Abstract: Disclosed is a method of scanning computer virus within internet packets, where a TSR anti-virus program that is stay-resident in the internet equipment at user's site, which anti-virus program is capable of scanning the packets sent from and received by the internet equipment at user's site; the packet is transmitted in a normal manner if the packet is not infected with virus, whereas if the packet is infected with virus, the virus within the packet is modified and then continues to be transmitted, or the packet is rejected so as to terminate the transmission service, thereby completely shielding the user's computer system from internet data infected with virus.