Fake virus files that are often wronged by us

When I was empty, I talked to my colleagues about a question, do you have the same thought that Svchost.exe was a virus. So in our normal use of the computer process, which system files are most likely to be mistaken for a virus? Let's take a look.

Edit hint: The virus does not fear, the security protection small trick

Do not understand the knowledge of computer security? No, let's learn some of the most practical security protection knowledge, can resist at least 99% of the virus Oh.

Trick One: Antivirus software to install good. For those who do not know security knowledge, antivirus software is definitely your best protection Mulberry antivirus software choice and no special requirements, do not have to superstitious foreign anti-virus software, domestic Jinshan poison PA, 360 has been very good. Install antivirus software Remember to all monitoring, firewall open, reduce the virus into the computer way.

Trick two: Reduce the account authority. We usually use the computer is the system administrator account, so the virus into the system can be rampant, because the authority is high enough. In fact, we can create a new user-level permissions of the account, usually online to see movies using user accounts, the need to install software into the Administrator account. This does not matter if the virus is infected, because the virus cannot modify system-critical settings in user rights.

Trick three: reduce curiosity. Curiosity killed the cat, the same, Curiosity will make our computer poisoning, some friends will often under some strange software, or look at some special web pages, so slightly careless will recruit. So in the process of using the computer in order to reduce the probability of poisoning, try to reduce curiosity.

Wronged Emperor--svchost.exe (misunderstanding rate 99%)

As the most wronged file in Windows, almost everyone who uses the computer used to treat him as a virus. But there is a reason for this phenomenon, because the virus is too fond of impersonating svchost.exe, such as Svch0st.exe, Schvost.exe, etc., over time, Svchost.exe become notorious, and in the "Task Manager" The multiple Svchost.exe processes are also more likely to be believed to be a virus. So what is the Svchost.exe file?

Microsoft's official explanation for this is that Svchost.exe is the generic host process name for a service running from a dynamic-link library (DLL). That is, many programs need to be started through this file, so multiple processes are generated in Task Manager. So, Svchost.exe is a downright citizen, or a toiled ministers in Windows. Of course, given that the virus likes to impersonate it, we should pay attention to the identification when we check it.

▲ viruses are often posing as svchost.exe

Sad Emperor--desktop.ini (misunderstanding rate 80%)

What was your first reaction when you found a hidden Desktop.ini file in your own folder one day? I believe many people will think: "This wretched file is what Ah, do not show well, must be hidden, no reason to appear certainly not a good thing, is definitely a virus." ”

If Desktop.ini have life, then must be crying: my birth is clearly because of the user, how to say I am a virus? I am just a common system file, my role is to store the user to the folder personality settings, originally I do not exist, when you give the folder set the background, or set the icon, then I will appear.

Desktop.ini is the product of a custom folder, but is often exploited by viruses, and if Desktop.ini appears in each folder, or with other unknown files, such as Folder.htt, it is likely to be poisoned.

▲desktop.ini is a custom folder-generated file

Tragedy Emperor--winlogon.exe (misunderstanding rate 60%)

In Task Manager, there is also a frequently misunderstood file, that is Winlogon.exe. Winlogon.exe is the user login program for Windows, which is primarily to manage user logins and exits. But often there is a virus posing it, such as Winlogin.exe, only one word of the difference, it is easy to recruit people. In addition, some viruses modify their own file names to Winlogon.exe, and then put them into the Windows directory (the normal Winlogon.exe is in the System32 directory) for confusing purposes.

The role of ▲winlogon.exe is to manage user login