Chapter 1, preface
Microsoft wants to launch his anti-virus software. This is no new. Microsoft quietly acquired several anti-virus software companies in recent years, where the famous arrogance has GECAD and Pelican. In 2003, Microsoft also set up a club called Virus Information Alliance. It is a network knowledge warehouse, which is co-constructed by Microsoft, together with Software Security, Trend Micro and Network Associate, is "education and protecting Microsoft." How can customers respond to malicious code attacks and threats of continuous network viruses. Computer Associates, Sybari Software and Symantec are their members.
Microsoft has never slowed down to enter the safety software, in fact, ISA Server, which has been launched a few years ago, has been anti-virus function. It is also reported that the kernel of the anti-virus software currently testing in Microsoft is temporarily named SBTU (Security Business & Technology Unit), which is the Microsoft Safety Business and Technical Department, and the firewall in SP2 is from the department. It is said that the domain users within Microsoft companies must install the Etrust AntiVirus component provided by Computer Associates, which is the housing of Microsoft anti-virus products.
We will always have one or two landmark products as a pioneer before the new product is officially launched, and anti-virus software should not exceed The success of WIN XP SP2 built-in firewall makes Microsoft more reason to enter the security software. The beta version of the anti-spyware name "mircrosoft antispyware" in 2005 quietly appeared on the network. In fact, this is after Microsoft, Microsoft acquired anti-spyware manufacturer giant, which is re-created with its technique, which is mainly used to monitor and clear the spyware (spyware) and other special tools that are not trusted, can block more than 50 classes. Spyware "invasion".
The wave is not in a wave of waves, when "mircrosoft antispyware" anti-spyware gives the vibration of the industry, there is less than a week, January 11 Microsoft has launched a free malware clearance. Malicious Software Removal Tool. On the surface, this is only a collection of some virus killing tools previously launched by Microsoft. Gytis Barzdukas, the person in charge of Microsoft's safety business and technical department, has repeatedly stressed that this is only used by anti-virus software products from Symantec, McAfee, Trend Micro. A complement, but in addition to letting users download from the Microsoft Download Center, you can automatically update through Windows Update, you can't let people connect it to Microsoft to launch your anti-virus software.
Before this, Rich Kaplan, Vice President, Microsoft Safety Business and Technical Department, has also been revealed: "We will have a separate anti-virus product, you can buy from Microsoft, but now we can't make any statement." So We have the right to take this tool as a Microsoft's behavior of the Market in the market. The author tried these two software for the first time, and the main features of them were introduced to you:
New soft appreciation
Anti-spyware "mircrosoft antispyware"
Software small file:
Microsoft AntiSpyware Beta 1
Software Size: 6388 KB
Software language: English
Operating environment: Windows 2000 / XP / 2003
download link:
http://www.mydown.com/soft/204/204952.html
I. Software Setup Wizard
After downloading, install because if you install Giant AntiSpyware produced using Giant, it is best to uninstall it first to avoid software version conflicts. Mircrosoft AntiSpyware is running for the first time, the setup wizard will pop up, divided into four steps, which are: Automatic Updates, open real-time protections, join the SpyNet community, and scan your computer. It is recommended to choose no or skip. Maybe because it is the original reason for the beta, the author feels that the software starts slower, but it is still very stable. Second, spyware scanning
The Mircrosoft AntiSpyware interface is relatively simple (as shown in Figure 1), main features include spyware scanning, real-time protection, and advanced tools. Among them, scanning is divided into manual and timed scans:
figure 1
1, manual scan
Click the "Spyware Scan" icon in the upper right corner to make a scan window, the software will provide a set of default scanning schemes, only scan memory, system files, registry, and cookies files. You can also customize according to your own situation, click "SCAN Options" and select the item you want to scan, and finally check "Save these option" to keep your settings, press "Run Scan Now", need to spend it by default Three minutes
A brief report is displayed after the scan is completed. Here we can see the number of spyware, the number of memory process scanned, the number of scanned files (Files Scanned), infected SPYWARE FILES INFECTED, the number of registry keys (Registry Keys Scanned), and so on. When it is closed, the detailed scan results are displayed. The Threat Name name will appear a very intuitive hazard level evaluation (Threat Level), click the plus number below to see the location of the software (including file path and registry key value). ). Select each spyware on the right side of the spyware, more detailed description, including the type of spyware (the author), an introduction (Description), and the proposal to process the spyware (Advice). We can process them according to these tips, including removs, ignore (ignore), quarantine, always ignore four types, you can pull a drop-down list on each result Select in the box. The author recommends removing the "Threat Level" level to "high" and above. In order not to delete a normal file, you can check the "Create Restore Point" option below to create a restore point and continue. (Figure 2)
2, automatic scanning
Mircrosoft AntiSpyware also provides automatic scanning function, select "Tools / Scan Scan Details / Management SPYWARE Scan Scan Details" to open the settings window, you can set when you automatically scan a week (Figure 3). On the right "Scheduled Scan Options" area, you can set the processing of scan results, such as "Automactical Quarantine Spyware, automatically remove spyware cookies (Automatically Remove Spyware cookies), etc., click to click The "Update Schedule" button takes effect. Figure 3
Third, real-time protection
Similar to real-time monitoring of anti-virus software, Mircrosoft AntiSpyware also provides instant monitoring protection features, which can promptly monitor spyware from network and applications, when any unknown, hazardous programs or services (such as letter service services) Attempting to run, it will immediately block and pop up a warning window to remind the user. You can open the "Options → Settings" setting window, check "Enable the Microsoft Antispyware Security Agents on Startup" and "Enable Real-Time SPYWARE THREAT Protection" on "Real-Time Protection".
In the Real-Time Protection window, click on the Internet Assistant (System Agents), the Program Assistant (Application Agents), you can see which projects have been used against spyware strategies. Monitor and prohibited. (Figure 4)
Fourth, utility
In addition to the basic functions of the subject, Mircrosoft AntiSpyware provides several very useful tools, you can find them in the Tools menu, including system browser (System Explorers), IE kidnap restore, in Browser Hijack Restore, System Recording Cleanser, Advanced File Analyzer.
1, System Explorers: You can view and manage the downloaded ActiveX plug-in (where you can tell the user secure), running the process, the INTERNET Explorer installed plugin, toolbar buttons, Host files, etc. (Figure 5) The author feels that this is a very practical tool that solves the problems that most netizens usually encounter.
Figure 5
2, Browser Hijack Restore: Accessing Very Website IE Homepage is often modified, using this tool Each user can easily recover.
3, TRACKS ERASER: You can clear the password including IE history, cookies, automatic saved password, entered URL, drawing program, Notepad, Explorer, Windows Media Player, WinRar, ICQ, Adobe Acrobat Reader, Google Toolbar, etc. Software opens a history of files, and makes your privacy to maximize the most. (Figure 6)
Figure 6
4, Advanced File Analyzer: We often worry about the software downloaded from the Internet, and the files passing through the friends will contain the malicious procedures such as Trojans. Through this tool, you can check the real information of the file, including real extensions, paths, creating time, MD5 value, etc. (Figure 7) Figure 7
After nearly one week, I feel that mircrosoft AntiSpyware is a fully functional and convenient anti-spyware tool software, but only English version is not a regret for the Chinese. And the current mircrosoft antispyware is free, and with Microsoft support, the author believes more perfect after the official version is launched. It seems that no one can stop this huge way to enter the security software.
Malicious Software Remove Tool (Malicious Software Removal Tool)
This is a free malware clearance tool (Malicious Software Removal Tool) launched. It only supports Windows 2000 and above, Simplified Chinese version download address:
Http://download.microsoft.com/download/3/9/8/3982d61b-07a5-44cd-a7a7-1aa4565f0e93/windows-kb890830-chs.exe. This tool will be updated once a month after the second Tuesday, which is also in line with Microsoft's software security update strategy for monthly. The technology used by this tool mainly comes from Microsoft's anti-virus Gecad Software SRL in Romania acquired in 2003. It can help users monitor Win32 / Berbew, Win32 / Doomjuice, Win32 / Gaobot, Win32 / Msblast, Win32 / MyDoom, Win32 / Nachi, Win32 / Sasser, Win32 / Zindos and other viruses. However, it is currently three points from other anti-virus software: the first there is no real-time monitoring function; the second it cannot scan a virus that is not activated in the hard disk; the third can only scan a limited number of viruses specified in the list .
After downloading, running directly, after accepting the End User License Agreement (EULA), the tool will automatically check if there are several viruses specified in the system and its variants in operation, once found, will be removed immediately. After completing the detection / delete process, click "View Detailed Scan Results" on the interface after completion, you can see the detected and deleted malware (as shown in Figure 8). Here, the author wants to remind the user, when the tool finds a virus or an error, it will send information anonymously back to Microsoft. You can delete a log file called MRT.log in the% Windir% / Debug folder.
Figure 8
Postscript: The introduction of these two software indicates that Microsoft begins to attack the security software field, from the previous IE and media player, etc., no one will stop the pace of this giant to enter the safety software. If Microsoft is heavy, raise the killer of the bundled operating system, will be the nightmare of all anti-virus software vendors.
