How to guard against virus two attacks after system reload

Many people think that as long as the installation of the operating system can completely remove the virus, but do not know that after the operating system reinstall, due to security settings and patches are not in time to install problems, the most likely to lead to a large number of virus intrusion, so understand some of the system after the necessary complementary measures are very

First, do not worry immediately connected to the Internet

After the installation of Windows, do not immediately put the server into the network, because at this time the server has not hit a variety of patches, there are various vulnerabilities, very vulnerable to infection and intrusion. The patch is added and restarted and then linked to the Internet.

Second, to the system to patch/install anti-virus software

Install system patches. After installing the system, be sure to install anti-virus software and update it to the latest version.

Third, turn off System Restore

System Restore is a feature in the Windows XP system that allows us to restore the system to a certain time state so that we can avoid reinstalling the operating system. However, some people in the implementation of the System Restore, found in addition to C disk, the other D-disk, e-disk have been restored to the previous state, the results of the saved documents are not, resulting in a serious loss!

This is because System Restore defaults to all partitions on the hard disk, so that once the System Restore operation is made, the data for all partitions will be restored. Therefore, we must press the Win+break key, click the System Restore tab, cancel the Turn off System Restore on all drives option, and then select D, click the Settings button, and select the "Turn off System Restore on this drive" option in the open window.

Turn off System Restore on other disks in turn. In this way, once the system is unstable, you can use the System Restore tool to restore the system on the C disk, but the files on the other disks will be fine.

Four, set the password for the administrator

Some people may be using a universal Ghost version of the Web to install the system, or may be using the Windows XP unattended installation of the installation of the CD-ROM system, the use of these methods when the installation is very likely not to allow you to specify the administrator password, Or the administrator's password is the default of 123456 or simply null. Such a password is quite dangerous, therefore, after installing the system, right-click "My Computer", select "Manage", then select "Computer Management (local) → system tools → local Users and Groups → users" on the left, select the Administrator in the right window, right-click and select "Set Password". Click the Continue button in the open window to set the password for the administrator in the open windows.

In addition, select New user, set the username and password, double-click the new user, click the Affiliate tab, select all of the groups (if any), and click the Delete button below. Click the Add button, then click the Advanced button in the Open window, click the Find Now button, locate the PowerUser or user group, and click OK two times to add the user to the PowerUser or Users group. Log off the current user, and then log on with a new user to discover that the system is much faster.

V. Turn off default sharing

After Windows is installed, some hidden shares are created that are used primarily by administrators when they log on remotely, but this is rarely used and is not very secure for individual users. So, we need to cut off this share: Start with a new Disshare.bat file in D:, where you write the following statement:

@echo off

NET share C$/del

NET share D$/del

NetShare Ipc$/del

NET share admin$/del

Next, copy the D:disshare.bat to the C:windowssystem32grouppolicyuserscripts logon folder. Then press Win+r, enter gpedit.msc, expand the User Configuration →windows settings → script (login/Logoff) folder in the Open window, double-click the login entry in the right pane, click Add in the pop-up window, and select C: Windowssystem32grouppolicyuser the Disshare.bat file under the Scriptslogon folder.

After you complete the above settings, restart the system, you can automatically disconnect Windows XP default shared channel, if you have more hard drives, please add them under net share D$/del, such as NetShare E$/del, net share F$/del, etc.