System Recovery and Advanced Maintenance

The Resource Monitor is a built-in Windows tool that displays in detail how the computer is using its CPU, memory, disk, and network resources, which helps pinpoint the programs that are slowing the system down. Example: If the computer feels slow, Resource Monitor shows which program is causing heavy disk activity so that it can be closed.

Safe Mode is a special startup mode that boots Windows with only the essential drivers and services running, so that users can troubleshoot and fix issues when the system fails to start normally. Example: If a faulty display driver stops Windows from loading, the computer can be started in Safe Mode and that driver can be uninstalled.

A bootable USB is a USB drive that holds operating system or recovery files, allowing a computer to start directly from it. Rufus is a free tool used to create such a drive. Example: Plug in the USB and open Rufus → select the USB drive → choose the ISO file → click Start.

The Power-On Self-Test (POST) is the check carried out as soon as the computer is switched on, in which the system tests essential hardware components such as the RAM, keyboard, and storage devices to confirm they are working correctly before the operating system loads. Example: If the RAM is missing or faulty, POST stops the startup and gives a beep sound as a warning.

The boot order is the BIOS setting that decides which device the computer tries to start from first. It matters because recovery tools will only run if the USB drive is placed above the hard disk in this order. Example: In BIOS setup, moving "USB Drive" above "Hard Disk" lets the computer boot from a Windows recovery USB.

Disk cleanup is the process of removing unnecessary files from a storage device. Its two main benefits are that it frees up storage space and improves system speed and performance. Example: Deleting temporary files and emptying the Recycle Bin can recover several gigabytes of disk space.

Windows Defender is the built-in security program of Windows that maintains system health by shielding the computer from viruses, malware, and other threats, scanning files and programs in real time. Example: When an infected file is downloaded from the internet, Defender detects it and blocks or removes it automatically.

Beyond the basic troubleshooting steps, modern operating systems also include built-in tools that let users monitor system performance in greater detail. These tools reveal useful details about the computer's current state and help pinpoint problems related to memory, storage, processing power, and system errors. Three important diagnostic tools available in Microsoft Windows are: - Task Manager - Resource Monitor - Event Viewer Each of these tools plays a distinct role in resolving system health and performance-related issues. - Task Manager Task Manager is a built-in Microsoft Windows tool that lets users keep track of their computer's performance. It provides real-time information on how the processor (CPU), memory (RAM), and storage (disk) are being used. The Processes tab lists all active programs along with the resources they are consuming, while the Performance tab shows detailed graphs for CPU, memory, disk, and network usage. Example: If your computer feels sluggish, open Task Manager to see which application is consuming too much CPU or RAM (e.g., a browser with many open tabs). Ending that task can instantly improve performance. a. How to Open Task Manager? There are two quick ways to open Task Manager: i. Press the Ctrl + Shift + Esc keyboard shortcut ii. Right-click the taskbar and choose Task Manager from the menu b. What You Can Do with Task Manager? Task Manager comes in handy when your computer is slow or an application stops responding. It lets you: i. Check how much processing power and memory each program is using. ii. Select a program in the Processes tab and click End Task to close it if it isn't working properly. iii. View programs that are running quietly in the background. iv. Use the Performance tab to see real-time graphs and data on how your computer is performing. - Resource Monitor Resource Monitor is an advanced Microsoft Windows tool that offers a more in-depth view of how your computer's resources (memory, CPU, and disk) are being used. While Task Manager gives a quick snapshot, Resource Monitor provides more detailed information about which programs and background services are consuming system resources. It is particularly useful when the system is running slowly, overheating, or using excessive memory for no obvious reason. Example: If your computer is slow but Task Manager doesn't reveal a clear cause, open Resource Monitor, check the Disk tab, locate a background program heavily using the disk, and then stop or investigate it. a. How to Open Resource Monitor? There are two common ways to open Resource Monitor: i. Open Task Manager, go to the Performance tab, and click Open Resource Monitor at the bottom. ii. Or press the Windows + R shortcut, type resmon in the dialog box that appears, and press Enter. b. Key Features of Resource Monitor Some key features of Resource Monitor are listed below: i. CPU Tab: Shows which processes and services are using the processor. ii. Memory Tab: Displays how much memory is used, free, or reserved. iii. Disk Tab: Tracks which programs are reading from or writing to the hard drive. iv. Network Tab: Shows which applications are sending or receiving data over the internet or network. - Event Viewer Event Viewer is another built-in Windows tool that keeps detailed logs of system activities. It helps users review errors, warnings, and important events tied to software, hardware, and security. Example: If Windows crashes or an application repeatedly fails to start, Event Viewer can display error messages (such as "Application X failed to start due to missing DLL"), helping you identify the cause and troubleshoot it. a. How to Open Event Viewer? i. Press the Windows + R shortcut, type eventvwr in the dialog box that appears, and press Enter.

When a computer fails to start properly because of a system issue (e.g., corrupted system files, a bad driver, a faulty update, or a registry error), you can try to fix it without losing personal files (documents, photos, videos, downloads, etc.) using one of these two main methods: Method 1: Using System Restore (if you can reach the Windows Recovery Environment) System Restore rolls back important system files, settings, and registry entries to an earlier working state (a restore point), while leaving your personal files completely untouched. How to use it when the computer won't start normally: 1. Turn on the computer and repeatedly press the key that opens the boot menu or recovery options (commonly F8, F11, Shift + F8, or F12, depending on the brand; or let Windows fail to boot 2–3 times to trigger Automatic Repair). 2. When the Automatic Repair screen appears → choose Advanced options. 3. Select Troubleshoot → Advanced options → System Restore. 4. If prompted, select your Windows account and enter the password. 5. Pick a restore point from the list — ideally the most recent one dated before the problem began (e.g., "Windows Update March 2026" or "Before installing new driver"). 6. Click Next → Finish to begin the restoration. 7. The computer will restart a few times and revert to that earlier state. Method 2: Using a Bootable Recovery USB (when System Restore isn't accessible or doesn't work) If the system is too damaged to reach the built-in recovery options, use a bootable Windows USB (created on another working computer). Steps to fix the problem using a bootable recovery USB: 1. On another working computer, create a bootable Windows USB: 1. Download the official Windows Media Creation Tool or Windows ISO from microsoft.com. 2. Use the Media Creation Tool (simplest option) or Rufus to build a bootable USB (minimum 8–16 GB). 2. Plug the USB into the affected computer. 3. Restart and enter the BIOS/UEFI setup (press F2, Del, F10, Esc, or F12 during startup — varies by brand) → set the USB as the first boot device → save and exit. 4. The computer boots from the USB → choose your language → click Next → select Repair your computer (bottom-left, not Install now). 5. Go to Troubleshoot → Advanced options. 6. Try these options in order (all of them preserve personal files): 1. Startup Repair → automatically fixes common boot problems. 2. System Restore → same as Method 1 above — pick a suitable restore point. 3. Command Prompt → run commands such as: 4. `sfc /scannow /offbootdir=C:\ /offwindir=C:\Windows` (repairs system files) 5. `chkdsk C: /f /r` (fixes disk errors) 6. If nothing else works → Reset this PC → choose Keep my files → this reinstalls Windows while keeping personal files and most installed apps.

- Best Practices for Preventive Maintenance Just as we look after our health or maintain our vehicles, computers also need regular attention to keep functioning properly. Preventive maintenance refers to simple tasks that help prevent bigger problems later on. These tasks can boost your computer's speed, keep it secure, and extend its lifespan. a. Disk Cleanup Over time, a computer accumulates unnecessary files such as temporary internet files, system cache, Windows update files, and items sitting in the Recycle Bin. These files take up space and can slow down system performance. Disk Cleanup is a built-in Windows tool that safely removes such files. Steps to Perform Disk Cleanup: 1. Type Disk Cleanup into the Windows search bar and open the tool from the list. A small window appears asking you to pick a drive to clean. 2. Select the drive you want to clean (usually C:) and click OK. 3. Tick the boxes in the dialog box that appears after clicking OK for the file types you want to delete. 4. Click OK to remove the selected files. - Patch Management / System Updating Software updates, also called patches, are released regularly by developers to fix bugs, add features, and strengthen security. Keeping your system updated helps guard it against viruses and security threats. There are two types of updates: 1. Operating system updates (for Windows, macOS, etc.) 2. Application updates (for programs like browsers, media players, etc.) To check for updates in Windows: 1. Open Settings > Update & Security. 2. Click Check for updates. 3. Install any available updates. - Staying Protected with Windows Defender Windows Defender is the built-in Windows security tool that shields your computer from viruses, malware, and other threats. It offers two types of scans. a. Quick Scan to check the most common problem areas. b. Full Scan to thoroughly check the entire system. Windows Defender also offers real-time protection, meaning it continuously watches your system in the background and alerts you if anything suspicious occurs. - Keeping a Maintenance Calendar It's a good habit to set a regular schedule for basic maintenance tasks. A maintenance calendar helps you remember when to clean your system, scan for viruses, or check for updates. You can note it down or set reminders on your phone or computer.

Data Recovery Techniques Sometimes files get deleted by mistake or lost because of system problems. In many cases, lost files can be recovered using built-in tools or special third-party software. There are two main ways to recover deleted files: - Using built-in tools (i.e. Recycle Bin) - Using third-party software (i.e. Tenorshare) - Built-in Tools These tools are already part of the operating system, which is why they are called built-in tools. Below are some built-in tools available for recovering deleted files. a. Recycle Bin When a file is deleted in Windows, it typically moves to the Recycle Bin, where it remains until the bin is emptied. You can open the Recycle Bin, right-click the file, and choose Restore to return it to its original location. b. File History File History is a backup feature in Windows. When turned on, the system keeps copies of your files at regular intervals. This lets you recover earlier versions of files, even ones that have been deleted or changed. To enable it, go to Settings > Update & Security > Backup, connect an external USB or hard drive, and select "Add a drive". Once enabled, Windows will regularly back up files such as Documents, Pictures, and Desktop onto that drive. c. Previous Versions This feature lets you recover an earlier version of a file or folder. Right-click the file or folder, choose Properties, then go to the Previous Versions tab. If one is available, you can select and restore an older copy. - Third-Party Tools Sometimes deleted files can't be found in the Recycle Bin or Previous Versions. In such cases, third-party recovery software can help. Tenorshare is one example of a free, easy-to-use file recovery program. It scans your hard drive, USB, or memory card to locate recently deleted files, letting you choose which ones to recover. a. How to use Tenorshare? Steps to Use Tenorshare: 1. Open Tenorshare and select the location you want to recover a file from, such as a specific drive or folder. 2. Choose the file type to recover (e.g., pictures, documents). 3. Click "Scan" to begin searching for lost files. 4. Select the files you want back and click "Recover" to restore them. Recovery success depends on how recently the file was deleted and whether new data has already overwritten it. b. How can deleted files be recovered using third-party software? i. Deletion doesn't erase data right away: When a file is deleted, Windows marks that space as "available" but does not immediately remove the underlying data. ii. Scanning for recoverable data: Third-party software (such as Tenorshare, Recuva, or EaseUS) scans the disk for data that is still physically present but marked as deleted. iii. Restoring the file: Once the software locates the file, it can copy it to a safe location (ideally a different drive) so the data is recovered without overwriting anything else. c. Why does recovery not always succeed? i. Overwriting: If new data has already been written to the space once occupied by the deleted file, part or all of it may be overwritten and unrecoverable. ii. File system damage: Corruption within the disk's file system can render the deleted data unreadable. iii. Time factor: The longer you wait after deleting a file, the greater the chance new files will overwrite the deleted data, lowering the odds of recovery.

A large Windows update can leave several gigabytes of leftover files on the drive. Disk Cleanup is the built-in Windows tool used to reclaim that space safely, without touching your personal documents. - Disk Cleanup After a big update, the drive fills with temporary files, the system cache, old Windows update files, and items in the Recycle Bin. Disk Cleanup scans for these and lets you choose which to remove. To clear the update leftovers specifically, you use its Clean up system files option, which safely deletes the old system and update files. - Steps to Perform Disk Cleanup 1. Type Disk Cleanup into the Windows search bar and open the tool. 2. Select the drive you want to clean (usually C:) and click OK. 3. Click "Clean up system files" to safely remove old Windows update files and other system files. 4. Tick the boxes for the file types you want to delete. 5. Click OK to remove the selected files.

Resource Monitor displays detailed, real-time information about how the computer's CPU, memory, disk, and network resources are being used. It helps identify which programs are consuming the most resources, especially when the system slows down for no obvious reason.

Safe Mode boots Windows with only the most essential drivers and services running, disabling unnecessary background programs. It is used when the system cannot start normally — to troubleshoot faulty drivers, remove malware, or fix problems caused by a bad update or app installation.

POST (Power-On Self-Test) is the first check run by the firmware (BIOS/UEFI) when the computer is powered on. It verifies essential hardware components like RAM, keyboard, and storage devices to confirm they are working correctly. If a problem turns up, it may beep or display an error message before the OS loads.

Task Manager: A built-in Windows tool that shows real-time CPU, RAM, and disk usage of running programs. It lets users end unresponsive tasks. Example: If a browser is consuming too much RAM, open Task Manager, select it, and click End Task to free up memory. Event Viewer: A built-in Windows tool that keeps detailed logs of system activities, errors, and warnings related to software, hardware, and security. Example: If Windows keeps crashing, check Event Viewer for error codes that reveal which driver or program is causing the crash.

System Restore: Rolls system files and settings back to a previous restore point (saved before the problem occurred) without deleting personal files. Go to Advanced Options → System Restore and select a restore point from before the issue began. Bootable Recovery USB: If the system is too damaged to access recovery options normally, boot from a USB created with Windows installation files. Go to Repair your computer → Troubleshoot → Advanced Options → Startup Repair or System Restore. Personal files remain safe throughout this process.

Task Manager gives a quick overview of which programs are using CPU, memory, and disk. Resource Monitor goes much deeper, showing exactly which background processes are affecting each resource — it's the tool to use when Task Manager doesn't reveal a clear cause for a slowdown.

No. System Restore rolls back system files and settings to an earlier saved point while leaving your personal files untouched. Reinstalling Windows ("Reset this PC") is a much bigger step that wipes and rebuilds the operating system, only used when System Restore and other fixes don't work.

If installing a new graphics driver makes Windows crash every time it starts normally, booting into Safe Mode — which loads only essential drivers — lets you get into the system, uninstall that faulty driver, and fix the problem without the crash getting in the way.

When a file is deleted, Windows just marks that space as available for reuse — the actual data usually stays on the disk until something else overwrites it. This is exactly why recovery tools like Tenorshare can often bring back "deleted" files, as long as they act before new data overwrites that space.

Yes. Task Manager, Resource Monitor, Event Viewer, System Restore, bootable recovery USBs, preventive maintenance, Disk Cleanup, and data recovery methods are all examinable and tested through MCQs and short/long answer questions.

Disk Cleanup frees up storage space by removing unnecessary files like temporary internet files and old update files — it has nothing to do with security. A virus scan, done through tools like Windows Defender, checks for malicious software instead. They solve two completely different problems.