Shulou(Shulou.com)06/03 Report--

Today, I would like to talk to you about whether all virus killing can be checked and killed with virus software. Many people may not know much about it. In order to make you understand better, the editor summed up the following contents for you. I hope you can gain something according to this article.

Antivirus software cannot detect and kill all viruses for the following reasons: 1. With the continuous development of information security technology, the definition of virus has been expanded; 2. Antivirus software manufacturers can only find as many unknown viruses as possible, but it is far from reaching the 100% standard.

Antivirus software cannot check and kill all viruses because:

Myth 1: good antivirus software can check and kill all viruses. Many people think that antivirus software can detect and kill all known and unknown viruses, which is incorrect.

For a virus, antivirus software manufacturers should first intercept it, then analyze it, extract virus features, test it, and then upgrade it to users. Although, at present, many antivirus software manufacturers are making continuous efforts to detect and kill unknown viruses, and some manufacturers even claim that they can kill unknown viruses at 100%. Unfortunately, according to experts, this is impossible. Antivirus software manufacturers can only find as many unknown viruses as possible, but they are far below the 100% standard. Even, as for some known viruses, such as overlay viruses. Because the virus itself overwrites the original system files. Therefore, even if the antivirus software kills the virus, it cannot restore the normal operation of the operating system.

Misunderstanding 2: antivirus software is designed to check and kill viruses, while Trojans are specially used to kill Trojans. Computer viruses are clearly defined in the regulations of the people's Republic of China on the Security and Protection of computer Information Systems. Virus refers to "a group of computer instructions or program codes that are compiled or inserted in computer programs that destroy computer functions or destroy data, affect computer use and are able to replicate themselves."

With the continuous development of information security technology, the definition of virus has been expanded.

With the continuous development of technology, the definition of computer virus has been generalized, it roughly includes: boot area virus, file virus, macro virus, worm, Trojan horse, backdoor program, malicious script, malicious program, keylogger, hacker tools and so on. It can be seen that Trojans are a subset of viruses and can be checked and killed by antivirus software. From the point of view of antivirus software, there is no difference between clearing Trojans and eliminating worms, and it is even easier to kill Trojans than to remove file-based viruses. Therefore, it is not necessary to install Trojan horse killing software separately.

Myth 3: my machine has no important data, has a virus reinstallation system, and does not need antivirus software. Many computer users, especially some online game players, think that they do not have important files on their computers.

If the computer is infected with a virus, everything will be fine if you directly format and reinstall the operating system. There is no need to install antivirus software. This view is not correct.

A few years ago, virus writers wrote viruses mainly for fun or to prove themselves. These viruses often use superb writing techniques and have obvious seizure characteristics (such as attack on a certain day of a month, deletion of all files, etc.). However, great changes have taken place in the virus in recent years, and virus writers aim to gain economic benefits. The virus has no obvious characteristics and does not delete data on the user's computer. However, they will run quietly in the background, stealing gamers' account information, QQ passwords and even bank card accounts. Because these viruses can directly bring economic losses to users. For individual users, it is more harmful than traditional viruses.

For this kind of virus, it is often found that the user's account information has been embezzled when the virus is infected. Even if the computer is formatted to reinstall the system, the stolen account will not be recovered.

Myth 4: antivirus software with fast detection speed is good. Many people think that antivirus software with fast detection speed is the best. Even many media take the detection and killing speed as one of the important indicators when evaluating antivirus software.

There is no denying that at present, various antivirus software manufacturers are making continuous efforts to improve the antivirus software engine in order to achieve a higher detection and killing speed. But it is one-sided to evaluate the quality of antivirus software only by the speed of virus detection. The speed of virus detection by antivirus software is mainly related to the characteristics of engine and virus. For example, one antivirus software can kill 100000 viruses, while another antivirus software can only kill 100 viruses. Antivirus software needs to match each record when checking virus, so antivirus software that kills 100 viruses will certainly be faster. A good antivirus software engine requires file analysis, shelling and even virtual execution, which takes a certain amount of time. But some antivirus software engine is relatively simple, does not do too much analysis to the file, only carries on the feature matching. The virus detection speed of this antivirus software is also very fast, but it may miss more viruses.

Thus it can be seen that although improving the antivirus speed is the goal that various manufacturers are constantly striving for, it is unscientific to measure the quality of antivirus software only from the speed of virus detection.

Myth 5: antivirus software, regardless of genuine piracy, can be installed casually. At present, many people have pirated antivirus software installed on their machines. They think that as long as antivirus software is installed, it will be foolproof. This view is not correct.

Antivirus software is different from other software. antivirus software needs to be constantly upgraded to detect and kill the latest and most popular viruses. In addition, most pirated antivirus software more or less damaged some data in the cracking process, resulting in some key functions can not be used, system instability or antivirus software missed detection and kill of some viruses, and so on. There are also some unintentional crackers who directly bind viruses, Trojans or backdoor programs in the cracked antivirus software, bringing unnecessary trouble to users.

Antivirus software buys services, as long as the genuine antivirus software, can get continuous upgrading and after-sales service. At the same time, if pirated software users really encounter unsolvable problems and can not enjoy the same after-sales service as genuine software users, the use of pirated software seems to take advantage, but the actual loss outweighs the gain.

Misunderstanding 6: judging the resource occupation of antivirus software according to the memory occupation in the task manager, including some media for antivirus software evaluation, all use Windows's own task manager to check the memory occupation of antivirus software, and then judge the resource occupation of an antivirus software, which is open to question.

The functions of different antivirus software are different, for example, an excellent antivirus software has a registry, vulnerability attacks, mail sending, receiving, web pages, boot area, memory and other monitoring systems. It certainly takes up more memory than antivirus software that is only monitored by files, but provides more comprehensive security protection. At the same time, a small number of antivirus software manufacturers deliberately limit the amount of memory that antivirus software can occupy in the program in order to deal with the evaluation, so that these values look very small, generally in 100KB or even dozens of KB. In fact, although the memory footprint is small, the antivirus software has to read and write to the hard disk frequently, which reduces the running efficiency of the software.

Myth 7: as long as you don't use floppy disks, you won't be poisoned if you don't mess with things, which is wrong.

At present, there are many ways to spread computer viruses. They can be spread through floppy disks, USB disks, removable hard drives, local area networks, files, and even system vulnerabilities. A computer with a loophole will be infected by a virus as long as it is connected to the Internet, even if it does nothing. Therefore, it is very difficult to prevent computer viruses only from the habit of using computers, so we must cooperate with antivirus software for overall protection.

Myth 8: antivirus software should be installed at least three to ensure system security. Although different antivirus software developers claim to use different technologies, their implementation principles may be similar or the same.

Opening real-time monitoring programs of multiple antivirus software at the same time is likely to cause conflicts, such as multiple virus firewalls scrambling for a file to scan at the same time. Computers with multiple antivirus software are often slow and unstable, so we do not recommend that ordinary users install multiple antivirus software, even if they really want to install them at the same time. Do not open their real-time monitoring programs (virus firewalls) at the same time.

Myth 9: just install one antivirus software and personal firewall. Many people regard the real-time monitoring program of antivirus software as a firewall, and some antivirus software do refer to real-time monitoring as a "virus firewall." In fact, the real-time monitoring program of antivirus software and personal firewall are two completely different products. Generally speaking, antivirus software is anti-virus software, while personal firewall is anti-hacker software, both of which have different functions and are indispensable. It is recommended that users install both kinds of software at the same time to defend the computer as a whole.

Myth 10: special killing tools are better than antivirus software. many people think that antivirus software manufacturers have launched special killing tools because there are problems with antivirus software, which can not kill this kind of virus. In fact, this is not the case.

In view of some viruses with serious destructive ability and viruses that spread rapidly, antivirus software manufacturers will voluntarily launch free special killing tools for the virus, but this does not mean that the antivirus software itself cannot detect and kill such viruses. If your machine is equipped with antivirus software, there is absolutely no need to use special killing tools. The kill tool is just a gadget to clean up after the user's computer has been infected with the virus. Compared with the complete antivirus software, it does not have real-time monitoring function, at the same time, the engine of the killing tool is generally relatively simple, will not kill compressed files, e-mail viruses, and generally will not shell the files to check.

After reading the above, do you have any further understanding of all virus killing can be checked and killed with virus software? If you want to know more knowledge or related content, please follow the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.