Getting out of the eight main mistakes in anti-virus protection makes the system safer

With the popularization of computers and networks, there are also more and more viruses. In the face of such crazy viruses, anti-virus software manufacturers are constantly updating their own virus libraries. Most users are more careful when using their computers, some even have a lot of misunderstandings about anti-virus. Computers are infected with viruses, and most users do not know how to scan and kill them. As a result, the virus spreads further and network security is worrying. The following lists eight common mistakes that allow you to have a deeper understanding of the virus, give full play to anti-virus software, and further improve network security.

Misunderstanding 1: anti-virus software is omnipotent and can be killed by any virus.
We often hear this topic: This anti-virus software is not good because it can be detected by other anti-virus software. In fact, this is a typical misunderstanding. All the time, new viruses are made or rewritten to be changed. Currently, anti-virus software mainly relies on the virus feature library to identify viruses. When a new virus occurs, the anti-virus software manufacturer analyzes and studies the suspicious files provided by poisoned users through its virus monitoring network, and then adds the extracted feature strings to the "virus feature library, provide upgrade to users. Sometimes, because of payment, not every antivirus software can obtain a sample of the new virus immediately, and the processing priority of different types of viruses is different, and the upgrade cycle of each antivirus software is also different, so there will be a virus at the same time. One anti-virus software can scan and kill, but another anti-virus software cannot. (This is a normal phenomenon)

Misunderstanding 2: anti-virus software deletes files randomly
Some people say that antivirus software in China always deletes files after detecting viruses and deletes all system files. antivirus software in foreign countries isolates viruses and does not delete virus files at will. This is also a misunderstanding. We also need to check whether the "virus" file found by anti-virus software is a system file or a virus file.

Today's viruses are tricky. In order not to let users easily detect them, they all try their best to disguise themselves as deceiving users. The most common one is that the virus copies itself to the system directory (for example, the file name of Windows or Windows \ users, which cannot be separated without careful consideration ). Of course, another situation may be that the virus infected the EXE file, so it is not surprising that the system's EXE file is detected with a virus. All in all, files deleted by antivirus software are virus-generated files that are harmful to the system. Because the program itself is a file harmful to the system, the anti-virus software in China currently finds that all such programs are deleted (the deletion here is equivalent to clearing ). In addition, some virus files are generated after the virus runs. These files are harmful files generated by the virus. Therefore, antivirus software also deletes these files. Cleanup is targeted at viruses that will infect normal files. CIH is the most common virus. When your computer is infected with CIH, the virus searches for all EXE files, insert the CIH virus code into the normal EXE file to run the virus. For such infected files, antivirus software can safely clear the virus code and return a healthy EXE file.

Misunderstanding 3: anti-virus software not only kills viruses, but also often kills viruses.
After the user finds that the anti-virus software removes viruses such as Agobot, Sdbot, and Rbot (only the middle part of the virus name is written), the virus firewall will not be able to detect the virus again, so I complained that the antivirus software could not clear the virus. This is also a common misunderstanding. All of these problems occur on Windows 2000, XP, and 2003 computers. Because these systems have the rpc dcom vulnerability, even if the virus has been cleared on the local machine, the Internet is still infected with viruses. It is not difficult to solve this problem. You only need to patch the system. Friendly reminder: if the windows system can be patched in time, it is equivalent to shutting the virus out of the door.

1 2 Next Page

[Content navigation]
Page 1: Go out of eight major mistakes in anti-virus to make the system safer	Page 1: Go out of eight major mistakes in anti-virus to make the system safer