Easy to set the system free from malicious code attacks _ security-related

Malicious code refers to a piece of code that uses a WSH vulnerability to modify a system in a Web page (but it cannot be called a virus because it does not have the basic characteristics of contagious and self-replicating viruses). WSH is the abbreviation for "Windows scripting Host" and is a scripting interpretation mechanism provided by Microsoft, which makes script files (. js extension. VBS, etc.) can be run directly from the Windows desktop or at the command prompt (you can search for *.js or *.vbs files under your Windows installation directory, and then double-click to run a look at the effect).

That is, we can start by unloading the WSH, preventing malicious code from running, and protecting the Windows system from any aspect of the real-time protection that is not tampered with by malicious code.

First, uninstall WSH

Microsoft provided WSH's intention to make it easier for administrators to manage systems, batch or automation, through scripting. But this wonderful desire is exploited by malicious code to make WSH a very weak part of the system. In fact, the vast majority of ordinary users do not need to WSH, so we can completely uninstall it off. The specific methods are as follows:

1. Remove WSH in Windows 98, open Add/Remove Programs, select Windows

Settings/attachments, click Details, cancel the Windows scripting Host option, and then click the OK button when you are done.

2. To remove WSH in Windows 2000, double-click the My Computer icon, and then execute the Tools/Folder Options command, select the File Types tab, locate the VBS VBScript Script file option, and click the Delete button. Finally click OK.
Second, prohibit the script to run

If you do not want to remove the WSH component, consider using the following method to prevent the script from running:

1, open the Resource manager, click the "Tools-> folder option-> file type" to delete the suffix "VBS, VBE, JS, JSE, WSH, WSF" in the file type, so that the files will not be executed (double click on the *.js, * that you searched before). VBS file try).

2, open IE, click the "tool->internet option-> security-> Custom Level", in the "Security Settings" dialog box, all of the ActiveX Plug-ins and controls and Java-related components are all prohibited. However, one of the inconveniences of doing this is that if the Web page uses a JS or VBS script, then the network will not be displayed properly.

Third, real-time protection of IE

Perhaps you feel that the above two methods are too absolute, and do not meet their flexible needs, then you can consider the installation of Internet Assistant (in the Address bar input "Internet Assistant" or "zs.3721.com" into the site, in the pop-up installation Prompts dialog box to click "Yes"). After installation, the Internet Assistant will appear in the bottom right corner of the system tray in the blue icon, click on it, you can see its "Protection IE" Item is selected, indicating real-time protection of IE's function is in effect.

Of course, in addition to the above methods, in time to the system and IE on the latest patches, to antivirus software in time to upgrade the virus database, do not easily go to browse some unknown sites and so on, are very good habits, can maximize the malicious code shut out.