我的 win7 home 的 wininit.exe. svchost.exe 和 lsass.exe 會聽 port 49153 to 49158.
我看過了, 應該不是木馬, 但是為什麼 MS 會開一個可以 telnet 的 port? 要怎麼關掉??
netstat -ano 是長這樣.
代碼:
TCP [::]:135 [::]:0 LISTENING 880
TCP [::]:445 [::]:0 LISTENING 4
TCP [::]:3389 [::]:0 LISTENING 1152
TCP [::]:5357 [::]:0 LISTENING 4
TCP [::]:49153 [::]:0 LISTENING 512
TCP [::]:49154 [::]:0 LISTENING 968
TCP [::]:49155 [::]:0 LISTENING 120
TCP [::]:49156 [::]:0 LISTENING 600
TCP [::]:49157 [::]:0 LISTENING 572
TCP [::]:49158 [::]:0 LISTENING 2264
tcpview
代碼:
svchost.exe 880 TCP 0.0.0.0 135 0.0.0.0 0 LISTENING
System 4 TCP 192.168.13.133 139 0.0.0.0 0 LISTENING
System 4 TCP 192.168.56.1 139 0.0.0.0 0 LISTENING
svchost.exe 1152 TCP 0.0.0.0 3389 0.0.0.0 0 LISTENING
wininit.exe 512 TCP 0.0.0.0 49153 0.0.0.0 0 LISTENING
svchost.exe 968 TCP 0.0.0.0 49154 0.0.0.0 0 LISTENING
svchost.exe 120 TCP 0.0.0.0 49155 0.0.0.0 0 LISTENING
lsass.exe 600 TCP 0.0.0.0 49156 0.0.0.0 0 LISTENING
services.exe 572 TCP 0.0.0.0 49157 0.0.0.0 0 LISTENING
svchost.exe 2264 TCP 0.0.0.0 49158 0.0.0.0 0 LISTENING