===Windows 7 Special -- Preparing the Beast===

===Windows 7 Special -- Preparing the Beast===

Non-profit and free for redistribution
Written on January 3rd | 2018
Published on January 3rd | 2018

For entertainment and research purposes only
++++++++++++++++++++++++++++++++++++++++++++++++++++

DISCLAIMER
The Paranoid's Bible and its writers hold no responsibility for the acts of others.

The Paranoid’s Bible is for research and entertainment purposes only.

Please visit our blog for more PDFs and information: http://www.paranoidsbible.tumblr.com/
++++++++++++++++++++++++++++++++++++++++++++++++++++

===Preface===

So we're going to assume that, by now, you've just read the first three guides in this series, which means you're now on number four. Here we'll teach you some settings, registry edits and tweaks that'll further lock down 7, cut down on your wasted space and resources, and hopefully prevent most traces and logs from being made.

We'll also address some items that should help lessen what people see on your desktop, which means preventing some shoulder surfing. We will also be installing and unpacking some items for guides later on this series.

So, please, take your time and read carefully.
++++++++++++++++++++++++++++++++++++++++++++++++++++

===Preparations===

This chapter is to make the following guides just a bit easier for you in the long run besides cutting down some work and possible frustration later on.

Needed tools (to be used at a later date):

You'll need to move these files into the maintenance folder:

- Cports
- Executed Programs List
- JavaRa-2.6.1.1
- Last Activity Views
- MUI Cache View
- Open Save Files View
- Sys internals Suite
- Turned on Times View
- User Assist View
- Ultimate Windows Tweaker
- Windows Access Panel

You'll then need to install these:

===Note:=== Read everything CAREFULLY! Lot of installers try to sneak things like Chrome or other software you don't need. Always hit the "custom" or "customize" options and uncheck what you don't want or need, like extra settings.

- Ccleaner (Move shortcuts to maintenance)
===Note:=== After installation, go to the Ccleaner folder located in Program Files and delete the "Setup" folder and the "CCUpdate.exe". This will prevent it trying to force install Avast.
- Notepad 2
- Security Compliance Manager Setup
- Shockwave uninstaller (Move to maintenance folder)
- TCPOptimizer (Move to maintenance folder)
- Uninstall flash player (Delete after use)
- XP Anti-spy (Move shortcuts to maintenance folder)
- X-Setup Pro


Once the above is installed and moved, you need to do the below to get the SCM doing what you need it to do.

1. Install SCM (Download from here: https://www.microsoft.com/en-us/download/details.aspx?id=16776)
2. Find and run the "LocalGPO.msi" file from “C:\Program Files (x86)\Microsoft Security Compliance Manager\LGP\LocalGPO.msi”
3. Open command prompt and browse to : “C:\Program Files (x86)\LocalGPO” VIA typing CD C:\Program Files (x86)\LocalGPO into command prompt
4. Run the following command “Cscript LocalGPO.wsf /ConfigSCE"
5. Go to Control Panel > Administrative tools > Local Security Policy and double click
6. You should get a window called "Local Security Policy"
7 Click "Local Policies" > Security Options > Scroll down till you see MSS: settings. If you see them, then you've done the above correctly.

Now to make things a little easier for you, we're going to make a shortcut (Read: actually considered a tweak) to a whole slew of easy-to-access tasks. In the maintenance folder, right-click and make a new folder. Name this folder (whatever you want).{ED7BA470-8E54-465E-825C-99712043E01C}. You can click it right away, if you wish, and see what's all there.  Basically the same as control panel but with added ease of one-clicking what you want or need. While we won't be using it (in the guides), it's still good to have on hand like some of the programs above. You can change "God Mode" to anything want, as long as it stays behind the period (.) before {.

Once done, move onto the next chapter.
++++++++++++++++++++++++++++++++++++++++++++++++++++

===Locking 7 Down and Tweaking it up===

===Note:===Some redundancy are in place for the sake of completion.

> Start > All Programs > Accessories > Right click "Command Prompt" and run as "Administrator

Run this in the elevated command prompt: fsutil behavior set disablelastaccess 1

This should disable your last access logs.

Do the above but enter this to disable hibernation: powercfg /hibernate off

Now repeat with this to encrypt the page file fsutil behavior set encryptpagingfile 1

Now go and access regedit, however before we make any changes remember to make a fresh backup.
> Start Button
> Type in “Regedit” and hit enter
> In Regedit, select the “File” menu
> Then select “Export” and save that file to your USB.
> You’ve now backed up your registry

Disable Balloon tips
Go to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
> Create a new  DWORD
> Name this value “EnableBalloonTips” and set it to 0

Disable mobility center
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\MobilityCenter
> Create a new  DWORD
> Name it "NoMobilityCenter" and set it to 1

Speed up shut down
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control
> Find the string called "WaitToKillServiceTimeout"
> Edit from 12000 to 2000
> Click ok

Decrease menu show delay
HKEY_CURRENT_USER\Control Panel\Desktop
> Desktop folder/key
> Navigate to "MenuShowDelay"
> Set it to 0

Disable Prefetcher
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters
>Navigate to "EnablePrefetcher"
> Set  it to 0

Disable Superfetch
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory
> Navigate to "EnableSuperfetch"
> Set to it 0

Kill Dr. Watson
HKEY_Current_USER\Software\Microsoft\Windows\Windows Error Reporting
> Navigate to “Disabled”
> Set it to 1

Disable Paging of Kernel
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Session Manager\Memory Management\
> Navigate to "DisablePagingExecutive"
> Set it to 1

Disable task scheduler
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services
> Go to the "Schedule" folder/key
> Click on the “Start” entry
> Change it to 4

Remove "Send to" context menu
HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenuHandlers\Send To
> Look for the (Default) value inside the "Send To" key
> Double-click it so we can access the properties windows
> Remove the text in the "Value Data" box so that it is now empty.
> Should be effective immediately, however right click any file you want to ensure it is gone.
> Enter to restore it if you want the menu back - {7BA4C740-9E81-11CF-99D3-00AA004AE837}

That's it for this chapter.

Now restart your computer.
++++++++++++++++++++++++++++++++++++++++++++++++++++

===Preparing for the Next Guide===

Go ahead and access Ccleaner, however ignore actually cleaning anything.

Ccleaner > Tools > Startup:
Ideally, you should disable everything here that isn't needed or wanted. Until we start installing programs, everything should be disabled here. Not deleted, just disabled.

Scheduled Tasks:
Nothing should be here, ever. If you see something, disable it and recheck the setting listed above meant to disable Task Scheduler.

Context Menu:
Disable everything here, if anything at all. The default settings that came with 7 should be enough until we get around to installing more programs.

Now move onto Ccleaner's "Options" tab.

Settings:
Disable everything here, however enable/tick/select the below:
- Secure File Deletion (Slower)
- Advanced Overwrite (3 passes)
- Wipe Alternate Data Streams
- Wipe Cluster Tips

Ignore all other tabs and go directly to Monitoring.
- Disable everything here on this tab.

Ignore everything else and go to the Advanced tab.
Disable everything here but "Enable Windows Jumplist Tasks".

Now that we're done with Ccleaner, go ahead and double-click TCPOptimizer.
- Adjust the slider to match it as close-as-possible to your download speed (Round up if it's 4+).
- Click the "Optimal" setting/option and hit apply and then okay.

===Note:===If you're unsure of your speed, check this site out - http://www.speedtest.net/ . If your speeds look like 5000 Kbps then it's basically 5 Mpbs. So if it's 5500 and you can find it on the slider, then use that setting. But if it's something like 5400, then use the 5500. 5300 should be left at 5000. So it's basically rounding up and down to match your settings as close as possible.

Now restart your computer. You're done with this guide.
++++++++++++++++++++++++++++++++++++++++++++++++++++

===Afterward===

Just some more minor tweaks and settings meant to help your system stay secure and keep your activities private. Nothing else to say other than move onto the next guide -- Maintenance!