Close the problem that should be noted after XP automatic update

Last year, the snow virus was in the middle. Know that you can see the running virus common sense in the registry HKEY-LOCAL-MacHINE/SOFTWARE/MICROSOFT/Windows/CURRENTVERSION/RUN, and repeatedly want to clear it, the result is counterproductive. I found the famous domestic anti-virus software on the Internet and downloaded the virus to kill it. As a result, it disappeared on its own and it could not solve the problem. Finally, I knew that the virus was called GAMEPASS in the virus information center. I found the Jiangmin killing tool along this name. After ten days or so, it took only two or three minutes to solve it.

From the end of last year to today, it has entered the busiest period of reloading systems. In the middle of the Weijin twice, the panda burned four or five times. I found a lot of ways to deal with it on the Internet (there was no special killing tool when it was flooded), and finally I had to reinstall it. With a special kill, even if Ghost has GHO, the Panda upper body is useless. It is only a full-scale reload, and a partition is not acceptable. It seems that the system is reinstalling all day, and it is frustrating to the limit. Peculiar is a lot of popular viruses, Microsoft, Rising, these genuine software has also increased the intensity of piracy, inexplicably, often prompted information appears, there are insecure factors, according to long-term Internet experience, this is genuine Legally poisoned. So, as you turn off automatic updates for a variety of reasons, what should you do to make your system a little more secure? Please take a look at some of my thoughts. These measures can be found on the Internet. I just concentrate on these scattered measures for you to have a reference. This article was posted on http://bianceng.cn (learning computer)

First, close the port with obvious vulnerability and remote assistance

1. Close port 139: right click on the network neighborhood -- attribute -- Right click on the local connection -- Properties -- Internet Protocol /(TCP /IP) - Properties - Advanced - WINS - Disable NETBiOS on TCP /IP - OK.

2. Right click - Network Neighborhood - Properties /Local Area Connection - Properties, remove the small tick in front of the microsoft web client. Then I also removed the small files of the microsoft network file and printer sharing.

3. Close port 445: Open the registry editor and add a dWord key entry under [HKEY_LOCAL_MacHINE\\SYSTEM\\CurrentControlSet\\Services\\NetBT\\Parameters], named "SmbDeviceEnabled" (without quotes). Set the value to 0.

4. Right-click on my computer and click Properties - Remote to remove the check before allowing remote assistance invitations from this computer.

Second, close sharing:

Right-click "Network Neighborhood" and select "Properties". In the pop-up "Network and Dial-up Connection" window, right-click "Local Area Connection" and select "Properties". After selecting "File and Printer Sharing for Microsoft Networks" from "This connection uses the following selected components", click the "Uninstall" button below and confirm.

Other temporary shutdown methods:

1. Batch self-start method

Open Notepad, enter the following (remember to return at the end of each line):

netshareipc$/delete

netshareadmin$/delete

netsharec$/delete

netshared$/delete

netsharee$/delete

......(You have several hard disk partitions to write a few lines of such commands)

Save as NotShare.bat (note the suffix!), then drag this batch file to "Program" → "Start" item, so that it will run every time it is booted, that is, close the share via the net command.

If you need to open some or some share on that day, just re-edit the batch file (remove the corresponding command line).

2. Right click on a shared item (such as H$) in the "Computer Management" window, select "Stop Sharing" and confirm it will close the share, the sharing icon below it will Disappear, repeat all the items several times to stop sharing.

Note: However, this method does not cure the symptoms. If the machine is restarted, these shares will be restored. This method is more suitable for the server never closed, simple and effective.