windows. What this
screen essentially means is that Windows has crashed and needs
to reboot to recover.
1. Corrupted startup files, hardware and driver software during
Windows startup can also be the cause. This type of error
will always require troubleshooting before Windows can start
up normally.
2. A hardware device is malfunctioning, or was removed while
Windows was running, or does not fully support Windows. On older
machines, outdated BIOS information can also cause errors.
By: Francisco, Desiree P.
1.What is the function of SCVHOST.EXE in system32?
"Svchost.exe" (Generic Host Process for Win32 Services) is an integral part of Windows OS. It cannot be stopped or restarted manually. It manages 32-bit DLLs and other services. At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. In normal conditions multiple instances of Svchost.exe run at the same time. Each Svchost.exe session can contain a grouping of services, so that separate services can be run depending on how and where Svchost.exe is started. This allows for better control and debugging.
2. Give the correct procedure in removing scvhost.exe in registry files. (step by step)
1. Press the start then click “run”.
2. Type regedit then press enter.
3. Go to HKEY_LOCAL_MACHINE and click the + sign.
4. Look for Windows NT then click the + sign.
5. Go to Winlogon then click it.
6. Look for shell then double click.
7. Erase the SCVHOST.EXE
3. Explain what is the cause of BSoD?
The Blue Screen of Death (also known as a stop error, BSoD, bluescreen, or Blue Screen of Doom) is an error screen frequently displayed by certain operating systems, most notably Microsoft Windows, after encountering a critical system error which can cause the system to shut down to prevent damage.
Bluescreens on NT-based Windows systems can be caused by poorly written device drivers or malfunctioning hardware. In the Win9x era, incompatible DLLs or bugs in the kernel of the operating system could also cause bluescreens.
Bluescreens can also be caused by physical faults such as faulty memory, power supply issues, overheating of components, or hardware running beyond its specification limits. Bluescreens have been present in all Windows-based operating systems since Windows 3.1; earlier, OS/2 and MS-DOS suffered the Black Screen of Death, and early builds of Windows Vista displayed the Red Screen of Death after a boot loader error.
The term "Blue Screen of Death" originated during OS/2 pre-release development activities at Lattice Inc, the makers of an early Windows and OS/2 C compiler. During porting of Lattice's other tools, developers encountered the stop screen when NULL pointers were dereferenced either in application code or when unexpectedly passed into system API calls. During reviews of progress and feedback to IBM Austin, the developers described the stop screen as the Blue Screen of Death to denote the screen and the finality of the experience.
ROD LEO ANDREW S. FLORES
ASSIGNMENT # 3 (INTSTRUMENTATION)
"Explain the following"
1.What is the function of SCVHOST.EXE in system32?
-Svchost.exe is a valid generic host process name for services that run from dynamic-link libraries. At startup, Svchost.exe checks the services part of the registry to construct a list of services that it must load. Multiple instances of Svchost.exe can run at the same time.
-Executes a Process
-Registers a Dynamic Link Library File
-The Process is packed and/or encrypted using a software packing process
-The Process is polymorphic and can change its structure
-Disables the built in Windows File Protection System
-Adds a Registry Key (RUN) to auto start Programs on system start up
-Modifies Windows Security Policies to restrict/expand User Privileges on the machine
-Disables Access to the Windows Registry Editor
-Disables Access to the Task Manager built into Windows
-This Process Deletes Other Processes From Disk
-This Process Creates Other Processes On Disk
-Can communicate with other computer systems using HTTP protocols
-Writes to another Process's Virtual Memory (Process Hijacking)
-Creates a new Background Service on the machine
-Looks at the contents of the autoexec.bat file
-Reads email address and phone book details
-Visits web sites on your PC without you knowing
-Makes outbound connections to other computers using NETBIOSOUT protocols
• Terminates Processes
• Enables the system to use a Communications Proxy Server
• Can make outbound communication to other computers, IM chat rooms and other services using IRC protocols
• Communicates with other computers using FTP connections
• This Process Contains User
2. Give the correct procedure in removing scvhost.exe in registry files. (step by step)
*Run, type regedit then enter.
*Look for HKEY_LOCAL_MACHINE then click
*Look for software then click
*Look for Microsoft then click
*Look for windows then click
*Look for win logon then click
*Click shell then remove the scvhost.exe file then restart your pc.
3. Explain what is the couse of BSoD?
One of the most dreaded error messages for a
Windows user is the blue screen, or the Blue Screen of Death
(BSOD) as it is popularly known, which suddenly pops up informing
you that something is seriously wrong with Windows. What this
screen essentially means is that Windows has crashed and needs
to reboot to recover.
1. Corrupted startup files, hardware and driver software during
Windows startup can also be the cause. This type of error
will always require troubleshooting before Windows can start
up normally.
2. A hardware device is malfunctioning, or was removed while
Windows was running, or does not fully support Windows. On older
machines, outdated BIOS information can also cause errors.
ASSIGNMENT # 3 (INTSTRUMENTATION)
C. Explain the following
1.What is the function of SCVHOST.EXE in system32?
2. Give the correct procedure in removing scvhost.exe in registry files. (step by step)
3. Explain what is the couse of BSoD?
1.What is the function of SCVHOST.EXE in system32?
"Svchost.exe" (Generic Host Process for Win32 Services) is an integral part of Windows OS. It cannot be stopped or restarted manually. It manages 32-bit DLLs and other services. At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. In normal conditions multiple instances of Svchost.exe run at the same time. Each Svchost.exe session can contain a grouping of services, so that separate services can be run depending on how and where Svchost.exe is started. This allows for better control and debugging.
2. Give the correct procedure in removing scvhost.exe in registry files. (step by step)
Removing the virus
FIRST: You have to stop the virus from running in the first place. If your system is already infected, it is already running in the background. You must restart your computer then run it in safe mode.
1. Restart your PC
2. Press F8 as soon after the BIOS boots. If you don’t know what that is, just keep pressing F8 until a menu appears.
3. Select Safe Mode from the menu
4. On your desktop, right click on the file UnHookExec.inf then select install. You won’t see any prompt or confirmation so don’t worry about it.
5. By now, CTRL+ALT+DEL is already working so open up your Task Manager. End task the following programs/processes:
o SSCVIHOST.exe
o blastclnnn.exe
o New Folder.exe
SECOND: Delete the virus files from your PC. There are two ways to do this, via windows shell or command prompt (DOS) shell. Since Folder Options has been disabled by the virus, you cannot switch to show hidden files and system files. Well you can edit it in your Registry, but let’s just do it the DOS-way. Follow this carefully.
1. Select Run from your start menu, then type cmd. Press enter. The paths differ depending on your operating system, but in this procedure let’s assume you are using Windows XP
2. At the command prompt go to your system32 folder (this may differ if you are using NT/2000 or XP). For the sake of this procedure lets assume you are using XP. Type cd\windows\system32
3. On this path (c:\windows\system32>) type the following commands in order:
o attrib -h -r -s SSCVIHOST.exe
o del SSCVIHOST.exe
o attrib -h -r -s blastclnnn.exe
o del blastclnnn.exe
o attrib -h -r -s autorun.ini
o del autorun.ini
o cd\windows\ (this will move you to the windows prompt c:\windows)
o attrib -h -r -s SSCVIHOST.exe
o del SSCVIHOST.exe
THIRD Clean up the registry. Your RegEdit is already running because of the file we’ve downloaded from Symantec. On your run box (from the Start menu) type regedit. WARNING: Be careful on what you edit here, because a single mistake may screw up your system. Just follow the paths that are mentioned here so you won’t get lost. Make sure you edit only what mentioned in this procedure.
Navigate to the following registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\
“Shell” = “Explorer.exe SSCVIHOST.exe”
(edit and remove the word SSCVIHOST.exe leaving only Explorer.exe, if you screw this up windows shell won’t show on your next boot)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\
“Yahoo Messengger” = “%System%\SSCVIHOST.exe”
(delete this entry)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\WorkgroupCrawler\Shares\
“shared” = “[SHARE NAME]\New Folder.exe”
(delete this entry)
Restore the following registry entries to their original values, if required:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\
“DisableTaskMgr” = “1″
(set to zero (0) to enable)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\
“DisableRegistryTools = “1″
(set to zero (0) to enable)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\
“NofolderOptions” = “1″
(set to zero (0) to enable)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule\”AtTaskMaxHour”
(Remove an entry here that has a name with blastclnnn.exe, or just remove all entries here)
FOURTH Clean again after cleaning. Restart your PC, again in Safe Mode (remember to press F8). This time we will remove all other files that have been created by the virus. Folder options in your Tools menu is already working so open that up. Then select “Show Hidden files and folders” and uncheck “Hide protected operating system files.” Then search your whole hard disk (using windows search from the start menu) and SHIFT+DEL all these files. Also cleanup your recycle bin after this.
• SSCVIHOST.exe
• blastclnnn.exe
• New Folder.exe (these are the garbage files created by the worm it will create thousands upon thousands of these in your hard drive)
FIFTH Check your autoruns. On your run box at the start menu, type msconfig. Look at the startup tab for any suspicious files that are related to the virus and disable (you can also remove it in the registry) it.
That’s it. Reboot your system normally and check your Task Manager (CLTR+ALT+DEL) if there are running processes that aren’t supposed to be
4. Explain what is the couse of BSoD?
A BSOD can also be caused by a critical boot loader error, where the operating system is unable to access the boot partition due to incorrect storage drivers or similar problems. The error code in this situation is STOP 0x0000007B (INACCESSIBLE_BOOT_DEVICE). In such cases, there is no memory dump saved. Since the system is unable to boot from the hard drive in this situation, correction of the problem often requires booting from the Microsoft Windows CD. After booting to the CD, it may be possible to correct the problem by performing a repair install or by using the Recovery Console (with CHKDSK).
The color blue was chosen because there was a version of Windows NT for the DEC Alpha platform and there the console colors could not be changed in an easy way. For consistency reasons blue became the color for Stop errors on all platforms (alpha/i386/mips/ppc).
Two of the most common reasons for BSODs are:
• Problems that occur with incompatible versions of DLLs. This cause is sometimes referred to as DLL hell. Windows loads these DLLs into memory when they are needed by application programs; if versions are changed, the next time an application loads the DLL it may be different from what the application expects. These incompatibilities increase over time as more new software is installed, and is one of the main reasons why a freshly-installed copy of Windows is more stable than an "old" one.
• Faulty or poorly written device drivers, hardware incompatibilities, or damaged hardware may also cause a BSOD. If you have just installed a new piece of hardware, updated a driver, or installed an Operating System update shortly before you see the BSOD, be sure to investigate these causes also.
phoebemorales@yahoo.com
cristinefelizarta@yahoo.com
hanibo17@yahoo.com
timbad_@yahoo.com
jayboy_17obero@yahoo.com
nigeljohnrillo@yahoo.com
padasasralph17@yahoo.com
semblante19@yahoo.com
http://jayfamentera.blogspot.com/
rc23_yj@yahoo.com
gino_francisco08@yahoo.com
Post a Comment