黑色海岸线论坛 - Powered by Discuz! Board

标题: [求助]系统检查检测报告!请高手指点 [打印本页]

作者: 7972376 时间: 2006-3-19 11:32 标题: [求助]系统检查检测报告!请高手指点

   完美卸载 - 系统检查检测报告!
建议:修复时请按照高手的反馈编号在修复工具中打勾进行修复.
--------------------------系统环境-------------------------
检测日期: 2006-3-19 11:26
Windows: Microsoft Windows XP
ServicePack: Service Pack 2
Update: 2600.xpsp_sp2_gdr.050301-1519
Internet Explorer: 6.0.2900.2180

-----------------------网络基础安全测试--------------------
密码安全检测:已经设置了管理员密码,建议:将密码复杂度和长度提高!
网络漏洞检测:空连接检查安全!
服务名称       是否运行
RemoteRegistry [运行中] [说明:这个服务可能被利用远程操作注册表]
Windows Time [运行中] [说明:这个服务可能被黑客利用来启动木马]
Telnet       [已停止] [说明:这个服务可能被黑客登录到您计算机]
Messenger    [已停止] [说明:这个服务常被广告商用来发垃圾广告]
Server       [运行中] [说明:如果你的电脑不用局域网中,可以关闭]

-----------------------计算机网络端口----------------------
协议    端口号             端口类型
TCP       135       微软DCE RPC end-point mapper服务
TCP       445       Microsoft-DS
TCP    1029       未知类型
TCP       139       微软Netbios Name服务(用于文件及打印机共享)
TCP       68       未知类型
TCP       445       公共Internet文件系统(CIFS)
TCP       500       Internet密钥交换
TCP    1041       未知类型
TCP    4500       sae-urn
TCP       123       未知类型
TCP    1025       Maverick';s Matrix 1.2 - 2.0
TCP    1081       未知类型
TCP    1900       未知类型
TCP       123       未知类型
TCP       137       未知类型
TCP       138       未知类型
TCP    1900       未知类型
TCP       123       未知类型
TCP    1900       未知类型

--------------------计算机系统组件体检----------------------
[编号:0]
[名称:\SystemRoot\System32\smss.exe]
[类型:运行进程]
[内容:未知]
[编号:1]
[名称:\??\C:\windows\system32\winlogon.exe]
[类型:运行进程]
[内容:未知]
[编号:2]
[名称:C:\windows\system32\services.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:3]
[名称:C:\windows\system32\lsass.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:4]
[名称:C:\windows\system32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:5]
[名称:C:\windows\System32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:6]
[名称:C:\KAV2006\KWatch.EXE]
[类型:运行进程]
[内容:Kingsoft Antivirus Copyright (C) 1998 - 2005 Kingsoft Corporation]
[编号:7]
[名称:C:\windows\Explorer.EXE]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:8]
[名称:C:\windows\system32\spoolsv.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:9]
[名称:C:\KAV2006\KAVStart.exe]
[类型:运行进程]
[内容:Kingsoft Antivirus Copyright (C) 1998 - 2005, Kingsoft Corporation]
[编号:10]
[名称:C:\windows\system32\ctfmon.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:11]
[名称:C:\KAV2006\KPFW32.EXE]
[类型:运行进程]
[内容:Kingsoft Firewall Copyright (c) 2001-2005 Kingsoft Corporation]
[编号:12]
[名称:C:\KAV2006\KMailMon.EXE]
[类型:运行进程]
[内容:Kingsoft Antivirus Copyright (C) 1998 - 2005 Kingsoft Corporation]
[编号:13]
[名称:C:\KAV2006\KPfwSvc.EXE]
[类型:运行进程]
[内容:Kingsoft Firewall Copyright (c) 2001-2005 Kingsoft Corporation]
[编号:14]
[名称:C:\windows\system32\ServeHost.exe]
[类型:运行进程]
[内容:IE地址栏搜索服务程序版权所有中搜在线(C) 2005]
[编号:15]
[名称:C:\Program Files\SearchNet\SearchNet.exe]
[类型:运行进程]
[内容:地址栏搜索版权所有中搜在线(C) 2005]
[编号:16]
[名称:E:\迅雷\Maxthon\Maxthon.exe]
[类型:运行进程]
[内容:Maxthon Application Copyright (C) 2002]
[编号:17]
[名称:E:\新建文件夹\完美卸载V2006\SysRepairer.exe]
[类型:运行进程]
[内容:SysRepairer 应用程序版权所有 (C) 2005]
[编号:18]
[名称:E:\新建文件夹\完美卸载V2006\SysSec.exe]
[类型:运行进程]
[内容:完美卸载V2006-ChinaHijackThis 版权所有 (C) 2006]
[编号:19]
[分隔符:---------------------------------------------------------------------]
[编号:20]
[名称:C:\KAV2006\KAVIPC2.DLL]
[类型:已加载DLL]
[内容:Kingsoft Antivirus Copyright (C) 1998 - 2004 Kingsoft Corporation]
[编号:21]
[名称:C:\KAV2006\KAEPlat.DLL]
[类型:已加载DLL]
[内容:Kingsoft AntiVirus Engine Copyright (C) Kingsoft Co., Ltd 1998-2003]
[编号:22]
[名称:C:\KAV2006\KAEMem.DAT]
[类型:已加载DLL]
[内容:Kingsoft KAEMem Copyright ? 2004]
[编号:23]
[名称:C:\KAV2006\KASocket.dll]
[类型:已加载DLL]
[内容:Kingsoft Antivirus Copyright (C) 1998 - 2004 Kingsoft Corporation]
[编号:24]
[名称:C:\Program Files\SearchNet\SrvNet32.dll]
[类型:已加载DLL]
[内容:未知]
[编号:25]
[名称:C:\WINDOWS\system32\xunleibho_v14.dll]
[类型:已加载DLL]
[内容:XunLeiBHO Module Copyright 2004-2006]
[编号:26]
[名称:C:\Program Files\WinRAR\rarext.dll]
[类型:已加载DLL]
[内容:未知]
[编号:27]
[名称:C:\KAV2006\PopSprt3.dll]
[类型:已加载DLL]
[内容:Kingsoft Antivirus Copyright (C) 1998 - 2005 Kingsoft Corporation]
[编号:28]
[名称:C:\KAV2006\KAVPassp.dll]
[类型:已加载DLL]
[内容:Kingsoft Online Service Copyright(C) 2004-2005 Kingsoft Corporation]
[编号:29]
[名称:C:\KAV2006\KAConfig.DLL]
[类型:已加载DLL]
[内容:Kingsoft Antivirus Copyright (C) 1998 - 2005 Kingsoft Corporation]
[编号:30]
[名称:C:\KAV2006\FiltList.dll]
[类型:已加载DLL]
[内容:未知]
[编号:31]
[名称:C:\KAV2006\KAntiSpm.dll]
[类型:已加载DLL]
[内容: KAVAntiS Dynamic Link Library Copyright (C) 2004 金山软件股份有限公司]
[编号:32]
[名称:C:\KAV2006\KAECall2.DLL]
[类型:已加载DLL]
[内容:Kingsoft Antivirus Copyright (C) 1998 - 2004 Kingsoft Corporation]
[编号:33]
[名称:E:\迅雷\Maxthon\maxzlib.dll]
[类型:已加载DLL]
[内容:  maxzlib Copyright ? 2005]
[编号:34]
[名称:E:\迅雷\Maxthon\Services\RealTime\real_time.dll]
[类型:已加载DLL]
[内容:RealTime Module Copyright 2003]
[编号:35]
[名称:C:\KAV2006\KAScript.DLL]
[类型:已加载DLL]
[内容:Kingsoft Antivirus Copyright (C) 1998 - 2005 Kingsoft Corporation]
[编号:36]
[分隔符:---------------------------------------------------------------------]
[编号:37]
[名称:IMJPMIG8.1]
[类型:开机启动]
[内容:"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32]
[编号:38]
[名称:PHIME2002ASync]
[类型:开机启动]
[内容:C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC]
[编号:39]
[名称:PHIME2002A]
[类型:开机启动]
[内容:C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName]
[编号:40]
[名称:MSPY2002]
[类型:开机启动]
[内容:C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC]
[编号:41]
[名称:KavStart]
[类型:开机启动]
[内容:"C:\KAV2006\KAVStart.exe" -startup]
[编号:42]
[名称:KernelFaultCheck]
[类型:开机启动]
[内容:%systemroot%\system32\dumprep 0 -k]
[编号:43]
[分隔符:---------------------------------------------------------------------]
[编号:44]
[名称:Intel(r) 82801 Audio Driver Install Service (WDM)]
[类型:服务:Intel(r) Integrated Controller Hub Audio Driver Copyright (C) Intel Corporation 1998-2001]
[内容:C:\windows\system32\drivers\ac97intc.sys]
[编号:45]
[名称:AFD]
[类型:服务:未知]
[内容:\SystemRoot\System32\drivers\afd.sys]
[编号:46]
[名称:Anfad]
[类型:服务:未知]
[内容:C:\windows\system32\drivers\anfad.sys]
[编号:47]
[名称:DCOM Server Process Launcher]
[类型:服务:未知]
[内容:C:\windows\system32\svchost ]
[编号:48]
[名称:FAD]
[类型:服务:未知]
[内容:C:\windows\system32\drivers\fad.sys]
[编号:49]
[名称:VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver]
[类型:服务:VIA PCI 10/100Mb Fast Ethernet Adapter                      VIA Technologies, Inc.             ]
[内容:C:\windows\system32\drivers\fetnd5.sys]
[编号:50]
[名称:KNetWch]
[类型:服务:Kingsoft Firewall Copyright (C) 2001-2005, Kingsoft Corporation]
[内容:c:\kav2006\knetwch.sys]
[编号:51]
[名称:Kingsoft Personal Firewall Service]
[类型:服务:Kingsoft Firewall Copyright (c) 2001-2005 Kingsoft Corporation]
[内容:"C:\KAV2006\KPfwSvc.EXE"]
[编号:52]
[名称:KWatch3]
[类型:服务:Kingsoft Antivirus Copyright (C) 2000 - 2004 Kingsoft Corporation]
[内容:c:\windows\system32\drivers\kwatch3.sys]
[编号:53]
[名称:Kingsoft Antivirus KWatch Service]
[类型:服务:Kingsoft Antivirus Copyright (C) 1998 - 2005 Kingsoft Corporation]
[内容:C:\KAV2006\KWatch.EXE]
[编号:54]
[名称:Remote Log]
[类型:服务:IE地址栏搜索服务程序版权所有中搜在线(C) 2005]
[内容:C:\windows\system32\ServeHost.exe]
[编号:55]
[名称:Remote Procedure Call (RPC)]
[类型:服务:未知]
[内容:C:\windows\system32\svchost ]
[编号:56]
[名称:Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver]
[类型:服务:Realtek RTL8139 Family Fast Ethernet Adapter Copyright (C) 1994-2003 Realtek Semiconductor Corporation]
[内容:C:\windows\system32\drivers\rtl8139.sys]
[编号:57]
[名称:SDAgent Service]
[类型:服务:sde (C) 2005 北京兴华基业软件技术有限公司]
[内容:C:\Program Files\Common Files\smartde\sde.exe]
[编号:58]
[名称:Secdrv]
[类型:服务:未知]
[内容:C:\windows\system32\drivers\secdrv.sys]
[编号:59]
[名称:System Restore Filter Driver]
[类型:服务:未知]
[内容:\SystemRoot\system32\DRIVERS\sr.sys]
[编号:60]
[名称:Terminal Services]
[类型:服务:未知]
[内容:C:\windows\system32\svchost ]
[编号:61]
[分隔符:---------------------------------------------------------------------]
[编号:62]
[名称:Start Page]
[类型:IE主页-当前用户]
[内容:about:blank]
[编号:63]
[名称:Search Page]
[类型:IE搜索-当前用户]
[内容:http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch]
[编号:64]
[名称:Start Page]
[类型:IE主页-所有用户]
[内容:about:blank]
[编号:65]
[名称:Search Page]
[类型:IE搜索-所有用户]
[内容:http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch]
[编号:66]
[名称:Default_Page_URL]
[类型:默认IE主页-所有用户]
[内容:http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome]
[编号:67]
[名称:Default_Search_URL]
[类型:默认IE搜索-所有用户]
[内容:http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch]
[编号:68]
[分隔符:---------------------------------------------------------------------]
[编号:69]
[名称:ThunderIEHelper Class]
[类型:IE 嵌入对象]
[内容:C:\WINDOWS\system32\xunleibho_v14.dll]
[编号:70]
[名称:MyIEHelper Class]
[类型:IE 嵌入对象]
[内容:C:\Documents and Settings\All Users\Application Data\Microsoft\IEHelper\IEHelper2006314_4242.dll]
[编号:71]
[名称:CBHelper Object]
[类型:IE 嵌入对象]
[内容:C:\WINDOWS\system32\msibm\cfsbho.dll]
[编号:72]
[名称:SDObmObj Class]
[类型:IE 嵌入对象]
[内容:C:\windows\system32\obwbkya.dll]
[编号:73]
[名称:珊瑚虫工具栏]
[类型:IE 嵌入对象]
[内容:C:\Program Files\Infofo Bar\infofobar.dll]
[编号:74]
[分隔符:---------------------------------------------------------------------]
[编号:75]
[名称:{8507326C-B5C1-4559-BB91-0919E753836F}]
[类型:IE 扩展按钮]
[内容:珊瑚虫工具栏路径:珊瑚虫工具栏]
[编号:76]
[名称:{DE607141-AC19-421e-868A-8D70ABDF119A}]
[类型:IE 扩展按钮]
[内容:易趣购物路径:http://click2.ad4all.net/url2/urlmanage/url.asp?id=5]
[编号:77]
[分隔符:---------------------------------------------------------------------]
[编号:78]
[名称:&使用迅雷下载]
[类型:IE 右键按钮]
[内容: 路径:/url]
[编号:79]
[名称:&使用迅雷下载全部链接]
[类型:IE 右键按钮]
[内容: 路径:/url]
[编号:80]
[分隔符:---------------------------------------------------------------------]
[编号:81]
[名称:PostBootReminder]
[类型:正常嵌入对象]
[内容:%SystemRoot%\system32\SHELL32.dll]
[编号:82]
[名称:CDBurn]
[类型:正常嵌入对象]
[内容:%SystemRoot%\system32\SHELL32.dll]
[编号:83]
[名称:WebCheck]
[类型:正常嵌入对象]
[内容:%SystemRoot%\system32\webcheck.dll]
[编号:84]
[名称:SysTray]
[类型:正常嵌入对象]
[内容:C:\WINDOWS\system32\stobject.dll]
[编号:85]
[分隔符:---------------------------------------------------------------------]
[编号:86]
[名称:]
[类型:EXE关联]
[内容:"%1" %*]
[编号:87]
[名称:]
[类型:TXT关联]
[内容:%SystemRoot%\system32\NOTEPAD.EXE %1]
[编号:88]
[名称:]
[类型:vbs关联]
[内容:%SystemRoot%\System32\WScript.exe "%1" %*]
[编号:89]
[名称:]
[类型:Js关联]
[内容:%SystemRoot%\System32\WScript.exe "%1" %*]
[编号:90]
[名称:]
[类型:htmlfile关联]
[内容:"E:\迅雷\Maxthon\Maxthon.exe" "%1"]
[编号:91]
[名称:]
[类型:HTTP协议]
[内容:"E:\迅雷\Maxthon\Maxthon.exe" "%1"]
[编号:92]
[名称:]
[类型:FTP协议]
[内容:"E:\迅雷\Maxthon\Maxthon.exe" "%1"]
[编号:93]
[分隔符:---------------------------------------------------------------------]
[编号:94]
[名称:c:\windows\system32\deskpan.dll]
[类型:第三方 COM/ActiveX组件]
[内容:显示摇曳 CPL 扩展---发布公司:未知]

作者: 天空飞人 时间: 2006-3-19 12:56 标题: [求助]系统检查检测报告!请高手指点

给你的管理员帐户加个密码,停止上面说的没有停止的服务

作者: 7972376 时间: 2006-3-19 13:29 标题: [求助]系统检查检测报告!请高手指点

去哪里停止上面说的没有停止的服务？？

作者: 坏的刚刚好 时间: 2006-3-19 15:13 标题: [求助]系统检查检测报告!请高手指点

开始－运行－services.msc 可以双击不用的服务，点关闭就可以
开始－设置－控制面板－管理工具－服务，也是可以的
找到:
RemoteRegistry
Windows Time
Telnet
Messenger
Server (局域网就不要关了) 右键点击该服务属性-禁止它!

作者: lopo1983 时间: 2006-3-19 15:51 标题: [求助]系统检查检测报告!请高手指点

运行 MSCONFIG
服务

作者: Evi 时间: 2006-3-19 17:04 标题: [求助]系统检查检测报告!请高手指点

操作完了在用安全焦点的扫描工具检测一下

欢迎光临黑色海岸线论坛 (http://bbs.thysea.com/)