--------------------------系统环境-------------------------
检测日期: 2006-7-2 23:28
Windows: Microsoft Windows XP
ServicePack: Service Pack 2
Update: 2600.xpsp_sp2_gdr.050301-1519
Internet Explorer: 6.0.2900.2180
-----------------------网络基础安全测试--------------------
密码安全检测:已经设置了管理员密码,建议:将密码复杂度和长度提高!
网络漏洞检测:空连接检查安全!
服务名称 是否运行 描述
RemoteRegistry [] [说明:这个服务可能被利用远程操作注册表]
Windows Time [运行中] [说明:这个服务可能被黑客利用来启动木马]
Telnet [运行中] [说明:这个服务可能被黑客登录到您计算机]
Messenger [运行中] [说明:这个服务常被广告商用来发垃圾广告]
Server [运行中] [说明:如果你的电脑不用局域网中,可以关闭]
建议在[控制面板]-[管理工具]-[服务]中,找到这些服务关闭并设置为[禁用].
-----------------------计算机网络端口----------------------
协议 端口号 端口类型
TCP 135 未知类型
TCP 445 未知类型
TCP 1950 未知类型
TCP 1951 未知类型
TCP 1025 未知类型
TCP 139 未知类型
TCP 445 未知类型
TCP 500 未知类型
TCP 1031 未知类型
TCP 1032 未知类型
TCP 1185 未知类型
TCP 4500 未知类型
TCP 123 未知类型
TCP 123 未知类型
TCP 1027 未知类型
TCP 1028 未知类型
TCP 1029 未知类型
TCP 1561 未知类型
TCP 1867 未知类型
TCP 123 未知类型
TCP 137 未知类型
TCP 138 未知类型
--------------------计算机系统组件体检----------------------
[编号:0]
[名称:\SystemRoot\System32\smss.exe]
[类型:运行进程]
[内容:未知]
[编号:1]
[名称:\??\C:\WINDOWS\system32\csrss.exe]
[类型:运行进程]
[内容:未知]
[编号:2]
[名称:\??\C:\WINDOWS\system32\winlogon.exe]
[类型:运行进程]
[内容:未知]
[编号:3]
[名称:C:\WINDOWS\system32\services.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:4]
[名称:C:\WINDOWS\system32\lsass.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:5]
[名称:C:\WINDOWS\system32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:6]
[名称:C:\WINDOWS\system32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:7]
[名称:C:\WINDOWS\System32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:8]
[名称:C:\WINDOWS\System32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:9]
[名称:C:\WINDOWS\System32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:10]
[名称:D:\QQ2005\287838090\CacheFolder\KWatch.EXE]
[类型:运行进程]
[内容:Kingsoft Antivirus Copyright (C) 1998 - 2005 Kingsoft Corporation]
[编号:11]
[名称:C:\WINDOWS\system32\spoolsv.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:12]
[名称:C:\WINDOWS\SYSTEM32\RUNDLL32.EXE]
[类型:运行进程]
[内容:未知]
[编号:13]
[名称:D:\QQ2005\287838090\CacheFolder\KPfwSvc.EXE]
[类型:运行进程]
[内容:Kingsoft Firewall Copyright (c) 2001-2005 Kingsoft Corporation]
[编号:14]
[名称:C:\Program Files\VeriSign\NAVI\naviagent.exe]
[类型:运行进程]
[内容:NAVI Agent Copyright ? VeriSign, Inc. 2002-2004]
[编号:15]
[名称:C:\WINDOWS\System32\nvsvc32.exe]
[类型:运行进程]
[内容:NVIDIA Driver Helper Service, Version 29.42 (c) NVIDIA Corporation. All rights reserved.]
[编号:16]
[名称:C:\WINDOWS\System32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:17]
[名称:C:\Program Files\联想\联想键盘驱动\TGESrvLogon.exe]
[类型:运行进程]
[内容:TGELogonSrv 应用程序 版权所有 (C) 2001]
[编号:18]
[名称:C:\WINDOWS\system32\wdfmgr.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:19]
[名称:C:\Program Files\Common Files\SAND\Network.exe]
[类型:运行进程]
[内容:QQFACE Copyright (C) COMENET TECHNOLOGY 2002-2005]
[编号:20]
[名称:C:\WINDOWS\System32\alg.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:21]
[名称:C:\PROGRA~1\VeriSign\NAVI\NAVICL~1.EXE]
[类型:运行进程]
[内容:NAVI Client Copyright ? VeriSign, Inc. 2002-2004]
[编号:22]
[名称:C:\WINDOWS\system32\Rundll32.exe]
[类型:运行进程]
[内容:未知]
[编号:23]
[名称:C:\WINDOWS\system32\rundll32.exe]
[类型:运行进程]
[内容:未知]
[编号:24]
[名称:C:\WINDOWS\system32\rundll32.exe]
[类型:运行进程]
[内容:未知]
[编号:25]
[名称:C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe]
[类型:运行进程]
[内容: YLive Copyright ? 2005]
[编号:26]
[名称:C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe]
[类型:运行进程]
[内容:Yahoo! AssistSetting Copyright cn.yahoo.com 2004]
[编号:27]
[名称:D:\QQ2005\287838090\CacheFolder\KAVStart.exe]
[类型:运行进程]
[内容:Kingsoft Antivirus Copyright (C) 1998 - 2005, Kingsoft Corporation]
[编号:28]
[名称:C:\Program Files\Common Files\Real\Update_OB\realsched.exe]
[类型:运行进程]
[内容:RealPlayer (32-bit) Copyright ? RealNetworks, Inc. 1995-2004]
[编号:29]
[名称:C:\Program Files\baigoo\bgoomain.exe]
[类型:运行进程]
[内容:BGooMain Copyright ? 2005]
[编号:30]
[名称:C:\WINDOWS\VM_STI.EXE]
[类型:运行进程]
[内容:VM., 2002. VM., 2002.]
[编号:31]
[名称:C:\WINDOWS\system32\Rundll32.exe]
[类型:运行进程]
[内容:未知]
[编号:32]
[名称:C:\WINDOWS\system32\ctfmon.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:33]
[名称:D:\QQ2005\287838090\CacheFolder\KMailMon.EXE]
[类型:运行进程]
[内容:Kingsoft Antivirus Copyright (C) 1998 - 2005 Kingsoft Corporation]
[编号:34]
[名称:C:\Program Files\Internet Explorer\iexplore.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:35]
[名称:D:\木马防御大师\WmNetPro.exe]
[类型:运行进程]
[内容:NetSecurity 应用程序 版权所有 (C) 2005 王剑锋]
[编号:36]
[名称:C:\Program Files\Internet Explorer\iexplore.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:37]
[名称:C:\WINDOWS\explorer.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:38]
[名称:C:\Program Files\Internet Explorer\iexplore.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:39]
[名称:D:\木马防御大师\syssec.exe]
[类型:运行进程]
[内容:完美卸载V2006-ChinaHijackThis 版权所有 (C) 2006]
[编号:40]
[分隔符:---------------------------------------------------------------------]
[编号:41]
[名称:C:\WINDOWS\system32\ntdll.dll]
[类型:已加载DLL]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:42]
[名称:C:\WINDOWS\system32\CSRSRV.dll]
[类型:已加载DLL]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:43]
[名称:C:\WINDOWS\system32\basesrv.dll]
[类型:已加载DLL]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:44]
[名称:C:\WINDOWS\system32\winsrv.dll]
[类型:已加载DLL]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:45]
[名称:C:\WINDOWS\system32\GDI32.dll]
[类型:已加载DLL]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:46]
[名称:C:\WINDOWS\system32\KERNEL32.dll]
[类型:已加载DLL]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:47]
[名称:C:\WINDOWS\system32\USER32.dll]
[类型:已加载DLL]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:48]
[名称:C:\WINDOWS\system32\LPK.DLL]
[类型:已加载DLL]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:49]
[名称:C:\WINDOWS\system32\USP10.dll]
[类型:已加载DLL]
[内容:Microsoft(R) Uniscribe Unicode script processor ? Microsoft Corporation. All rights reserved.]
[编号:50]
[名称:C:\WINDOWS\system32\msvcrt.dll]
[类型:已加载DLL]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
