Many people think that by reinstalling the operating system, the virus can be completely eliminated. However, I don't know that after the operating system is reinstalled, due to security settings and patches not being installed in time, it is most likely to cause a virus to invade. Therefore, some necessary supplementary measures are very important. First, do not rush to access the network After installing Windows, do not immediately connect the server to the network, because the server has not been patched, there are various vulnerabilities, very vulnerable to viruses and intrusions. At this point, you need to add a patch and restart it to connect to the Internet. Second, patch the system /install anti-virus software installed Windows XP SP2 patch. After installing the system, be sure to install anti-virus software and update it to the latest version. Third, turn off the system restore System Restore is a feature in Windows ME and Windows XP, Windows 2003, it allows us to restore the system to a certain time state, which can prevent us from reinstalling the operating system. However, some people after the system restore, found that in addition to the C drive, the other D drive, E drive are restored to the previous state, and the results of the saved files are gone, causing serious losses! This is due to System Restore defaults to all partitions on the hard disk, so once the system restore operation is performed, the data of all partitions will be restored. Therefore, we must press the Win+Break button, then click the “System Restore” tab, uncheck the “Resume System Restore on all drives” option, then select the D drive and click the “Settings” button. In the window that opens, select the option to "close the system restore on this drive". Restore the systems on the other disks in turn. In this way, once the system is unstable, you can use the system restore tool to restore the system on the C drive, but at the same time the files on other disks will not be a problem. 4. Give the Administrator a password. Some people may use the system that is downloaded from the universal Ghost version to install the system. It may also be a system installed on the Windows XP unattended installation CD. It is highly probable that these methods will not be installed. Lets you specify the Administrator password, or the Administrator password is the default 123456 or simply empty. Such a password is quite dangerous, so after installing the system, please right click on "My Computer", select "Manage", and then select the "Computer Management (Local) & Rarr; System Tools on the left side. → local users and groups → users & rdquo;, select the Administrator in the right window, right-click, select “ set password & rdquo;. Click the “Continue” button in the open window to set the password for the Administrator in the open window. In addition, select “new user”, set the user name and password, double-click the new user, click the “subordinate to” tab, select all the groups (if any), click “delete> ; button. Click the “Add” button, and then click the “Advanced” button in the open window, then click the “Find Now” button to find the PowerUser or User group, click “OK” Times, add this user to the PowerUser or User group. Logging out the current user and logging in as a new user can reveal that the system is much faster. 5. Turn off the default share After Windows installation, some hidden shares will be created, which are mainly used when the administrator manages the system when logging in remotely. However, for individual users, this is rarely used and is not very secure. Therefore, we need to cut off this share: first create a new disshare.bat file under d:, write the following statement: @echo off net share C$/del net share d$/del netshare ipc$/del net Share admin$ /del Next copy d:disshare.bat to the C:WINDOWSSystem32GroupPolicyUserScriptsLogon folder. Then press Win+R, enter gpedit.msc, in the open window, expand “User Configuration →Windows Settings →Script (Login/Logout)” folder, double click in the right pane “Login&rdquo ; item, in the pop-up window, click the "Add" command to select the disshare.bat file in the C:WINDOWSSystem32GroupPolicyUserScriptsLogon folder. After completing the above settings, restart the system, you can automatically cut off the default shared channel of Windows XP. If you have more hard disks, please add them yourself under net share d$/del, such as netshare e$/del, net share f $/del and so on.