-.安全 安全设置/网页木马免疫/防入侵
1.设置复杂的管理密码
开始→控制面班→更改您的帐户→创建密码 (密码自己记不住,本人概不负责)
2.防止网页木马
将下列文件复制到记事本,另存为网页木马免疫.reg 双击导入
--------------------------------------------------------------
REGEDIT4
; 恶意网页木马免疫——删除以下组件:
; 恶意执行程序组件 WScript.Shell
; 木马生成组件 FileSystemObject
; 木马下载组件 XMLHTTP
; 木马上传组件 ADOB.Stream
; 木马执行组件 Shell.Application
; 要免疫时,请在下面每行 [ 后面添加一个 - 号,再重新导入注册表即可!
[HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{00000566-0000-0010-8000-00AA006D2EA4}]
[HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{0D43FE01-F093-11CF-8940-00A0C9054228}]
[HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{72C24DD5-D70A-438B-8A42-98424B88AFB8}]
[HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{88D969C5-F192-11D4-A65F-0040963251E5}]
[HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{88D969EA-F192-11D4-A65F-0040963251E5}]
[HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}]
--------------------------------------------------------------------
3.防止空连接入侵,
禁止别人空连接
首先运行regedit,找到如下主键[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLSA]把RestrictAnonymous(DWORD)的键值改为:00000002。
3,禁止自动打开默认共享
对于server版,找到如下主键[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesLanmanServerParameters]把AutoShareServer(DWORD)的键值改为:00000000。
对于pro版,则是[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesLanmanServerParameters]把AutoShareWks(DWORD)的键值改为:00000000。
如果上面所说的主键不存在,就新建一个再改键值。
net share命令下 可能显示ipC$存在,但是不会对电脑存在任何危害了 :)
二.系统优化 停止不必要的服务/注册表瘦身
将下列文件复制到记事本,另存为停止服务.bat 双击执行 (只适合家庭,企业请慎用,如对您造成部分硬件不能正常运行请联系QQ:614526941)
sc config Alerter start= DISABLED
sc config ALG start= DEMAND
sc config AppMgmt start= DEMAND
sc config AudioSrv start= AUTO
sc config BITS start= DEMAND
sc config Browser start= AUTO
sc config CiSvc start= DEMAND
sc config ClipSrv start= DISABLED
sc config COMSysApp start= DEMAND
sc config CryptSvc start= AUTO
sc config DcomLaunch start= AUTO
sc config Dhcp start= AUTO
sc config dmadmin start= DEMAND
sc config dmserver start= AUTO
sc config Dnscache start= AUTO
sc config ERSvc start= AUTO
sc config Eventlog start= AUTO
sc config EventSystem start= DEMAND
sc config FastUserSwitchingCompatibility start= DEMAND
sc config helpsvc start= AUTO
sc config HidServ start= DISABLED
sc config HTTPFilter start= DEMAND
sc config ImapiService start= DEMAND
sc config lanmanserver start= AUTO
sc config lanmanworkstation start= AUTO
sc config LmHosts start= AUTO
sc config Messenger start= DISABLED
sc config mnmsrvc start= DEMAND
sc config MSDTC start= DEMAND
sc config MSIServer start= DEMAND
sc config NetDDE start= DISABLED
sc config NetDDEdsdm start= DISABLED
sc config Netlogon start= DEMAND
sc config Netman start= DEMAND
sc config Nla start= DEMAND
sc config NtLmSsp start= DEMAND
sc config NtmsSvc start= DEMAND
sc config PlugPlay start= AUTO
sc config PolicyAgent start= AUTO
sc config ProtectedStorage start= AUTO
sc config RasAuto start= DEMAND
sc config RasMan start= DEMAND
sc config RDSessMgr start= DEMAND
sc config RemoteAccess start= DISABLED
sc config RemoteRegistry start= AUTO
sc config RpcLocator start= DEMAND
sc config RpcSs start= AUTO
sc config RSVP start= DEMAND
sc config SamSs start= AUTO
sc config SCardSvr start= DEMAND
sc config Schedule start= AUTO
sc config seclogon start= AUTO
sc config SENS start= AUTO
sc config SharedAccess start= AUTO
sc config ShellHWDetection start= AUTO
sc config Spooler start= AUTO
sc config srservice start= AUTO
sc config SSDPSRV start= DEMAND
sc config stisvc start= DEMAND
sc config SwPrv start= DEMAND
sc config SysmonLog start= DEMAND
sc config TapiSrv start= DEMAND
sc config TermService start= DEMAND
sc config Themes start= AUTO
sc config TlntSvr start= DISABLED
sc config TrkWks start= AUTO
sc config upnphost start= DEMAND
sc config UPS start= DEMAND
sc config VSS start= DEMAND
sc config W32Time start= AUTO
sc config WebClient start= AUTO
sc config winmgmt start= AUTO
sc config WmdmPmSN start= DEMAND
sc config Wmi start= DEMAND
sc config WmiApSrv start= DEMAND
sc config wscsvc start= AUTO
sc config wuauserv start= AUTO
sc config WZCSVC start= AUTO
sc config xmlprov start= DEMAND
@pause