eXpress CheckSum Verifier

[?]
for verify (place a file and its .md5 file in the same folder)

eXpress CheckSum Calculator

[?]
for sha-1

SREng

[Name]
SREng / System Repari Engineer

[Need Installation?]
NO

[As a Platform?]
YES

HijackThis

[?]
a secuirty tool
"a free antispyware program for computer experts."

[Author]
"In March 2007, I sold HijackThis to TrendMicro."

[URL]
Google: hijackthis home
both the 2 sites are right, they all tell you the ip: http://216.180.233.162/~merijn/

[Hardware Platform]
X86

[Software Platform (OS)]
WXP+SP2

[Need Installation?]
NO

[Version Recommended]
2.0.0 beta is Latest
1.99.1 is Classic

[?]
hijackthis log tutorial: http://www.spywareinfo.com/~merijn/htlogtutorial.php

LeakOut

[?]
tiny tool by author of trid

[URL]
check that of trid

[Hardware Platform]
X86

[Software Platform (OS)]
WXP+SP2

[Need Installation?]
NO

关闭xp默认共享

尝试: \\10.0.0.2\c$，如打开了，默认共享开着
或者 net share,如图


关掉有5种方法，见:
五板斧封杀Windows操作系统默认共享(图)
http://tech.sina.com.cn/s/2005-04-21/1136589544.shtml
其中net share法最实用

--- net share:
@echo off
net share ipc$ /del
net share admin$ /del
net share c$ /del
net share d$ /del
net share e$ /del
net share f$ /del
但是对于ipc$,结果:
发生系统错误5

拒绝访问

我是Administrator group，不是权限不足，可能是ipc$使用中。又:
"
共享命名管道的资源，在程序之间的通讯过程中该命名管道起着至关重要的作用。在计算机的远程管理期间，以及在查看计算机的共享资源时，使用 IPC$。不能删除该资源。"
虽然服务server可以关，但是那样的话共享也没了，比如和虚拟机的共享。
可以通过注册表，还是算了

以上关闭的共享要打开那么不要加 /del
---

关掉的可能不便之处:
菜鸟请别随意关闭默认共享
http://www.pc120.net.cn/home/hot_text/08475366.htm

Suite Integration Toolkit Executable

.net framework 运行时，不准,deny

sav & zonealarm

upnp&ZoneAlarm

谷歌拼音输入法和zonealarm

1. pinyinimeinstaller autorun


2. pinyindaemon acess trust zone


3. pinyindaemon acess internet


4. 又是autorun. pinyin options

AutoRuns

[?]
Sysinternal 出品。
msconfig的替代品，or最佳搭档伙伴。

[URL]
Google: autoruns microsoft
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/Autoruns.mspx

[Version Recommended]
9.12 is latest

[Need Installation?]
NO

[RunTime]
Writes settings to: Windows registry

symentec/norton antivirus (sav) update

x86升级包和i32升级包的区别?

// boxer 1:
Norton AntiVirus(诺顿)病毒库i64.exe,
Norton AntiVirus(诺顿)病毒库x86.exe,
Norton AntiVirus(诺顿)病毒库i32.exe
I32的更新包不能用于更新SYMANTEC ANTIVIRUS 8.0和7.6企业版的服务器端，但可以更新企业版的客户端。当然，X86就这两者都能更新！
x86是对基于intel处理器的系统的标准缩写。
X与处理器没有任何关系，它是一个对所有*86系统的简单的通配符定义，例如：i386, 586奔腾(pentium)。
i32指32位的操作系统像现在的WinXP、Win98啊什么的都是！
i64指64位的操作系统，像vista就是啦！

像我们一般用户下载i32的就可以了.当然X86的也可以,但不建议.因为那更适合企业版本的用户.

// boxer 2:
x86相当于是完整升级包，它包括所有的升级信息，下载量大，在升级过程中要扫描系统，及确定Norton的安装目录和版本，安装更新的速度较慢
i32相当于是增量升级包，其中不支持一些版本的Norton，下载量少，而且安装更新的速度快。
建议为了安全还是装x86的好

HyperSnap process with firewall

不影响热键比如C-S-W, C-S-S,PrintScreen等等

BlockSite

a firefox addon

http://forum.moztw.org/viewtopic.php?t=15811
http://tieba.baidu.com/f?kz=298439877

Adblock (Plus)

adblock和adblock plus (ABP)的联系和不同
http://addons.mozine.cn/firefox/125/

如何屏蔽使用了 Adblock Plus 的 Firefox 访客
http://www-user.tu-chemnitz.de/~tali/2007/09/04/how-to-block-adblock-user/

Process Explorer

[?]
Sysinternal 出品。
任务管理器的替代品，or最佳搭档伙伴。
功能举例: 进程，右击，window->bring to front.

[URL]
Google: process explorer microsoft
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/ProcessExplorer.mspx

[Version Recommended]
11.04 is latest
File Name: ProcessExplorer.zip
File Size: 1,613,990 bytes

[Need Installation?]
NO

[RunTime]
Writes settings to: Windows registry. I am accepting it as portable on the assumption that it will only be run occasionally during troubleshooting.

[?]
http://www.portablefreeware.com/?id=32#comments
Lego: Since Micro$oft took this great utility over, you can not kill several MS processes, like WPALogon.dll.
Guess why.... ;-) [2007-09-07 00:15]

Thunder process with firewall

normal:



2个广告进程:

thunderminisite:


tipextend:


others:

kankantopsetup:


PPlayerSetup:

ssreader process and firewall

它想做什么?

Flickr Uploadr Process and Firewall

httrack process and firewall