标题:
3分钟让你电脑速度提高3倍!!百毒不侵!!
[打印本页]
作者:
admin
时间:
2008-3-22 11:23
标题:
3分钟让你电脑速度提高3倍!!百毒不侵!!
第一招：清除系统垃
圾
* c3 e" {/ C& C: p$ d' [8 t
轻松流畅上网你是否注意到你的电脑系统磁盘的可用空间正在一天天在减少呢?是不是像老去的猴王一样动作一天比一天迟缓呢?
1 z, s$ E9 |9 D% N! }* f5 s0 B. J1 u
没错!在Windows在安装和使用过程中都会产生相当多的垃圾文件，包括临时文件(如:*.tmp、*._mp)日志文件(*.log)、临时帮助文件(*.gid)、磁盘检查文件(*.chk
)、临时备份文件(如:*.old、*.bak)以及其他临时文件。特别
$ [, x, x6 U0 C1 y# ]
是如果一段时间不清理IE的临时文件夹“Temporary Internet Files”，其中的缓存文件有时会占用上百MB的磁盘空间。这些LJ文件不仅仅浪费了宝贵的磁盘空间，严重时还会使系统运行慢如蜗牛。这点相信你肯定忍受不了吧!所以应及时清理系统的LJ文件的淤塞，保持系统的“苗条”身材，轻松流畅上网!朋友来吧，现在就让我们一起来快速清除系统垃圾吧!!
/ p4 F) L" ?3 T1 }) D* ?9 _. Q
下面是步骤很简单就两步!
/ Z% e; `: ~' Y2 `# O7 q
在桌面上点鼠标右键，选择新建一个“记事本”，把下面的字复制进去，点“另存为”，把文件名定为“清除系统LJ.bat”就完成，记住后缀名一定要是.bat，好ok了!你的垃圾清除器就这样制作成功了!双击它就能很快地清理垃圾文件，大约一分钟不到。
~3 Z" d" ]: U0 A( R
PS. 要复制进去的字是 见下 （红色部分）
) k0 x ]. A @
@echo off
+ M" |' C- H y
echo 正在清除系统垃圾文件，请稍等......
' h) R" Q8 i. P9 q; u
del /f /s /q %systemdrive%\*.tmp
7 U5 ?" g9 ^5 G1 q; w9 _
del /f /s /q %systemdrive%\*._mp
+ ^% G; X& ^& o
del /f /s /q %systemdrive%\*.log
. E$ o! Q; Q3 ] ]2 O2 l% X$ x1 c
del /f /s /q %systemdrive%\*.gid
: }% x( Z% L3 y; p/ w# E
del /f /s /q %systemdrive%\*.chk
: K- P( v2 `* I6 T+ c8 L$ m8 P3 i, M
del /f /s /q %systemdrive%\*.old
% ~7 L3 C# W' N. ]1 g1 H8 u6 [
del /f /s /q %systemdrive%\recycled\*.*
; H; {0 Z- I5 R% T% ?
del /f /s /q %windir%\*.bak
8 _" U' `# x9 p/ {" t, N
del /f /s /q %windir%\prefetch\*.*
0 w/ N1 `/ K3 W5 U! H
rd /s /q %windir%\temp & md %windir%\temp
- O; f0 v9 n5 Z
del /f /q %userprofile%\cookies\*.*
& V0 O& R% ?" k" T" Y% Z
del /f /q %userprofile%\recent\*.*
' {. o6 r: t( a% O
del /f /s /q "%userprofile%\Local Settings\Temporary Internet Files\*.*"
& x7 j5 f; w( A, F
del /f /s /q "%userprofile%\Local Settings\Temp\*.*"
) c' W9 p7 L7 F, G' N1 I" q
del /f /s /q "%userprofile%\recent\*.*"
, `. ?( F& y0 {0 v! }
echo 清除系统LJ完成!
4 s/ o8 a2 ~0 r ~* k' J
echo. & pause
n: g! k0 n0 O5 b: _$ ~. r
以后只要双击运行该文件，当屏幕提示“清除系统LJ完成!就还你一个“苗条”的系统了!!到时候再看看你
的电脑，
是不是急速如飞呢?可别忘了回帖喔!
5 O0 S- d- q3 ~
注:LJ就是垃圾的意思!这招比那些所谓的优化大师好用!不会破坏系统文件。
' K$ ?. C0 c& x) M# ~# }/ r
第二招：清除所有多余的启动项目
4 X% }8 @3 J" ` e8 f6 F4 X
此命令将自动清理所有非必要的启动项目，仅保留输入法(ctfmon)。
( U6 M1 S+ X. ?0 I( \; I' g; G
目的是减少不必要的资源占用，使系统运行顺畅。
, @" j. n, n2 _9 J
方法如上，复制内容见下（红色部分）
5 @3 S) I8 H- q3 N+ W2 u
@ ECHO OFF
# Y2 K i; d& y X
color 1f
8 q3 f; F6 O" r
title 清除所有多余的启动项目
1 H ^3 E5 q0 K: f- g) }
PAUSE
! N) M% l+ p/ p. V1 v6 o
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /va /f
- t% i$ u m0 m! f
reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /va /f
) X, x4 |- X* K8 T. b7 F; B
reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v ctfmon.exe /d C:\WINDOWS\system32\ctfmon.exe
6 k4 t! ]- x5 G- n5 f
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /f
6 v* ]6 Z4 ^) v; S8 ]$ s( ~
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IMJPMIG8.1"
/ w6 B# m; P7 m4 ?+ Z( V7 j- L
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IMJPMIG8.1" /v command /d ""C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32"
/ }7 R' P8 W: h- c
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IMJPMIG8.1" /v hkey /d HKLM
6 k: H# C- ~& ^2 t4 t
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IMJPMIG8.1" /v inimapping /d 0
. E$ q- ` F( i$ G: G
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IMJPMIG8.1" /v item /d IMJPMIG
* w% _+ e1 k! J: ?: Z1 D3 |
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IMJPMIG8.1" /v key /d SOFTWARE\Microsoft\Windows\CurrentVersion\Run
2 x1 J% v ?. ]
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002A"
$ u# }- R J/ v; Q0 q! X( m' h# g" \
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002A" /v command /d "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName"
3 s) ~! A f8 `1 h& {& {7 ?4 c
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002A" /v hkey /d HKLM
- J) b0 o! e4 H3 s3 f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002A" /v inimapping /d 0
, t2 r2 @2 u$ r* s* S2 A
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002A" /v item /d TINTSETP
# r8 ?: Y0 o% C; J
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002A" /v key /d SOFTWARE\Microsoft\Windows\CurrentVersion\Run
" n4 p1 v+ C7 G4 Q4 c1 f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002ASync"
$ k8 Z4 t" n3 k$ c0 r
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002ASync" /v command /d ""C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32"
1 w, h$ R0 v+ v8 R
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002ASync" /v hkey /d HKLM
. w' i" S5 \! I4 c2 r, m
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002ASync" /v inimapping /d 0
' s# K, U/ \( Q: n
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002ASync" /v item /d TINTSETP
0 b3 F( \& g7 T
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PHIME2002ASync" /v key /d SOFTWARE\Microsoft\Windows\CurrentVersion\Run
# ~% d3 @- Y! u! T! t" z
del "C:\Documents and Settings\All Users\「开始」菜单\程序\启动\*.*" /q /f
8 ~) X0 y" q1 b& Y* `; K- ^5 U1 d2 h
del "C:\Documents and Settings\Default User\「开始」菜单\程序\启动\*.*" /q /f
1 t2 j. O$ k3 G" l* ~2 B
del "%userprofile%\「开始」菜单\程序\启动\*.*" /q /f
; E/ [9 j% H: f' ?1 D; i5 F5 T* g
start C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe
7 f% @- c j7 M" J- {( k' ?
第三招：清除所有多余的桌面右键菜单
; B, h0 a% F8 i9 \# N- \
很多显卡在装了驱动之后，桌面右键会多出一项或多项菜单，这些功能并不实用，
+ s4 E7 c& E/ R' ]+ u
还会拖慢右键的弹出速度，我们最好清除它。
) _6 O7 h# D, q
方法如上，复制内容见下（红色部分）
# K9 d* t! t# J( e" |
@ ECHO OFF
1 c1 p) a4 z& T3 g `2 v
title 清除所有多余的桌面右键菜单
" J% o% l( U2 f; q# q1 j
color 1a
/ Y$ r s, _/ p2 B7 H
PAUSE
- V# q0 ^3 M. h& z5 g8 _7 W
regsvr32 /u /s igfxpph.dll
4 O3 k( w4 e# o+ R/ r& p3 j. P
reg delete HKEY_CLASSES_ROOT\Directory\Background\shellex\ContextMenuHandlers /f
* r5 `$ x |6 e& D1 u
reg add HKEY_CLASSES_ROOT\Directory\Background\shellex\ContextMenuHandlers\new /ve /d {D969A300-E7FF-11d0-A93B-00A0C90F2719}
& k& O" j7 ^$ s& t
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v HotKeysCmds /f
7 c, Q& m# n% M4 d8 F
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v IgfxTray /f
% o/ h0 K! t; Z- W4 s
第四招：C盘转换为NTFS格式
& E; `4 W! O2 u
NTFS格式是WinXP推荐使用的格式。转换为NTFS格式能提高硬盘存储的
" u T7 x* ~, s$ e/ U+ u! I
效率，并可设置访问权限以保护文件。但NTFS格式的分区在DOS/WIN9X
: I' P- h9 x! ^
下均不能被识别，可能会给初级用户造成不便。如无必要请不要转换。
8 \& y$ F: u# _: C6 {$ \4 ^( m
方法如上，复制内容见下（红色部分）
( ^4 w0 F7 ~8 [+ q0 Y& ~) v O s
@ ECHO OFF
/ \2 L! g& |. p3 c* z4 z
color 1b
: |- M5 B' e. W1 R6 F# B
title C盘转换为NTFS格式
' Z0 W- ]; k6 N* K* g: S
convert c:/fs:ntfs
: i9 }5 ?2 Y6 y. a, L( y, r3 s
第五招：给每个盘添加卷标
& v' G4 x3 v% a1 ~- @
此命令将为本机每个盘都添加上卷标，一般是用在新机上面。
8 n9 p! @! n% a! t+ F9 @
以引导初学者更合理地支配他们的硬盘空间。
. E8 C* ^9 x% E- i
方法如上，复制内容见下（红色部分）
! w) {* {( k2 a8 I
@ ECHO OFF
, F5 L' @* R0 E
title 给每个盘添加卷标
* M4 _4 L4 A( z% T6 L3 z0 s4 i
color 1B
* ]$ C2 I4 w/ j/ a. W
PAUSE
# s3 R: a+ E6 n& _& X% }1 V6 ~9 L# c6 l
c:
' ~( H' o( ?) [$ T
label c:WINXP
& {) g& Y- J- a! {7 U
label d:软件
+ ?9 S: @# F1 `
label e:影视
' s6 k! S( {8 u c3 p6 l8 n! J
label f:游戏
, P- Q2 C+ h- \/ A
label g:资料
" ?; M( D# I$ @ m! h3 x
label h:备份
1 o! i% l, h5 D+ X. k; Y8 _
d:
4 a8 Z1 ~; x, h1 @
md 本机驱动程序
# x. |" P# ^0 ~4 e
md 本机驱动程序\0.DirectX
9 _- p, y7 S. s6 r' Y
md 本机驱动程序\1.主板芯片组
7 r8 M7 G& L4 X W: r% z
md 本机驱动程序\2.显卡
$ o, f1 C- M% Z6 M
md 本机驱动程序\3.声卡
( i* m) F' o+ ?) O
md 本机驱动程序\4.网卡
# m- w0 ]2 l$ V* h9 b7 `3 `
md 本机驱动程序\5.摄像头
9 A( {/ g$ T3 O9 q: \& f
第六招：关闭有害端口
+ F! _* k7 ]3 B. r
提高安全
性，让你上网更加无后顾之忧！！！
; j( q2 F, F9 O3 S, X
@echo off
, e! S; w# v4 r7 c( f: _
gpupdate >nul
& }- R( ^! B* O2 r& g9 Z* z
rem For Client only
7 W; M2 X7 [, `+ X8 h" P* L
ipseccmd -w REG -p "HFUT_SECU" -o -x >nul
9 g ~) L. r; ~- k; Z" ^
ipseccmd -w REG -p "HFUT_SECU" -x >nul
: [3 `* g- S% B* q( o4 @( l5 Y
rem ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/80" -f *+0:80:TCP -n BLOCK -x >nul
; O$ `; B! N3 m3 d1 K9 ]# W' T
rem ipseccmd -w REG -p "HFUT_SECU" -r "Block UDP/1434" -f *+0:1434:UDP -n BLOCK -x >nul
* a; G a) ~* L. v4 N0 |
rem ipseccmd -w REG -p "HFUT_SECU" -r "Block UDP/137" -f *+0:137:UDP -n BLOCK -x >nul
$ D$ m V0 R3 T* C3 D6 U2 C) Y
rem ipseccmd -w REG -p "HFUT_SECU" -r "Block UDP/138" -f *+0:138:UDP -n BLOCK -x >nul
- Y7 |: v0 q, F6 C2 ?5 E, \
rem echo 禁止网上邻居的文件传输（去掉上述两行的 REM 即可生效！）
7 |# w9 c* x6 E: z* ~
rem ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/139" -f *+0:139:TCP -n BLOCK -x >nul
7 \4 b6 k$ `9 C# W
rem echo 禁止NetBIOS/SMB服务和文件和打印机共享和SAMBA（去掉REM生效）
( l \% q7 q0 F+ `* V+ K2 ?, j. X
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/135" -f *+0:135:TCP -n BLOCK -x >nul
" F! d' @6 W$ a% j2 ]/ Y
ipseccmd -w REG -p "HFUT_SECU" -r "Block UDP/135" -f *+0:135:UDP -n BLOCK -x >nul
+ q6 C; Q+ E; P& t6 D. p
echo 禁止Location Service服务和防止 Dos 攻击…………OK!
; `. D3 m. N g1 N) R; a
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/445" -f *+0:445:TCP -n BLOCK -x >nul
2 S$ x& B4 [* r$ b( @4 Y, T1 z8 E
ipseccmd -w REG -p "HFUT_SECU" -r "Block UDP/445" -f *+0:445:UDP -n BLOCK -x >nul
! U+ P; u5 W/ A: a$ H" M7 L
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1025" -f *+0:1025:TCP -n BLOCK -x >nul
. V* E2 n$ w: E! u4 E; g" C5 S) ]' F1 i9 H4 U
ipseccmd -w REG -p "HFUT_SECU" -r "Block UDP/139" -f *+0:139:UDP -n BLOCK -x >nul
4 n; {0 s" a& p
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1068" -f *+0:1068:TCP -n BLOCK -x >nul
/ @$ k6 x+ G+ }; j3 z0 x O# W
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5554" -f *+0:5554:TCP -n BLOCK -x >nul
9 y; g1 ~, `9 ]" b$ f$ C
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/9995" -f *+0:9995:TCP -n BLOCK -x >nul
; t s& ?! }9 L6 c- E0 h, N
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/9996" -f *+0:9996:TCP -n BLOCK -x >nul
) [8 y+ Z# ^# ?5 S. u) s2 o' s
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6129" -f *+0:6129:TCP -n BLOCK -x >nul
& F$ C. ^: x3 M) c1 M- e
ipseccmd -w REG -p "HFUT_SECU" -r "Block ICMP/255" -f *+0:255:ICMP -n BLOCK -x >nul
% T/ Q! Z! } h# R- x+ u
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/43958" -f *+0:43958:TCP -n BLOCK -x >nul
, {* p) N* R8 S
echo 关闭流行危险端口…………OK!
+ D& i4 d% F% {2 P/ |) h$ V: Z
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/20034" -f *+0:20034:TCP -n BLOCK -x >nul
& M6 J7 F; r5 [* T8 k
echo 关闭木马NetBus Pro开放的端口…………OK!
& ~' E0 Z/ p9 a( p) G# E9 P6 S
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1092" -f *+0:1092:TCP -n BLOCK -x >nul
% O" q+ }* A5 z6 J9 y
echo 关闭蠕虫LoveGate开放的端口…………OK!
; E9 L' j d3 w, {+ f7 K6 k o
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/3996" -f *+0:3996:TCP -n BLOCK -x >nul
" V6 G# ~4 r- [5 t$ F; c5 s
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/4060" -f *+0:4060:TCP -n BLOCK -x >nul
. M& {/ n. k- d! o$ z0 y: }8 n
echo 关闭木马RemoteAnything开放的端口…………OK!
$ I& P9 [- `* g( v. z2 w7 s
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/4590" -f *+0:4590:TCP -n BLOCK -x >nul
+ J4 t% P% S* N: i
echo 关闭木马ICQTrojan开放的端口…………OK!
2 P5 {) r0 `1 g1 [
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1080" -f *+0:1080:TCP -n BLOCK -x >nul
+ [" X4 Y+ U" N
echo 禁止代理服务器扫描…………OK!
, P0 J6 m. p7 R( }# H2 I
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/113" -f *+0:113:TCP -n BLOCK -x >nul
" u! j+ D) L7 p! t" @# A0 r3 f
echo 禁止Authentication Service服务…………OK!
" f h O* ~$ M/ e
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/79" -f *+0:79:TCP -n BLOCK -x >nul
6 ^0 I& p0 X& S) V _
echo 禁止Finger扫描…………OK！
$ H! M0 a/ S5 l1 m3 l- ] q
ipseccmd -w REG -p "HFUT_SECU" -r "Block UDP/53" -f *+0:53:UDP -n BLOCK -x >nul
1 n- [" q/ d7 Y W4 C
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/53" -f *+0:53:TCP -n BLOCK -x >nul
3 n( d" N3 v# i, Y+ |, K
echo 禁止区域传递（TCP），欺骗DNS（UDP）或隐藏其他的通信…………OK!
( D. w) `! j: N8 h; N
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/707" -f *+0:707:TCP -n BLOCK -x >nul
_7 y4 @' a( v, [4 _0 e5 c: i
echo 关闭nachi蠕虫病毒监听端口…………OK!
, Q+ t1 C M; W% U$ z
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/808" -f *+0:808:TCP -n BLOCK -x >nul
9 S. U( l- c/ P5 z4 h8 N) _
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/23" -f *+0:23:TCP -n BLOCK -x >nul
9 |! D% q! v+ N% x# h' R9 b
echo 关闭Telnet 和木马Tiny Telnet Server监听端口…………OK!
4 ~5 j! A" @- o6 x! ?. ]/ V, I
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/520" -f *+0:520:TCP -n BLOCK -x >nul
) a% s- ^& N6 s- X5 i
echo 关闭Rip 端口…………OK！
3 a1 I* }' ^+ Y( Y* A9 n* l
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1999" -f *+0:1999:TCP -n BLOCK -x >nul
' s0 F/ v: S3 v3 }& R& {7 R
echo 关闭木马程序BackDoor的默认服务端口…………OK！
6 z% h6 k+ z3 h2 Q8 K7 U
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2001" -f *+0:2001:TCP -n BLOCK -x >nul
. c! n6 \1 T+ I" `; A0 G* R
echo 关闭马程序黑洞2001的默认服务端口…………OK!
: A- @7 @; _& g, N7 G6 o0 ]4 m
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2023" -f *+0:2023:TCP -n BLOCK -x >nul
9 U% \0 R+ [' ?4 Z1 a* X
echo 关闭木马程序Ripper的默认服务端口…………OK!
& S. q- U6 U9 R! l2 N% c2 V/ I
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2583" -f *+0:2583:TCP -n BLOCK -x >nul
) m9 I1 ]: O* A+ H+ G3 Z
echo 关闭木马程序Wincrash v2的默认服务端口…………OK！
) \. b8 B8 s9 U5 l6 |0 z
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/3389" -f *+0:3389:TCP -n BLOCK -x >nul
4 f) Q+ ]( L+ r
echo 关闭Windows 的远程管理终端（远程桌面）监听端口…………OK！
2 k) V' f# ]5 y1 p i
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/4444" -f *+0:4444:TCP -n BLOCK -x >nul
0 [5 U$ d8 ^% A$ Z7 B+ z
echo 关闭msblast冲击波蠕虫监听端口…………OK!
# {& w0 B$ ~; }( I7 z
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/4899" -f *+0:4899:TCP -n BLOCK -x >nul
: [/ ~3 n# D* a- ^: ~
echo 关闭远程控制软件（remote administrator)服务端口…………OK!
1 T, Q5 Q" A3 l- y; y q' i' y
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5800" -f *+0:5800:TCP -n BLOCK -x >nul
$ s6 c( u `" I6 W* u# t
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5900" -f *+0:5900:TCP -n BLOCK -x >nul
5 j0 E8 T2 `: {
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/8888" -f *+0:8888:TCP -n BLOCK -x >nul
L. m) e, P6 a# A: u' n9 M
echo 关闭远程控制软件VNC的两个默认服务端口…………OK!
0 U6 N6 b$ P$ q3 {+ Q8 E: }* f
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6129" -f *+0:6129:TCP -n BLOCK -x >nul
1 a0 @5 m3 k1 ]6 ]0 e+ d; r5 _' |, y! |
echo 关闭Dameware服务端默认监听端口（可变！）…………OK!
3 o7 C! l8 p- y& ]
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6267" -f *+0:6267:TCP -n BLOCK -x >nul
, [, n3 C& F% @4 c0 k- ], i7 X
echo 关闭木马广外女生的默认服务端口…………OK!
5 W: f- Y8 J @; e% J- i6 a
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/660" -f *+0:660:TCP -n BLOCK -x >nul
/ G4 l' N4 h9 S7 x
echo 关闭木马DeepThroat v1.0 - 3.1默认服务端口…………OK!
( ^3 x- `" V+ F# Q ~5 R
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6671" -f *+0:6671:TCP -n BLOCK -x >nul
+ K, X, j4 C: x2 }( V$ L! x- R
echo 关闭木马Indoctrination默认服务端口…………OK!
# y6 O1 F* I( r" [
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6939" -f *+0:6939:TCP -n BLOCK -x >nul
6 F5 s+ m1 s7 ?7 u4 p
echo 关闭木马PRIORITY默认服务端口…………OK!
1 \) d# @5 S" _; c- X1 ~, n
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7306" -f *+0:7306:TCP -n BLOCK -x >nul
2 I1 e4 a1 O/ h: ~- C6 K# [) v. C$ m
echo 关闭木马网络精灵默认服务端口…………OK!
7 ^7 j2 ~0 C& Z7 ~2 d! ?- K: V* j
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7511" -f *+0:7511:TCP -n BLOCK -x >nul
2 v$ d2 p0 |2 o3 G$ w
echo 关闭木马聪明基因的默认连接端口…………OK!
; T# ?1 f! W" L3 K6 F; F6 A) R
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7626" -f *+0:7626:TCP -n BLOCK -x >nul
6 S% I% b' r: i0 |& Q) J' G' j
echo 关闭木马冰河默认端口(注意可变！)…………OK!
6 O1 H( k; M' C# l" ~' i$ C
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/8011" -f *+0:8011:TCP -n BLOCK -x >nul
6 F, \5 q) d. ]" t! h) ]' ^1 ]7 d
echo 关闭木马WAY2.4默认服务端口…………OK！
7 {3 \2 ]/ u M! `+ s
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/9989" -f *+0:9989:TCP -n BLOCK -x >nul
8 T: S" C) {/ ]; e W
echo 关闭木马InIkiller默认服务端口…………OK!
6 ]* i3 L& ^) }+ y" }& D a
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/19191" -f *+0:19191:TCP -n BLOCK -x >nul
$ `* y' W/ F+ o3 F; ~9 V
echo 关闭木马兰色火焰默认开放的telnet端口…………OK!
9 J+ k, f/ C% M) L2 N/ r7 F# t. b
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1029" -f *+0:1029:TCP -n BLOCK -x >nul
. t( \; H( F/ [. i2 X' k
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/20168" -f *+0:20168:TCP -n BLOCK -x >nul
# ~0 Q9 j5 `/ W7 B+ [: I9 a8 }# Q
echo 关闭lovegate 蠕虫所开放的两个后门端口…………OK!
$ P) O( S( y, E8 p) P5 y- }/ U' s
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/23444" -f *+0:23444:TCP -n BLOCK -x >nul
+ F1 d, z4 @7 L, J3 v% @* i
echo 关闭木马网络公牛默认服务端口…………OK!
1 f( a; x+ z9 C, d" ~
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/27374" -f *+0:27374:TCP -n BLOCK -x >nul
0 n; Z" b% }" L d1 [
echo 关闭木马SUB7默认服务端口…………OK!
- s5 J. l3 u( ^. [
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/30100" -f *+0:30100:TCP -n BLOCK -x >nul
5 [1 c5 g- z9 c/ q' |# D
echo 关闭木马NetSphere默认的服务端口…………OK!
6 Y, K3 B) E% A1 {0 f3 i
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/31337" -f *+0:31337:TCP -n BLOCK -x >nul
2 p& P, _' R- ?+ r
echo 关闭木马BO2000默认服务端口…………OK!
6 w5 U9 z/ M: s4 P! \
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/45576" -f *+0:45576:TCP -n BLOCK -x >nul
# w9 R' @* c% K) B; l+ W
echo 关闭代理软件的控制端口…………OK!
! D% J8 N" Q' F, u9 N1 i- L$ R3 j
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/50766" -f *+0:50766:TCP -n BLOCK -x >nul
. O6 R+ Y2 N6 O; z1 U
echo 关闭木马Schwindler默认服务端口…………OK!
5 k2 I: J6 n, q2 b6 D
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/61466" -f *+0:61466:TCP -n BLOCK -x >nul
- ?* `6 }& V! h3 _5 A2 o
echo 关闭木马Telecommando默认服务端口…………OK!
$ L+ a3 M( g2 F; S
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/31338" -f *+0:31338:TCP -n BLOCK -x >nul
4 C. G# J: X. I) c
echo 关闭木马Back Orifice默认服务端口…………OK!
; Z* }# @& G$ y m; z: |
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/8102" -f *+0:8102:TCP -n BLOCK -x >nul
4 B: E4 a4 t1 a) Q
echo 关闭木马网络神偷默认服务端口…………OK!
% h$ z3 m1 A, }& R5 M$ P* v+ f
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2000" -f *+0:2000:TCP -n BLOCK -x >nul
: P F4 h2 G: ~* g! ^: p: h/ a
echo 关闭木马黑洞2000默认服务端口…………OK!
2 I& N& W" n% e6 E( F) ^- @; e/ |% G
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/31339" -f *+0:31339:TCP -n BLOCK -x >nul
6 x, `( ^ h) ?* h" I' k
echo 关闭木马NetSpy DK默认服务端口…………OK!
: k3 U+ \! N/ q% t6 T8 J3 X& I$ ?' X
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2001" -f *+0:2001:TCP -n BLOCK -x >nul
, \0 z# @7 K+ a
echo 关闭木马黑洞2001默认服务端口…………OK!
8 K" z* {0 X7 ?& \
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/31666" -f *+0:31666:TCP -n BLOCK -x >nul
6 J8 e1 X7 i( a. {0 l/ @
echo 关闭木马BOWhack默认服务端口…………OK!
1 b) k$ D: q `) I9 G2 [3 k; L
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/34324" -f *+0:34324:TCP -n BLOCK -x >nul
8 N! F N% e" y* Q, L$ p" Q7 F6 [+ W
echo 关闭木马BigGluck默认服务端口…………OK!
+ ^- e0 j- c& N6 Z
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7306" -f *+0:7306:TCP -n BLOCK -x >nul
6 J3 H. ]6 e' j1 c4 n. t3 B
echo 关闭木马网络精灵3.0，netspy3.0默认服务端口…………OK!
. t9 ~* [. O* ^
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/40412" -f *+0:40412:TCP -n BLOCK -x >nul
/ _ U, ~3 x* t5 A2 b! W
echo 关闭木马The Spy默认服务端口…………OK!
7 F- W, b( g! r9 K
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/40421" -f *+0:40421:TCP -n BLOCK -x >nul
! Y6 A4 b8 D5 z/ |5 w b
echo 关闭木马Masters Paradise默认服务端口…………OK!
2 C9 i% v! R( e: }
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/8011" -f *+0:8011:TCP -n BLOCK -x >nul
8 z0 f% W _7 I ?
echo 关闭木马wry，赖小子，火凤凰默认服务端口…………OK!
$ _- s F( a+ w0 o h3 u7 W3 g
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/40422" -f *+0:40422:TCP -n BLOCK -x >nul
* m; f. G6 F4 P& I3 `
echo 关闭木马Masters Paradise 1.x默认服务端口…………OK!
3 w, Y# J, u" n8 a' K
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/23444" -f *+0:23444:TCP -n BLOCK -x >nul
2 i4 I7 G; ?0 Q# _, s6 N) ?2 ]" f+ x3 F1 ]
echo 关闭木马网络公牛，netbull默认服务端口…………OK!
6 r& U1 O- }4 Q
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/40423" -f *+0:40423:TCP -n BLOCK -x >nul
$ H K( Q3 u. L0 f! r6 P0 | u5 p: n
echo 关闭木马Masters Paradise 2.x默认服务端口…………OK!
% S+ x0 z; S& `4 Z/ \# V
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/23445" -f *+0:23445:TCP -n BLOCK -x >nul
' F+ ]& x- D$ ?
echo 关闭木马网络公牛，netbull默认服务端口…………OK!
; K6 K9 w! M' |
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/40426" -f *+0:40426:TCP -n BLOCK -x >nul
5 _/ h Z3 ~& c9 n
echo 关闭木马Masters Paradise 3.x默认服务端口…………OK!
% k* C% P E/ _7 D; W& \4 n5 x
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/50505" -f *+0:50505:TCP -n BLOCK -x >nul
9 q% C" ]) r. W1 w- U0 q' F3 H
echo 关闭木马Sockets de Troie默认服务端口…………OK!
' ]# C4 y" Z; f. L8 r5 A2 I7 q4 B
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/27374" -f *+0:27374:TCP -n BLOCK -x >nul
" [ W8 E/ a, y9 ~0 d" [; B
echo 关闭木马Sub Seven 2.0+，77，东方魔眼默认服务端口…………OK!
3 f& c) f3 v0 F4 W# c
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/50766" -f *+0:50766:TCP -n BLOCK -x >nul
% J9 v! {+ ?4 U E- L @
echo 关闭木马Fore默认服务端口…………OK!
0 r2 r( ?, l5 g9 G
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/53001" -f *+0:53001:TCP -n BLOCK -x >nul
. l3 Y# [, m4 I& a; @0 {0 a3 _
echo 关闭木马Remote Windows Shutdown默认服务端口…………OK!
/ \0 L# t6 v5 Y
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/61466" -f *+0:61466:TCP -n BLOCK -x >nul
+ C" Z. I7 X k& T* t+ X+ d1 g# @2 |
echo 关闭木马Telecommando默认服务端口…………OK!
. J( x! R3 L# B. ~( h
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/121" -f *+0:121:TCP -n BLOCK -x >nul
3 u1 y1 M: p1 k- ~ m* E, C. ^8 @6 [: _
echo 关闭木马BO jammerkillahV默认服务端口…………OK!
% h7 D8 ?6 |4 o/ f) s% ^
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/666" -f *+0:666:TCP -n BLOCK -x >nul
v4 E) a! v* B; T5 R9 ^
echo 关闭木马Satanz Backdoor默认服务端口…………OK!
4 V- c e% u+ o1 _& h+ R' D
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/65000" -f *+0:65000:TCP -n BLOCK -x >nul
& e( A% L( u! B3 J& w2 z4 a3 M
echo 关闭木马Devil默认服务端口…………OK!
5 S4 ?2 w5 q9 Y$ _' n5 v" w F1 A, p1 c
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1001" -f *+0:1001:TCP -n BLOCK -x >nul
" {2 U P5 E8 G6 n& v% }! p x
echo 关闭木马Silencer默认服务端口…………OK!
8 o4 c0 X1 M0 C! ~
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6400" -f *+0:6400:TCP -n BLOCK -x >nul
! X7 D E) M: T! k0 C5 k
echo 关闭木马The tHing默认服务端口…………OK!
( M' o( l7 @$ c3 |
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1600" -f *+0:1600:TCP -n BLOCK -x >nul
3 a% m; y S; C' f2 O4 p3 u
echo 关闭木马Shivka-Burka默认服务端口…………OK!
; e' g% @) Q" [: n; ~+ X
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/12346" -f *+0:12346:TCP -n BLOCK -x >nul
9 h! x: \% T3 w9 i% ]
echo 关闭木马NetBus 1.x默认服务端口…………OK!
/ {4 m f- A' f$ S- n
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1807" -f *+0:1807:TCP -n BLOCK -x >nul
7 A" h" B1 Q* I
echo 关闭木马SpySender默认服务端口…………OK!
+ t( D5 H3 y) _
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/20034" -f *+0:20034:TCP -n BLOCK -x >nul
) J6 }- {6 r; M0 X! [( X4 O
echo 关闭木马NetBus Pro默认服务端口…………OK!
& R7 z# `9 F; d" R, g
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1981" -f *+0:1981:TCP -n BLOCK -x >nul
( ?8 [% c( J" j7 B9 O
echo 关闭木马Shockrave默认服务端口…………OK!
( q( V* R8 Q4 W7 t: [
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1243" -f *+0:1243:TCP -n BLOCK -x >nul
+ Q" Z% @( ?- A
echo 关闭木马SubSeven默认服务端口…………OK!
$ Q+ O4 p6 e7 t! b8 \7 X
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1001" -f *+0:1001:TCP -n BLOCK -x >nul
9 M2 E) ^; o5 N5 u5 @
echo 关闭木马WebEx默认服务端口…………OK!
# N+ K( G! c3 Y1 Y. X3 W' U
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/30100" -f *+0:30100:TCP -n BLOCK -x >nul
+ D! a6 @4 R6 g6 c( d
echo 关闭木马NetSphere默认服务端口…………OK!
, s7 n/ E* @7 Z- U, m b
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1011" -f *+0:1011:TCP -n BLOCK -x >nul
# @3 [) D7 f6 l
echo 关闭木马Doly Trojan默认服务端口…………OK!
7 L, H0 H9 Y9 {& ?& S
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1001" -f *+0:1001:TCP -n BLOCK -x >nul
, r8 c' v+ o/ F# g2 |4 U2 e# p
echo 关闭木马Silencer默认服务端口…………OK!
% j3 g8 q9 q' d& \
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1170" -f *+0:1170:TCP -n BLOCK -x >nul
1 B* z8 M5 a" e; L# W. l
echo 关闭木马Psyber Stream Server默认服务端口…………OK!
" M& G5 D. X( g$ C' j, \/ P
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/20000" -f *+0:20000:TCP -n BLOCK -x >nul
$ f7 a* S9 I( T+ J. t
echo 关闭木马Millenium默认服务端口…………OK!
' E( j: r' w+ S! z. q
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1234" -f *+0:1234:TCP -n BLOCK -x >nul
0 e( o( j3 z! U" ?
echo 关闭木马Ultors Trojan默认服务端口…………OK!
1 P0 b4 j% K3 ]: x6 K5 p
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/65000" -f *+0:65000:TCP -n BLOCK -x >nul
U& V4 }( g1 X& H& Y! G. D% h
echo 关闭木马Devil 1.03默认服务端口…………OK!
0 l% C$ M& Q7 ?
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1245" -f *+0:1245:TCP -n BLOCK -x >nul
! ?2 B8 F$ [; B) I* E: }% P; [
echo 关闭木马VooDoo Doll默认服务端口…………OK!
. Y. |6 v+ s& v y8 N; s$ h- p4 c
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7306" -f *+0:7306:TCP -n BLOCK -x >nul
; S1 p& Y. {0 l9 P8 X
echo 关闭木马NetMonitor默认服务端口…………OK!
2 ^# }+ I' d. s
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1492" -f *+0:1492:TCP -n BLOCK -x >nul
% G0 C1 H- t! f: f0 E- ?1 P% f
echo 关闭木马FTP99CMP默认服务端口…………OK!
& R- F* ~4 n, L5 p
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1170" -f *+0:1170:TCP -n BLOCK -x >nul
& V8 p- c V$ i- u1 P4 i0 e
echo 关闭木马Streaming Audio Trojan默认服务端口…………OK!
& k' w+ h# R6 Y4 ]6 |+ @
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1999" -f *+0:1999:TCP -n BLOCK -x >nul
4 u( `) F/ [+ C( L/ H" {2 a
echo 关闭木马BackDoor默认服务端口…………OK!
1 n2 X5 f% w1 [* z$ r9 G. t' b
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/30303" -f *+0:30303:TCP -n BLOCK -x >nul
8 G3 ~: N" q9 l) x1 p! I
echo 关闭木马Socket23默认服务端口…………OK!
' v+ f; G2 {) \* Q7 |+ L6 ]* _
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2001" -f *+0:2001:TCP -n BLOCK -x >nul
3 w6 y1 t) }* W4 K1 [) a \$ k
echo 关闭木马Trojan Cow默认服务端口…………OK!
$ p$ H( ^- K+ E
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6969" -f *+0:6969:TCP -n BLOCK -x >nul
* @. x4 W9 [* e0 X! N8 |8 v
echo 关闭木马Gatecrasher默认服务端口…………OK!
! }( \/ K' G9 w* r+ g" W
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2023" -f *+0:2023:TCP -n BLOCK -x >nul
. Z* ?$ B7 ?" O, H& K9 r3 F5 i
echo 关闭木马Ripper默认服务端口…………OK!
% H, E" G6 Y- p1 ?4 a7 j3 z, X
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/61466" -f *+0:61466:TCP -n BLOCK -x >nul
6 V x) D1 I. s! S- R' S: c
echo 关闭木马Telecommando默认服务端口…………OK!
) |, b" {& _- N7 T- D0 j
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2115" -f *+0:2115:TCP -n BLOCK -x >nul
6 }5 T: b! J: D/ ^- i5 B
echo 关闭木马Bugs默认服务端口…………OK!
% p2 n+ q( j8 i9 Y2 ^
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/12076" -f *+0:12076:TCP -n BLOCK -x >nul
0 G( Q! u D% k. W: |# f$ z0 T
echo 关闭木马Gjamer默认服务端口…………OK!
8 g8 A# A1 G8 I" k3 ? h. \
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2140" -f *+0:2140:TCP -n BLOCK -x >nul
- i) g6 D# O( h0 i( X
echo 关闭木马Deep Throat默认服务端口…………OK!
" n5 L- R1 k0 x# M' }
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/4950" -f *+0:4950:TCP -n BLOCK -x >nul
' ?# E6 G Y+ U4 T8 x: A8 S
echo 关闭木马IcqTrojen默认服务端口…………OK!
& l' N( u4 w; x2 }0 q
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2140" -f *+0:2140:TCP -n BLOCK -x >nul
% N9 y& X' ~4 J$ j1 Q- v8 l3 g( V
echo 关闭木马The Invasor默认服务端口…………OK!
( Y' X$ K. w" @5 ]( h5 d; q
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/16969" -f *+0:16969:TCP -n BLOCK -x >nul
( _* U/ x! t% C7 T! E- T
echo 关闭木马Priotrity默认服务端口…………OK!
2 M+ v& B0 l) ~* Y! ^3 T
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2801" -f *+0:2801:TCP -n BLOCK -x >nul
* l8 ~. U/ K9 d3 }
echo 关闭木马Phineas Phucker默认服务端口…………OK!
( p! u, Q! s& R O
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1245" -f *+0:1245:TCP -n BLOCK -x >nul
- y& {2 |$ \8 P: k3 s% D% J
echo 关闭木马Vodoo默认服务端口…………OK!
% @: \: |. k7 x% ~( E! B3 ~
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/30129" -f *+0:30129:TCP -n BLOCK -x >nul
1 E) U! u1 F" K0 M
echo 关闭木马Masters Paradise默认服务端口…………OK!
; {7 `2 }$ e/ w6 f Q( k
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5742" -f *+0:5742:TCP -n BLOCK -x >nul
( e0 P3 Q; b' R6 P
echo 关闭木马Wincrash默认服务端口…………OK!
( C& R/ x, h0 Y, m/ |) H/ D
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/3700" -f *+0:3700:TCP -n BLOCK -x >nul
6 l& p- J# a6 o; H9 M- E# H
echo 关闭木马Portal of Doom默认服务端口…………OK!
0 |$ q/ X! Z5 Z3 u6 M/ P
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2583" -f *+0:2583:TCP -n BLOCK -x >nul
5 S* g' D: r2 k) {
echo 关闭木马Wincrash2默认服务端口…………OK!
- w2 V6 o8 b* _9 g2 N" C8 e
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/4092" -f *+0:4092:TCP -n BLOCK -x >nul
# U, c' s9 W6 k1 x+ F& D
echo 关闭木马WinCrash默认服务端口…………OK!
% |/ b# m0 R! ]* A0 R
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1033" -f *+0:1033:TCP -n BLOCK -x >nul
7 C6 H5 T/ T" \; \- p
echo 关闭木马Netspy默认服务端口…………OK!
- x# G" Q9 n" ?! W
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/4590" -f *+0:4590:TCP -n BLOCK -x >nul
/ ~1 n; ?0 Z8 z- |7 s; a
echo 关闭木马ICQTrojan默认服务端口…………OK!
5 {: s* v% |, b+ H
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1981" -f *+0:1981:TCP -n BLOCK -x >nul
% P" ~+ t% g# {* x: ~- g
echo 关闭木马ShockRave默认服务端口…………OK!
$ `9 Y. R0 }- ~8 m s
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5000" -f *+0:5000:TCP -n BLOCK -x >nul
1 B/ W+ `. r; ~, K" ^, [4 J
echo 关闭木马Sockets de Troie默认服务端口…………OK!
+ \' ~7 ~0 W0 h3 ^* Y. g- Z& p# Z
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/555" -f *+0:555:TCP -n BLOCK -x >nul
/ d; ?. k7 |! U6 l' }. J
echo 关闭木马Stealth Spy默认服务端口…………OK!
! l0 F- t9 Y G% f: C7 ~- ~
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5001" -f *+0:5001:TCP -n BLOCK -x >nul
a h& ^8 t6 X
echo 关闭木马Sockets de Troie 1.x默认服务端口…………OK!
( f! b; t& b/ c& M: `6 [0 ~+ ~/ H% K& s
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2023" -f *+0:2023:TCP -n BLOCK -x >nul
: ~ w/ e! ]* l+ F
echo 关闭木马Pass Ripper默认服务端口…………OK!
! f8 [: i! q7 g& R' }% T4 Y
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5321" -f *+0:5321:TCP -n BLOCK -x >nul
$ `- ~% H! a; ~
echo 关闭木马Firehotcker默认服务端口…………OK!
" \. E% ^8 r+ R4 j
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/666" -f *+0:666:TCP -n BLOCK -x >nul
; _1 ~+ n) J: y1 y; N
echo 关闭木马Attack FTP默认服务端口…………OK!
7 L. s$ F N) P* f( o
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5400" -f *+0:5400:TCP -n BLOCK -x >nul
6 x: U: Z5 n" a3 r
echo 关闭木马Blade Runner默认服务端口…………OK!
! ]: _7 @ Y9 H/ v, g
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/21554" -f *+0:21554:TCP -n BLOCK -x >nul
% l+ P' ^/ e w3 R" i; w) [
echo 关闭木马GirlFriend默认服务端口…………OK!
( {1 L% B% O4 p
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5401" -f *+0:5401:TCP -n BLOCK -x >nul
& Q$ q" i' B8 Y
echo 关闭木马Blade Runner 1.x默认服务端口…………OK!
. P, q! Y/ U0 a0 D* Y
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/50766" -f *+0:50766:TCP -n BLOCK -x >nul
1 D8 {9 Y! K, r2 n j
echo 关闭木马Fore Schwindler默认服务端口…………OK!
" w1 O, ]7 b; B9 i# f& M
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5402" -f *+0:5402:TCP -n BLOCK -x >nul
1 X3 }" z4 o8 D* F. A4 Z0 F4 x8 L
echo 关闭木马Blade Runner 2.x默认服务端口…………OK!
Q8 A6 O! Z9 l) Q2 r V) ]
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/34324" -f *+0:34324:TCP -n BLOCK -x >nul
' v$ @) Z8 K/ T: P9 E
echo 关闭木马Tiny Telnet Server默认服务端口…………OK!
1 \- y4 }/ H3 z Q& Y" ~, z
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5569" -f *+0:5569:TCP -n BLOCK -x >nul
' q% I- H7 H) e! b7 ]
echo 关闭木马Robo-Hack默认服务端口…………OK!
& q* l5 x7 D9 f0 v# v( h
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/30999" -f *+0:30999:TCP -n BLOCK -x >nul
~, K6 }1 L, S
echo 关闭木马Kuang默认服务端口…………OK!
& y8 Z0 i: Y5 {$ ]
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6670" -f *+0:6670:TCP -n BLOCK -x >nul
# U; e8 j+ h- R$ P' s1 I( o
echo 关闭木马DeepThroat默认服务端口…………OK!
- P! w( `( O7 `* _! }
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/11000" -f *+0:11000:TCP -n BLOCK -x >nul
) @" v& o# z8 o; g6 ]" `) v4 R& ?- n; y
echo 关闭木马Senna Spy Trojans默认服务端口…………OK!
: R- J2 \' t+ f3 L& v
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6771" -f *+0:6771:TCP -n BLOCK -x >nul
8 r; {! c- b% Z) u( B2 F
echo 关闭木马DeepThroat默认服务端口…………OK!
' P2 q2 R' r7 ?! v. _& w
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/23456" -f *+0:23456:TCP -n BLOCK -x >nul
2 \. ^! g3 t1 Q" t4 N& w
echo 关闭木马WhackJob默认服务端口…………OK!
& d0 ]8 V" J+ ^2 J! m' Z3 a: g
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6969" -f *+0:6969:TCP -n BLOCK -x >nul
: B ~4 k u+ H [/ V7 l$ e
echo 关闭木马GateCrasher默认服务端口…………OK!
8 v% @3 H7 g6 j* Z1 p
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/555" -f *+0:555:TCP -n BLOCK -x >nul
+ S" }$ V/ T% ~8 D4 n
echo 关闭木马Phase0默认服务端口…………OK!
P/ Y3 e- M9 U1 c# n
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6969" -f *+0:6969:TCP -n BLOCK -x >nul
6 U: _# g) W0 S. |$ }( [
echo 关闭木马Priority默认服务端口…………OK!
y$ m a2 s( U! P2 V& {/ |3 w
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5400" -f *+0:5400:TCP -n BLOCK -x >nul
5 Y' B# r1 t/ _! e9 A( v
echo 关闭木马Blade Runner默认服务端口…………OK!
# R, r7 ?5 `' t: y0 P. s3 X
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7000" -f *+0:7000:TCP -n BLOCK -x >nul
6 N% B" i. B5 _) z5 w( x
echo 关闭木马Remote Grab默认服务端口…………OK!
! Y4 F/ X, Y p6 W' g# K
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/4950" -f *+0:4950:TCP -n BLOCK -x >nul
( o4 b& {# W2 i
echo 关闭木马IcqTrojan默认服务端口…………OK!
_: H# V' a2 U# A5 f) r. J! Y
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7300" -f *+0:7300:TCP -n BLOCK -x >nul
; g1 t2 J8 d" W/ i. G% r
echo 关闭木马NetMonitor默认服务端口…………OK!
8 Y( V' V7 s6 h- s( i! g! K+ w; G
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/9989" -f *+0:9989:TCP -n BLOCK -x >nul
9 k* C* y6 V& U' m1 k5 A
echo 关闭木马InIkiller默认服务端口…………OK!
5 v: q/ g0 R8 a+ z0 F7 Q
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7301" -f *+0:7301:TCP -n BLOCK -x >nul
o, t6 R% F% M, R6 Y* ]! ]
echo 关闭木马NetMonitor 1.x默认服务端口…………OK!
4 S& i* m" z, Y! @1 i# n% S. r1 H
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/9872" -f *+0:9872:TCP -n BLOCK -x >nul
# c7 P$ ~ i* x; ?
echo 关闭木马Portal Of Doom默认服务端口…………OK!
? L% W0 P$ X: y3 _
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7306" -f *+0:7306:TCP -n BLOCK -x >nul
: X+ T: l8 T1 U: Z: E
echo 关闭木马NetMonitor 2.x默认服务端口…………OK!
5 M {" h6 t+ w/ S/ j
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/11223" -f *+0:11223:TCP -n BLOCK -x >nul
$ q8 P5 f+ k) F1 P/ k* p' w b" i" K
echo 关闭木马Progenic Trojan默认服务端口…………OK!
7 ]% v2 }. S: d
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7307" -f *+0:7307:TCP -n BLOCK -x >nul
8 p3 A) B0 U# m. g2 x" b2 `
echo 关闭木马NetMonitor 3.x默认服务端口…………OK!
$ J! _8 I0 }" q% j3 f+ f
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/22222" -f *+0:22222:TCP -n BLOCK -x >nul
8 q9 e+ ~1 s, A0 `( n$ n
echo 关闭木马Prosiak 0.47默认服务端口…………OK!
! ^ Z1 ^- r" ~- n9 R( Z
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7308" -f *+0:7308:TCP -n BLOCK -x >nul
0 f! j" R4 T8 {4 S& p
echo 关闭木马NetMonitor 4.x默认服务端口…………OK!
& Y2 [ V% u. N! m% f, N
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/53001" -f *+0:53001:TCP -n BLOCK -x >nul
/ ^( @0 J n+ k1 f* N9 l7 w- b! C
echo 关闭木马Remote Windows Shutdown默认服务端口…………OK!
; e. ~9 o% |, [7 H' @9 i
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7789" -f *+0:7789:TCP -n BLOCK -x >nul
a2 q1 b' T. e* T; \0 n
echo 关闭木马ICKiller默认服务端口…………OK!
6 q a% J* x& g& H
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5569" -f *+0:5569:TCP -n BLOCK -x >nul
! f j' W( ?' t2 P0 Y
echo 关闭木马RoboHack默认服务端口…………OK!
$ }( c- o* P: }5 `" S
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/9872" -f *+0:9872:TCP -n BLOCK -x >nul
# G( D4 E" D# d, M' G' a
echo 关闭木马Portal of Doom默认服务端口…………OK!
* x, y! K n. G9 D# l$ W6 O2 x
ipseccmd -w REG -p "HFUT_SECU" -x >nul
& ?, ^+ ` H9 L$ @. B7 @4 |
gpupdate >nul
$ l6 L: p- f( Y j% \' d. \
echo 正在设置 IP 筛选器……
0 l2 \+ V2 O7 a. J0 {0 X2 g& b
rem if exist %temp%\ipfilter.reg del %temp%\ipfilter.reg
7 C: V3 _' T# C4 Q
echo Windows Registry Editor Version 5.00>%temp%\ipfilter.reg
% T* a. S6 |& B( A5 H1 y: A
echo.>>%temp%\ipfilter.reg
+ o2 p" l; E9 a* D' g9 o! t& M
echo [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters]>>%temp%\ipfilter.reg
7 _6 r, ~$ }2 h/ X* }' g
echo "EnableSecurityFilters"=dword:00000001>>%temp%\ipfilter.reg
$ }+ \) Y o. \8 N, n
echo.>>%temp%\ipfilter.reg>>%temp%\ipfilter.reg
1 g+ i' i P% ]( x' k# [; B
echo [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{F3BBAABC-03A5-4584-A7A0-0251FA38B8B1}]>>%temp%\ipfilter.reg
$ D% K7 S* Y H' ]0 G W( f& ?
echo "TCPAllowedPorts"=hex(07):32,00,31,00,00,00,38,00,30,00,00,00,34,00,30,00,30,\>>%temp%\ipfilter.reg
' i* ~) B- W7 I, x! K4 `. \
echo 00,30,00,00,00,00,00>>%temp%\ipfilter.reg
8 ~/ `6 ]7 t0 @2 E* c
echo.>>%temp%\ipfilter.reg
/ S7 C a- T( A, ]9 X
echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]>>%temp%\ipfilter.reg
4 H& i& Y( M: h8 L; v# s' {% {
echo "EnableSecurityFilters"=dword:00000001>>%temp%\ipfilter.reg
0 a7 Y& f. V) }- c' Z* N6 q
echo.>>%temp%\ipfilter.reg
) C x! B! K; X: S
echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{F3BBAABC-03A5-4584-A7A0-0251FA38B8B1}]>>%temp%\ipfilter.reg
' T- u! o1 N1 `1 V2 O
echo "TCPAllowedPorts"=hex(07):32,00,31,00,00,00,38,00,30,00,00,00,34,00,30,00,30,\>>%temp%\ipfilter.reg
' y |) `0 Q# I9 S
echo 00,30,00,00,00,00,00>>%temp%\ipfilter.reg
% U: D3 e3 g. N. ?0 Y' |1 A
echo.>>%temp%\ipfilter.reg
0 O2 i: [, S0 J( u* l: a
regedit /s %temp%\ipfilter.reg
3 _; X1 e+ z7 ~
del %temp%\ipfilter.reg
. `6 m" q* |0 o2 O
echo IP 筛选器设置成功！
: P2 G1 ?1 R1 q" _* b8 D
echo.
6 r' r% h* ~ B
echo.
! k4 U( a) D$ Y4 I/ b
echo “拒绝服务”提醒您的系统可以免受流行蠕虫病毒及木马后门的侵扰！
& ?- |( ~- t* Y0 V7 m2 Y: `- a1 D6 ^ F
echo.
1 l/ P: M) p2 X# [* \7 { `4 e
echo ******** 特别注意：不要关闭，请按任意键进行 Win 服务器过滤策略！ ********
& s5 d! R+ F5 R. @! D U' E
echo.
6 p. H7 Q6 H# J5 T7 u% [
pause>nul
4 e2 z) P3 P: s1 j4 h o
rem For PC Server
! y; K% i$ i* {) X. s; y# z
ipseccmd -w REG -p "HFUT_SECU" -o -x
! s! U3 E8 N& z) |: J
ipseccmd -w REG -p "HFUT_SECU" -x
5 F* i, H" _6 R
rem ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/80" -f *+0:80:TCP -n BLOCK -x
5 O* O+ l4 x) n4 r" R( b, ?
rem ipseccmd -w REG -p "HFUT_SECU" -r "Block UDP/1434" -f *+0:1434:UDP -n BLOCK -x
, {5 g: V6 \1 i
rem ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/3389" -f *+0:3389:TCP -n BLOCK -x
* M1 r, M# l" M6 X r6 P2 g
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/445" -f *+0:445:TCP -n BLOCK -x >nul
! j$ k3 U6 G- n+ D: [# l, G) I+ I
ipseccmd -w REG -p "HFUT_SECU" -r "Block UDP/445" -f *+0:445:UDP -n BLOCK -x >nul
$ {8 I/ Z! n2 A" ^
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1025" -f *+0:1025:TCP -n BLOCK -x >nul
. T0 d! e2 N) u8 Q, v
ipseccmd -w REG -p "HFUT_SECU" -r "Block UDP/139" -f *+0:139:UDP -n BLOCK -x >nul
$ i$ s/ e% G1 T- h w7 U$ O$ U
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1068" -f *+0:1068:TCP -n BLOCK -x >nul
& b& \8 R4 f% i6 V7 x$ g1 u- ?
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5554" -f *+0:5554:TCP -n BLOCK -x >nul
1 t! T! ]3 ?- i8 d2 u, |! L# N# E
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/9995" -f *+0:9995:TCP -n BLOCK -x >nul
4 m8 A: x$ l+ t, H+ ^8 Z0 U
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/9996" -f *+0:9996:TCP -n BLOCK -x >nul
9 f b6 Y( h$ d) m0 V9 H7 B% L' d9 Z
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6129" -f *+0:6129:TCP -n BLOCK -x >nul
$ A; h! h6 M' a
ipseccmd -w REG -p "HFUT_SECU" -r "Block ICMP/255" -f *+0:255:ICMP -n BLOCK -x >nul
% W p! {; H( U, P
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/43958" -f *+0:43958:TCP -n BLOCK -x >nul
6 j& N- y; t5 t; t% G2 i1 b
echo 关闭流行危险端口…………OK!
# o! ^. n4 x' c) _$ }+ {
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/20034" -f *+0:20034:TCP -n BLOCK -x >nul
3 Q6 R b4 k& [$ B) Y" {5 m& V
echo 关闭木马NetBus Pro开放的端口…………OK!
) A1 u; U- M) |6 j9 c3 s
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1092" -f *+0:1092:TCP -n BLOCK -x >nul
1 X6 e) D) `' Y
echo 关闭蠕虫LoveGate开放的端口…………OK!
1 L1 O# v- _" a6 @" @
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/3996" -f *+0:3996:TCP -n BLOCK -x >nul
* A! J' E. U9 d3 T7 Y7 z
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/4060" -f *+0:4060:TCP -n BLOCK -x >nul
, }0 m% m6 T, b7 A1 ~3 ?& }
echo 关闭木马RemoteAnything开放的端口…………OK!
* @; J1 n/ T4 a$ i" f
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/4590" -f *+0:4590:TCP -n BLOCK -x >nul
: p' T. ]: w% t0 g1 o0 n7 k
echo 关闭木马ICQTrojan开放的端口…………OK!
, f0 l9 ~- r7 ?; q. u
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1080" -f *+0:1080:TCP -n BLOCK -x >nul
! w5 W" F& e6 U: e, T& Q. J
echo 禁止代理服务器扫描…………OK!
+ Z( o/ ^4 N& `4 N9 D- S% `% ?) Z
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/113" -f *+0:113:TCP -n BLOCK -x >nul
. Y: a1 y7 M/ ~9 `" V4 O
echo 禁止Authentication Service服务…………OK!
! l x5 I. c) s. d+ `" W* f, i
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/79" -f *+0:79:TCP -n BLOCK -x >nul
" P( W; ?7 s. y& H( R
echo 禁止Finger扫描…………OK！
% ?6 m6 P3 g' l# @
ipseccmd -w REG -p "HFUT_SECU" -r "Block UDP/53" -f *+0:53:UDP -n BLOCK -x >nul
- ]% |- K" `& K9 _* }' _. F
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/53" -f *+0:53:TCP -n BLOCK -x >nul
2 A2 n" ?' ]% @$ \0 x
echo 禁止区域传递（TCP），欺骗DNS（UDP）或隐藏其他的通信…………OK!
; y) `0 u! R1 V* {' P5 W! b6 c
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/707" -f *+0:707:TCP -n BLOCK -x >nul
, d& [8 H* y- q/ L
echo 关闭nachi蠕虫病毒监听端口…………OK!
3 @8 K/ p' f. U8 p7 V
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/808" -f *+0:808:TCP -n BLOCK -x >nul
1 b; Y) y( B4 ~& k, M
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/23" -f *+0:23:TCP -n BLOCK -x >nul
* e, t3 D4 ^* d
echo 关闭Telnet 和木马Tiny Telnet Server监听端口…………OK!
5 q" t0 R, _5 B
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/520" -f *+0:520:TCP -n BLOCK -x >nul
& r* l: |* X7 ?7 j) q5 i
echo 关闭Rip 端口…………OK！
5 t! `3 X' j( g* S
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1999" -f *+0:1999:TCP -n BLOCK -x >nul
( ]% C& g+ `! j2 `: }9 B* m. g
echo 关闭木马程序BackDoor的默认服务端口…………OK！
7 f- U1 ~" h+ I, }& F4 c8 [
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2001" -f *+0:2001:TCP -n BLOCK -x >nul
) d0 l3 g8 c6 Z8 n3 u" s6 t! w. }
echo 关闭马程序黑洞2001的默认服务端口…………OK!
- x9 |: G; F4 ]( E u
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2023" -f *+0:2023:TCP -n BLOCK -x >nul
3 N# ^6 e5 [* ^
echo 关闭木马程序Ripper的默认服务端口…………OK!
' x3 S s5 k7 M! X- Q1 }' b6 M$ ?
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2583" -f *+0:2583:TCP -n BLOCK -x >nul
7 r# t7 H$ P6 h6 g" f0 @
echo 关闭木马程序Wincrash v2的默认服务端口…………OK！
* z( u" v0 g2 |( i5 ^ T
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/3389" -f *+0:3389:TCP -n BLOCK -x >nul
8 t6 z- U+ a2 T0 |2 C
echo 关闭Windows 的远程管理终端（远程桌面）监听端口…………OK！
' M, n' v$ X# S( Z
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/4444" -f *+0:4444:TCP -n BLOCK -x >nul
) I3 q6 Y8 ~* O3 z+ {' ^0 ]
echo 关闭msblast冲击波蠕虫监听端口…………OK!
5 H2 z( i, i/ ^$ B" `% V( E+ i
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/4899" -f *+0:4899:TCP -n BLOCK -x >nul
: P8 v1 ?7 U$ [) M8 H% n
echo 关闭远程控制软件（remote administrator)服务端口…………OK!
" V ^$ f0 U0 I) `
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5800" -f *+0:5800:TCP -n BLOCK -x >nul
; z6 r n/ T/ O/ G) i- E
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5900" -f *+0:5900:TCP -n BLOCK -x >nul
) ^/ Q8 u- B0 i" J
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/8888" -f *+0:8888:TCP -n BLOCK -x >nul
9 g. j- G, F3 i
echo 关闭远程控制软件VNC的两个默认服务端口…………OK!
* N. f) o0 N. E7 P8 g) Q9 ]
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6129" -f *+0:6129:TCP -n BLOCK -x >nul
6 R" `" z( R I9 M
echo 关闭Dameware服务端默认监听端口（可变！）…………OK!
% R8 E2 }, o# n7 K' i2 V
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6267" -f *+0:6267:TCP -n BLOCK -x >nul
9 }, I% S# x2 S2 |8 Y$ D# r- J
echo 关闭木马广外女生的默认服务端口…………OK!
i3 { ]; }, N2 C/ o
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/660" -f *+0:660:TCP -n BLOCK -x >nul
6 H8 O6 \& x9 }& t" p' a# l
echo 关闭木马DeepThroat v1.0 - 3.1默认服务端口…………OK!
8 _: Q9 J% o! N2 F
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6671" -f *+0:6671:TCP -n BLOCK -x >nul
+ z: L9 G5 E" z: S6 t
echo 关闭木马Indoctrination默认服务端口…………OK!
9 L X) P/ `8 L- \
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6939" -f *+0:6939:TCP -n BLOCK -x >nul
/ ?% F1 m. x5 B" I- X% F4 g
echo 关闭木马PRIORITY默认服务端口…………OK!
; M; c# U- t( P5 X- Y
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7306" -f *+0:7306:TCP -n BLOCK -x >nul
" L$ H8 d( A8 L8 s
echo 关闭木马网络精灵默认服务端口…………OK!
5 K V) A( e) [. V6 W6 S
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7511" -f *+0:7511:TCP -n BLOCK -x >nul
. Z7 E/ G' X1 k+ `9 X3 y1 T
echo 关闭木马聪明基因的默认连接端口…………OK!
3 |! F" J- l" _" g- P& v. x
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7626" -f *+0:7626:TCP -n BLOCK -x >nul
6 ]+ V9 _7 Y# |5 q ]2 I
echo 关闭木马冰河默认端口(注意可变！)…………OK!
$ ?) [) x" d0 a+ w! @; v
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/8011" -f *+0:8011:TCP -n BLOCK -x >nul
9 U [1 |' ^1 _
echo 关闭木马WAY2.4默认服务端口…………OK！
* I7 j* s8 X9 @! ?8 _
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/9989" -f *+0:9989:TCP -n BLOCK -x >nul
' N( ?0 X- A8 `/ a2 M
echo 关闭木马InIkiller默认服务端口…………OK!
8 t6 A7 B i1 n* |- U" Y# B8 j: }
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/19191" -f *+0:19191:TCP -n BLOCK -x >nul
: G: @% S0 V5 X q, o" l
echo 关闭木马兰色火焰默认开放的telnet端口…………OK!
3 Q$ H o& ]1 ^& a) G5 V5 G3 U
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1029" -f *+0:1029:TCP -n BLOCK -x >nul
( V1 ^% \9 Y! e- k4 C
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/20168" -f *+0:20168:TCP -n BLOCK -x >nul
* A' i& j4 J* A1 |* U8 C0 g, ]( d, M
echo 关闭lovegate 蠕虫所开放的两个后门端口…………OK!
! |* O4 g; J3 n7 T( b5 Y- q1 v
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/23444" -f *+0:23444:TCP -n BLOCK -x >nul
. S; `8 T9 e0 W8 y
echo 关闭木马网络公牛默认服务端口…………OK!
: X: V7 F- Z1 P& R5 @' {# i+ V# _
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/27374" -f *+0:27374:TCP -n BLOCK -x >nul
: J, Z0 e, I, @) r. x
echo 关闭木马SUB7默认服务端口…………OK!
: y2 ?% ~: w a( Q3 n* k$ B
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/30100" -f *+0:30100:TCP -n BLOCK -x >nul
4 f4 S5 Q" w, h, h4 J- v
echo 关闭木马NetSphere默认的服务端口…………OK!
: b; ~9 z' [/ S5 |' ]
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/31337" -f *+0:31337:TCP -n BLOCK -x >nul
( Z2 L# D) H( `! T
echo 关闭木马BO2000默认服务端口…………OK!
. ], n1 S: d4 s
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/45576" -f *+0:45576:TCP -n BLOCK -x >nul
* S% w% y5 n4 i8 A8 m8 ^
echo 关闭代理软件的控制端口…………OK!
# Y" L# v. R2 {% x4 Y
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/50766" -f *+0:50766:TCP -n BLOCK -x >nul
- t% Y' A3 S8 T2 H* h' {
echo 关闭木马Schwindler默认服务端口…………OK!
' }# w. m r+ B- n! L$ Z6 v0 V: ^
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/61466" -f *+0:61466:TCP -n BLOCK -x >nul
/ _% ^2 Z. y: l, E; q
echo 关闭木马Telecommando默认服务端口…………OK!
8 P, Y/ R; s, y$ F8 i" ~! J5 c
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/31338" -f *+0:31338:TCP -n BLOCK -x >nul
7 n' T( I1 e$ }0 u- r+ l
echo 关闭木马Back Orifice默认服务端口…………OK!
9 I m3 W' n# h; w" p. T1 w
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/8102" -f *+0:8102:TCP -n BLOCK -x >nul
( |# |( Y1 K: t" f9 |
echo 关闭木马网络神偷默认服务端口…………OK!
. B' F) a; {+ P, P4 g+ [: a0 k9 [
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2000" -f *+0:2000:TCP -n BLOCK -x >nul
5 [ f1 U! s- [+ r( f
echo 关闭木马黑洞2000默认服务端口…………OK!
( {' R; v. k3 ?7 y
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/31339" -f *+0:31339:TCP -n BLOCK -x >nul
2 t# P5 B9 C7 m4 l( L0 O1 A
echo 关闭木马NetSpy DK默认服务端口…………OK!
* Y4 R# }) g, c# H0 m
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2001" -f *+0:2001:TCP -n BLOCK -x >nul
$ z6 B3 B/ c5 m C! ?% I( U
echo 关闭木马黑洞2001默认服务端口…………OK!
+ F. Y8 Q! [) K3 T6 F
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/31666" -f *+0:31666:TCP -n BLOCK -x >nul
G) \) K/ d+ u8 a0 q# f
echo 关闭木马BOWhack默认服务端口…………OK!
: u7 Z# H5 ~5 j) [; Q
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/34324" -f *+0:34324:TCP -n BLOCK -x >nul
! I5 F. E2 o; o2 l
echo 关闭木马BigGluck默认服务端口…………OK!
: ?* A" a6 E$ ~8 K0 R8 A* w1 Y
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7306" -f *+0:7306:TCP -n BLOCK -x >nul
, j4 {+ u& X+ V4 \; S
echo 关闭木马网络精灵3.0，netspy3.0默认服务端口…………OK!
' r+ u+ M' W2 x; d- _ m- L
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/40412" -f *+0:40412:TCP -n BLOCK -x >nul
) \, R* R( t0 ~# }; |
echo 关闭木马The Spy默认服务端口…………OK!
) @* |& D* R5 e
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/40421" -f *+0:40421:TCP -n BLOCK -x >nul
' G' l; D# P: d) ~2 g; U k
echo 关闭木马Masters Paradise默认服务端口…………OK!
1 a' m0 k7 }) J6 {. R9 o3 {9 w& j
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/8011" -f *+0:8011:TCP -n BLOCK -x >nul
( q% b2 G, v4 l' t! z: ~; N
echo 关闭木马wry，赖小子，火凤凰默认服务端口…………OK!
4 V# f/ D& K' ?0 b' w
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/40422" -f *+0:40422:TCP -n BLOCK -x >nul
( j" Q: v: g3 A. W
echo 关闭木马Masters Paradise 1.x默认服务端口…………OK!
% g2 i- m) N4 T* w
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/23444" -f *+0:23444:TCP -n BLOCK -x >nul
( c* U% k' j; b# }5 ^! R( v" ~5 f
echo 关闭木马网络公牛，netbull默认服务端口…………OK!
! R' _* U7 a- Z M. E5 _3 d
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/40423" -f *+0:40423:TCP -n BLOCK -x >nul
" n1 v( O ~6 E' s; ~ V
echo 关闭木马Masters Paradise 2.x默认服务端口…………OK!
8 o8 g6 \. [5 l V) A& N' e
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/23445" -f *+0:23445:TCP -n BLOCK -x >nul
; Z2 g4 R- M0 H& V
echo 关闭木马网络公牛，netbull默认服务端口…………OK!
: g$ @) s2 {3 y: b" t
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/40426" -f *+0:40426:TCP -n BLOCK -x >nul
- w- _, P/ t% J
echo 关闭木马Masters Paradise 3.x默认服务端口…………OK!
" B1 O0 i2 m8 T0 t f8 h0 U
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/50505" -f *+0:50505:TCP -n BLOCK -x >nul
& |" N% r6 _ g7 I( y# G
echo 关闭木马Sockets de Troie默认服务端口…………OK!
- u- _ u) b6 ~
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/27374" -f *+0:27374:TCP -n BLOCK -x >nul
/ R& ]. s G- [. {: w
echo 关闭木马Sub Seven 2.0+，77，东方魔眼默认服务端口…………OK!
/ G& x; p- Z, w9 c
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/50766" -f *+0:50766:TCP -n BLOCK -x >nul
$ l/ j7 K, \) Y2 @% l
echo 关闭木马Fore默认服务端口…………OK!
# m. g+ o+ h ~5 D; h
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/53001" -f *+0:53001:TCP -n BLOCK -x >nul
5 ?! l; P3 w. G- ]0 a& j
echo 关闭木马Remote Windows Shutdown默认服务端口…………OK!
) J+ a2 ^9 N" S
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/61466" -f *+0:61466:TCP -n BLOCK -x >nul
* \: w+ ?6 q1 f& }( [+ k
echo 关闭木马Telecommando默认服务端口…………OK!
( W" `) |/ R" r( x' B. K
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/121" -f *+0:121:TCP -n BLOCK -x >nul
. J$ N, g; {; U! S5 x
echo 关闭木马BO jammerkillahV默认服务端口…………OK!
5 x% a7 |* g9 C- o( Q/ q" ?
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/666" -f *+0:666:TCP -n BLOCK -x >nul
0 ~% Y! T4 B0 F6 H1 L
echo 关闭木马Satanz Backdoor默认服务端口…………OK!
- U0 z( A8 h4 ~' e
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/65000" -f *+0:65000:TCP -n BLOCK -x >nul
4 `3 }. O+ ]0 g! b
echo 关闭木马Devil默认服务端口…………OK!
8 _1 [: ~$ q6 v, P& ?* q
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1001" -f *+0:1001:TCP -n BLOCK -x >nul
" {6 U, _7 J# ]; f- n
echo 关闭木马Silencer默认服务端口…………OK!
/ V1 J+ d- _, D2 C3 l" J5 A% u
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6400" -f *+0:6400:TCP -n BLOCK -x >nul
Y" j$ i, b- @8 L
echo 关闭木马The tHing默认服务端口…………OK!
0 ]- v- O& P8 T7 O, c. q
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1600" -f *+0:1600:TCP -n BLOCK -x >nul
8 V5 J. S: ~) K6 ?% C! W/ b4 L2 K; k
echo 关闭木马Shivka-Burka默认服务端口…………OK!
' u6 ]! K. t; u" K
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/12346" -f *+0:12346:TCP -n BLOCK -x >nul
3 s+ b0 Q; c3 l9 w ^( [
echo 关闭木马NetBus 1.x默认服务端口…………OK!
5 I9 I( _% F3 g
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1807" -f *+0:1807:TCP -n BLOCK -x >nul
9 s5 u. u4 Y: W3 ]/ |2 ?
echo 关闭木马SpySender默认服务端口…………OK!
6 h7 O8 m+ S- T \8 Q M
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/20034" -f *+0:20034:TCP -n BLOCK -x >nul
Q) n! W! N$ h! ^5 s
echo 关闭木马NetBus Pro默认服务端口…………OK!
# |# j3 w& c- ^. f2 o ~! F
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1981" -f *+0:1981:TCP -n BLOCK -x >nul
. w. n n$ S' b) B
echo 关闭木马Shockrave默认服务端口…………OK!
- N% V' h2 E; N' Q& R; E& k5 a
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1243" -f *+0:1243:TCP -n BLOCK -x >nul
- N/ k$ k; g3 E) |$ U
echo 关闭木马SubSeven默认服务端口…………OK!
& `+ ?- [/ t" X: t: z+ i
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1001" -f *+0:1001:TCP -n BLOCK -x >nul
7 c" g3 L: x6 k* s" V9 ^* G: x
echo 关闭木马WebEx默认服务端口…………OK!
8 z0 e: J" d' @( U1 f( P1 M
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/30100" -f *+0:30100:TCP -n BLOCK -x >nul
+ W: w8 k' ~ `2 T" R
echo 关闭木马NetSphere默认服务端口…………OK!
4 A9 a4 m F+ T$ V) W, @# w9 k/ h
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1011" -f *+0:1011:TCP -n BLOCK -x >nul
4 ]; Q) T# x, Z( |. U% W9 c) N! q
echo 关闭木马Doly Trojan默认服务端口…………OK!
6 e0 x% m8 i4 z6 E, n" [
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1001" -f *+0:1001:TCP -n BLOCK -x >nul
6 d& L% x9 p6 v% }3 ~- u
echo 关闭木马Silencer默认服务端口…………OK!
- a. D3 N H4 z* d% ]6 Y8 U
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1170" -f *+0:1170:TCP -n BLOCK -x >nul
k, p; l. A; g7 P2 ~' T- t
echo 关闭木马Psyber Stream Server默认服务端口…………OK!
5 P. M" C- ?% ]# j
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/20000" -f *+0:20000:TCP -n BLOCK -x >nul
' k5 ]9 ?* |* H2 `( T0 [
echo 关闭木马Millenium默认服务端口…………OK!
, Z! i+ ?1 J1 F' i1 [7 e1 s
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1234" -f *+0:1234:TCP -n BLOCK -x >nul
8 O$ R K3 Z, \4 `2 H0 n
echo 关闭木马Ultors Trojan默认服务端口…………OK!
; p c7 ?% d+ w* { M
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/65000" -f *+0:65000:TCP -n BLOCK -x >nul
. c, @: P; ?, L" K
echo 关闭木马Devil 1.03默认服务端口…………OK!
8 o% }$ h$ ]+ R# G: P9 @% b8 E
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1245" -f *+0:1245:TCP -n BLOCK -x >nul
4 R2 Q. a( @ k) `
echo 关闭木马VooDoo Doll默认服务端口…………OK!
7 z6 Y7 \3 G3 V9 Z2 q& O8 m, Q/ I
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7306" -f *+0:7306:TCP -n BLOCK -x >nul
9 e+ d, }: y1 V4 }, }
echo 关闭木马NetMonitor默认服务端口…………OK!
8 j D6 q8 h* H& \* c+ t) P* l
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1492" -f *+0:1492:TCP -n BLOCK -x >nul
& L9 C! F7 L+ Q0 [
echo 关闭木马FTP99CMP默认服务端口…………OK!
* m* r2 {1 `: Q3 }/ @% N' X: f
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1170" -f *+0:1170:TCP -n BLOCK -x >nul
/ d/ p" ?: j* Q0 ~
echo 关闭木马Streaming Audio Trojan默认服务端口…………OK!
) R* q6 F& _) \1 F! I) Y
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1999" -f *+0:1999:TCP -n BLOCK -x >nul
# ?( ?; L9 k- F! y/ ]
echo 关闭木马BackDoor默认服务端口…………OK!
8 ]. x$ W* {+ c# v5 ]) R
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/30303" -f *+0:30303:TCP -n BLOCK -x >nul
; ~9 B, b9 @9 m$ G0 ]
echo 关闭木马Socket23默认服务端口…………OK!
' N9 q6 m$ z9 R. g7 N( H' h
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2001" -f *+0:2001:TCP -n BLOCK -x >nul
' N* Q! M9 H& U
echo 关闭木马Trojan Cow默认服务端口…………OK!
# \/ e" x" w: X9 b6 ? ^# d
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6969" -f *+0:6969:TCP -n BLOCK -x >nul
' B/ w L2 u6 Q: B
echo 关闭木马Gatecrasher默认服务端口…………OK!
+ c/ L2 W& F, e2 v# B
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2023" -f *+0:2023:TCP -n BLOCK -x >nul
) h& O8 P0 C# _
echo 关闭木马Ripper默认服务端口…………OK!
3 }- ^" A0 ?9 s) b
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/61466" -f *+0:61466:TCP -n BLOCK -x >nul
( X n. V8 n) R8 l8 X) V
echo 关闭木马Telecommando默认服务端口…………OK!
/ h7 Y; k2 U- S' u9 Y
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2115" -f *+0:2115:TCP -n BLOCK -x >nul
' n9 V' d; j7 g4 ]
echo 关闭木马Bugs默认服务端口…………OK!
+ c4 @9 t- d. c- q# c# m
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/12076" -f *+0:12076:TCP -n BLOCK -x >nul
# S' ?( H+ D( K' \; K0 w! d1 @
echo 关闭木马Gjamer默认服务端口…………OK!
+ k# f; k3 D" J
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2140" -f *+0:2140:TCP -n BLOCK -x >nul
/ M/ {8 I0 x+ J4 k+ i
echo 关闭木马Deep Throat默认服务端口…………OK!
p: K K' B2 M6 ^0 G
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/4950" -f *+0:4950:TCP -n BLOCK -x >nul
3 W: B+ @: @$ ~& M
echo 关闭木马IcqTrojen默认服务端口…………OK!
1 S. i8 V* {% S" D2 w
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2140" -f *+0:2140:TCP -n BLOCK -x >nul
$ d& _5 T2 g$ T! x6 [) Z
echo 关闭木马The Invasor默认服务端口…………OK!
! |+ D3 T6 h; V- W
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/16969" -f *+0:16969:TCP -n BLOCK -x >nul
& D- ~, S" c9 [" w( W0 f
echo 关闭木马Priotrity默认服务端口…………OK!
- n: ]5 W- H) m6 T* j# e7 |; s" k
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2801" -f *+0:2801:TCP -n BLOCK -x >nul
2 ]& ^" z1 t8 n5 o3 Y7 K* J
echo 关闭木马Phineas Phucker默认服务端口…………OK!
& q# e/ O+ V& k( x; E1 a
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1245" -f *+0:1245:TCP -n BLOCK -x >nul
1 B8 }) o# @' [8 ] ]$ N' ?5 L
echo 关闭木马Vodoo默认服务端口…………OK!
# s5 [" m8 `4 C. R- |
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/30129" -f *+0:30129:TCP -n BLOCK -x >nul
. y3 v' T8 N+ n- |! E
echo 关闭木马Masters Paradise默认服务端口…………OK!
8 d) r7 r1 F$ b
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5742" -f *+0:5742:TCP -n BLOCK -x >nul
3 ?% i: f: f/ [% h; U3 L, ^) k
echo 关闭木马Wincrash默认服务端口…………OK!
0 {0 L1 Q5 g8 S' p9 }6 X
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/3700" -f *+0:3700:TCP -n BLOCK -x >nul
5 p! N0 U3 M& C. r
echo 关闭木马Portal of Doom默认服务端口…………OK!
. j3 D j. M9 ~8 g
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2583" -f *+0:2583:TCP -n BLOCK -x >nul
2 C; l8 c5 s+ |
echo 关闭木马Wincrash2默认服务端口…………OK!
l7 {/ x; O% y3 L z3 E
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/4092" -f *+0:4092:TCP -n BLOCK -x >nul
M! Y7 {# t, G
echo 关闭木马WinCrash默认服务端口…………OK!
% L! p* Q" U& F8 j
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1033" -f *+0:1033:TCP -n BLOCK -x >nul
2 M8 x7 |! Z2 W9 G6 g7 ]
echo 关闭木马Netspy默认服务端口…………OK!
+ ~- M% p/ U3 J; w' t: a
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/4590" -f *+0:4590:TCP -n BLOCK -x >nul
7 c# O: K' n4 U. X
echo 关闭木马ICQTrojan默认服务端口…………OK!
: `3 [2 W1 ^8 u$ F
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1981" -f *+0:1981:TCP -n BLOCK -x >nul
4 I: j) g6 D& M$ S; k
echo 关闭木马ShockRave默认服务端口…………OK!
2 E4 B0 S2 j! g: g. X
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5000" -f *+0:5000:TCP -n BLOCK -x >nul
, N, O5 T0 j) U0 b) e0 Q
echo 关闭木马Sockets de Troie默认服务端口…………OK!
) e: ]' \& l& Y# M& q3 u
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/555" -f *+0:555:TCP -n BLOCK -x >nul
3 P6 R4 d* u4 i' q5 }0 ^
echo 关闭木马Stealth Spy默认服务端口…………OK!
( ^0 B1 G: T5 R% Y$ B' M1 d2 g
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5001" -f *+0:5001:TCP -n BLOCK -x >nul
! U5 w5 ?$ `* W7 J4 ~
echo 关闭木马Sockets de Troie 1.x默认服务端口…………OK!
& I! e) Y/ B4 r; g
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2023" -f *+0:2023:TCP -n BLOCK -x >nul
s0 M$ Q( g' `
echo 关闭木马Pass Ripper默认服务端口…………OK!
" N' i6 i% [. g6 W
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5321" -f *+0:5321:TCP -n BLOCK -x >nul
( q; u0 }! Z. C6 T+ m; Q4 A& {# n
echo 关闭木马Firehotcker默认服务端口…………OK!
1 h! n& @) h+ s
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/666" -f *+0:666:TCP -n BLOCK -x >nul
6 F/ Z( M' w6 G% O5 B# `1 R' x
echo 关闭木马Attack FTP默认服务端口…………OK!
) s$ p, F3 J& N' T. o& y+ s
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5400" -f *+0:5400:TCP -n BLOCK -x >nul
% V8 l9 r: e! Z
echo 关闭木马Blade Runner默认服务端口…………OK!
2 Z5 D9 E I/ V4 N& c. G0 C
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/21554" -f *+0:21554:TCP -n BLOCK -x >nul
9 y/ f; r Q& z8 J
echo 关闭木马GirlFriend默认服务端口…………OK!
; c1 I8 ~7 X$ |& K/ ~
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5401" -f *+0:5401:TCP -n BLOCK -x >nul
0 \, ^5 J( B& U( Z, W) {& Y4 {. f0 H$ ~
echo 关闭木马Blade Runner 1.x默认服务端口…………OK!
1 B T' H- {/ w+ X
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/50766" -f *+0:50766:TCP -n BLOCK -x >nul
" Y, c- T6 N; @1 x
echo 关闭木马Fore Schwindler默认服务端口…………OK!
7 U. p+ _9 e) l% Q- v. k: _
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5402" -f *+0:5402:TCP -n BLOCK -x >nul
8 p; ?# |( l7 R+ |8 q
echo 关闭木马Blade Runner 2.x默认服务端口…………OK!
, x8 f" z% T7 X1 M- v4 ^0 A! ]3 F9 _
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/34324" -f *+0:34324:TCP -n BLOCK -x >nul
9 m3 }( u, l1 z- a+ w2 c
echo 关闭木马Tiny Telnet Server默认服务端口…………OK!
$ i/ v& F, X/ k+ z; t
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5569" -f *+0:5569:TCP -n BLOCK -x >nul
: P8 t4 t3 T0 _& w, t
echo 关闭木马Robo-Hack默认服务端口…………OK!
7 v# q7 E' G) v
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/30999" -f *+0:30999:TCP -n BLOCK -x >nul
# V7 V0 Q6 e* n1 w0 s" n7 j
echo 关闭木马Kuang默认服务端口…………OK!
) H- T, E: \+ `! d9 b$ }) h, R
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6670" -f *+0:6670:TCP -n BLOCK -x >nul
% A2 {3 L1 ]+ [
echo 关闭木马DeepThroat默认服务端口…………OK!
+ Y, m: q ?; v1 ^
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/11000" -f *+0:11000:TCP -n BLOCK -x >nul
+ t; i5 l8 @9 S0 M% G8 }9 s" m
echo 关闭木马Senna Spy Trojans默认服务端口…………OK!
4 E3 O# f0 d% d A* H
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6771" -f *+0:6771:TCP -n BLOCK -x >nul
; }6 W$ S# }- S5 K4 S+ ~3 V
echo 关闭木马DeepThroat默认服务端口…………OK!
% C4 {$ Z% ~- X: Z1 G
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/23456" -f *+0:23456:TCP -n BLOCK -x >nul
( {" v$ Z8 E2 Z3 U* `
echo 关闭木马WhackJob默认服务端口…………OK!
! U& z+ t5 P# d1 F0 O+ y
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6969" -f *+0:6969:TCP -n BLOCK -x >nul
/ @8 C9 m' m0 K# D* P- \5 K4 Z5 q
echo 关闭木马GateCrasher默认服务端口…………OK!
( R! j; z) Z8 P E) T: k4 F4 u
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/555" -f *+0:555:TCP -n BLOCK -x >nul
. H% _8 n0 a: ^$ W* }
echo 关闭木马Phase0默认服务端口…………OK!
9 o. Q& ^4 s6 k+ F
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6969" -f *+0:6969:TCP -n BLOCK -x >nul
8 {* s3 |; c3 D/ L
echo 关闭木马Priority默认服务端口…………OK!
0 Z' z( `0 S; o/ V' q
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5400" -f *+0:5400:TCP -n BLOCK -x >nul
2 y8 R1 m: B" L @0 ~
echo 关闭木马Blade Runner默认服务端口…………OK!
' g! A$ _+ q; R" N: B ~3 _6 s
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7000" -f *+0:7000:TCP -n BLOCK -x >nul
* s& i: t9 c, b( Z3 Q
echo 关闭木马Remote Grab默认服务端口…………OK!
: e5 Q2 Q1 v( j/ Q: |# G5 Q! @) l
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/4950" -f *+0:4950:TCP -n BLOCK -x >nul
* `( F- v5 E* V# W- g/ t
echo 关闭木马IcqTrojan默认服务端口…………OK!
- d( R$ A) N5 Z( s" G% ^3 m
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7300" -f *+0:7300:TCP -n BLOCK -x >nul
( @7 S3 a$ S2 h
echo 关闭木马NetMonitor默认服务端口…………OK!
2 v5 @+ @* a: J
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/9989" -f *+0:9989:TCP -n BLOCK -x >nul
- o3 d6 w* e5 Z3 i& N3 V* B: U/ f
echo 关闭木马InIkiller默认服务端口…………OK!
# V# P( A* |: ?3 X6 ^
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7301" -f *+0:7301:TCP -n BLOCK -x >nul
/ t# N, v3 @3 X) h
echo 关闭木马NetMonitor 1.x默认服务端口…………OK!
0 G. L1 [, a0 e! z3 v! w) s e
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/9872" -f *+0:9872:TCP -n BLOCK -x >nul
: o/ F6 b! B: W4 @7 c
echo 关闭木马Portal Of Doom默认服务端口…………OK!
( ]/ K$ Z8 c/ _- ~& N
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7306" -f *+0:7306:TCP -n BLOCK -x >nul
) h4 V% k! f7 U$ w) N
echo 关闭木马NetMonitor 2.x默认服务端口…………OK!
v, R) ^# K: u \/ P' k# R
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/11223" -f *+0:11223:TCP -n BLOCK -x >nul
" d0 B9 |1 ^3 |
echo 关闭木马Progenic Trojan默认服务端口…………OK!
( m- w0 Z! y8 l2 L4 E9 y
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7307" -f *+0:7307:TCP -n BLOCK -x >nul
* T; D, m w& l6 r( X; `
echo 关闭木马NetMonitor 3.x默认服务端口…………OK!
& P2 k! F9 i! ^! t0 a% ^+ s
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1999" -f *+0:1999:TCP -n BLOCK -x >nul
" _: {+ o: Y( K
echo 关闭木马BackDoor默认服务端口…………OK!
% g- `0 w6 b E- f) R
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5800" -f *+0:5800:TCP -n BLOCK -x >nul
5 S5 E2 q9 W8 G. \: {9 j" Z0 B
echo 关闭远程控制软件VNC默认服务端口…………OK!
, S( q N# e2 _6 Z( ^9 ^" K
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5900" -f *+0:5900:TCP -n BLOCK -x >nul
- y! F, k. Y Q1 J
echo 关闭远程控制软件VNC默认服务端口…………OK!
% L0 K9 G3 F5 [ c, I/ }% J, A& m
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/22222" -f *+0:22222:TCP -n BLOCK -x >nul
2 M) M! I6 O1 X0 h4 t" C4 I
echo 关闭木马Prosiak 0.47默认服务端口…………OK!
9 e$ o9 U8 D. ]' T+ f1 Q _
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7626" -f *+0:7626:TCP -n BLOCK -x >nul
' `* M7 ]( G7 h- W! b- W
echo 关闭木马冰河默认服务端口…………OK!
, W7 b# `% \( U7 u! t; N
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/4444" -f *+0:4444:TCP -n BLOCK -x >nul
5 s# a/ {' _+ b% U+ G/ N
echo 关闭木马msblast默认服务端口…………OK!
+ Y2 j8 ~5 n0 V5 T
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7308" -f *+0:7308:TCP -n BLOCK -x >nul
& S" e2 {* t" K
echo 关闭木马NetMonitor 4.x默认服务端口…………OK!
2 l4 F5 I0 H" x. A2 _
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6129" -f *+0:6129:TCP -n BLOCK -x >nul
( ]5 ~" b0 u+ z
echo 关闭远程控制软件（dameware nt utilities)默认服务端口…………OK!
: _% {" j/ Q- F9 B8 ]2 d
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2023" -f *+0:2023:TCP -n BLOCK -x >nul
! w- I0 {! {$ Z1 j
echo 关闭木马Ripper默认服务端口…………OK!
: y! }5 R, V8 j! d$ A
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1245" -f *+0:1245:TCP -n BLOCK -x >nul
5 O4 |6 N4 j- ]6 J9 b. O: o
echo 关闭木马VooDoo Doll默认服务端口…………OK!
! l2 S6 e' N5 v# A
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/121" -f *+0:121:TCP -n BLOCK -x >nul
( G5 d7 q$ n, B! Z
echo 关闭木马BO jammerkillahV默认服务端口…………OK!
) |! I2 C f; y
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/456" -f *+0:456:TCP -n BLOCK -x >nul
; a! V, Y; N9 O8 r9 l
echo 关闭木马Hackers Paradise默认服务端口…………OK!
+ e, q/ @0 b! ]
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/555" -f *+0:555:TCP -n BLOCK -x >nul
' a g1 \6 p) N
echo 关闭木马Stealth Spy默认服务端口…………OK!
+ \% G* w" ?6 P: W" ~' F
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/666" -f *+0:666:TCP -n BLOCK -x >nul
8 b1 U$ h- L; ^& b0 f
echo 关闭木马Satanz Backdoor默认服务端口…………OK!
% b4 G- B3 ^. j' w0 Q5 M
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1001" -f *+0:1001:TCP -n BLOCK -x >nul
+ V% S' p" |4 z1 R. {3 f: Z
echo 关闭木马Silencer默认服务端口…………OK!
% l. h' S I/ d8 F3 S8 R b
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/1033" -f *+0:1033:TCP -n BLOCK -x >nul
9 G" D6 J7 M' o/ \$ n9 ]
echo 关闭木马Netspy默认服务端口…………OK!
1 Z8 u( b5 L: J( s% p* `! g. n) ^
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7000" -f *+0:7000:TCP -n BLOCK -x >nul
& C: Y" n# H# g
echo 关闭木马Remote Grab默认服务端口…………OK!
9 p* V2 i. i. {
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7300 " -f *+0:7300:TCP -n BLOCK -x >nul
0 {5 k. q8 x. H9 d$ d+ g& }5 t( g
echo 关闭木马NetMonitor默认服务端口…………OK!
. t: h; x) q1 z+ n$ Y+ E) `
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/23456 " -f *+0:23456:TCP -n BLOCK -x >nul
; O' \( ~/ e8 P D
echo 关闭木马Ugly FTP默认服务端口…………OK!
6 j' _7 `2 A$ r1 c5 {0 D
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/23456 " -f *+0:23456:TCP -n BLOCK -x >nul
1 K$ q8 d v' _7 N
echo 关闭木马Ugly FTP默认服务端口…………OK!
! ~/ l/ z" ?3 W; X
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/30100 " -f *+0:30100:TCP -n BLOCK -x >nul
3 V" F @* T: `9 ^" {
echo 关闭木马NetSphere默认服务端口…………OK!
, \2 H8 K7 p2 e3 P) d
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/9872" -f *+0:9872:TCP -n BLOCK -x >nul
5 Y [# H8 s' {7 S! l/ \" T( ~
echo 关闭木马Portal of Doom默认服务端口…………OK!
; }" i" ^+ \& d
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/9899" -f *+0:9899:TCP -n BLOCK -x >nul
0 F+ I1 `9 P. Z5 A6 F/ ~
echo 关闭木马iNi-Killer默认服务端口…………OK!
2 ]) }% H$ K, X) \" D$ c
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/50505" -f *+0:50505:TCP -n BLOCK -x >nul
5 D; E5 ]2 L) J q) a0 ~' @
echo 关闭木马Sockets de Troie默认服务端口…………OK!
& y- v4 [! z5 p" j) Q+ F
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/6939" -f *+0:6939:TCP -n BLOCK -x >nul
( `2 l3 n1 X. y
echo 关闭木马Indoctrination默认服务端口…………OK!
# u4 Q5 I: ]# x X' ~( g
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/11000" -f *+0:11000:TCP -n BLOCK -x >nul
. o3 ]' G( S4 R4 ?8 F2 E
echo 关闭木马Senna Spy默认服务端口…………OK!
. o5 j% y0 J$ J" Z. u
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/12223" -f *+0:12223:TCP -n BLOCK -x >nul
8 h; ^; {7 m* N p+ p. n! d e
echo 关闭木马Hack?99 KeyLogger默认服务端口…………OK!
$ c0 W# ~% v* A- S8 H( }
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/12362" -f *+0:12362:TCP -n BLOCK -x >nul
; D2 g; w" b: [4 a! \
echo 关闭木马Whack-a-mole 1.x默认服务端口…………OK!
: I/ g# u0 M( q8 U+ s, I# f+ |% g$ M/ o
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/20000" -f *+0:20000:TCP -n BLOCK -x >nul
) `/ m. {8 T" Z) y' k
echo 关闭木马Millenium默认服务端口…………OK!
- F2 U7 I& t2 J* m+ n/ R7 C5 Y
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2583" -f *+0:2583:TCP -n BLOCK -x >nul
, t, Z7 P1 v# s/ n* G# M
echo 关闭木马Wincrash v2默认服务端口…………OK!
0 B; P9 @ o% w3 @; g
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/53001" -f *+0:53001:TCP -n BLOCK -x >nul
( f3 C5 h2 V& H5 T( } o" D% E, [
echo 关闭木马Remote Windows Shutdown默认服务端口…………OK!
( ~; m+ z" y# P& [4 @
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/7789" -f *+0:7789:TCP -n BLOCK -x >nul
) N6 \0 j" s+ @) |+ K( ^
echo 关闭木马ICKiller默认服务端口…………OK!
" p0 k+ Y! W$ H- w$ @; X7 C& E
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/40426" -f *+0:40426:TCP -n BLOCK -x >nul
$ `. u& ~- r* R; H+ Q% }' g2 X; V
echo 关闭木马Masters Paradise 3.x默认服务端口…………OK!
0 A, K0 o% ^3 c1 q3 N3 c
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/5569" -f *+0:5569:TCP -n BLOCK -x >nul
# |, v* v1 M8 N* S0 U- z9 v0 n
echo 关闭木马RoboHack默认服务端口…………OK!
9 {" Y+ L0 T! I y" y4 P, a6 G
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/8000" -f *+0:8000:TCP -n BLOCK -x >nul
f6 Z" I; I, b: P! M' y" f7 s
echo 关闭木马huigezi默认服务端口…………OK!
7 R2 Y( G* p# A$ I8 c
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/9872" -f *+0:9872:TCP -n BLOCK -x >nul
# ^& ^+ m4 M- O& y$ v- c
echo 关闭木马Portal of Doom默认服务端口…………OK!
+ l9 Z( D& H; {4 ~5 B* Q+ C7 L
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2005" -f *+0:2005:TCP -n BLOCK -x >nul
/ \6 t4 }3 k' e1 Q7 l( `0 X
echo 关闭木马黑洞2005默认服务端口…………OK!
- z! N+ X9 A0 [" s6 k4 u
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/2000" -f *+0:2000:TCP -n BLOCK -x >nul
0 D ^' h+ c7 n, j0 l: F! N7 J' y& {
echo 关闭彩虹桥1.2默认端口…………OK!
) L. n& ?- K" P q" b- \
ipseccmd -w REG -p "HFUT_SECU" -r "Block TCP/9999" -f *+0:9999:TCP -n BLOCK -x >nul
9 S- H7 O* A. d: ?" \4 V" _
echo 关闭huigezi映射默认端口…………OK!
6 s) d$ ~& R$ e1 E# [) h
ipseccmd -w REG -p "HFUT_SECU" -x >nul
# U& x& U5 v5 d
gpupdate >nul
0 r( V* N# l% c5 _8 d( ^
echo.
6 d3 ~0 N m9 P: Y
echo “拒绝服务”安全协议全部设置完毕！您的系统可以免受流行蠕虫病毒及典型木马后门的侵扰！
]' k+ E$ P+ P6 E7 W2 y1 P8 p
echo “拒绝服务”提醒您注意升级操作系统和杀毒软件！
% x0 w. `2 t U% b
echo “拒绝服务”版网络安全协议你已经完全设置完成了！请重新启动你的计算机！
/ f6 k1 }0 m( @4 N
echo 最新的木马端口出来偶会及时更新。如果有木马端口未设，请来信告之！
E `$ r% f9 A% y/ m E% e% s+ \
echo
& e' H6 d9 v* F& f
echo.
! C9 e) y" C/ d# | z4 k3 E: M
echo 请按任意键退出！
- s) u8 n/ R/ i6 z2 d! R- l! i
pause>nul
3 _* f r$ {4 L; A* P0 }
4 y% c# m6 D9 }1 r1 D$ ?9 j, F
8 \$ T! ]8 }6 @5 h- j3 Z w ^
第七招：威金病毒批处理专杀
. _8 j2 ^" }* h
“威金”病毒主要通
过网络共享传播，病毒会感染电脑中所有的.EXE可执行文件，传播速度十分迅速。“威金”病毒运行后，修改注册表自启动项，以使自己随系统一起运行，向系统文件目录下生成以下病毒文件：
( k* ] k( Q" a; ]# o) Q/ \+ K1 T5 Y
Program Files\svhost32.exe
; b5 d! e0 X6 O: ?6 M
Program Files\micorsoft\svhost32.exe
- d0 [, j* h6 P- A9 y& B
windows\explorer.exe
4 |/ k. c H( _" a& V4 g
windows\logo1_exe
- Y( c: L1 T" W1 \: x, R- w1 P
windows\rundll32.exe
W, f; c0 v* Z2 j
windows\rundl132.exe
b, o7 T- `6 F u! {+ c3 p$ r
windows\intel\rundl132.exe
# w6 t j/ d/ }4 @* |% S" t
windows\dll.dll
, C" y; h: C: v0 o$ ^
病毒新变种还会自
动从网站下载“天堂杀手”以及“QQ大盗（QQpass）”等10余种木马病毒，企图盗取包括天堂、征途、梦幻西游、传奇等多种流行网游以及QQ的帐号、密码。
2 @" A" [3 U/ Q) |& g3 G D* A N( D
方法如上，复制内容见下（红色部分）
0 ^6 |: }2 x4 R( T
@ECHO OFF
5 t; h) _; o8 N2 j
del c:\winnt\logo1_.exe
5 E1 h/ R6 p" L z4 V- [
del c:\windows\logo1_.exe
1 Z- y4 ^+ a+ H! M4 D9 i
del c:\winnt\0sy.exe
* L" B% ^, F) u9 J+ C' p
del c:\windows\0sy.exe
# c! W4 K8 ^) `
del c:\winnt\1sy.exe
8 ~4 H# n: X. u" L+ E& L& L; g3 J
del c:\windows\1sy.exe
: D/ z+ h. Y5 ~$ u5 \( b7 W+ J
del c:\winnt\2sy.exe
* `+ V# }* ^' T* Y
del c:\windows\2sy.exe
( c+ Y; X+ U1 g7 M8 P& G
del c:\winnt\3sy.exe
7 \2 z# |5 u2 J$ e+ L" F- q+ ]" v1 a
del c:\windows\3sy.exe
. {6 ]$ T" v4 D; F
del c:\winnt\4sy.exe
2 [+ O# n5 @2 U5 l# ^$ v$ f
del c:\windows\4sy.exe
' I7 {3 ]3 M6 [ T4 f5 e
del c:\winnt\5sy.exe
) S# S0 C+ |7 t) t% a' C
del c:\windows\5sy.exe
3 |0 G. Z$ Q5 Q; `' h" P
del c:\winnt\6sy.exe
& z5 l# Q2 a! Y: a4 E
del c:\windows\6sy.exe
# U: g* \- o0 ~3 k: ]$ `8 d$ {5 m. w/ D% M
del c:\winnt\7sy.exe
$ c0 @, y, Y6 b
del c:\windows\7sy.exe
5 J, w- r0 ~% O, {
del c:\winnt\8sy.exe
- L; `% H" Z5 X* n
del c:\windows\8sy.exe
7 ~+ Y& u0 b* S! y% G: U
del c:\winnt\9sy.exe
8 i1 ^% S: E" o$ O' h1 r3 J! V- e
del c:\windows\9sy.exe
, B e5 [% I$ x0 C" F
del c:\winnt\rundl132.exe
+ a; I; |! g+ k% u8 [8 \" X1 \
del c:\windows\rundl132.exe
4 l; Y. o# z* a; E6 q
net share c$ /d
1 D: v7 S( L" q
net share d$ /d
3 F: u7 _ o* T8 n5 m
net share e$ /d
) o4 z+ e( ~5 ^9 e( f
net share F$ /d
3 k' V" }3 g n
net share G$ /d
9 E; ^9 R4 D$ V1 g6 j
net share h$ /d
2 N; f! r0 F2 d% u3 o8 X+ N n
net share i$ /d
2 y" L1 e& V4 j# ?5 q" a# R& P
net share j$ /d
3 r; J+ L* [( X& u, d. X
net share admin$ /d
. O; w& Z1 F! p+ D6 M9 Z
net share ipc$ /d
0 H9 j) q% x( U
del c:\winnt\logo1_.exe
/ p E! s* c( `7 k
del c:\windows\logo1_.exe
$ @( j8 }1 A* S% ]6 |6 w& \0 S: i' w
del c:\windows\vdll.dll
# ~4 p' `# T% Q3 S8 X
del c:\winnt\vdll.dll
) x v3 H; m+ W
del c:\windows\tdll.dll
( o2 T0 g% B' @, U9 I
del c:\winnt\tdll.dll
% t% c/ _) r5 L8 Y7 I# g; Y/ q# J
del c:\windows\dll.dll
& p2 {8 [. \1 r4 L: r0 g3 C
del c:\winnt\dll.dll
$ z6 A5 l* n$ J
del c:\winnt\kill.exe
6 v3 v4 `& z) j, C/ r: p4 J3 H- `
del c:\windows\kill.exe
% F" R# f& @7 L2 X
del c:\winnt\sws32.dll
7 [4 } ?7 n" F/ c0 G1 n3 J2 d
del c:\windows\sws32.dll
4 c$ k/ W( {6 R/ U, s. G) F% U6 G! Y
del c:\winnt\rundl132.exe
5 H- [" R& o0 @& C
del c:\windows\rundl132.exe
/ P9 i0 r5 M; k5 G( w
echo.
, O- g4 O! f4 [$ L8 y
echo.
1 y+ w; a5 ^3 E( X
echo.
0 Y; L# i. `* D4 z9 t+ Q
echo. *****************************
9 y% {* r7 @0 D& s- _ ?2 d v9 c
echo.
$ k$ _+ d8 Q4 Q1 d2 f, n* G, Q
echo. 正在查毒...请不要关闭......
; t0 F+ u0 q1 q$ `1 B* ~3 y) l8 U
echo.
, ~ r" {# v" e; z. ~
echo. *****************************
1 [1 i# ?5 F9 ]& F8 T
echo.
4 O% R7 V; ?9 S& |; T* l2 R/ B
echo.
, J2 n% I5 _' l2 \7 _
echo.
' d* v# Z9 @, w$ P
echo.
& R- K( }3 t( W/ _9 _! s/ N f
ping 127.0.0.1 -n 5
+ n( R" P% [" B) `
del c:\winnt\logo1_.exe
( ^$ p" L, X7 ^0 l7 t+ ?6 F
del c:\windows\logo1_.exe
6 M7 g. h7 P2 _
del c:\windows\vdll.dll
) G1 L( D8 E8 F) `; l9 [6 s; o2 o3 U
del c:\winnt\vdll.dll
5 E! W! ^+ [1 _' u( Z& z: Q
del c:\windows\dll.dll
$ S" D' O c) L- {* V; ]
del c:\winnt\dll.dll
$ u) b4 h$ Q! K) `2 ?) s' T! Q4 s! `
del c:\windows\tdll.dll
! R! q p5 _" d: Y& j/ f: E7 Z% t
del c:\winnt\tdll.dll
& ^1 N/ E/ z! H, {, K3 _! r3 V
del c:\winnt\kill.exe
- o/ v; G- O& k( O' c+ G& @
del c:\windows\kill.exe
/ T- X2 d. f7 ^0 d9 y5 k
del c:\winnt\sws32.dll
[# u! h& _, }1 g+ ~0 C
del c:\windows\sws32.dll
4 r+ d: Q; |& O! [
del c:\winnt\rundl132.exe
u7 J7 U. Y2 W
del c:\windows\rundl132.exe
$ W* u D5 {* @! U
echo.
. C; e" Q. R e, [3 J2 S
echo.
4 p, [; }/ X- @: i& ?8 D0 l
echo.
" U- I* c. v% |
echo. *****************************
* ^6 u+ n1 ~9 K* K( L
echo.
. r7 ~8 }/ \' h4 t5 S
echo. 正在查毒...请不要关闭......
2 X3 m) b7 V, }' s
echo.
6 F: o! o) p$ s6 X: I+ Z
echo. *****************************
/ e r6 J$ o( F; }
echo.
. \4 Y+ B W( ~# j! }
echo.
o7 b3 x1 R/ |8 F: d$ |% Y
echo.
" Q8 G5 K" k" T7 j
echo.
$ q8 a1 s' Y( c4 u
ping 127.0.0.1 -n 5
6 P6 J* d! L5 p' e6 H9 f
del c:\winnt\logo1_.exe
- o" w+ q, T' F% v* r
del c:\windows\logo1_.exe
7 @5 s: w. Q _7 d8 c. ^ o$ m
del c:\windows\vdll.dll
5 o; _4 ~. \4 M
del c:\winnt\vdll.dll
8 q3 _3 e* Y1 E( h
del c:\windows\dll.dll
. w* f3 J- o1 o" P+ @
del c:\winnt\dll.dll
" r/ C! b1 K+ X. o9 r, P
del c:\windows\tdll.dll
/ B5 t* W3 v/ I) m0 h
del c:\winnt\tdll.dll
8 A% \2 N7 E4 n, M' S$ B
del c:\winnt\kill.exe
- m# M9 C1 j+ K* D5 A
del c:\windows\kill.exe
0 C* d/ M$ L* y& x b
del c:\winnt\sws32.dll
6 \/ m+ K% g6 j, ]
del c:\windows\sws32.dll
/ ~5 ^6 e$ O$ X# G
del c:\windows\0sy.exe
; i3 [; K* {) ?% V
del c:\winnt\1sy.exe
7 x3 K+ v6 Q N, `- F
del c:\windows\1sy.exe
! @8 H" ?# z6 ^ h+ ]6 ^
del c:\winnt\2sy.exe
- \ l ^; K: G7 u
del c:\windows\2sy.exe
, C y0 q$ E+ F( G9 x) k
del c:\winnt\3sy.exe
8 Q) C+ X& t1 h. }4 Z4 H2 F
del c:\windows\3sy.exe
" C% u1 L; c$ C
del c:\winnt\4sy.exe
$ A/ f Q# m) O
del c:\windows\4sy.exe
7 V% L" O$ M5 w8 j3 C7 R9 o7 `
del c:\winnt\5sy.exe
- D& s: i7 W3 ]$ {) Y5 v0 a- P
del c:\windows\5sy.exe
J3 a5 w) G" s* B; d
del c:\winnt\6sy.exe
1 R1 i o' h% E' V
del c:\windows\6sy.exe
/ x8 u! m. q% ^6 w% Y/ U
del c:\winnt\7sy.exe
7 c* _0 V0 x, p- v ]
del c:\windows\7sy.exe
9 g# a2 k. x1 d0 G5 i
del c:\winnt\8sy.exe
9 l- ^1 k) T: J) g# u% s9 s5 d/ j
del c:\windows\8sy.exe
* e2 n6 F1 ]0 J
del c:\winnt\9sy.exe
|( i, M6 ]6 A/ a+ o
del c:\windows\9sy.exe
$ i; p: B; W% F f
del c:\winnt\rundl132.exe
0 c/ x! v' F' E4 L5 R
del c:\windows\rundl132.exe
% y& z+ N! E2 Y
del C:\winnt\Logo1_.exe
1 y, Z. f$ G2 \* f) u5 K
del C:\winnt\rundl132.exe
5 g( x3 b V5 g% F/ s5 p* }
del C:\winnt\bootconf.exe
) `; m, J* h% W
del C:\winnt\kill.exe
) a$ D( x1 _ g. v' r
del C:\winnt\sws32.dll
! p7 J, f8 W& g& J/ Z0 i. Q7 t
del C:\winnt\dll.dll
6 x8 P, }( N% e. H: [/ I* g
del C:\winnt\vdll.dll
6 {1 P; ?; ]) Z3 F
del c:\winnt\tdll.dll
; N# o2 r8 E3 e. D2 `/ {; k
del C:\winnt\system32\ShellExt\svchs0t.exe
0 m. P( ?5 l3 U2 I9 N$ f. M" J2 [
del C:\Program Files\Internet Explorer\0SY.exe
4 y+ }6 b9 U O. m' V
del C:\Program Files\Internet Explorer\1SY.exe
$ K$ h, J' i- X! S4 x' L
del C:\Program Files\Internet Explorer\2sy.exe
8 o, G K( v2 |. Q9 Q) f
del C:\Program Files\Internet Explorer\3sy.exe
+ {: D, b) h# b! i6 A: k" C0 S; x" }( h
del C:\Program Files\Internet Explorer\4sy.exe
! f( ]) ~0 R8 _0 k
del C:\Program Files\Internet Explorer\5sy.exe
4 g# ]2 o5 {& F$ a
del C:\Program Files\Internet Explorer\6SY.exe
. T8 @. }7 z* S, _4 U
del C:\Program Files\Internet Explorer\7sy.exe
' t* P7 ?+ i( ?3 M- v6 s
del C:\Program Files\Internet Explorer\8sy.exe
2 N4 K4 E( J4 D( l6 u
del C:\Program Files\Internet Explorer\9sy.exe
+ k& }" n7 S: T( S/ a
del C:\winnt\system32\Logo1_.exe
' x. k M, H. Z8 V2 j
del C:\winnt\system32\rundl132.exe
. X8 ?, ~2 g0 W% l! z$ k
del C:\winnt\system32\bootconf.exe
; }; N3 s/ }( J( _
del C:\winnt\system32\kill.exe
8 N' a. [& O2 E, E
del C:\winnt\system32\sws32.dll
' B, r1 y! E, `
del C:\windows\Logo1_.exe
0 t# |0 |5 W8 Z- W5 ~2 |
del C:\windows\rundl132.exe
6 e7 C3 a- Z+ X# ~+ T% M! O5 u
del C:\windows\bootconf.exe
* B" ^! g ^# o8 d2 O% U
del C:\windows\kill.exe
- J% U- }- K) [$ D
del C:\windows\sws32.dll
; J& _+ O* v: H' j% D7 i* }2 q
del C:\windows\dll.dll
% f1 o" o% t7 i9 e l
del C:\windows\vdll.dll
, O6 v9 r* Q/ t- o: M0 F) _
del c:\windows\tdll.dll
5 g6 T' _# D" D- U# X
del C:\windows\system32\ShellExt\svchs0t.exe
; g: N" N8 b* u; i; x
del C:\windows\system32\Logo1_.exe
# ^- w% O/ t0 ^9 A5 q/ c* i
del C:\windows\system32\rundl132.exe
/ {- X9 G! K) J) F- R! F
del C:\windows\system32\bootconf.exe
+ R" s7 `1 Q0 {5 }
del C:\windows\system32\kill.exe
0 r3 F; W+ y1 N" R# N$ j: d
del C:\windows\system32\sws32.dll
* a( O' @2 Y4 b: \# N
del c:\_desktop.ini /f/s/q/a
# y1 R8 R/ A! x2 H1 ]" I4 h
del d:\_desktop.ini /f/s/q/a
4 w! X0 ]/ p7 ?" S& r) N
del e:\_desktop.ini /f/s/q/a
9 n5 T: i- f/ v- I) `5 F; B
del f:\_desktop.ini /f/s/q/a
$ W. y# l( V4 `& p4 J
del g:\_desktop.ini /f/s/q/a
2 ^: d+ q; D/ x0 c. b! G
del h:\_desktop.ini /f/s/q/a
+ p( H' {3 w0 ?* s, ^6 K8 R
del i:\_desktop.ini /f/s/q/a
" `, P p! ?! T5 L
del j:\_desktop.ini /f/s/q/a
3 k* f$ o4 q8 Y' @3 _ m7 z2 I
del k:\_desktop.ini /f/s/q/a
欢迎光临 捌玖网络工作室 (http://www.89w.org/)
Powered by Discuz! 7.2
