保持Windows7的更新會使防毒軟體變得不必要嗎？

如果你是新的計算，你可能會想，如果你有防病毒軟體真的是必要的，如果你保持你的系統更新。僅僅更新就足以保證系統的安全嗎？今天的超級使用者問答帖子討論了這種情況，以幫助新的計算機使用者做出正確的決定。...

如果你是新的計算，你可能會想，如果你有防病毒軟體真的是必要的，如果你保持你的系統更新。僅僅更新就足以保證系統的安全嗎？今天的超級使用者問答帖子討論了這種情況，以幫助新的計算機使用者做出正確的決定。

今天的問答環節是由SuperUser提供的，SuperUser是Stack Exchange的一個分支，是一個由社群驅動的問答網站分組。

問題

超級使用者讀者John Sonderson想知道保持Windows 7的更新是否足以保持安全，或者他是否還應該安裝防毒軟體：

I was thinking, given that I keep Windows 7 regularly updated through Windows Update, does this make having anti-virus software installed a useless gesture? I may well be a naive user, but it seems to me that if security concerns are found, then any patches to the operating system to close those security holes should solve the problem.

So, if my Windows 7 system is up to date via Windows Update, and I do not use an administrator account (but a restricted account instead), do I still need anti-virus software?

透過WindowsUpdate更新Windows7系統是否足以保證系統的安全，還是應該安裝防毒軟體？

答案

超級使用者貢獻者Scott Chamberlain和Frank Thomas為我們提供了答案。首先，斯科特張伯倫：

Updates to Windows will not protect you from software that you yourself have run. If you are tricked into running a malicious program, it can unleash its payload.

You also state, “…if I keep myself logged in as a regular user without administrative privileges” but get a UAC prompt from a program and type in the administrator credentials, it does not matter that you are a regular user.

Windows Update does not protect you from bugs in other software like your web browser (unless you are using Internet Explorer), so a virus could get in that way (which anti-virus software would have blocked).

Lastly, even if the program never gets administrative privileges and does not use any exploits in Windows, there are still plenty of bad things it can do within the bounds of a restricted user account. A non-elevated program can read almost all the files on your hard-drive and send that information anywhere it wants. If you have any valuable information on your hard-drive, the malware author now has a copy of that information as well.

接著是弗蘭克·托馬斯的回答：

No. Windows Update often patches vulnerabilities used by worms and viruses, but rarely affects a trojan’s ability to mess you over. Additionally, lots of bad software can affect you and your user profile without administrative privileges. Back in 2010, we were removing fake anti-virus apps from systems where no admin had ever logged in.

有什麼要補充的解釋嗎？在評論中發出聲音。想從其他精通技術的Stack Exchange使用者那裡瞭解更多答案嗎？在這裡檢視完整的討論主題。