Many people think that the virus can be completely cleared if the operating system is re-installed. However, I do not know that after the operating system is re-installed, due to security settings and patch installation failure, the virus is most likely to be infiltrated, therefore, some necessary supplementary measures are critical.
1. Do not rush to access the network
After Windows is installed, do not immediately connect the server to the network, because the server is not installed with various patches, there are various vulnerabilities, it is very easy to be infected with viruses and intrusion. In this case, we need to add the shock wave and shock wave patches, restart them, and then connect them to the Internet.
2. patch the system and install anti-virus software
Needless to say, the patch for shock wave and shock wave viruses must be installed. If you have installed Windows XP SP2, you do not need to install it separately.
After installing the system, you must install the anti-virus software and update it to the latest version.
3. Disable System Restoration
System Restoration is a function in Windows ME, Windows XP, and Windows 2003. It allows us to restore the system to a certain time state, so that we can avoid reinstalling the operating system. However, after executing system restoration, some people found that all the other D and E disks except drive C have been restored to the previous state, and all the files saved in the results have gone, causing serious losses!
This is because the system restore operation is performed by default for all partitions on the hard disk. Once the system restore operation is performed, the data in all partitions will be restored. Therefore, we must press the Win + Break Key, click the "System Restore" tab, cancel the "Disable System Restore on All Drives" option, select disk D, and click the "set" button, in the displayed window, select the "Disable System Restore on this drive" option.
Restore and close the system on other disks in turn. In this way, once the system is unstable, you can use the system restoration tool to restore the system on the C disk, but there is no problem with the files on other disks.
4. Password the Administrator
Some may use a system installed with the universal ghostversion downloaded from the Internet, or a Windows XP unattended installation system installed with a CD, when using these methods for installation, it is very likely that you do not have to specify the Administrator password, or the Administrator password is the default 123456 or empty. This password is quite dangerous. Therefore, after installing the system, right-click "my computer", select "manage", and then select "Computer Management (local)" on the left) → System Tools → local users and groups → users ", select Administrator in the right window, right-click, and select" Set Password ".
Click "continue" in the window to set the password for Administrator in the window.
In addition, select "new user", set the user name and password, double-click the new user, and click the "affiliated" tab to select all the groups (if any, click the delete button below. Click "add", click "advanced" in the window that opens, click "Search now", find the PowerUser or User group, and click "OK" twice, add this User to the PowerUser or User group. Log out of the current user and log on to the new user. The system is much faster.
5. Disable default sharing
After Windows is installed, some hidden shares will be created, which are mainly used by administrators to manage systems during Remote logon. However, this is rarely used and is not very secure for individual users. Therefore, we need to cut off the sharing: first create a disshare. bat file under d: and write the following statement in it:
@ Echo off
Net share C $/del
Net share d $/del
Netshare ipc $/del
Net share admin $/del
Next, Copy d: disshare. bat to the C: WindowsSystem32GroupPolicyUserScriptsLogon folder. Then press Win + R and enter gpedit. msc, expand the "user configuration> Windows Settings> script (login/logout)" folder in the window, double-click the "login" item in the right pane, and in the displayed window, click the Add command and select disshare in the C: WindowsSystem32GroupPolicyUserScriptsLogon folder. bat file.
After completing the preceding settings, restart the system to automatically disconnect the default shared channel for Windows XP. If you have more hard disks, add them under net share d $/del, such as netshare e $/del and net share f $/del.
6. Enable DMA Transmission Mode
After the DMA mode is enabled, the computer's peripheral devices (mainly hard disks) can directly exchange data with the memory, which can speed up hard disk reading and writing and improve data transmission rate: Open the "Device Manager ", under "ide ata/ATAPI controller", there are "primary IDE channel" and "secondary IDE channel". Double-click it and click "Advanced Settings ", this dialog box lists the transmission modes of the devices connected to the current IDE interface. Click the list button to set "transmission mode" to "DMA (if available )". Restart the computer to take effect.
7. enable advanced power management
Sometimes, before Windows XP is installed, you will find that the advanced power control in the BIOS is not enabled. After Windows XP is installed, the power will not be automatically disconnected when Windows is disabled. At this time, many people choose to re-enable the advanced power control in the BIOS and reinstall Windows XP. As a matter of fact, you don't need to be so troublesome. As long as you confirm that you have enabled the advanced power control option in the BIOS and select ACPI Pc, do not select an error. Otherwise, you may not be able to enter Windows After restarting, and restart the computer, the computer may re-search and automatically reinstall the computer's hardware, then it can support advanced power control.
8. uncompress folder support
Click Start → run. Enter "regsvr32/u zipfldr. dll" and press Enter. The prompt "dll UnrgisterServer in zipfldr. Dll is successful" appears to cancel the support for Windows XP compressed folders. In addition, you can enter regsvr32 shdocvw. dll to cancel the association between "image and fax" and image files.
9. Cancel the "insufficient disk space" Notification
When the disk drive capacity is less than MB, Windows XP will send a "insufficient disk space" notification, which is very annoying. You can open registry editor and find HKEY_CURRENT_USERSoftware.
MicrosoftWindowsCurrentVersionPoliciesExplorer, right-click "Explorer", right-click "new"> "DWORD Value" on the menu, and name this value "NoLowDiskSpaceChecks ", double-click the value to set "value data" to "1 ".
10. enable verification code
After SP2 is installed, most users find that the verification code image (displayed as a Red Cross) cannot be displayed when accessing some places where the verification code needs to be entered. This is a very serious Bug. Solution: run the "Regedit" command to open the Registry Editor, locate "[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet assumersecurity]", and create a REG_DWORD value named "BlockXBM" on the right of the window, set the value to "0" (hexadecimal value ).