下面是如何做出壹個完美的系統！(不占內存，對機器配置要求不高，很完美。)
1.下載並安裝McAfee 8.0和服務包。
2.打開記事本，將以下信息復制到記事本中，並將其保存為. reg文件(如McAFee.reg):
Windows註冊表編輯器5.00版
[HKEY _ LOCAL _ MACHINE \ SOFTWARE \ Network Associates \ TVD \共享組件\ On Access Scanner \ BehaviourBlocking]
" szLogFileName _ Ent " = " % VSEDEFLOGDIR % \ \ bufferoverflowprotectionlog . txt "
" file block enabled _ 8 " = dword:00000001
" file block enabled _ 14 " = dword:0000001
" file block enabled _ 7 " = dword:00000001
" file block enabled _ 4 " = dword:00000001
" file block enabled _ 29 " = dword:0000001
" file block enabled _ 21 " = dword:0000001
" log file format " = dword:00000001
" enter cept mode " = dword:00000001
" file block enabled _ 30 " = dword:0000001
" VSIDSendMessage " = dword:00000000
" vsidblocktime out " = dword:0000000 a
" vsid block " = dword:00000001
" dwMaxLogSizeMB _ Ent " = dword:0000001
" file block enabled _ 16 " = dword:0000001
" file block enabled _ 18 " = dword:0000001
" file block enabled _ 15 " = dword:0000001
" file block enabled _ 20 " = dword:0000001
" file block enabled _ 6 " = dword:00000001
" bLogToFile " = dword:00000001
" file block enabled _ 25 " = dword:00000001
" bLimitSize " = dword:0000001
" file block enabled _ 11 " = dword:00000001
" file block enabled _ 17 " = dword:0000001
" file block enabled _ 22 " = dword:0000001
" file block enabled _ 26 " = dword:00000001
" file block enabled _ 0 " = dword:00000001
" file block enabled _ 27 " = dword:0000001
" file block enabled _ 13 " = dword:0000001
" file block enabled _ 5 " = dword:00000001
" PortBlockProcessExclusionList " = hex(7):46，00，72，00，61，00，6d，00，65，00，77，00，6f，\
00，72，00，6b，00，53，00，65，00，72，00，76，00，69，00，63，00，65，00，2e，00，65，00，78，00 \
65，00，00，00，41，00，67，00，65，00，6e，00，74，00，6e，00，74，00，2e，00，65，00，78，00，65
00,00,00,00,00
" file block enabled _ 3 " = dword:00000001
" file block enabled _ 28 " = dword:0000001
" szLogFileName " = " % VSEDEFLOGDIR % \ \ accessprotectionlog . txt "
" file block enabled _ 12 " = dword:0000001
" PortBlockReport " = dword:00000001
" bLimitSize _ Ent " = dword:00000001
" dwMaxLogSizeMB " = dword:0000001
" log file format _ Ent " = dword:00000001
" file block enabled _ 19 " = dword:0000001
" file block enabled _ 23 " = dword:0000001
" file block enabled _ 24 " = dword:0000001
" EnterceptShowMessages " = dword:0000001
" file block enabled _ 1 " = dword:0000001
" file block enabled _ 9 " = dword:00000001
" blog tofile _ Ent " = dword:00000001
" file block enabled _ 2 " = dword:00000001
" VSIDMessage"= " "
" ShareBlockMode"=dword:00000000
" file block enabled _ 10 " = dword:0000001
" ShareBlockReport " = dword:00000001
" enter cept enabled " = dword:00000001
" PortBlockReportMinutes " = dword:0000001
" VSIDBlockOnNonVirus " = dword:0000001
" file block enabled _ 31 " = dword:0000001
" file block enabled _ 32 " = dword:0000001
" file block enabled _ 33 " = dword:0000001
" file block enabled _ 34 " = dword:0000001
" file block enabled _ 35 " = dword:0000001
" file block enabled _ 36 " = dword:00000001
" file block enabled _ 37 " = dword:0000001
" file block enabled _ 38 " = dword:0000001
" file block enabled _ 39 " = dword:0000001
" Fifanluntan x b s " =十六進制:00
" file block enabled _ 40 " = dword:0000001
" file block enabled _ 41 " = dword:0000001
" file block enabled _ 42 " = dword:0000001
" file block enabled _ 43 " = dword:0000001
" file block enabled _ 44 " = dword:0000001
" file block enabled _ 45 " = dword:0000001
" file block enabled _ 46 " = dword:0000001
" file block enabled _ 47 " = dword:0000001
" file block enabled _ 48 " = dword:0000001
" file block enabled _ 49 " = dword:0000001
" file block enabled _ 50 " = dword:0000001
" file block enabled _ 51 " = dword:0000000
" file block enabled _ 52 " = dword:0000001
" file block enabled _ 53 " = dword:0000001
" file block enabled _ 54 " = dword:0000001
" file block enabled _ 55 " = dword:0000001
" file block enabled _ 56 " = dword:0000001
" file block enabled _ 57 " = dword:0000001
" file block enabled _ 58 " = dword:0000001
" enterceptexlusionprocess _ 0 " = " explorer . exe "
" EnterceptExclusionModule _ 0 " = " "
" enterceptuexclusionapi _ 0 " = " virtual protect "
" enterceptuxclusionprocess _ 1 " = " WINWORD。EXE "
" enterceptuxclusionmodule _ 1 " = " "
" enterceptuexclusionapi _ 1 " = " GetProcAddress "
" enterceptuxclusionprocess _ 2 " = " WINWORD。EXE "
" EnterceptExclusionModule _ 2 " = " "
" enterceptuexclusionapi _ 2 " = " virtual protect "
" enterceptexlusionprocess _ 3 " = " ie xplore。EXE "
" EnterceptExclusionModule _ 3 " = " "
" enterceptuexclusionapi _ 3 " = " GetProcAddress "
" enterceptexlusionprocess _ 4 " = " ie xplore。EXE "
" EnterceptExclusionModule _ 4 " = " "
" enterceptuexclusionapi _ 4 " = " virtual protect "
" enterceptexlusionprocess _ 5 " = " EXCEL。EXE "
" EnterceptExclusionModule _ 5 " = " "
" enterceptuexclusionapi _ 5 " = " GetProcAddress "
" enterceptexlusionprocess _ 6 " = " EXCEL。EXE "
" EnterceptExclusionModule _ 6 " = " "
" enterceptuexclusionapi _ 6 " = " virtual protect "
" entercepexclusionprocess _ 7 " = " power nt . exe "
" EnterceptExclusionModule _ 7 " = " "
" enterceptuexclusionapi _ 7 " = " GetProcAddress "
" entercepexclusionprocess _ 8 " = " power nt。EXE "
" EnterceptExclusionModule _ 8 " = " "
" enterceptuexclusionapi _ 8 " = " virtual protect "
" enterceptexlusionprocess _ 9 " = " explorer . exe "
" EnterceptExclusionModule _ 9 " = " "
" enterceptuexclusionapi _ 9 " = " GetProcAddress "
" enterceptuxclusionprocess _ 10 " = " msimn . exe "
" enterceptexlusionmodule _ 10 " = " "
" enterceptuexclusionapi _ 10 " = " GetProcAddress "
" enterceptuxclusionprocess _ 11 " = " msimn . exe "
" enterceptuxclusionmodule _ 11 " = " "
" enterceptuexclusionapi _ 11 " = " virtual protect "
" enterceptexlusionprocess _ 12 " = " WM player . exe "
" enterceptuxclusionmodule _ 12 " = " "
" enterceptuexclusionapi _ 12 " = " GetProcAddress "
" enterceptexlusionprocess _ 13 " = " WM player . exe "
" enterceptuxclusionmodule _ 13 " = " "
" enterceptuexclusionapi _ 13 " = " virtual protect "
" file block enabled _ 59 " = dword:0000001
" PortBlockEnabled _ 0 " = dword:0000001
" PortBlockName_0"= "阻止發送大量郵件的蠕蟲發送郵件"
" PortBlockDirection _ 0 " = dword:00000001
" PortBlockRange_0"="25 "
" PortBlockWhiteList _ 0 " = " amgrsrvc . exe、tomcat.exe、outlook.exe、msimn.exe、agent.exe、eudora.exe、nlnotes.exe、mozilla.exe、netscp.exe、opera.exe、winpm-32.exe、pine.exe、poco.exe、thebat.exe、thunderbird.exe、ntaskldr.exe、inetinfo.exe、nsmtp.exe、nrs
" PortBlockEnabled _ 1 " = dword:0000001
" PortBlockName_1"= "沒有IRC通信"
" PortBlockDirection _ 1 " = dword:0000001
" PortBlockRange _ 1 " = " 6666-6669 "
" PortBlockWhiteList_1"= " "
" PortBlockEnabled _ 2 " = dword:0000001
" PortBlockName_2"= "禁止IRC通信"
" PortBlockDirection _ 2 " = dword:00000000
" PortBlockRange_2"="6666-6669 "
" PortBlockWhiteList_2"= " "
" PortBlockEnabled _ 3 " = dword:00000000
" PortBlockName_3"= "不從萬維網下載"
" PortBlockDirection _ 3 " = dword:00000001
" PortBlockRange_3"="80 "
" PortBlockWhiteList _ 3 " = " outlook . exe、msimn.exe、iexplore.exe、mozilla.exe、netscp.exe、opera.exe、thunderbird.exe、msn6.exe、neo20.exe、mobsync.exe、waol.exe、nlnotes.exe "
" PortBlockEnabled _ 4 " = dword:00000000
" PortBlockName_4"= "禁止FTP入站通信(防止Nimda之類的病毒傳播) "
" PortBlockDirection _ 4 " = dword:00000000
" PortBlockRange_4"="20-21 "
" PortBlockWhiteList_4"= " "
" PortBlockEnabled _ 5 " = dword:00000000
" PortBlockName_5"= "禁止FTP出站通信(防止病毒下載文件) "
" PortBlockDirection _ 5 " = dword:00000001
" PortBlockRange_5"="20-21 "
" PortBlockWhiteList_5"="ftp.exe，iexplore.exe "
" PortBlockEnabled _ 6 " = dword:00000001
" port block name _ 6 " = " 135-139 "
" PortBlockDirection _ 6 " = dword:00000000
" PortBlockRange _ 6 " = " 135-139 "
" PortBlockWhiteList_6"= " "
" PortBlockEnabled _ 7 " = dword:00000001
" PortBlockName_7"="445 "
" PortBlockDirection _ 7 " = dword:00000000
" PortBlockRange_7"="445-445 "
" PortBlockWhiteList_7"= " "
" PortBlockEnabled _ 8 " = dword:00000001
" PortBlockName_8"="5000 "
" PortBlockDirection _ 8 " = dword:00000000
" PortBlockRange_8"="5000-5000 "
" PortBlockWhiteList_8"= " "
" fileblockulename _ 0" = "免疫3721互聯網助手/中文郵件"
" FileBlockProcess_0"="* "
" file block wild card _ 0 " = * * \ \ 3721 "
"文件塊什麽_0"=dword:00050000
" file block report _ 0 " = dword:00000001
" FileBlockRuleName_1"= "禁止嘟嘟"
" FileBlockProcess_1"="* "
" file block wild card _ 1 " = " * * \ \ DuDu "
"文件塊What_1"=dword:00050000
" file block report _ 1 " = dword:0000001
" FileBlockRuleName_2"= "無網絡豬"
" FileBlockProcess_2"="* "
" FileBlockWildcard_2"="**\\網絡豬"
"文件塊什麽_2"=dword:00050000
"文件塊報告_2"=dword:00000001
" FileBlockRuleName_3"= "禁止3721網絡實名"
" FileBlockProcess_3"="* "
" file block wild card _ 3 " = " % windir % \ \下載的程序文件\\cns*。*"
"文件塊什麽_3"=dword:00050000
"文件塊報告_3"=dword:00000001
" fileblockulename _ 4" = "無分隔符搜索"
" FileBlockProcess_4"="* "
" file block wild card _ 4 " = * * \ \ Program Files \ \ w search "
"文件塊什麽_4"=dword:00050000
" file block report _ 4 " = dword:00000001
" FileBlockRuleName_5"= "禁止百度"
" FileBlockProcess_5"="* "
" file block wild card _ 5 " = " * * \ \ Baidu "
"文件塊什麽_5"=dword:00050000
" file block report _ 5 " = dword:00000001
" FileBlockRuleName_6"= "沒有360度搜索"
" FileBlockProcess_6"="* "
" file block wild card _ 6 " = " * * \ \ 360 so "
"文件塊什麽_6"=dword:00050000
" file block report _ 6 " = dword:00000001
" FileBlockRuleName_7"= "禁止Infofo Bar "
" FileBlockProcess_7"="* "
" file block wild card _ 7 " = " * * \ \ info Bar "
"文件塊什麽_7"=dword:00050000
" file block report _ 7 " = dword:00000001
" FileBlockRuleName_8"= "禁止IInfo "
" FileBlockProcess_8"="* "
" file block wild card _ 8 " = " * * \ \ IInfo "
"文件塊什麽_8"=dword:00050000
" file block report _ 8 " = dword:00000001
" fileblockulename _ 9" = "沒有偉大的小秘書"
" FileBlockProcess_9"="* "
" FileBlockWildcard_9"="**\\HDP "
"文件塊什麽_9"=dword:00050000
" file block report _ 9 " = dword:00000001
" fileblockulename _ 10" = "沒有偉大的小秘書"
" FileBlockProcess_10"="* "
" file block wild card _ 10 " = " * * \ \ henbangtemp "
"文件塊What_10"=dword:00050000
" file block report _ 10 " = dword:0000001
" fileblockrulename _ 11 " = "禁止青蛙娛樂"
" file block process _ 11 " = " * "
" file block wild card _ 11 " = " * * \ \ Qyule "
"文件塊what _ 11 " = dword:00050000
" file block report _ 11 " = dword:00000001
" FileBlockRuleName_12"= "不搜索"
" FileBlockProcess_12"="* "
" file block wild card _ 12 " = " * * \ \ YiSou "
"文件塊What_12"=dword:00050000
" file block report _ 12 " = dword:0000001
" file block ulename _ 13 " = " CNNIC禁止"
" FileBlockProcess_13"="* "
" file block wild card _ 13 " = " * * \ \ CNNIC "
"文件塊What_13"=dword:00050000
" file block report _ 13 " = dword:0000001
" file block ulename _ 14 " = " CNNIC禁止"
" FileBlockProcess_14"="* "
" file block wild card _ 14 " = " * * \ \ cdn *。*"
"文件塊What_14"=dword:00050000
" file block report _ 14 " = dword:0000001
" filebloculename _ 15 " = "禁止阿裏巴巴商機直通車"
" FileBlockProcess_15"="* "
" file block wild card _ 15 " = " * * \ \ alitb * \ \ * * "
"文件塊What_15"=dword:00050000
" file block report _ 15 " = dword:0000001
" fileblockulename _ 16" = "禁止使用雅虎助手"
" FileBlockProcess_16"="* "
" file block wild card _ 16 " = " * * \ \ Assistant "
"文件塊What_16"=dword:00050000
" file block report _ 16 " = dword:0000001
" FileBlockRuleName_17"= "禁止修改或刪除系統中的任何文件(重要) "
" FileBlockProcess_17"="* "
" file block wild card _ 17 " = " % windir % \ \ * * \ \ * "
"文件塊what _ 17 " = dword:00150000
" file block report _ 17 " = dword:0000001
" FileBlockRuleName_18"= "禁止修改或刪除系統根目錄下的任何文件(重要) "
" FileBlockProcess_18"="* "
"文件塊通配符_18"="%systemdrive%\\* "
"文件塊what _ 18 " = dword:00150000
" file block report _ 18 " = dword:0000001
3.右鍵單擊咖啡圖標→→→ VirusScan控制臺→→雙擊“訪問保護”→→→文件，* * *資源和文件夾保護:刪除所有原有規則。
4.雙擊。reg文件(McAFee.reg)並將規則導入註冊表。好的。
再看規則，妳會發現增加了兩條非常重要的規則:
禁止修改、創建或刪除系統中的任何文件。
禁止修改任何創建或刪除系統根目錄的文件。
這樣，任何病毒或特洛伊馬都沒有了生存的地方，因為此時系統中禁止任何文件的添加或刪除操作，從根本上杜絕了入侵的可能。當然，在安裝軟件、升級操作系統、升級病毒庫時，壹定要禁用這兩條規則。否則無法升級系統和病毒庫，也無法安裝任何軟件。
而且這個規則還默認屏蔽了端口135 139 445，大大加強了對系統的保護。
我受不了卡巴斯基和ZoneAlarm的速度，所以最後選擇了麥考菲和LNS，感覺速度至少提升了兩個數量級，而且從此再也沒有中招，強烈推薦。