How to know the computer is poisoned

In the process of cleaning up computer viruses, some of the phenomenon of computer viruses is purely caused by hardware or software failures, while some virus outbreaks are similar to hardware or software failure phenomena, such as guided viruses. This caused a lot of trouble to users, many users often use a variety of killing virus software to find out the virus to format the hard disk, not only affect the life of the hard disk, but also can not fundamentally solve the problem. Therefore, it is the key to ensure the safe operation of computer system to distinguish virus and fault correctly.

First, the phenomenon of computer viruses

In general, computer viruses are always dependent on a system software or user programs to reproduce and spread, virus attacks endanger the normal work of the computer, destroying data and procedures, violating computer resources. After the virus infection, the computer always has a certain regularity of abnormal phenomenon:

1. Screen display is abnormal, screen display is not generated by the normal process of the screen or string, the screen shows confusion;

2. The program loading time increases, the file running speed drops;

3. The user does not have access to the equipment appears work signal;

4. The disk appears inexplicable file and bad block, the volume label changes;

5. The system guides itself;

6. Loss of data or procedures, the number of bytes of file changes;

7. Memory space, disk space reduced;

8. Abnormal panic;

9. Disk access time than usual growth;

10. System Boot time growth.

If this occurs, first the boot area of the system, IO. SYS, MSDOS. SYS, Command.com,. COM,. EXE file for careful examination, and compared with the correct file, if there is an abnormal phenomenon may be infected with the virus. Then the other documents to check, there is no abnormal phenomenon, to find out the cause of the abnormal phenomenon. The key to the difference between a virus and a fault is that the general fault is just an irregular occurrence, and the outbreak of the virus is always regular.

In the process of cleaning up computer viruses, some of the phenomenon of computer viruses is purely caused by hardware or software failures, while some virus outbreaks are similar to hardware or software failure phenomena, such as guided viruses. This caused a lot of trouble to users, many users often use a variety of killing virus software to find out the virus to format the hard disk, not only affect the life of the hard disk, but also can not fundamentally solve the problem. Therefore, it is the key to ensure the safe operation of computer system to distinguish virus and fault correctly.

Second, similar to the virus phenomenon of hardware failure

The hardware's fault range is not too extensive, but it's easy to verify. When dealing with the abnormal phenomenon of the computer is easy to ignore, only to eliminate the hardware failure, is the root of the problem.

1. Hardware configuration of the system

This kind of fault often occurs on the compatible machine, because the accessory is not completely compatible, causes some software not to be able to run normally. I have encountered a compatible machine, IPs green energy-saving motherboard, Kun Teng Bigfoot hard disk, the beginning of the installation of small software is very smooth, but installed Windows is not installed on the fault, began to suspect that the virus, in the use of a lot of anti-virus software can not solve the problem. Then I looked up some information to find out what the problem was, because the motherboard is energy-saving, and the CPU, hard drive is not energy-saving type, when the time to install the software than the motherboard into the sleep time limit, the motherboard entered the hibernation state, so due to the motherboard, CPU, hard disk work uncoordinated and there has been a failure. The solution is very simple, the motherboard of the energy-saving switch off on all normal. Therefore, users in their own assembly of computers should first consider the compatibility of accessories, purchase accessories should carefully read the product manual.

2. Power supply voltage is not stable

Because the voltage of the power supply used by the computer is not stable, it is easy to cause the user files to be lost or destroyed when they read and write on the disk, which will cause the system to start automatically. In order for your computer to work more securely, it is recommended that you use a power regulator or uninterruptible power supply (UPS) if the voltage of the power supply used by the user is constantly unstable.

3. Bad contact of the plugin

Due to poor contact with the computer, it will make some devices appear good and bad phenomenon. For example: monitor signal line and host bad contact may make the display display instability; Bad contact between disk line and multifunction card will result in good and bad disk reading and writing; Printer cable and host bad contact will cause the printer does not work or work phenomenon is not normal; Mouse line and the serial port is not in contact with the mouse when the movement of the fault and so on.

4. Floppy drive failure

If users use poor quality disks or use damaged, moldy disks, the floppy drive head will be dirty, unable to read or write disk or read and write errors. In this case, just use the cleaning disk to clean the head, under normal circumstances can be queued fault. If the pollution is particularly serious, you need to take apart the floppy drive, wash with the washing liquid hand.

5. Questions about CMOS

As we all know, the information stored in CMOS is very important to the computer system, when the computer is started, it is always necessary to detect and initialize the information in CMOS, which is of course the most basic initialization. In more than 486 of the motherboard, most have a virus monitoring switch, the user is generally set to "on", then if the installation of WINDOWS95, will occur panic. The reason is that when you install WINDOWS95, the installer modifies the boot portion of the hard drive, the system's internal interrupts, and the interrupt vector table, which is not allowed by the virus monitor, causing the panic. It is recommended that users in the installation of a new system, the first CMOS virus monitoring switch off. In addition, the system's boot speed and the slow speed of some programs may also be related to the CMOS, because there are some shadow memory switches in the advanced CMOS settings, which can also affect the system's running speed.

Third, similar to the virus phenomenon of software failure

The scope of software fault is more extensive, the problem appears more. Software fault identification and resolution is also a difficult thing, it requires users have considerable software knowledge and rich experience on the machine. Here are some common symptoms.

1. Appearance of "Invalid Drive Specification" (Illegal drive letter)

This hint indicates that the user's drive is missing and that if the user originally owned the drive, the partition table parameters of the main boot sector of the drive may be corrupted or the disk flag 50AA modified. In this case, the correct primary boot sector information is written to the primary boot sector of the disk using tool software such as Debug or Norton.

2. Software program has been compromised (non-virus)

Due to problems such as disk quality, the data part of the file is lost, and this program is still able to run, then there will be abnormal use, such as the format program is destroyed, if continue to execute, will format the non-standard format of the disk, which will produce a series of errors. But such problems are extremely rare.

3.DOS system improperly configured

The DOS operating system will look for its system profile Config.sys at startup and configure the operating environment as required. If the system environment is improperly set up, some software will not function normally, such as c\c++ language system, AutoCAD and so on. The reason is that these programs run with too many files open, exceeding the system defaults.

4. Compatibility of software with DOS version

The DOS operating system itself is characterized by a downward compatibility. But the software is different, many software are too much to be limited by their environment, in a certain version of the software can run normally, to another version of the DOS does not work properly, many users suspected to be caused by the virus. The older version of the 2.13 Chinese character system, in DOS 3.30 under normal operation, and in the DOS6.2 run will appear garbled phenomenon.