Reinstall system to avoid virus intrusion

Many people think that as long as the operating system is reinstalled, the virus can be completely removed.　　 But do not know that after the operating system reinstall, due to security settings and patches are not installed in time and so on, the most likely to cause the virus to invade, so some necessary complementary measures are very critical.


first, do not rush to access the network


after installing Windows, do not immediately put the server into the network, because at this time the server has not hit a variety of patches, there are various vulnerabilities, very vulnerable to infection and intrusion.　　 The patch is added and restarted and then linked to the Internet.


second, to the system to patch/install anti-virus software


installs the Windows XP SP2 patch. After installing the system, be sure to install anti-virus software and update it to the latest version.


three, turn off System Restore


System Restore is a feature in Windows Me and Windows XP, Windows 2003, which allows us to restore the system to a certain time state so that we can avoid reinstalling the operating system.　　 However, some people in the implementation of the System Restore, found in addition to C disk, the other D-disk, e-disk have been restored to the previous state, the results of the saved documents are not, resulting in a serious loss!


this is because System Restore defaults to all partitions on the hard disk, so that once the System Restore operation, all the partition's data will be restored.　　 Therefore, we must press the Win+break key, click the System Restore tab, cancel the Turn off System Restore on all drives option, and then select D, click the Settings button, and select the "Turn off System Restore on this drive" option in the open window.


the system on the other disk in turn.　　 In this way, once the system is unstable, you can use the System Restore tool to restore the system on the C disk, but the files on the other disks will be fine.


IV, password for the administrator


Some people may be using a universal Ghost version of the Web to install the system, or may be using the Windows XP unattended installation of the installation of the CD-ROM system, the use of these methods when the installation is very likely not to allow you to specify the administrator password, Or the administrator's password is the default of 123456 or simply null. Such passwords are quite dangerous, so remind everyone that after installing the system, please right click on "My Computer", select "Management", and then select "Computer Management (local) → system tools → local Users and Groups → users" on the left, select the Administrator in the right window, right-click and select "Set Password".　　Click the Continue button in the open window to set the password for the administrator in the open windows. Www.3lian.com


Alternatively, select "New User", set the username and password, double-click the new user, click the "affiliate to" tab, select all of the groups (if any), and click the Delete button below. Click the Add button, then click the Advanced button in the Open window, click the Find Now button, locate the PowerUser or user group, and click OK two times to add the user to the PowerUser or Users group.　　 Log off the current user, and then log on with a new user to discover that the system is much faster.


Five, turn off default sharing


Windows is installed, some hidden shares are created, primarily for use by administrators when they log on remotely, but this is rarely used and is not very secure for individual users. So, we need to cut off this share: first, under D: Create a new Disshare.bat file in which to write the following statement:


@echo off


net share C$/del


net share D$/del


NetShare Ipc$/del


net share admin$/del


Next, copy the D:disshare.bat to the C:windowssystem32grouppolicyuserscriptslogon folder. Then press Win+r, enter gpedit.msc, expand the User Configuration →windows settings → script (login/Logoff) folder in the Open window, double-click the login entry in the right pane, click Add in the pop-up window, and select C:　　 The Disshare.bat file under the Windowssystem32grouppolicyuserscriptslogon folder.


the above settings, reboot the system, you can automatically disconnect Windows XP default shared channel, if you have more hard drives, please add yourself under net share D$/del, such as NetShare E$/del, net share F$/del, and so on.