完美卸载 - 系统检查检测报告!
建议:修复时请按照高手的反馈编号在修复工具中打勾进行修复.
--------------------------系统环境-------------------------
检测日期: 2006-3-25 21:15
Windows: Microsoft Windows XP
ServicePack: Service Pack 2
Update: 2600.xpsp_sp2_gdr.050301-1519
Internet Explorer: 6.0.2900.2180
-----------------------网络基础安全测试--------------------
密码安全检测:已经设置了管理员密码,建议:将密码复杂度和长度提高!
网络漏洞检测:存在IPC$空连接,但已经禁止匿名访问,安全!
服务名称 是否运行 描述
RemoteRegistry [] [说明:这个服务可能被利用远程操作注册表]
Windows Time [运行中] [说明:这个服务可能被黑客利用来启动木马]
Telnet [已停止] [说明:这个服务可能被黑客登录到您计算机]
Messenger [已停止] [说明:这个服务常被广告商用来发垃圾广告]
Server [运行中] [说明:如果你的电脑不用局域网中,可以关闭]
-----------------------计算机网络端口----------------------
协议 端口号 端口类型
TCP 135 微软DCE RPC end-point mapper服务
TCP 445 Microsoft-DS
TCP 139 微软Netbios Name服务(用于文件及打印机共享)
TCP 1079 未知类型
TCP 1080 Wingate,Worm.BugBear.B,Worm.Novarg.B
TCP 1095 未知类型
TCP 1144 未知类型
TCP 1157 未知类型
TCP 1158 未知类型
TCP 1159 未知类型
TCP 1160 未知类型
TCP 1161 未知类型
TCP 1162 未知类型
TCP 1163 未知类型
TCP 1164 未知类型
TCP 1165 未知类型
TCP 1167 未知类型
TCP 1030 未知类型
TCP 445 公共Internet文件系统(CIFS)
TCP 500 Internet密钥交换
TCP 1025 Maverick's Matrix 1.2 - 2.0
TCP 1036 未知类型
TCP 4500 sae-urn
TCP 123 未知类型
TCP 137 未知类型
TCP 138 未知类型
TCP 1900 未知类型
TCP 123 未知类型
TCP 1026 Remote Explorer 2000
TCP 1072 未知类型
TCP 1900 未知类型
--------------------计算机系统组件体检----------------------
[编号:0]
[名称:\SystemRoot\System32\smss.exe]
[类型:运行进程]
[内容:未知]
[编号:1]
[名称:\??\C:\WINDOWS\system32\winlogon.exe]
[类型:运行进程]
[内容:未知]
[编号:2]
[名称:C:\WINDOWS\system32\services.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:3]
[名称:C:\WINDOWS\system32\lsass.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:4]
[名称:C:\WINDOWS\system32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:5]
[名称:C:\WINDOWS\System32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:6]
[名称:C:\WINDOWS\system32\spoolsv.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:7]
[名称:C:\WINDOWS\Explorer.EXE]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:8]
[名称:C:\WINDOWS\SOUNDMAN.EXE]
[类型:运行进程]
[内容:Realtek Sound Manager Copyright (c) 2001-2004 Realtek Semiconductor Corp.]
[编号:9]
[名称:C:\Program Files\Common Files\Real\Update_OB\realsched.exe]
[类型:运行进程]
[内容:RealPlayer (32-bit) Copyright ? RealNetworks, Inc. 1995-2004]
[编号:10]
[名称:D:\Twister\twister.exe]
[类型:运行进程]
[内容:Twister Anti-TrojanVirus Copyright (C) 2002-2005 Filseclab Corp.]
[编号:11]
[名称:D:\xfilter\xfilter.exe]
[类型:运行进程]
[内容:费尔个人防火墙 Copyright (C) 2002-2005 费尔安全实验室]
[编号:12]
[名称:C:\WINDOWS\system32\rundll32.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:13]
[名称:F:\D-Tools\daemon.exe]
[类型:运行进程]
[内容:DAEMON Tools Copyright (C) 2000-2004]
[编号:14]
[名称:C:\WINDOWS\system32\RUNDLL32.EXE]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:15]
[名称:C:\WINDOWS\system32\ctfmon.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:16]
[名称:C:\WINDOWS\SYSTEM32\RUNDLL32.EXE]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:17]
[名称:C:\WINDOWS\system32\nvsvc32.exe]
[类型:运行进程]
[内容:NVIDIA Driver Helper Service, Version 84.20 (C) NVIDIA Corporation. All rights reserved.]
[编号:18]
[名称:C:\Program Files\Internet Explorer\iexplore.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:19]
[名称:C:\Documents and Settings\lenovo\My Documents\Huawei\PortalServer\218.75.95.241\PortalClient.exe]
[类型:运行进程]
[内容:iTELLIN AAA ]
[编号:20]
[名称:E:\完美卸载V2006\MainCon.exe]
[类型:运行进程]
[内容:MainCon 应用程序 版权所有 (C) 2004]
[编号:21]
[名称:E:\完美卸载V2006\SysSec.exe]
[类型:运行进程]
[内容:完美卸载V2006-ChinaHijackThis 版权所有 (C) 2006]
[编号:22]
[名称:C:\WINDOWS\system32\Notepad.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:23]
[名称:E:\download\Wom\Womcc.exe]
[类型:运行进程]
[内容:Windows优化大师 版权所有 (C) 2000-2005 鲁锦]
[编号:24]
[分隔符:---------------------------------------------------------------------]
[编号:25]
[名称:D:\xfilter\XFILTER.DLL]
[类型:已加载DLL]
[内容:Filseclab Personal Firewall Copyright (c) 2002-2005 Filseclab Corp.]
[编号:26]
[名称:C:\PROGRA~1\COMMON~1\system\msdc32.dll]
[类型:已加载DLL]
[内容:IPSec32.DLL Copyright 2003]
[编号:27]
[名称:C:\PROGRA~1\COMMON~1\system\mod\mstd.dll]
[类型:已加载DLL]
[内容:mstd Copyright 2005]
[编号:28]
[名称:C:\PROGRA~1\COMMON~1\system\mod\msdw.dll]
[类型:已加载DLL]
[内容:msdw Copyright 2005]
[编号:29]
[名称:C:\Program Files\WinRAR\rarext.dll]
[类型:已加载DLL]
[内容:未知]
[编号:30]
[名称:D:\Twister\Twshlext.dll]
[类型:已加载DLL]
[内容:Twister Shell Extension DLL Copyright (c) 2002-2005 FILSECLAB Corp.]
[编号:31]
[名称:C:\WINDOWS\system32\LgdGuard.dll]
[类型:已加载DLL]
[内容:CopyPathExt Module ]
[编号:32]
[名称:D:\Twister\Quarantine.dll]
[类型:已加载DLL]
[内容:Twister Qurantine Manager Copyright (c) 2002-2005 FILSECLAB Corp.]
[编号:33]
[名称:D:\Twister\W32Tools.dll]
[类型:已加载DLL]
[内容:Filseclab Win32 API Library Copyright (c) 2002-2005 FILSECLAB Corp.]
[编号:34]
[名称:D:\Twister\Virsubm.dll]
[类型:已加载DLL]
[内容:Twister Virus Submission DLL Copyright (c) 2002-2005 FILSECLAB Corp.]
[编号:35]
[名称:D:\Twister\emlib.dll]
[类型:已加载DLL]
[内容:Email Win32 Library Copyright (c) 2002-2005 FILSECLAB Corp.]
[编号:36]
[名称:D:\Twister\Regpro.dll]
[类型:已加载DLL]
[内容:Twister Registry Protector DLL Copyright (c) 2002-2005 FILSECLAB Corporation]
[编号:37]
[名称:D:\Twister\Decexp.dll]
[类型:已加载DLL]
[内容:Decoding Express DLL Copyright (c) 2002-2005 FILSECLAB Corp.]
[编号:38]
[名称:D:\Twister\Unchm.dll]
[类型:已加载DLL]
[内容:Uncompress Chm DLL Copyright (c) 2002-2005 FILSECLAB Corp.]
[编号:39]
[名称:D:\Twister\unrar.dll]
[类型:已加载DLL]
[内容:未知]
[编号:40]
[名称:D:\Twister\unzip32.dll]
[类型:已加载DLL]
[内容:Info-ZIP's UnZip Windows DLL Info-ZIP 1996-2005]
[编号:41]
[名称:D:\Twister\unacev2.dll]
[类型:已加载DLL]
[内容:未知]
[编号:42]
[名称:D:\Twister\plus.dll]
[类型:已加载DLL]
[内容:Twister Plus Win32 DLL Copyright (c) 2002-2005 Filseclab Corporation]
[编号:43]
[名称:C:\WINDOWS\system32\nvHotkey.dll]
[类型:已加载DLL]
[内容:NVIDIA Hotkey Service, Version 83.60 (C) NVIDIA Corporation. All rights reserved.]
[编号:44]
[名称:C:\WINDOWS\daemon.dll]
[类型:已加载DLL]
[内容:Copyright (C) 2000-2004 Copyright (C) 2000-2004]
[编号:45]
[名称:F:\D-Tools\PFCTOC.DLL]
[类型:已加载DLL]
[内容:Padus Foundation Class(TM) Copyright (C) 1996-2002 Padus, Inc. All rights reserved.]
[编号:46]
[名称:F:\D-Tools\Plugins\Images\ccdmount.dll]
[类型:已加载DLL]
[内容:Image access plugin Copyright (C) 2003-2004]
[编号:47]
[名称:F:\D-Tools\Plugins\Images\mdsmount.dll]
[类型:已加载DLL]
[内容:Image access plugin Copyright (C) 2003-2004]
[编号:48]
[名称:F:\D-Tools\Plugins\Images\pdimount.dll]
[类型:已加载DLL]
[内容:Image access plugin Copyright (C) 2003]
[编号:49]
[名称:F:\D-Tools\Plugins\Images\nrgmount.dll]
[类型:已加载DLL]
[内容:Image access plugin Copyright (C) 2003-2004]
[编号:50]
[名称:F:\D-Tools\Plugins\Images\bw5mount.dll]
[类型:已加载DLL]
[内容:Blindwrite 5 image access library Copyright (C) 2003]
[编号:51]
[名称:C:\WINDOWS\system32\NvMcTray.dll]
[类型:已加载DLL]
[内容:NVIDIA Media Center Library (C) NVIDIA Corporation. All rights reserved.]
[编号:52]
[名称:C:\WINDOWS\system32\NVRSZHC.DLL]
[类型:已加载DLL]
[内容:NVIDIA Compatible Windows 2000 Display driver, Version 84.20 (C) NVIDIA Corporation. All rights reserved.]
[编号:53]
[名称:C:\WINDOWS\PortalAX02.ocx]
[类型:已加载DLL]
[内容:iTELLIN AAA ]
[编号:54]
[名称:C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx]
[类型:已加载DLL]
[内容:Shockwave Flash Copyright ? 1996-2005 Macromedia, Inc.]
[编号:55]
[分隔符:---------------------------------------------------------------------]
[编号:56]
[名称:IMJPMIG8.1]
[类型:开机启动]
[内容:"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32]
[编号:57]
[名称:PHIME2002ASync]
[类型:开机启动]
[内容:C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC]
[编号:58]
[名称:PHIME2002A]
[类型:开机启动]
[内容:C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName]
[编号:59]
[名称:SoundMan]
[类型:开机启动]
[内容:SOUNDMAN.EXE]
