重要信息：如何扫描和删除恶意病毒

淩亂°似流年 2021-07-26 11:58 436阅读 0赞

Every so often, we hear about a new and horrible virus spreading across the internet, infecting millions of Windows computers. Today we’ll show you the steps to remove those threats and (hopefully) prevent them from happening in the future.

每隔一段时间，我们就会听到一种新的可怕病毒在互联网上传播，感染了数百万台Windows计算机。 今天，我们将向您展示消除这些威胁并(希望)防止它们在未来发生的步骤。

*Note: The latest horrible virus is set to hit on April 1st, 2009. It’s called [Conficker][], and we’ll explain how to make sure you are safe.*

*注意：最新的可怕病毒定于2009年4月1日发布。它被称为[Conficker][] ，我们将说明如何确保您的安全。*

**Whenever an outbreak happens, you should take the following steps:**

**每当爆发时，您应采取以下步骤：**

1.  Run the Microsoft Windows Malicious Software Removal Tool.
    
    运行Microsoft Windows恶意软件删除工具。
2.  Run the McAfee Stinger Tool (optional)
    
    运行McAfee Stinger工具(可选)
3.  Make sure you are using Updated Anti-Virus Software.
    
    确保您使用的是更新的防病毒软件。
4.  Make sure Windows Updates are turned on.
    
    确保Windows更新已打开。
5.  Get Notified for Microsoft Security Alerts.
    
    获取有关Microsoft安全警报的通知。

We aren’t talking about regular viruses… your anti-virus software can handle those. We’re talking about the terrible viruses that will crash your computer, steal your information, delete the pictures of your kids – and cause your computer to be remotely controlled by a spammer. Bad stuff, but they can usually be prevented.

我们不是在谈论常规病毒……您的防病毒软件可以处理那些病毒。 我们正在谈论的可怕病毒将使您的计算机崩溃，窃取您的信息，删除您孩子的照片，并导致垃圾邮件发送者对您的计算机进行远程控制。 坏东西，但通常可以避免。

## 运行Microsoft Windows恶意软件删除工具 **(**Run the Microsoft Windows Malicious Software Removal Tool**)** ##

The first step in detecting and removing horrible viruses and worms from your computer is to run Microsoft’s own Malicious Software Removal Tool – it’s not a replacement for anti-virus, but it’s the best way to get rid of some of the worst offenders, like the current Conficker worm.

从计算机中检测和删除可怕的病毒和蠕虫的第一步是运行Microsoft自己的恶意软件删除工具-它不能替代防病毒软件，但它是摆脱某些最严重犯罪者的最佳方法，例如当前的Conficker蠕虫。

To run the tool, you simply need to download the file from Microsoft and run it. There’s no installer required.

要运行该工具，您只需要从Microsoft下载文件并运行它。 无需安装程序。

![Malicious Software Removal][]

If you were affected, the tool would remove the virus and alert you. Since we’re thankfully safe, we got the friendly message that no malicious software was detected. You can click the “View detailed results of the scan” to see more information.

如果您受到感染，该工具将删除病毒并向您发出警报。 幸运的是，由于我们安全，我们收到了友好的消息，即未检测到恶意软件。 您可以单击“查看扫描的详细结果”以查看更多信息。

![No malicious software detected][]

By scrolling down in the list, you can find the current threat and make sure that you are not infected.

通过向下滚动列表，您可以找到当前威胁并确保您没有被感染。

![Scan results][]

The tool should be updated automatically through Windows Update, but you can always just download it directly as well. This is an important tool to keep around.

该工具应通过Windows Update自动更新，但您始终也可以直接直接下载它。 这是一个重要的工具。

[Download the Microsoft Windows Malicious Software Removal Tool from microsoft.com][]

[从microsoft.com下载Microsoft Windows恶意软件删除工具][Download the Microsoft Windows Malicious Software Removal Tool from microsoft.com]

## 运行McAfee Stinger工具(可选) **(**Run the McAfee Stinger Tool (optional)**)** ##

An alternative tool is the McAfee Stinger tool, which is a freeware tool that removes only the worst viruses from your computer. You can check to make sure that Stinger can remove the current virus problem by checking the List Viruses dialog… make sure you have the latest version of Stinger before you use it.

替代工具是McAfee Stinger工具，这是一个免费软件工具，可以仅从计算机中清除最严重的病毒。 您可以通过检查“列出病毒”对话框来检查以确保Stinger可以消除当前的病毒问题…使用前请确保您具有最新版本的Stinger。

![List of viruses Stinger can detect][]

Simply hit the Scan Now button to do a full scan of your computer, but be warned that this will take a long while.

只需单击立即扫描按钮即可对计算机进行全面扫描，但请注意，这将需要很长时间。

![McAfee Stinger][]

Once it’s done, you should get a report with the number of clean files.

完成后，您应该获得包含干净文件数量的报告。

![Stinger Results][]

It’s a simple and rather ugly tool, but it does the job. It’s still not a replacement for real anti-virus though.

它是一个简单且相当丑陋的工具，但可以完成工作。 但是，它仍然不能替代真正的防病毒软件。

[Download McAfee Avert Stinger from vil.nai.com][]

[从vil.nai.com下载McAfee Avert Stinger][Download McAfee Avert Stinger from vil.nai.com]

## 确保您使用的是更新的防病毒软件 **(**Make sure you are using Updated Anti-Virus Software**)** ##

This is one of the most important steps in keeping yourself safe. You need to make sure that your anti-virus software is enabled and properly working! Here’s a quick list of what you should do:

这是确保自己安全的最重要步骤之一。 您需要确保已启用防病毒软件并且可以正常工作！ 这是您应该做什么的快速列表：

1.  Make sure your virus definition updates are automatically updated.
    
    确保您的病毒定义更新已自动更新。
2.  Make sure that real-time scanning is enabled.
    
    确保启用了实时扫描。
3.  Run a full scan (optional but useful)
    
    运行全面扫描(可选，但有用)

![ClamWin Update][]

If you aren’t sure what anti-virus software to use and don’t have money to spend, you can [try out AVG Free edition][], or you can take a look at the [big list of anti-virus software we tested with Windows 7][].

如果不确定使用什么杀毒软件并且没有花钱，可以[尝试使用AVG Free版][try out AVG Free edition] ，也可以查看[我们在Windows 7中测试过的杀毒软件][big list of anti-virus software we tested with Windows 7]的[大清单。][big list of anti-virus software we tested with Windows 7] 。

*Note: We don’t necessarily recommend ClamWin for regular users, because it has no real-time protection. It’s just what I have installed on this computer and I needed a screenshot.*

*注意：我们不一定建议普通用户使用ClamWin，因为它没有实时保护。* *这就是我在此计算机上安装的，我需要屏幕截图。*

## 确保Windows更新已打开 **(**Make sure Windows Updates are turned on**)** ##

Now we arrive at the most important step: making sure that Windows is fully patched and Windows Updates is enabled. You can’t protect yourself against worms and hackers if you are running a woefully out-of-date version of Windows that isn’t patched. It just won’t work.

现在我们到达最重要的步骤：确保Windows已完全修补并启用Windows更新。 如果运行的Windows版本严重未过补丁，就无法保护自己免受蠕虫和黑客的攻击。 只是行不通。

Open up Windows Updates, make sure to click “Check for updates” and install every security patch they recommend. Then click the Change settings link…

打开Windows更新，确保单击“检查更新”并安装他们推荐的每个安全补丁。 然后点击更改设置链接...

![image][]

And make sure you have it set to check for updates automatically, and installing updates automatically isn’t a bad option. Just remember, if you are running an un-patched system, you are leaving yourself open for all sorts of bad things.

并确保将其设置为自动检查更新，并且自动安装更新不是一个坏选择。 请记住，如果您运行的是未打补丁的系统，那么您会面对各种不良情况。

![image][image 1]

*Note: Please pardon the alarmist nature of this point, but patching is the \#1 key to keeping safe against internet worms.*

*注意：请原谅这一点的危言耸听的性质，但修补程序是确保免受Internet蠕虫侵害的第一要害。*

## 收到有关Microsoft安全警报的通知 **(**Get Notified for Microsoft Security Alerts**)** ##

If you really want to make sure you are secure, you can sign up for alerts from Microsoft whenever there is an important patch that needs to be installed. You can also check the current security bulletins at any time by visiting their security bulletin home page.

如果您确实要确保自己的安全，则可以在需要安装重要补丁程序时注册Microsoft的警报。 您还可以通过访问其安全公告主页随时查看当前的安全公告。

[Subscribe to Microsoft Security Alerts by Email or RSS][]

[通过电子邮件或RSS订阅Microsoft安全警报][Subscribe to Microsoft Security Alerts by Email or RSS]

[Latest Microsoft Security Bulletin Home Page][]

[最新的Microsoft安全公告主页][Latest Microsoft Security Bulletin Home Page]

**How Do I Make Sure the Patch is Installed?**

**如何确定已安装补丁？**

So now we get right down to it… how do you know if you are vulnerable to one of the security holes? As an example, we’ll look at the security hole that leaves you vulnerable to the Conficker worm: [Vulnerability in Server Service Could Allow Remote Code Execution][]. If you look through the list of downloads, you’ll see the particular patch for your system.

因此，现在我们开始深入探讨……您如何知道您是否容易受到其中一个安全漏洞的攻击？ 作为示例，我们将研究使您容易受到Conficker蠕虫攻击的安全漏洞： [服务器服务中的漏洞可能允许远程执行代码][Vulnerability in Server Service Could Allow Remote Code Execution] 。 如果您查看下载列表，将会看到系统的特定补丁程序。

If Windows update says that you are up to date, you can check for a particular patch by clicking on “View update history” on the left-hand side.

如果Windows更新表明您是最新的，则可以通过单击左侧的“查看更新历史记录”来检查特定的修补程序。

![Windows Update][]

This will take you to a long list of every update that has been installed. Look through the list, and you should see the update mentioned in the security bulletin… for me, it was KB958644 for x64-based systems, since I’m running 64-bit Vista.

这将带您进入已安装的每个更新的详细列表。 浏览列表，您应该会看到安全公告中提到的更新…对我来说，这是基于x64系统的KB958644，因为我运行的是64位Vista。

![View Update History][]

At the very least it’s a relief to know that you aren’t vulnerable… to the current worm, at least.

至少知道您不容易受到当前蠕虫的威胁，这真令人欣慰。

## 结论 **(**Conclusion**)** ##

These steps are essential in protecting your computer from hackers, worms, and viruses, but they aren’t the only important keys to safety. You should still remain vigilant and use common sense: don’t download files from untrusted sources, use a firewall, and make sure your email provider scans for viruses before you open attachments.

这些步骤对于保护您的计算机免受黑客，蠕虫和病毒的侵害是必不可少的，但它们并不是确保安全的唯一重要秘诀。 您仍应保持警惕并保持常识：不要从不受信任的来源下载文件，不要使用防火墙，并确保电子邮件提供商在打开附件之前先扫描病毒。

> 翻译自: [https://www.howtogeek.com/howto/windows/important-how-to-scan-and-remove-malicious-viruses/][https_www.howtogeek.com_howto_windows_important-how-to-scan-and-remove-malicious-viruses]

[Conficker]: http://www.microsoft.com/security/portal/Entry.aspx?name=Win32%2fConficker
[Malicious Software Removal]: /images/20210726/db9b8f604b53433d9aa8a30b1e667ccf.png
[No malicious software detected]: /images/20210726/dbe32c1b08b34a76890f28ab1ceb6630.png
[Scan results]: /images/20210726/fece29ed334c43a9903c1ed7c3d0c5b9.png
[Download the Microsoft Windows Malicious Software Removal Tool from microsoft.com]: http://www.microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en
[List of viruses Stinger can detect]: /images/20210726/f16e7e0f1b2c457383ea933412764eaf.png
[McAfee Stinger]: /images/20210726/96531ec2500545c1a28b5a661f25f9af.png
[Stinger Results]: /images/20210726/0474ef2f3ccc44e6aafb98a9fef6e821.png
[Download McAfee Avert Stinger from vil.nai.com]: http://vil.nai.com/vil/stinger/
[ClamWin Update]: /images/20210726/fe5fcf53dba341dd94d85c6fe77ead6e.png
[try out AVG Free edition]: http://blogs.howtogeek.com/mysticgeek/2008/09/15/secure-computing-free-anti-virus-protection-with-avg-free-edition/
[big list of anti-virus software we tested with Windows 7]: https://www.howtogeek.com/howto/windows-7/list-of-anti-virus-software-compatible-with-windows-7/
[image]: /images/20210726/55bc3c47d1d143488554a78651f77361.png
[image 1]: /images/20210726/30a8f78efdf9459a8f126efee3bb5a25.png
[Subscribe to Microsoft Security Alerts by Email or RSS]: http://technet.microsoft.com/en-us/security/dd252948.aspx
[Latest Microsoft Security Bulletin Home Page]: http://www.microsoft.com/technet/security/current.aspx
[Vulnerability in Server Service Could Allow Remote Code Execution]: http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx
[Windows Update]: /images/20210726/18c368f886a747e382d305fac600a4bf.png
[View Update History]: /images/20210726/d0b0d02bbe2e4ee8b1ea145d4ef4e13b.png
[https_www.howtogeek.com_howto_windows_important-how-to-scan-and-remove-malicious-viruses]: https://www.howtogeek.com/howto/windows/important-how-to-scan-and-remove-malicious-viruses/