Microsoft's Win8 anti-virus function has an impact on the global security industry

According to foreign media reports, Aryeh Goretsky, a researcher at the anti-virus software company ESET, said that Microsoft has added a lot of anti-virus and security measures in the new version of the operating system Windows 8.

With the release of Microsoft Windows 8 operating system approaching, the protection of malware and other security functions related to new operating systems have received more and more attention. Aryeh Goretsky said that compared with the previous Windows system, Microsoft adopted completely different anti-malware methods in Windows 8, which can be better. This new method is called Early Launch of the Anti-virus feature Early Launch Anti-Malware) The first software driver to be loaded when Windows 8 is started is the user's Anti-Malware driver. Goretsky said this was a major change. Previously, this was an unsupervised zone. That is to say, the driver software on the user's machine was loaded randomly. "malicious device drivers may be initialized first ", in this way, malware can be skipped and the latter may be disabled.

Goretsky said that Microsoft had previously taken a series of measures to enable sellers to first load anti-malware using Microsoft's digital signatures so that they can check whether the system is clean before starting the process. Now Microsoft has launched its own anti-malware program Windows Defender with Windows 8.

So unless you uninstall Windows Defender, it is the first anti-virus software to be loaded. Goretsky said that some computer manufacturers may uninstall Windows Defender in Windows 8 because they are working with anti-virus software vendors such as Symantec and McAfee. However, even if the anti-virus software is uninstalled, neither Microsoft nor other vendors have made great progress in Windows 8 Security.

Goretsky said, because this is Microsoft's first rule that when a user detaches security software, it should be completely cleared out of Windows 8. The dirty secret in the anti-virus software field is that the Registry and operating system will be modified during software installation, and it is difficult to restore the previous state after the software is uninstalled. Therefore, after anti-virus software is uninstalled, device drivers and services become a mess. This makes the operating system no longer clean before installing another anti-virus software. Goretsky said: "Everyone has a responsibility for this ."

He pointed out that Windows 8 security is also worth praising. One of them is the "Unified Extensible Firmware Interface" uniied Extensible Firmware Interface "), which requires that the digitally signed Firmware be used during startup to avoid Backdoor trojans hiding in it. This secure startup process has passed the UEFI standard. The National Institute of Standards and Technology of the United States has also been vigorously advocating such a safe START process.