Reject blind superstition and deeply analyze 5 Mainstream anti-virus software [sequents]

News source: Deep Technology Forum
First of all, I would like to thank my friends for questioning. This has strengthened my belief and I want to tell everyone what I believe and what I know. Users who often visit websites may know that in every anti-virus forum, many people see many "Gun articles" and "soft articles". For example, for rising, computer newspaper, Sina, and Sohu, even if you open a literary website, you can see its advertisements. Many IT portal websites, such as rising Soft Text, are countless, and some computer knowledge, all sneer at these "guns and soft texts. Do users who do not know the technology have a way to distinguish them? Are those enthusiastic FANS really familiar with their favorite soft targets? If you do not think deeply about them, do you think it is good for them?

 

First of all, I would like to thank my friends for questioning. This has strengthened my belief and I want to tell everyone what I believe and what I know. Users who often visit websites may know that in every anti-virus forum, many people see many "Gun articles" and "soft articles". For example, for rising, computer newspaper, Sina, and Sohu, even if you open a literary website, you can see its advertisements. Many IT portal websites, such as rising Soft Text, are countless, and some computer knowledge, all sneer at these "guns and soft texts. Do users who do not know the technology have a way to distinguish them? Are those enthusiastic FANS really familiar with their favorite soft targets? If you do not think deeply about them, do you think it is good for them?

After my article was published, I saw some replies on the forum or counterattacks. I thought it was really ridiculous. Let me just skip those silly and funny ones and start with them.

1. Many people say that there are too many subjective questions in my articles. I am surprised. I have attached data to my article, and so on. Do I have time to speak vernacular? So I will not reply to the question "hypothetical test. When it comes to "subjective", I believe that everyone has different perspectives. No one can be completely "objective". That is what God can do. However, I try my best to make myself objective and fair, so that everything can talk with data. To tell the truth, I have never been using soft tools, but I am always using them. I am keen on this.

Let's talk about "objectivity ". Many people who refuted me on the Forum said that I was not objective enough. Is it true that I refuted my soft FANS? The Forum is like a miniature society. For example, if you like a star, but the technology of this star is not comprehensive enough and the technology of leading the ball is very amateur, why do so many people like this star? Because they can say: "I like his arc ball technology, and I think he is very good at leading the ball." When FANS of this star argue with others about whether this star is so powerful, is it objective ??

In turn. For example, FANS of little red umbrella face the fact that the database is directly loaded with shells. It can be said: "I think it is not a mistake to store the database with shells. It is enough not to kill system files by mistake. It is not serious to kill by mistake ".

But have you ever thought about other techniques that are soft and have no shells to store in the database? If they do the same, will their detection and removal rate also increase? Why don't they do this?

When I look at a problem, I keep asking questions in my mind and unlock it one by one.

When you see this, do you think I am not objective enough or someone else?

2. It is really difficult to say something on the Internet, and it is more difficult to say something they cannot accept. In particular, friends who worship "XX" in "kill soft" cannot tolerate or even tolerate the shortcomings of "XX". Even if they admit that they are actually downsides, they can argue for their advantages. However, is it helpful or comforting you to maintain the anti-bot service? There is no perfect way to kill software. Just like a person, there are more or less shortcomings and they all need continuous improvement. We point out its shortcomings, but we just hope it will be better, isn't it?

3. I want to reply to several disputes or counterattacks on this node.

Let's talk about Kabbah first. To tell the truth, few people who use Kabbah do not think Kabbah does not occupy the memory. The loading time of Kabbah is obviously slow. Why should I refute this? I have to say that you worship and worship "Kill soft" to a terrible level. Please wake up. "Kill soft" is just the software we use, just like our daily necessities such as toothpaste and shampoo, are you so angry?

Besides, why does red umbrella show a high detection and removal rate in the sample area of the anti-virus forum? Because little red umbrella abused its broad spectrum and directly put it into the database with shells, the fans who tested it in the Forum sample area could believe it so much. He could even say, "You see, you see, red umbrella has detected a lot of viruses! It's amazing. "Oh, have the umbrella fans ever thought about an environmental problem? 99% of others in the sample area killed soft-reported viruses or the viruses on the poster's machine, what do you think is the best way to kill viruses? Then I also write a small software and set up a white list. As long as you run programs other than the system and common software, all alarms are reported as "viruses ", will those who are testing in the sample area think that the small software I wrote is a very powerful tool to kill software? Of course, I just gave an example to illustrate the problem.

4. Let's talk about the sample. I saw a very angry FANS who killed the software say, "you have to drag a virus package to test and kill it. I am scared to death. That's just what you want, or take it out. ", I really think it's cool and funny. How many 100,000 virus samples should I use to test and kill software? As far as I know, the well-known anti-software solution has a maximum of millions of virus databases. Where can I find so many samples? In a limited condition, the most scientific method is to randomly search for samples for testing. Even scientists use this method when doing a test or investigation. Is that true? Of course, if you have a better and more scientific method, I would like to learn.

5. Why did my articles cause a strong counterattack on the caifan forum and umbrella fan forum? As the name suggests, the caifan forum is the caaba FANS forum, and the umbrella FANS are the FANS forum. This is like a celebrity support conference. You go to the Zhou bichang fan forum to say that Zhou bichang is not beautiful enough, will you be besieged by all Zhou bichang fans? Yes, but he is telling the truth, right? They will say that Zhou bichang is the most beautiful in my heart, Zhou bichang is singing well, and so on. To be honest, I also like Zhou bichang very much, and R & B is very Tao's taste. But from the whole point of view, as a public character, she is not beautiful enough. If she looks pretty, the song is better, isn't it? (Here is just an example, so do not catch language vulnerabilities here and refute my values. Thank you !)

An example illustrates the root cause of the problem. In my article, if I do not write about Kabbah's memory and Kabbah's killing rate as much as 90%, will there be such a fierce response if I do not write about a red umbrella with a shell, and abuse a broad spectrum? In addition, I want to declare that I didn't mean that the Forum is not good, and I often play with it. I just want to give an example to illustrate the problem. We need to face the reality seriously. Friends who like Kabbah can continue to use Kabbah. Kabbah is also a soft tool that I like. The same is true for friends who like little red umbrella. As a little red umbrella refuted my post: "It is helpless to store a little umbrella with a shell. We don't think normal software will be shelled ", I will not discuss whether the normal software will be shelled first. It is true that such an approach is debatable, isn't it? To maintain a low false positive rate under a high detection/removal rate, this is the correct balance.

Blindly refuted the person who picked out the disadvantages of the soft program, which indirectly killed the development of the soft program. Here, we will share with you some of my outlook on life. Those who are blindly touching you and who are wearing high hats are not your "real friends" at all ". If you are a good friend, he will not show you how to wear a high hat. On the contrary, he will show you your shortcomings. When you do something wrong, he will make a fierce quarrel with you, however, this is the "real friend" who really wants you to be good. This is the real "brother "! (I am very serious about sharing my outlook on life with you. Humorous friends don't need to be bored)

By accident, I saw A very interesting episode in the reply in my article. member A replied in my post, "learning, I used it in addition to rising, it seems that Kabbah is not so card-like. Instead, it is difficult to get a card when the NOD32 is scanned. The red umbrella is not needed. It is all in English. I have to reinstall the system by deleting the wrong file. Very good, very powerful ." In this case, member B immediately reminds us that member B quoted the reply from the previous Member and then added the following sentence: "This sentence simultaneously offended nod and red umbrella .... it's too dangerous. "Oh, what is the terrible public opinion force that makes people scared? This is a question to be reflected on. Who is wrong in the middle? Is it because A Member says what he has actually experienced, or is it true that some people are too arrogant?

6. In my article, many people asked me: "What is my use to kill software? I can tell you that I have never been using the soft killer tool, and I have been using it for another time. As long as you use a browser that prohibits automatic download (not the core of IE), only some websites that are familiar with security should be installed with system patches in a timely manner, and executable programs on the unnamed website should not be downloaded, viruses are basically irrelevant to you. If you want to recommend it to me, I will say a few anti-virus programs that I think are more powerful.

1. Kabbah; the channels for collecting virus samples in China are indeed good. In each sample test I conducted, Kabbah had the highest detection and removal rates, it is not unreasonable for Kabbah to quickly gain a reputation in China within just a few years. Kabbah is always very good, and its anti-virus capabilities cannot be underestimated. Although it occupies a large amount of memory, Kabbah is constantly correcting its shortcomings. For example, card 7 is better than card 6 and card 5, the memory usage problem has been well solved and is commendable! Hope to continue cheering!

However, almost all hackers now list Kabbah as the first target of the kill-free operation. During each Kaba-free operation, they try to report no alert. Therefore, you should enable real-time updates whenever possible. Recommendation index 5 stars

2. Wei, I love and hate this soft killer because of its innovative spirit of soft killing technology, I hate it because it makes it impossible for me to turn machines with micropoints into bots. Many of my friends in the hacker group are helpless about this active defense software. shells, flowers, and other means cannot achieve the effect of eliminating it, A friend of mine used to rewrite a driver-level Trojan. When he was so disappointed, he put the Trojan on the network to show off. After about 10 days, he was killed again, at this time, it was too late for him to change his features. I was so angry that my friend was depressed for a while.

Because it uses the behavior judgment technology, it uses the whole group of program actions, API transmission, monitoring hook calls, and other data to summarize, and then uses the behavior judgment library to determine whether the action of this program is illegal. Therefore, the shell and flower-free killing technologies have no effect on the micropoints. (This paragraph may not be very accurate. After all, I didn't get the source code. to adhere to a rigorous attitude, I 'd like to explain it)