Windows 11、Windows 10、Windows 8 或Windows 7 可能会给我们带来安全感。原因很明显。它先进，融合了最新(Being)的安全技术，包括许多安全改进和功能。但是，保护Windows的需求仍然存在。鉴于其广受欢迎，黑客和恶意软件编写者总是希望以这种流行的操作系统为目标。(Given its immense popularity, hackers and malware writers always want to target this popular operating system.)因此，必须进一步保护您已经久经沙场的Windows。您需要确保您的Windows副本是安全的，并且它为您提供针对恶意软件和黑客的最佳保护。
如何在Windows 11/10恶意软件(Malware)
安全的 Windows 11/10
以下是一些保护Windows 11/10的初学者提示。这有助于防止恶意软件感染。
- 更新您的操作系统
- 安装一个好的安全套件
- 使用行动中心监控
- 避免使用管理员帐户
- 使用强密码
- 保持应用程序更新
- 使用好的防火墙
- 升级您的硬件
- 应用程序白名单方法
- 使用 Hosts(Use Hosts)文件和Internet Explorer 安全区域(Internet Explorer Security Zones)
让我们详细看看它们。
1]更新您的操作系统
您会同意Windows 11/10Windows XP）相比具有更好的安全功能。因此，如果您仍在使用旧版Windows，为什么不升级到最新版本呢？在撰写本文时，Windows 10是Windows系列操作系统中最新且最安全的操作系统。所以这是我要推荐的第一件事：如果您使用的是旧版本的Windows，请升级到最新的Windows 11/10。
为了保护Windows，重要提示之一是确保您已使用Windows 更新(Windows Updates)功能安装了所有最新更新，尤其是安全更新。因此，除了使用最新的操作系统之外，您应该确保操作系统的任何升级和补丁都应该自动应用到它。这可以通过将Windows 更新(Windows Updates)设置为自动（控制面板(Control Panel)-> Windows 更新(Windows Updates)）轻松实现。Windows 更新(Windows Updates)的特点之一是它还会检查计算机上安装的其他软件的更新（驱动程序和Microsoft OfficeETC。 ）。如果它发现此类软件的更新，它会在可选更新(Optional Updates)下通知您。
2]安装一个好的安全套件
虽然内置的Windows Defender很好，但您可以根据需要安装一个好的Internet 安全套件(Internet Security Suite)或防病毒软件(Antivirus software)。另外，看看这些免费的互联网隐私软件(free Internet Privacy Software)。
阅读(Read)：如何在 Windows 11 中使用 Windows 安全性以获得最佳保护。
3]使用行动中心监控
Windows控制面板(Control Panel)中的操作中心为您提供有关需要您注意的几件事的信息：防病毒、Windows 更新(Windows Update)等。它还提供有关您上次备份数据的信息。永远不建议关闭操作中心(Action Center)通知，因为它们会提醒您为保护Windows计算机需要执行的操作。
4]避免使用管理员帐户
即使您是计算机上的唯一用户，也应避免使用管理员(Administrator)帐户。使用标准用户帐户(Standard User Account)进行日常使用。Gues ts 可能被授予访问Gues帐户的权限。您的任何朋友或孩子可能想在您不看的时候在Internet上查看某些内容或玩游戏来弄乱您的计算机。授予访客访问权限是最好的选择。
此外，将用户帐户控制(User Account Control)设置为尽可能高，以便在任何程序尝试更改任何设置之前收到警报。此外或作为替代，您可以使用WinPatrol来进一步保护 Windows。
5]使用强密码
同样，如果您是单个用户，您可以关闭用户帐户的密码，以便节省时间。但是，这可以帮助其他人在您不查看和窃取您的数据时登录。为了保护Windows PC，必须使用强密码(strong passwords )——无论是用户帐户还是登录Internet时。当您打算暂时离开计算机时，不要忘记锁定计算机。Press Windows Key + L锁定您的计算机。
6]保持应用程序更新
与较新版本相比，旧(Old)应用程序更容易出现错误和黑客攻击。这是因为几乎每个应用程序制造商都倾向于继续针对不同的问题/因素测试他的应用程序并相应地更新程序。
有几个可用的第三方软件更新检查(software update checker )程序可以不断检查计算机上安装的软件的更新版本。你可以使用你觉得舒服的那个。
阅读(Read)： 如何检查文件是否为恶意文件(How to check if a file is malicious or not)。
7]使用好的防火墙
您可以使用Windows 10/8/7中的默认防火墙，但如果您没有看到警报，您可能会担心。Windows 防火墙(Windows Firewall)静默工作，需要一些技术经验来配置它。如果您需要帮助，可以查看这篇关于如何管理和配置 Windows 防火墙(manage and configure Windows firewall)的帖子。如果您愿意，您可能需要考虑安装一些第三方免费防火墙软件。( free firewall software.)反而。您只需要一个防火墙。同时使用Windows 防火墙(Windows Firewall)和第三方防火墙可能会导致冲突，从而可能将您的系统暴露给黑客。
阅读：(Read:) 互联网安全文章和提示(Internet Security article & tips)。
8]升级你的硬件
您应该保持硬件升级。如果想知道更新硬件将如何提供更好的安全性，答案在于最新技术在硬件本身中提供了基本级别的安全性。较新(Newer)的主板、CPU(CPUs)和BIOS具有内置安全性。一个例子是嵌入硬盘控制器的可信平台模块（TPM） ——保护它们免受恶意程序的侵害。对于那些不知道TPM的人，它会在启动时检查固件以确保它没有被恶意程序感染。
虽然更换主板会很困难，但与使用三年的硬盘相比，您仍然可以升级硬盘以获得更好的保护。(HDDs)
9]应用程序白名单(Application Whitelisting)方法
应用程序白名单是大多数 IT 管理员用来防止未经授权的可执行文件或程序在其系统上运行的一种良好做法。家庭用户也可以利用白名单。这篇文章将向您展示如何在 Windows 11/10 中将程序列入白名单。
10]使用主机(Use Hosts)文件和Internet Explorer安全区域(Internet Explorer Security Zones)
我们的管理员Anand Khanse MVP建议您从(MVP)mvps.org下载一个“好的”Hosts 文件，并将位于 C:WindowsSystem32driversetc 中的原始 Hosts 文件替换为该文件，然后将其锁定或使其成为只读文件。HostMan是一个很好的免费软件主机管理器(Host Manager)。Hosts文件包含 IP 地址到主机名的映射。该文件在启动时加载到内存中；然后Windows在查询任何(Windows)DNS服务器之前检查Hosts文件，这使它能够覆盖DNS中的地址。大型HOSTS文件（超过 135 kb）往往会减慢视窗(Windows)机。
解决这个问题；运行(Run)services.msc > SearchDNSDNS Client Service > Change Startup Type为手动(Manual)。但是，CoolWebSearch 劫持者(CoolWebSearch Hijackers)甚至可以更改只读(Read-only)或锁定的 Hosts 文件。他们还可以重定向Windows以使用与您不断更新的文件无关的主机文件。(File)
我们还建议您使用ZonedOut实用程序来添加(Add)、删除(Delete)、导入(Import)、导出(Export)、构建(Build)黑Black/WhiteList等等。它现在包括Restricted、Trusted和 Intranet 区域”。它是一个大小仅为 185kb 的优秀工具。然后下载IE-SpyAd For ZonedOut。它是一个简单的注册表补丁，可将一长串已知的成人网站、破解网站、广告商、营销商和恶意软件推送者添加到 IE 的受限(Restricted)站点区域。使用ZonedOut，您可以轻松添加此列表。
阅读：(Read:) 最好地保护您的浏览器的提示(Tips to best secure your browsers)。
其他提示：(Other tips:)
从安全的角度来看，显示文件扩展名(show file extensions.)也是一个好主意。
如果尽管采取了所有预防措施，如果您的计算机被感染，您可能需要查看此恶意软件删除指南(Malware Removal Guide)。
顺便说一句，您还可以使用我们的Ultimate Windows Tweaker来更改计算机上的一些设置，以进一步加强Windows安全性。它可以让您快速调整Windows、Internet Explorer和其他内置应用程序中的一些安全设置。
Win10 Security Plus是另一个可以帮助您加强Windows安全性的免费软件。
这些是我们保护Windows 11/10的技巧。您如何保护您的Windows？你用什么软件？
如果您有意见或建议，请使用下面的评论部分告诉我们。(If you have inputs or suggestions, please let us know using the comments section below.)
How to prevent Malware - Tips to secure Windows 11/10
Windows 11, Windows 10, Windows 8 or Windows 7 may givе us the feeling of bеing secure. Τhe reason is obvious. Being adνanced, it incorporates the latest technology for security – аnd includes many security advanсements and featurеs. Howevеr, the need for securing Windows is stіll there. Given its immense popularity, hackers and malware writers always want to target this popular operating system. It, therefore, becomes imperative to secure your already battle-hardened Windows further. You need to make sure your copy of Windows is secure and that it provides you with optimal protection against malware and hackers.
How to prevent Malware in Windows 11/10
Secure Windows 11/10
Here are some beginners tips for securing Windows 11/10. This can help prevent malware infections.
- Update Your Operating System
- Install a good Security Suite
- Use The Action Center to monitor
- Avoid using Admin Account
- Use Strong Passwords
- Keep The Applications Updated
- Use A Good Firewall
- Upgrade Your Hardware
- Application Whitelisting approach
- Use Hosts file & Internet Explorer Security Zones
Let us take a look at them in detail.
1] Update Your Operating System
You would agree that Windows 11/10 has much better security features when compared to its predecessors, like Windows XP. So if you are still using and older Windows, why not upgrade to its latest version? At the time of writing this article, Windows 10 is the latest and most secure OS in the Windows line of operating systems. So this is the first thing I’d like to recommend: If you are using an older version of Windows, upgrade to the latest Windows 11/10.
For securing Windows, one of the important tips is to make sure that you have installed all its latest updates, especially the security updates, using the Windows Updates feature. So other than using the latest operating system, you should make sure any upgrades and patches to the operating system should automatically apply to it. This can easily be achieved by setting up Windows Updates to automatic (Control Panel -> Windows Updates). One of the traits of Windows Updates is that it also checks for updates to other software installed on your computer (drivers and Microsoft Office etc. ). If and when it finds updates to such software, it will notify you under Optional Updates.
2] Install a good Security Suite
While the built-in Windows Defender is good, you may if you wish, install a good Internet Security Suite or Antivirus software. Also, take a look at these free Internet Privacy Software.
Read: How to use Windows Security in Windows 11 for the best protection.
3] Use The Action Center to monitor
The Action Center in Control Panel of Windows provides you information about several things that require your notice: Anti-Virus, Windows Update, etc. It also provides information about the last time you backed up your data. It is never recommended to turn off the Action Center notifications as they remind you of things you need to do for securing Windows computers.
4] Avoid using Admin Account
Even if you are the only user on your computer, you should avoid using the Administrator account. Use a Standard User Account for your day to day use. Guests may be given access to the Gues account. It may happen that any of your friends or kids might want to check out something on the Internet or play a game to mess up with your computer while you are not looking. Granting guest access is the best thing.
Also, set the User Account Control to as high as possible so that you get alerts before any program tries to change any settings. Also or as a replacement, you can use WinPatrol for further securing Windows.
5] Use Strong Passwords
Again, if you are a single user, you might turn off the password on your user account so that you can save time. However, this can help others log in when you are not looking and steal your data. For securing Windows PC, strong passwords are a must – be it the user account or when logging on to the Internet. Do not forget to lock the computer when you intend to leave it for a while. Press Windows Key + L to lock your computer.
6] Keep The Applications Updated
Old applications are more prone to errors and hacks when compared to the newer versions. This is because almost every application maker tends to keep on testing his applications against different problems/factors and updates the programs accordingly.
There are several third-party software update checker programs available that keep on checking for updated versions of the software installed on your computer. You can use the one you feel comfortable with.
Read: How to check if a file is malicious or not.
7] Use A Good Firewall
You can use the default firewall in Windows 10/8/7, but you may worry if you do not see alerts. Windows Firewall works silently and needs some tech experience to configure it. If you need help, you may check out this post on how to manage and configure Windows firewall. If you wish, you may want to consider installing some third-party free firewall software. instead. You need just one firewall. Using both Windows Firewall and a third-party firewall could result in conflicts, thereby possibly exposing your system to hackers.
Read: Internet Security article & tips.
8] Upgrade Your Hardware
You should keep your hardware upgraded. If wondering how updating the hardware would provide better security, the answer lies in the fact that the latest technology offers base-level security in the hardware itself. Newer motherboards, CPUs, and BIOS have built-in security. An example is the trusted platform module (TPM) embedded into hard disk controllers – protecting them against malicious programs. For those unaware of TPM, it checks the firmware while booting to make sure it is not infected by malicious programs.
While it would be difficult to change the motherboard, you can still go for an upgrade of HDDs to get better protection compared to a three-year-old hard disk.
9] Application Whitelisting approach
Application whitelisting is a good practice that most IT administrators employ to prevent unauthorized executable files or programs from running on their system. Home users too can take advantage of whitelisting. This post will show you how to whitelist programs in Windows 11/10.
10] Use Hosts file & Internet Explorer Security Zones
Our admin, Anand Khanse, MVP suggests you download a ‘good’ Hosts file from mvps.org and replace your original Hosts file situated in C:\Windows\System32\drivers\etc with this one and then lock it or make it a read-only file. HostMan is a good freeware Host Manager. The Hosts file contains the mappings of IP addresses to host names. This file is loaded into memory at startup; then Windows checks the Hosts file before it queries any DNS servers, which enables it to override addresses in the DNS. A large HOSTS file (over 135 kb) tends to slow down the Windows machine.
To resolve this issue; Run services.msc > Search for DNS Client Service > Change Startup Type to Manual. However, CoolWebSearch Hijackers are masters at altering even Read-only or locked Hosts files. They can also redirect Windows to use a Hosts File that has nothing to do with the one you keep updating.
We also suggest that you use ZonedOut utility to Add, Delete, Import, Export, Build a Black/WhiteList and do more. It now includes Restricted, Trusted and Intranet Zones”. It is an excellent tool of size just 185kb. Then download IE-SpyAd For ZonedOut. It is a simple registry patch that adds a long list of known adult sites, crack sites, advertisers, marketers, and malware pushers to the Restricted sites zone of IE. Using ZonedOut, you can add this list easily.
Read: Tips to best secure your browsers.
Other tips:
It is also a good idea from a security point of view, to show file extensions.
If in spite of taking all precautions, should your computer ever get infected, you might want to check out this Malware Removal Guide.
Incidentally, you may also use our Ultimate Windows Tweaker, to change a few settings on your computer to further harden Windows security. It will let you quickly tweak some of your security settings in Windows, Internet Explorer, and other inbuilt applications.
Win10 Security Plus is another freeware that can help you harden Windows security.
These were our tips for securing Windows 11/10. How do you secure your Windows? What software do you use?
If you have inputs or suggestions, please let us know using the comments section below.
