{"id":66,"date":"2007-03-30T16:02:01","date_gmt":"2007-03-30T08:02:01","guid":{"rendered":"http:\/\/learn-house.idv.tw\/?p=66"},"modified":"2010-01-16T13:58:07","modified_gmt":"2010-01-16T05:58:07","slug":"cpu100%e8%99%95%e8%a3%a1%e5%a4%a7%e5%85%a8","status":"publish","type":"post","link":"https:\/\/learn-house.idv.tw\/?p=66","title":{"rendered":"CPU100%\u8655\u88e1\u5927\u5168"},"content":{"rendered":"<p>&nbsp;<a href=\"http:\/\/blog.chinaitlab.com\/user1\/66869\/archives\/2005\/27078.html\" target=\"_blank\">\u8cc7\u6599\u4f86\u6e90<\/a><\/p>\n<p><font color=\"#6f0003\"><span class=\"style6\"><\/p>\n<p><font size=\"2\"><\/font><font color=\"#6f0003\"><span class=\"style6\"><\/p>\n<p><font size=\"2\">\u6211\u5011\u5728\u4f7f\u7528 Windows XP\u64cd\u4f5c\u7cfb\u7d71\u7684\u6642\u5019\uff0c\u7528\u8457\u7528\u8457\u7cfb\u7d71\u5c31\u8b8a\u6162\u4e86\uff0c\u4e00\u770b\u300c\u4efb\u52d9\u7ba1\u7406\u5668\u300d\u624d\u767c\u73feCPU\u4f54\u7528\u9054\u5230100%\u3002\u9019\u662f\u600e\u9ebc\u56de\u4e8b\u60c5\u5462?\u9047\u5230\u75c5\u6bd2\u4e86\uff0c\u786c\u4ef6\u6709\u554f\u984c\uff0c\u9084\u662f\u7cfb\u7d71\u8a2d\u7f6e \u6709\u554f\u984c\uff0c\u5728\u672c\u6587\u4e2d\u7b46\u8005\u5c07\u5f9e\u786c\u4ef6\uff0c\u8edf\u4ef6\u548c\u75c5\u6bd2\u4e09\u500b\u65b9\u9762\u4f86\u8b1b\u89e3\u7cfb\u7d71\u8cc7\u6e90\u4f54\u7528\u7387\u70ba\u4ec0\u9ebc\u6703\u9054\u5230100%\u3002 <\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u7d93\u5e38\u51fa\u73feCPU\u4f54\u7528100%\u7684\u60c5\u6cc1\uff0c\u4e3b\u8981\u554f\u984c\u53ef\u80fd\u767c\u751f\u5728\u4e0b\u9762\u7684\u67d0\u4e9b\u65b9\u9762: <br \/>\u3000\u3000CPU\u4f54\u7528\u7387\u9ad8\u7684\u4e5d\u7a2e\u53ef\u80fd<\/font><\/p>\n<p><font size=\"2\">\u3000\u30001\u3001\u9632\u6bba\u6bd2\u8edf\u4ef6\u9020\u6210\u6545\u969c<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u7531\u65bc\u65b0\u7248\u7684KV\u3001\u91d1\u5c71\u3001\u745e\u661f\u90fd\u52a0\u5165\u4e86\u5c0d\u7db2\u9801\u3001\u63d2\u4ef6\u3001\u90f5\u4ef6\u7684\u96a8\u6a5f\u76e3\u63a7\uff0c\u7121\u7591\u589e\u5927\u4e86\u7cfb\u7d71\u8ca0\u64d4\u3002\u8655\u7406\u65b9\u5f0f:\u57fa\u672c\u4e0a\u6c92\u6709\u5408\u7406\u7684\u8655\u7406\u65b9\u5f0f\uff0c\u76e1\u91cf\u4f7f\u7528\u6700\u5c11\u7684\u76e3\u63a7\u670d\u52d9\u5427\uff0c\u6216\u8005\uff0c\u5347\u7d1a\u4f60\u7684\u786c\u4ef6\u914d\u5099\u3002 <\/font><\/p>\n<p><font size=\"2\">\u3000\u30002\u3001\u9a45\u52d5\u6c92\u6709\u7d93\u904e\u8a8d\u8b49\uff0c\u9020\u6210CPU\u8cc7\u6e90\u4f54\u7528100%<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5927\u91cf\u7684\u6e2c\u8a66\u7248\u7684\u9a45\u52d5\u5728\u7db2\u4e0a\u6c3e\u6feb\uff0c\u9020\u6210\u4e86\u96e3\u4ee5\u767c\u73fe\u7684\u6545\u969c\u539f\u56e0\u3002 \u8655\u7406\u65b9\u5f0f:\u5c24\u5176\u662f\u986f\u5361\u9a45\u52d5\u7279\u5225\u8981\u6ce8\u610f\uff0c\u5efa\u8b70\u4f7f\u7528\u5fae\u8edf\u8a8d\u8b49\u7684\u6216\u7531\u5b98\u65b9\u767c\u4f48\u7684\u9a45\u52d5\uff0c\u4e26\u4e14\u56b4\u683c\u6838\u5c0d\u578b\u865f\u3001\u7248\u672c\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30003\u3001\u75c5\u6bd2\u3001\u6728\u99ac\u9020\u6210<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5927\u91cf\u7684\u8815\u87f2\u75c5\u6bd2\u5728\u7cfb\u7d71\u5167\u90e8\u8fc5\u901f\u8907\u88fd\uff0c\u9020\u6210CPU\u4f54\u7528\u8cc7\u6e90\u7387\u64da\u9ad8\u4e0d\u4e0b\u3002\u89e3\u6c7a\u8fa6\u6cd5:\u7528\u53ef\u9760\u7684\u6bba\u6bd2\u8edf\u4ef6\u5fb9\u5e95\u6e05\u7406\u7cfb\u7d71\u5167\u5b58\u548c\u672c\u5730\u786c\u76e4\uff0c\u4e26\u4e14\u6253\u958b\u7cfb\u7d71\u8a2d\u7f6e\u8edf\u4ef6\uff0c\u5bdf\u770b\u6709\u7121\u7570\u5e38\u555f\u52d5\u7684\u7a0b\u5e8f\u3002\u7d93\u5e38\u6027\u66f4\u65b0\u5347\u7d1a\u6bba\u6bd2\u8edf\u4ef6\u548c\u9632\u706b\u7246\uff0c\u52a0\u5f37\u9632\u6bd2\u610f\u8b58\uff0c\u638c\u63e1\u6b63\u78ba\u7684\u9632\u6bba\u6bd2\u77e5\u8b58\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30004\u3001\u63a7\u5236\u9762\u677f&mdash;\u7ba1\u7406\u5de5\u5177&mdash;\u670d\u52d9&mdash;RISING REALTIME MONITOR SERVICE\u9ede\u9f20\u6a19\u53f3\u9375\uff0c\u6539\u70ba\u624b\u52d5\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30005\u3001\u958b\u59cb-&gt;\uff1b\u904b\u884c-&gt;\uff1bmsconfig-&gt;\uff1b\u555f\u52d5\uff0c\u95dc\u9589\u4e0d\u5fc5\u8981\u7684\u555f\u52d5\u9805\uff0c\u91cd\u555f\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30006\u3001\u67e5\u770b\u300csvchost\u300d\u9032\u7a0b\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000svchost.exe\u662fWindows XP\u7cfb\u7d71\u7684\u4e00\u500b\u6838\u5fc3\u9032\u7a0b\u3002svchost.exe\u4e0d\u55ae\u55ae\u53ea\u51fa\u73fe\u5728Windows XP\u4e2d\uff0c\u5728\u4f7f\u7528NT\u5167\u6838\u7684Windows\u7cfb\u7d71\u4e2d\u90fd\u6703\u6709svchost.exe\u7684\u5b58\u5728\u3002\u4e00\u822c\u5728Windows 2000\u4e2dsvchost.exe\u9032\u7a0b\u7684\u6578\u76ee\u70ba2\u500b\uff0c\u800c\u5728Windows XP\u4e2dsvchost.exe\u9032\u7a0b\u7684\u6578\u76ee\u5c31\u4e0a\u5347\u5230\u4e864\u500b\u53ca4\u500b\u4ee5\u4e0a\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30007\u3001\u67e5\u770b\u7db2\u7d61\u9023\u63a5\u3002\u4e3b\u8981\u662f\u7db2\u5361\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30008\u3001\u67e5\u770b\u7db2\u7d61\u9023\u63a5<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u7576\u5b89\u88dd\u4e86Windows XP\u7684\u8a08\u7b97\u6a5f\u505a\u670d\u52d9\u5668\u7684\u6642\u5019\uff0c\u6536\u5230\u7aef\u53e3 445 \u4e0a\u7684\u9023\u63a5\u8acb\u6c42\u6642\uff0c\u5b83\u5c07\u5206\u914d\u5167\u5b58\u548c\u5c11\u91cf\u5730\u8abf\u914d CPU\u8cc7\u6e90\u4f86\u70ba\u9019\u4e9b\u9023\u63a5\u63d0\u4f9b\u670d\u52d9\u3002\u7576\u8ca0\u8377\u904e\u91cd\u7684\u6642\u5019\uff0cCPU\u4f54\u7528\u7387\u53ef\u80fd\u904e\u9ad8\uff0c\u9019\u662f\u56e0\u70ba\u5728\u5de5\u4f5c\u9805\u7684\u6578\u76ee\u548c\u97ff\u61c9\u80fd\u529b\u4e4b\u9593\u5b58\u5728\u56fa\u6709\u7684\u6b0a\u8861\u95dc\u4fc2\u3002\u4f60\u8981\u78ba\u5b9a\u5408\u9069\u7684 MaxWorkItems \u8a2d\u7f6e\u4ee5\u63d0\u9ad8\u7cfb\u7d71\u97ff\u61c9\u80fd\u529b\u3002\u5982\u679c\u8a2d\u7f6e\u7684\u503c\u4e0d\u6b63\u78ba\uff0c\u670d\u52d9\u5668\u7684\u97ff\u61c9\u80fd\u529b\u53ef\u80fd\u6703\u53d7\u5230\u5f71\u97ff\uff0c\u6216\u8005\u67d0\u500b\u7528\u6236\u7368\u4f54\u592a\u591a\u7cfb\u7d71\u8cc7\u6e90\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u8981\u89e3\u6c7a\u6b64\u554f\u984c\uff0c\u6211\u5011\u53ef\u4ee5\u901a\u904e\u4fee\u6539\u8a3b\u518a\u8868\u4f86\u89e3\u6c7a:\u5728\u8a3b\u518a\u8868\u7de8\u8f2f\u5668\u4e2d\u4f9d\u6b21\u5c55\u958b [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServiceslanmanserver ]\u5206\u652f\uff0c\u5728\u53f3\u5074\u7a97\u53e3\u4e2d\u65b0\u5efa\u4e00\u500b\u540d\u70ba\u300cmaxworkitems\u300d\u7684DWORD\u503c\u3002\u7136\u5f8c\u96d9\u64ca\u8a72\u503c\uff0c\u5728\u6253\u958b\u7684\u7a97\u53e3\u4e2d\u9375\u5165\u4e0b\u5217\u6578\u503c\u4e26\u4fdd\u5b58\u9000\u51fa:<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5982\u679c\u8a08\u7b97\u6a5f\u6709512MB\u4ee5\u4e0a\u7684\u5167\u5b58\uff0c\u9375\u5165\u300c1024\u300d\uff1b\u5982\u679c\u8a08\u7b97\u6a5f\u5167\u5b58\u5c0f\u65bc512 MB\uff0c\u9375\u5165\u300c256\u300d\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30009\u3001\u770b\u770b\u662f\u4e0d\u662fWindows XP\u4f7f\u7528\u9f20\u6a19\u53f3\u9375\u5f15\u8d77CPU\u4f54\u7528100%<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u524d\u4e0d\u4e45\u7684\u5831\u5230\u8aaa\u5728\u8cc7\u6e90\u7ba1\u7406\u5668\u88e1\u9762\u4f7f\u7528\u9f20\u6a19\u53f3\u9375\u6703\u5c0e\u81f4CPU\u8cc7\u6e90100%\u4f54\u7528\uff0c\u6211\u5011\u4f86\u770b\u770b\u662f\u600e\u9ebc\u56de\u4e8b\uff1f<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5fb5\u5146:<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5728\u8cc7\u6e90\u7ba1\u7406\u5668\u88e1\u9762\uff0c\u7576\u4f60\u53f3\u9375\u9ede\u64ca\u4e00\u500b\u76ee\u9304\u6216\u4e00\u500b\u6587\u4ef6\uff0c\u4f60\u5c07\u6709\u53ef\u80fd\u51fa\u73fe\u4e0b\u9762\u6240\u5217\u554f\u984c:<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u4efb\u4f55\u6587\u4ef6\u7684\u62f7\u8c9d\u64cd\u4f5c\u5728\u90a3\u500b\u6642\u9593\u5c07\u6709\u53ef\u80fd\u505c\u6b62\u76f8\u61c9<br \/>\u3000\u3000\u7db2\u7d61\u9023\u63a5\u901f\u5ea6\u5c07\u986f\u8457\u6027\u7684\u964d\u4f4e<br \/>\u3000\u3000\u6240\u6709\u7684\u6d41\u8f38\u5165\/\u8f38\u51fa\u64cd\u4f5c\u4f8b\u5982\u4f7f\u7528Windows Media Player\u807d\u97f3\u6a02\u5c07\u6709\u53ef\u80fd\u662f\u97f3\u6a02\u5931\u771f\u6210\u56e0:<br \/>\u3000\u3000\u7576\u4f60\u5728\u8cc7\u6e90\u7ba1\u7406\u5668\u88e1\u9762\u53f3\u9375\u9ede\u64ca\u4e00\u500b\u6587\u4ef6\u6216\u76ee\u9304\u7684\u6642\u5019\uff0c\u7576\u5feb\u6377\u83dc\u55ae\u986f\u793a\u7684\u6642\u5019\uff0cCPU\u4f54\u7528\u7387\u5c07\u589e\u52a0\u5230100%\uff0c\u7576\u4f60\u95dc\u9589\u5feb\u6377\u83dc\u55ae\u7684\u6642\u5019\u624d\u8fd4\u56de\u6b63\u5e38\u6c34\u5e73\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u89e3\u6c7a\u65b9\u6cd5:<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u65b9\u6cd5\u4e00:\u95dc\u9589\u300c\u70ba\u83dc\u55ae\u548c\u5de5\u5177\u63d0\u793a\u4f7f\u7528\u904e\u6e21\u6548\u679c\u300d<\/font><\/p>\n<p><font size=\"2\">\u3000\u30001\u3001\u9ede\u64ca\u300c\u958b\u59cb\u300d&#8211;\u300c\u63a7\u5236\u9762\u677f\u300d<br \/>\u3000\u30002\u3001\u5728\u300c\u63a7\u5236\u9762\u677f\u300d\u88e1\u9762\u96d9\u64ca\u300c\u986f\u793a\u300d<br \/>\u3000\u30003\u3001\u5728\u300c\u986f\u793a\u300d\u5c6c\u6027\u88e1\u9762\u9ede\u64ca\u300c\u5916\u89c0\u300d\u6a19\u7c64\u9801<br \/>\u3000\u30004\u3001\u5728\u300c\u5916\u89c0\u300d\u6a19\u7c64\u9801\u88e1\u9762\u9ede\u64ca\u300c\u6548\u679c\u300d<\/font><\/p>\n<p><font size=\"2\">\u3000\u30005\u3001\u5728\u300c\u6548\u679c\u300d\u5c0d\u8a71\u6846\u88e1\u9762\uff0c\u6e05\u9664\u300c\u70ba\u83dc\u55ae\u548c\u5de5\u5177\u63d0\u793a\u4f7f\u7528\u904e\u6e21\u6548\u679c\u300d\u524d\u9762\u7684\u5fa9\u9078\u6846\u63a5\u8457\u9ede\u64ca\u5169\u6b21\u300c\u78ba\u5b9a\u300d\u6309\u9215\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u65b9\u6cd5\u4e8c:\u5728\u4f7f\u7528\u9f20\u6a19\u53f3\u9375\u9ede\u64ca\u6587\u4ef6\u6216\u76ee\u9304\u7684\u6642\u5019\u5148\u4f7f\u7528\u9f20\u6a19\u5de6\u9375\u9078\u64c7\u4f60\u7684\u76ee\u6a19\u6587\u4ef6\u6216\u76ee\u9304\u3002\u7136\u5f8c\u518d\u4f7f\u7528\u9f20\u6a19\u53f3\u9375\u5f48\u51fa\u5feb\u6377\u83dc\u55ae\u3002<\/font><\/p>\n<p><font size=\"2\">&nbsp;\u3000\u3000CPU\u4f54\u7528100%\u89e3\u6c7a\u8fa6\u6cd5 <\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u4e00\u822c\u60c5\u6cc1\u4e0bCPU\u4f54\u4e86100%\u7684\u8a71\u6211\u5011\u7684\u96fb\u8166\u7e3d\u6703\u6162\u4e0b\u4f86\uff0c\u800c\u5f88\u591a\u6642\u5019\u6211\u5011\u662f\u53ef\u4ee5\u901a\u904e\u505a\u4e00\u9ede\u9ede\u7684\u6539\u52d5\u5c31\u53ef\u4ee5\u89e3\u6c7a\uff0c\u800c\u4e0d\u5fc5\u554f\u90a3\u4e9b\u5927\u8766\u4e86\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u7576\u6a5f\u5668\u6162\u4e0b\u4f86\u7684\u6642\u5019\uff0c\u9996\u5148\u6211\u5011\u60f3\u5230\u7684\u7576\u7136\u662f\u4efb\u52d9\u7ba1\u7406\u5668\u4e86\uff0c\u770b\u770b\u5230\u5e95\u662f\u54ea\u500b\u7a0b\u5e8f\u4f54\u4e86\u8f03\u641e\u7684\u6bd4\u4f8b\uff0c\u5982\u679c\u662f\u67d0\u500b\u5927\u7a0b\u5e8f \u90a3\u9084\u53ef\u4ee5\u539f\u8ad2\uff0c\u5728\u95dc\u9589\u8a72\u7a0b\u5e8f\u5f8c\u53ea\u8981CPU\u6b63\u5e38\u4e86\u90a3\u5c31\u6c92\u554f\u984c\uff1b\u5982\u679c\u4e0d\u662f\uff0c\u90a3\u4f60\u5c31\u8981\u770b\u770b\u662f\u4ec0\u5e7a\u7a0b\u5e8f\u4e86\uff0c\u7576\u4f60\u67e5\u4e0d\u51fa\u9019\u500b\u9032\u7a0b\u662f\u4ec0\u5e7a\u7684\u6642\u5019\u5c31\u53bbgoogle\u6216\u8005 baidu\u641c\u3002\u6709\u6642\u53ea\u7d50\u675f\u662f\u6c92\u7528\u7684\uff0c\u5728xp\u4e0b\u6211\u5011\u53ef\u4ee5\u7d50\u5408msconfig\u88e1\u7684\u555f\u52d5\u9805\uff0c\u628a\u4e00\u4e9b\u4e0d\u7528\u7684\u9805\u7d66\u95dc\u6389\u3002\u57282000\u4e0b\u53ef\u4ee5\u53bb\u4e0b\u500bwinpatrol \u4f86\u7528\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u4e00\u4e9b\u5e38\u7528\u7684\u8edf\u4ef6\uff0c\u6bd4\u5982\u700f\u89bd\u5668\u4f54\u7528\u4e86\u5f88\u641e\u7684CPU\uff0c\u90a3\u5e7a\u5c31\u8981\u5347\u7d1a\u8a72\u8edf\u4ef6\u6216\u8005\u4e7e\u8106\u7528\u5225\u7684\u540c\u985e\u8edf\u4ef6\u4ee3\u66ff\uff0c\u6709\u6642\u8edf\u4ef6\u548c\u7cfb\u7d71\u6703\u6709\u9ede\u4e0d\u517c\u5bb9\uff0c\u7576\u7136\u6211\u5011\u53ef\u4ee5\u8a66\u4e0bxp\u7cfb\u7d71\u4e0b\u7d66\u6211\u5011\u7684\u90a3\u500b\u517c\u5bb9\u9805\uff0c\u53f3\u9375\u9ede\u8a72.exe\u6587\u4ef6\u9078\u517c\u5bb9\u6027\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000svchost.exe\u6709\u6642\u662f\u6bd4\u8f03\u982d\u75db\u7684\uff0c\u7576\u4f60\u770b\u5230\u4f60\u7684\u67d0\u500bsvchost.exe\u4f54\u7528\u5f88\u5927CPU\u6642\u4f60\u53ef\u4ee5\u53bb\u4e0b \u500baports\u6216\u8005fport\u4f86\u6aa2\u67e5\u5176\u5c0d\u61c9\u7684\u7a0b\u5e8f\u8def\u5f91\uff0c\u4e5f\u5c31\u662f\u4ec0\u5e7a\u6771\u897f\u5728\u6389\u7528\u9019\u500bsvchost.exe\uff0c\u5982\u679c\u4e0d\u662fc:Windows system32(xp)\u6216c:winntsystem32(2000)\u4e0b\u7684\uff0c\u90a3\u5c31\u53ef\u7591\u3002\u5347\u7d1a\u6bba\u6bd2\u8edf\u4ef6\u6bba\u6bd2\u5427\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u53f3\u64ca\u6587\u4ef6\u5c0e\u81f4100%\u7684CPU\u4f54\u7528\u6211\u5011\u4e5f\u6703\u9047\u5230\uff0c\u6709\u6642\u9ede\u53f3\u9375\u505c\u9813\u53ef\u80fd\u5c31\u662f\u9019\u500b\u554f\u984c\u4e86\u3002\u5b98\u65b9\u7684\u89e3\u91cb:\u5148\u9ede\u5de6\u9375\u9078 \u4e2d\uff0c\u518d\u53f3\u9375(\u4e0d\u662f\u5f88\u7406\u89e3)\u3002\u975e\u5b98\u65b9:\u901a\u904e\u5728\u684c\u9eb5\u9ede\u53f3\u9375-\u5c6c\u6027-\u5916\u89c0-\u6548\u679c\uff0c\u53d6\u6d88\u300d\u70ba\u83dc\u55ae\u548c\u5de5\u5177\u63d0\u793a\u4f7f\u7528\u4e0b\u5217\u904e\u5ea6\u6548\u679c(U)\u300c\u4f86\u89e3\u6c7a\u3002\u9084\u6709\u67d0\u4e9b\u6bba\u6bd2\u8edf\u4ef6\u5c0d\u6587 \u4ef6\u7684\u76e3\u63a7\u4e5f\u6703\u6709\u6240\u5f71\u97ff\uff0c\u53ef\u4ee5\u95dc\u9589\u6bba\u6bd2\u8edf\u4ef6\u7684\u6587\u4ef6\u76e3\u63a7\uff1b\u9084\u6709\u5c31\u662f\u5c0d\u7db2\u9801\uff0c\u63d2\u4ef6\uff0c\u90f5\u4ef6\u7684\u76e3\u63a7\u4e5f\u662f\u540c\u6a23\u7684\u9053\u7406\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u4e00\u4e9b\u9a45\u52d5\u7a0b\u5e8f\u6709\u6642\u4e5f\u53ef\u80fd\u51fa\u73fe\u9019\u6a23\u7684\u73fe\u8c61\uff0c\u6700\u597d\u662f\u9078\u64c7\u5fae\u8edf\u8a8d\u8b49\u7684\u6216\u8005\u662f\u5b98\u65b9\u767c\u4f48\u7684\u9a45\u52d5\u4f86\u88dd\uff0c\u6709\u6642\u53ef\u4ee5\u9069\u7576\u7684\u5347\u7d1a\u9a45\u52d5\uff0c\u4e0d\u904e\u8a18\u5f97\u6700\u65b0\u7684\u4e0d\u662f\u6700\u597d\u7684\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000CPU\u964d\u6eab\u8edf\u4ef6\uff0c\u7531\u65bc\u8edf\u4ef6\u5728\u904b\u884c\u6642\u6703\u5229\u7528\u6240\u4ee5\u7684CPU\u7a7a\u9592\u6642\u9593\u4f86\u9032\u884c\u964d\u6eab\uff0c\u4f46Windows\u4e0d\u80fd\u5206\u8fa8\u666e\u901a\u7684CPU\u4f54\u7528\u548c\u964d\u6eab\u8edf\u4ef6\u7684\u964d\u6eab\u6307\u4ee4\u4e4b\u9593\u7684\u5340\u5225\uff0c\u56e0\u6b64CPU\u59cb\u7d42\u986f\u793a100%\uff0c\u9019\u500b\u5c31\u4e0d\u5fc5\u64d4\u5fc3\u4e86\uff0c\u4e0d\u5f71\u97ff\u6b63\u5e38\u7684\u7cfb\u7d71\u904b\u884c\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5728\u8655\u7406\u8f03\u5927\u7684word\u6587\u4ef6\u6642\u7531\u65bcword\u7684\u62fc\u5beb\u548c\u8a9e\u6cd5\u6aa2\u67e5\u6703\u4f7f\u5f97CPU\u7d2f\uff0c\u53ea\u8981\u6253\u958bword\u7684\u5de5\u5177-\u9078\u9805-\u62fc\u5beb\u548c\u8a9e\u6cd5\u628a\u300d\u6aa2\u67e5\u62fc\u5beb\u548c\u6aa2\u67e5\u8a9e\u6cd5\u300c\u52fe\u53bb\u6389\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u55ae\u64caavi\u8996\u983b\u6587\u4ef6\u5f8cCPU\u4f54\u7528\u7387\u9ad8\u662f\u56e0\u70ba\u7cfb\u7d71\u8981\u5148\u6383\u7784\u8a72\u6587\u4ef6\uff0c\u4e26\u6aa2\u67e5\u6587\u4ef6\u6240\u6709\u90e8\u5206\uff0c\u4e26\u5efa\u7acb\u7d22\u5f15\uff1b\u89e3\u6c7a\u8fa6\u6cd5:\u53f3\u64ca\u4fdd\u5b58\u8996\u983b\u6587\u4ef6\u7684\u6587\u4ef6\u593e-\u5c6c\u6027-\u5e38\u898f-\u9ad8\u7d1a\uff0c\u53bb\u6389\u70ba\u4e86\u5feb\u901f\u641c\u7d22\uff0c\u5141\u8a31\u7d22\u5f15\u670d\u52d9\u7de8\u88fd\u8a72\u6587\u4ef6\u593e\u7684\u7d22\u5f15\u7684\u52fe\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000CPU\u4f54\u7528100%\u6848\u4f8b\u5206\u6790 <\/font><\/p>\n<p><font size=\"2\">\u3000\u30001\u3001dllhost\u9032\u7a0b\u9020\u6210CPU\u4f7f\u7528\u7387\u4f54\u7528100%<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u7279\u5fb5:\u670d\u52d9\u5668\u6b63\u5e38CPU\u6d88\u8017\u61c9\u8a72\u572875%\u4ee5\u4e0b\uff0c\u800c\u4e14CPU\u6d88\u8017\u61c9\u8a72\u662f\u4e0a\u4e0b\u8d77\u4f0f\u7684\uff0c\u51fa\u73fe\u9019\u7a2e\u554f\u984c\u7684\u670d\u52d9\u5668\uff0cCPU \u6703\u7a81\u7136\u4e00\u76f4\u8655100%\u7684\u6c34\u5e73\uff0c\u800c\u4e14\u4e0d\u6703\u4e0b\u964d\u3002\u67e5\u770b\u4efb\u52d9\u7ba1\u7406\u5668\uff0c\u53ef\u4ee5\u767c\u73fe\u662fDLLHOST.EXE\u6d88\u8017\u4e86\u6240\u6709\u7684CPU\u7a7a\u9592\u6642\u9593\uff0c\u7ba1\u7406\u54e1\u5728\u9019\u7a2e\u60c5\u6cc1\u4e0b\uff0c\u53ea\u597d\u91cd \u65b0\u555f\u52d5IIS\u670d\u52d9\uff0c\u5947\u602a\u7684\u662f\uff0c\u91cd\u65b0\u555f\u52d5IIS\u670d\u52d9\u5f8c\u4e00\u5207\u6b63\u5e38\uff0c\u4f46\u53ef\u80fd\u904e\u4e86\u4e00\u6bb5\u6642\u9593\u5f8c\uff0c\u554f\u984c\u53c8\u518d\u6b21\u51fa\u73fe\u4e86\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u76f4\u63a5\u539f\u56e0:<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u6709\u4e00\u500b\u6216\u591a\u500bACCESS\u6578\u64da\u5eab\u5728\u591a\u6b21\u8b80\u5beb\u904e\u7a0b\u4e2d\u640d\u58de\uff0c\u5fae\u8edf\u7684MDAC\u7cfb\u7d71\u5728\u5beb\u5165\u9019\u500b\u640d\u58de\u7684ACCESS\u6587\u4ef6\u6642\uff0cASP\u7dda\u7a0b\u8655\u65bcBLOCK\u72c0\u614b\uff0c\u7d50\u679c\u5176\u5b83\u7dda\u7a0b\u53ea\u80fd\u7b49\u5f85\uff0cIIS\u88ab\u6b7b\u9396\u4e86\uff0c\u5168\u90e8\u7684CPU\u6642\u9593\u90fd\u6d88\u8017\u5728DLLHOST\u4e2d\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u89e3\u6c7a\u8fa6\u6cd5:<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5b89\u88dd\u300c\u4e00\u6d41\u4fe1\u606f\u76e3\u63a7\u6514\u622a\u7cfb\u7d71\u300d\uff0c\u4f7f\u7528\u5176\u4e2d\u7684\u300c\u9996\u5e2d\u6587\u4ef6\u6aa2\u67e5\u5b98IIS\u5065\u5eb7\u6aa2\u67e5\u5b98\u300d\u8edf\u4ef6\uff0c<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u555f\u7528\u300d\u67e5\u627e\u6b7b\u9396\u6a21\u584a\u300d\uff0c\u8a2d\u7f6e:<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000&#8211;wblock=yes<br \/>\u3000\u3000\u76e3\u63a7\u7684\u76ee\u9304\uff0c\u8acb\u6307\u5b9a\u60a8\u7684\u4e3b\u6a5f\u7684\u6587\u4ef6\u6240\u5728\u76ee\u9304:<br \/>\u3000\u3000&#8211;wblockdir=d:test<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u76e3\u63a7\u751f\u6210\u7684\u65e5\u8a8c\u7684\u6587\u4ef6\u4fdd\u5b58\u4f4d\u7f6e\u5728\u5b89\u88dd\u76ee\u9304\u7684log\u76ee\u9304\u4e2d\uff0c\u6587\u4ef6\u540d\u70ba:logblock.htm<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u505c\u6b62IIS\uff0c\u518d\u555f\u52d5\u300c\u9996\u5e2d\u6587\u4ef6\u6aa2\u67e5\u5b98IIS\u5065\u5eb7\u6aa2\u67e5\u5b98\u300d\uff0c\u518d\u555f\u52d5IIS\uff0c\u300c\u9996\u5e2d\u6587\u4ef6\u6aa2\u67e5\u5b98IIS\u5065\u5eb7\u6aa2\u67e5\u5b98\u300d\u6703\u5728logblock.htm\u4e2d\u8a18\u9304\u4e0b\u6700\u5f8c\u5beb\u5165\u7684ACCESS\u6587\u4ef6\u7684\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u904e\u4e86\u4e00\u6bb5\u6642\u9593\u5f8c\uff0c\u7576\u554f\u984c\u51fa\u4f86\u6642\uff0c\u4f8b\u5982CPU\u6703\u518d\u6b21\u4e00\u76f4\u8655100%\u7684\u6c34\u5e73\uff0c\u53ef\u4ee5\u505c\u6b62IIS\uff0c\u6aa2\u67e5 logblock.htm\u6240\u8a18\u9304\u7684\u6700\u5f8c\u7684\u5341\u500b\u6587\u4ef6\uff0c\u6ce8\u610f\uff0c\u6700\u6709\u554f\u984c\u7684\u5f80\u5f80\u662f\u8a08\u6578\u5668\u985e\u7684ACCESS\u6587\u4ef6\uff0c\u4f8b\u5982:\u300d**COUNT.MDB\u300d\uff0c\u300d **COUNT.ASP\u300d\uff0c\u53ef\u4ee5\u5148\u628a\u6700\u5f8c\u5341\u500b\u6587\u4ef6\u6216\u6709\u6240\u61f7\u7591\u7684\u6587\u4ef6\u522a\u9664\u5230\u56de\u6536\u7ad9\u4e2d\uff0c\u518d\u555f\u52d5IIS\uff0c\u770b\u770b\u554f\u984c\u662f\u5426\u518d\u6b21\u51fa\u73fe\u3002\u6211\u5011\u76f8\u4fe1\uff0c\u7d93\u904e\u4ed4\u7d30\u7684\u67e5\u627e\u5f8c\uff0c\u60a8 \u80af\u5b9a\u53ef\u4ee5\u627e\u5230\u9019\u500b\u8b93\u60a8\u64cd\u5fc3\u4e86\u4e00\u6bb5\u6642\u9593\u7684\u6587\u4ef6\u7684\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u627e\u5230\u9019\u500b\u6587\u4ef6\u5f8c\uff0c\u53ef\u4ee5\u522a\u9664\u5b83\uff0c\u6216\u4e0b\u8f09\u4e0b\u4f86\uff0c\u7528ACCESS2000\u4fee\u5fa9\u5b83\uff0c\u554f\u984c\u5c31\u89e3\u6c7a\u4e86\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30002\u3001svchost.exe\u9020\u6210CPU\u4f7f\u7528\u7387\u4f54\u7528100%<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5728win.ini\u6587\u4ef6\u4e2d\uff0c\u5728[Windows]\u4e0b\u9762\uff0c\u300crun=\u300d\u548c\u300cload=\u300d\u662f\u53ef\u80fd\u52a0\u8f09\u300c\u6728\u99ac\u300d\u7a0b\u5e8f\u7684\u9014 \u5f91\uff0c\u5fc5\u9808\u4ed4\u7d30\u7559\u5fc3\u5b83\u5011\u3002\u4e00\u822c\u60c5\u6cc1\u4e0b\uff0c\u5b83\u5011\u7684\u7b49\u865f\u5f8c\u9762\u4ec0\u5e7a\u90fd\u6c92\u6709\uff0c\u5982\u679c\u767c\u73fe\u5f8c\u9762\u8ddf\u6709\u8def\u5f91\u8207\u6587\u4ef6\u540d\u4e0d\u662f\u4f60\u719f\u6089\u7684\u555f\u52d5\u6587\u4ef6\uff0c\u4f60\u7684\u8a08\u7b97\u6a5f\u5c31\u53ef\u80fd\u4e2d\u4e0a\u300c\u6728\u99ac\u300d\u4e86\u3002\u7576 \u7136\u4f60\u4e5f\u5f97\u770b\u6e05\u695a\uff0c\u56e0\u70ba\u597d\u591a\u300c\u6728\u99ac\u300d\uff0c\u5982\u300cAOL Trojan\u6728\u99ac\u300d\uff0c\u5b83\u628a\u81ea\u8eab\u507d\u88dd\u6210command.exe\u6587\u4ef6\uff0c\u5982\u679c\u4e0d\u6ce8\u610f\u53ef\u80fd\u4e0d\u6703\u767c\u73fe\u5b83\u4e0d\u662f\u771f\u6b63\u7684\u7cfb\u7d71\u555f\u52d5\u6587\u4ef6\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5728system.ini\u6587\u4ef6\u4e2d\uff0c\u5728[BOOT]\u4e0b\u9762\u6709\u500b\u300cshell=\u6587\u4ef6\u540d\u300d\u3002\u6b63\u78ba\u7684\u6587\u4ef6\u540d\u61c9\u8a72\u662f \u300cexplorer.exe\u300d\uff0c\u5982\u679c\u4e0d\u662f\u300cexplorer.exe\u300d\uff0c\u800c\u662f\u300cshell= explorer.exe \u7a0b\u5e8f\u540d\u300d\uff0c\u90a3\u5e7a\u5f8c\u9762\u8ddf\u8457\u7684\u90a3\u500b\u7a0b\u5e8f\u5c31\u662f\u300c\u6728\u99ac\u300d\u7a0b\u5e8f\uff0c\u5c31\u662f\u8aaa\u4f60\u5df2\u7d93\u4e2d\u300c\u6728\u99ac\u300d\u4e86\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5728\u8a3b\u518a\u8868\u4e2d\u7684\u60c5\u6cc1\u6700\u8907\u96dc\uff0c\u901a\u904eregedit\u547d\u4ee4\u6253\u958b\u8a3b\u518a\u8868\u7de8\u8f2f\u5668\uff0c\u5728\u9ede\u64ca\u81f3:\u300cHKEY-LOCAL- MACHINESoftwareMicrosoftWindowsCurrentVersionRun\u300d\u76ee\u9304\u4e0b\uff0c\u67e5\u770b\u9375\u503c\u4e2d\u6709\u6c92\u6709\u81ea\u5df1\u4e0d\u719f\u6089\u7684 \u81ea\u52d5\u555f\u52d5\u6587\u4ef6\uff0c\u64f4\u5c55\u540d\u70baEXE\uff0c\u9019\u88e1\u5207\u8a18:\u6709\u7684\u300c\u6728\u99ac\u300d\u7a0b\u5e8f\u751f\u6210\u7684\u6587\u4ef6\u5f88\u50cf\u7cfb\u7d71\u81ea\u8eab\u6587\u4ef6\uff0c\u60f3\u901a\u904e\u507d\u88dd\u77c7\u6df7\u904e\u95dc\uff0c\u5982\u300cAcid Battery v1.0\u6728\u99ac\u300d\uff0c\u5b83\u5c07\u8a3b\u518a\u8868\u300cHKEY-LOCAL-MACHINESOFTWAREMicrosoftWindows CurrentVersionRun\u300d\u4e0b\u7684Explorer \u9375\u503c\u6539\u70baExplorer=\u300cC:Windowsexpiorer.exe\u300d\uff0c\u300c\u6728\u99ac\u300d\u7a0b\u5e8f\u8207\u771f\u6b63\u7684Explorer\u4e4b\u9593\u53ea\u6709\u300ci\u300d\u8207\u300cl\u300d\u7684\u5dee\u5225\u3002 \u7576\u7136\u5728\u8a3b\u518a\u8868\u4e2d\u9084\u6709\u5f88\u591a\u5730\u65b9\u90fd\u53ef\u4ee5\u96b1\u85cf\u300c\u6728\u99ac\u300d\u7a0b\u5e8f\uff0c\u5982:\u300cHKEY-CURRENT-USERSoftwareMicrosoftWindows CurrentVersionRun\u300d\u3001\u300cHKEY-USERS****SoftwareMicrosoftWindows CurrentVersionRun\u300d\u7684\u76ee\u9304\u4e0b\u90fd\u6709\u53ef\u80fd\uff0c\u6700\u597d\u7684\u8fa6\u6cd5\u5c31\u662f\u5728\u300cHKEY-LOCAL-MACHINESoftware MicrosoftWindowsCurrentVersionRun\u300d\u4e0b\u627e\u5230\u300c\u6728\u99ac\u8a72\u75c5\u6bd2\u4e5f\u7a31\u70ba\u300cCode Red II(\u7d05\u8272\u4ee3\u78bc2)\u300d\u75c5\u6bd2\uff0c\u8207\u65e9\u5148\u5728\u897f\u65b9\u82f1\u6587\u7cfb\u7d71\u4e0b\u6d41\u884c\u300c\u7d05\u8272\u4ee3\u78bc\u300d\u75c5\u6bd2\u6709\u9ede\u76f8\u53cd\uff0c\u5728\u570b\u969b\u4e0a\u88ab\u7a31\u70baVirtualRoot(\u865b\u64ec\u76ee\u9304)\u75c5\u6bd2\u3002\u8a72\u8815\u87f2\u75c5\u6bd2\u5229 \u7528Microsoft\u5df2\u77e5\u7684\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u901a\u904e80\u7aef\u53e3\u4f86\u50b3\u64ad\u5230\u5176\u5b83\u7684Web\u9801\u670d\u52d9\u5668\u4e0a\u3002\u53d7\u611f\u67d3\u7684\u6a5f\u5668\u53ef\u7531\u9ed1\u5ba2\u5011\u901a\u904eHttp Get\u7684\u8acb\u6c42\u904b\u884cscripts\/root.exe\u4f86\u7372\u5f97\u5c0d\u53d7\u611f\u67d3\u6a5f\u5668\u7684\u5b8c\u5168\u63a7\u5236\u6b0a\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u7576\u611f\u67d3\u4e00\u53f0\u670d\u52d9\u5668\u6210\u529f\u4e86\u4ee5\u5f8c\uff0c\u5982\u679c\u53d7\u611f\u67d3\u7684\u6a5f\u5668\u662f\u4e2d\u6587\u7684\u7cfb\u7d71\u5f8c\uff0c\u8a72\u7a0b\u5e8f\u6703\u4f11\u77202\u5929\uff0c\u5225\u7684\u6a5f\u5668\u4f11\u77201\u5929\u3002\u7576\u4f11\u7720\u7684 \u6642\u9593\u5230\u4e86\u4ee5\u5f8c\uff0c\u8a72\u8815\u87f2\u7a0b\u5e8f\u6703\u4f7f\u5f97\u6a5f\u5668\u91cd\u65b0\u555f\u52d5\u3002\u8a72\u8815\u87f2\u4e5f\u6703\u6aa2\u67e5\u6a5f\u5668\u7684\u6708\u4efd\u662f\u5426\u662f10\u6708\u6216\u8005\u5e74\u4efd\u662f\u5426\u662f2002\u5e74\uff0c\u5982\u679c\u662f\uff0c\u53d7\u611f\u67d3\u7684\u670d\u52d9\u5668\u4e5f\u6703\u91cd\u65b0\u555f\u52d5\u3002\u7576 Windows NT\u7cfb\u7d71\u555f\u52d5\u6642\uff0cNT\u7cfb\u7d71\u6703\u81ea\u52d5\u641c\u7d22C\u76e4\u6839\u76ee\u9304\u4e0b\u7684\u6587\u4ef6explorer.exe\uff0c\u53d7\u8a72\u7db2\u7d61\u8815\u87f2\u7a0b\u5e8f\u611f\u67d3\u7684\u670d\u52d9\u5668\u4e0a\u7684\u6587\u4ef6explorer.exe\u4e5f\u5c31\u662f \u8a72\u7db2\u7d61\u8815\u87f2\u7a0b\u5e8f\u672c\u8eab\u3002\u8a72\u6587\u4ef6\u7684\u5927\u5c0f\u662f8192\u5b57\u7bc0\uff0cVirtualRoot\u7db2\u7d61\u8815\u87f2\u7a0b\u5e8f\u5c31\u662f\u901a\u904e\u8a72\u7a0b\u5e8f\u4f86\u57f7\u884c\u7684\u3002\u540c\u6642\uff0cVirtualRoot\u7db2\u7d61\u8815\u87f2\u7a0b \u5e8f\u9084\u5c07cmd.exe\u7684\u6587\u4ef6\u5f9eWindows NT\u7684system\u76ee\u9304\u62f7\u8c9d\u5230\u5225\u7684\u76ee\u9304\uff0c\u7d66\u9ed1\u5ba2\u7684\u5165\u4fb5\u655e\u958b\u4e86\u5927\u9580\u3002\u5b83\u9084\u6703\u4fee\u6539\u7cfb\u7d71\u7684\u8a3b\u518a\u8868\u9805\u76ee\uff0c\u901a\u904e\u8a72\u8a3b\u518a\u8868\u9805\u76ee\u7684\u4fee\u6539\uff0c\u8a72\u8815\u87f2\u7a0b\u5e8f\u53ef\u4ee5\u5efa\u7acb\u865b\u64ec\u7684\u76ee\u9304C \u6216\u8005D\uff0c\u75c5\u6bd2\u540d\u7531\u6b64\u800c\u4f86\u3002\u503c\u5f97\u4e00\u63d0\u7684\u662f\uff0c\u8a72\u7db2\u7d61\u8815\u87f2\u7a0b\u5e8f\u9664\u4e86\u6587\u4ef6explorer.exe\u5916\uff0c\u5176\u9918\u7684\u64cd\u4f5c\u4e0d\u662f\u57fa\u65bc\u6587\u4ef6\u7684\uff0c\u800c\u662f\u76f4\u63a5\u5728\u5167\u5b58\u4e2d\u4f86\u9032\u884c\u611f\u67d3\u3001\u50b3 \u64ad\u7684\uff0c\u9019\u5c31\u7d66\u6355\u6349\u5e36\u4f86\u4e86\u8f03\u5927\u96e3\u5ea6\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u300d\u7a0b\u5e8f\u7684\u6587\u4ef6\u540d\uff0c\u518d\u5728\u6574\u500b\u8a3b\u518a\u8868\u4e2d\u641c\u7d22\u5373\u53ef\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u6211\u5011\u5148\u770b\u770b\u5fae\u8edf\u662f\u600e\u6a23\u63cf\u8ff0svchost.exe\u7684\u3002\u5728\u5fae\u8edf\u77e5\u8b58\u5eab314056\u4e2d\u5c0dsvchost.exe\u6709\u5982\u4e0b\u63cf\u8ff0:svchost.exe \u662f\u5f9e\u52d5\u614b\u93c8\u63a5\u5eab (DLL) \u4e2d\u904b\u884c\u7684\u670d\u52d9\u7684\u901a\u7528\u4e3b\u6a5f\u9032\u7a0b\u540d\u7a31\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5176\u5be6svchost.exe\u662fWindows XP\u7cfb\u7d71\u7684\u4e00\u500b\u6838\u5fc3\u9032\u7a0b\u3002svchost.exe\u4e0d\u55ae\u55ae\u53ea\u51fa\u73fe\u5728Windows XP\u4e2d\uff0c\u5728\u4f7f\u7528NT\u5167\u6838\u7684Windows\u7cfb\u7d71\u4e2d\u90fd\u6703\u6709svchost.exe\u7684\u5b58\u5728\u3002\u4e00\u822c\u5728Windows 2000\u4e2dsvchost.exe\u9032\u7a0b\u7684\u6578\u76ee\u70ba2\u500b\uff0c\u800c\u5728Windows XP\u4e2dsvchost.exe\u9032\u7a0b\u7684\u6578\u76ee\u5c31\u4e0a\u5347\u5230\u4e864\u500b\u53ca4\u500b\u4ee5\u4e0a\u3002\u6240\u4ee5\u770b\u5230\u7cfb\u7d71\u7684\u9032\u7a0b\u5217\u8868\u4e2d\u6709\u5e7e\u500bsvchost.exe\u4e0d\u7528\u90a3\u5e7a\u64d4\u5fc3\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000svchost.exe\u5230\u5e95\u662f\u505a\u4ec0\u5e7a\u7528\u7684\u5462?<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u9996\u5148\u6211\u5011\u8981\u77ad\u89e3\u4e00\u9ede\u90a3\u5c31\u662fWindows\u7cfb\u7d71\u7684\u4e2d\u7684\u9032\u7a0b\u5206\u70ba:\u7368\u7acb\u9032\u7a0b\u548c\u5171\u4eab\u9032\u7a0b\u9019\u5169\u7a2e\u3002\u7531\u65bcWindows\u7cfb\u7d71\u4e2d\u7684\u670d\u52d9\u8d8a\u4f86\u8d8a\u591a\uff0c\u70ba\u4e86\u7bc0\u7d04\u6709\u9650\u7684\u7cfb\u7d71\u8cc7\u6e90\u5fae\u8edf\u628a\u5f88\u591a\u7684\u7cfb\u7d71\u670d\u52d9\u505a\u6210\u4e86\u5171\u4eab\u6a21\u5f0f\u3002\u90a3svchost.exe\u5728\u9019\u4e2d\u9593\u662f\u64d4\u4efb\u600e\u6a23\u4e00\u500b\u89d2\u8272\u5462?<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000svchost.exe\u7684\u5de5\u4f5c\u5c31\u662f\u4f5c\u70ba\u9019\u4e9b\u670d\u52d9\u7684\u5bbf\u4e3b\uff0c\u5373\u7531svchost.exe\u4f86\u555f\u52d5\u9019\u4e9b\u670d\u52d9\u3002 svchost.exe\u53ea\u662f\u8ca0\u8cac\u70ba\u9019\u4e9b\u670d\u52d9\u63d0\u4f9b\u555f\u52d5\u7684\u689d\u4ef6\uff0c\u5176\u81ea\u8eab\u4e26\u4e0d\u80fd\u5be6\u73fe\u4efb\u4f55\u670d\u52d9\u7684\u529f\u80fd\uff0c\u4e5f\u4e0d\u80fd\u70ba\u7528\u6236\u63d0\u4f9b\u4efb\u4f55\u670d\u52d9\u3002svchost.exe\u901a\u904e\u70ba\u9019 \u4e9b\u7cfb\u7d71\u670d\u52d9\u8abf\u7528\u52d5\u614b\u93c8\u63a5\u5eab(DLL)\u7684\u65b9\u5f0f\u4f86\u555f\u52d5\u7cfb\u7d71\u670d\u52d9\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000svchost.exe\u662f\u75c5\u6bd2\u9019\u7a2e\u8aaa\u6cd5\u662f\u4efb\u4f55\u7522\u751f\u7684\u5462?<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u56e0\u70basvchost.exe\u53ef\u4ee5\u4f5c\u70ba\u670d\u52d9\u7684\u5bbf\u4e3b\u4f86\u555f\u52d5\u670d\u52d9\uff0c\u6240\u4ee5\u75c5\u6bd2\u3001\u6728\u99ac\u7684\u7de8\u5beb\u8005\u4e5f\u6316\u7a7a\u5fc3\u601d\u7684\u8981\u5229\u7528svchost.exe\u7684\u9019\u500b\u7279\u6027\u4f86\u8ff7\u60d1\u7528\u6236\u9054\u5230\u5165\u4fb5\u3001\u7834\u58de\u8a08\u7b97\u6a5f\u7684\u76ee\u7684\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5982\u4f55\u624d\u80fd\u8fa8\u5225\u54ea\u4e9b\u662f\u6b63\u5e38\u7684svchost.exe\u9032\u7a0b\uff0c\u800c\u54ea\u4e9b\u662f\u75c5\u6bd2\u9032\u7a0b\u5462?<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000svchost.exe\u7684\u9375\u503c\u662f\u5728\u300cHKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionSvchost\u300d\uff0c\u5982\u57161\u6240\u793a\u3002\u57161\u4e2d\u6bcf\u500b\u9375\u503c\u8868\u793a\u4e00\u500b\u7368\u7acb\u7684svchost.exe\u7d44\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5fae\u8edf\u9084\u70ba\u6211\u5011\u63d0\u4f9b\u4e86\u4e00\u7a2e\u5bdf\u770b\u7cfb\u7d71\u6b63\u5728\u904b\u884c\u5728svchost.exe\u5217\u8868\u4e2d\u7684\u670d\u52d9\u7684\u65b9\u6cd5\u3002\u4ee5Windows XP\u70ba\u4f8b:\u5728\u300c\u904b\u884c\u300d\u4e2d\u8f38\u5165:cmd\uff0c\u7136\u5f8c\u5728\u547d\u4ee4\u884c\u6a21\u5f0f\u4e2d\u8f38\u5165:tasklist \/svc\u3002\u7cfb\u7d71\u5217\u51fa\u5982\u57162\u6240\u793a\u7684\u670d\u52d9\u5217\u8868\u3002\u57162\u4e2d\u7d05\u6846\u5305\u570d\u8d77\u4f86\u7684\u5340\u57df\u5c31\u662fsvchost.exe\u555f\u52d5\u7684\u670d\u52d9\u5217\u8868\u3002\u5982\u679c\u4f7f\u7528\u7684\u662fWindows 2000\u7cfb\u7d71\u5247\u628a\u524d\u9762\u7684\u300ctasklist \/svc\u300d\u547d\u4ee4\u66ff\u63db\u70ba:\u300ctlist -s\u300d\u5373\u53ef\u3002\u5982\u679c\u4f60\u61f7\u7591\u8a08\u7b97\u6a5f\u6709\u53ef\u80fd\u88ab\u75c5\u6bd2\u611f\u67d3\uff0csvchost.exe\u7684\u670d\u52d9\u51fa\u73fe\u7570\u5e38\u7684\u8a71\u901a\u904e\u641c\u7d22svchost.exe\u6587\u4ef6\u5c31\u53ef\u4ee5\u767c\u73fe\u7570\u5e38\u60c5\u6cc1\u3002\u4e00\u822c \u53ea\u6703\u627e\u5230\u4e00\u500b\u5728:\u300cC:WindowsSystem32\u300d\u76ee\u9304\u4e0b\u7684svchost.exe\u7a0b\u5e8f\u3002\u5982\u679c\u4f60\u5728\u5176\u5b83\u76ee\u9304\u4e0b\u767c\u73fesvchost.exe\u7a0b\u5e8f\u7684 \u8a71\uff0c\u90a3\u5f88\u53ef\u80fd\u5c31\u662f\u4e2d\u6bd2\u4e86\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u9084\u6709\u4e00\u7a2e\u78ba\u8a8dsvchost.exe\u662f\u5426\u4e2d\u6bd2\u7684\u65b9\u6cd5\u662f\u5728\u4efb\u52d9\u7ba1\u7406\u5668\u4e2d\u5bdf\u770b\u9032\u7a0b\u7684\u57f7\u884c\u8def\u5f91\u3002\u4f46\u662f\u7531\u65bc\u5728Windows\u7cfb\u7d71\u81ea\u5e36\u7684\u4efb\u52d9\u7ba1\u7406\u5668\u4e0d\u80fd\u5bdf\u770b\u9032\u7a0b\u8def\u5f91\uff0c\u6240\u4ee5\u8981\u4f7f\u7528\u7b2c\u4e09\u65b9\u7684\u9032\u7a0b\u5bdf\u770b\u5de5\u5177\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u4e0a\u9762\u7c21\u55ae\u7684\u4ecb\u7d39\u4e86svchost.exe\u9032\u7a0b\u7684\u76f8\u95dc\u60c5\u6cc1\u3002\u7e3d\u800c\u8a00\u4e4b\uff0csvchost.exe\u662f\u4e00\u500b\u7cfb\u7d71\u7684\u6838\u5fc3\u9032 \u7a0b\uff0c\u4e26\u4e0d\u662f\u75c5\u6bd2\u9032\u7a0b\u3002\u4f46\u7531\u65bcsvchost.exe\u9032\u7a0b\u7684\u7279\u6b8a\u6027\uff0c\u6240\u4ee5\u75c5\u6bd2\u4e5f\u6703\u5343\u65b9\u767e\u8a08\u7684\u5165\u4fb5svchost.exe\u3002\u901a\u904e\u5bdf\u770bsvchost.exe\u9032 \u7a0b\u7684\u57f7\u884c\u8def\u5f91\u53ef\u4ee5\u78ba\u8a8d\u662f\u5426\u4e2d\u6bd2\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30003\u3001Services.exe\u9020\u6210CPU\u4f7f\u7528\u7387\u4f54\u7528100% <\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u75c7\u72c0<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5728\u57fa\u65bc Windows 2000 \u7684\u8a08\u7b97\u6a5f\u4e0a\uff0cServices.exe \u4e2d\u7684 CPU \u4f7f\u7528\u7387\u53ef\u80fd\u9593\u6b47\u6027\u5730\u9054\u5230100 %\uff0c\u4e26\u4e14\u8a08\u7b97\u6a5f\u53ef\u80fd\u505c\u6b62\u97ff\u61c9(\u639b\u8d77)\u3002\u51fa\u73fe\u6b64\u554f\u984c\u6642\uff0c\u9023\u63a5\u5230\u8a72\u8a08\u7b97\u6a5f(\u5982\u679c\u5b83\u662f\u6587\u4ef6\u670d\u52d9\u5668\u6216\u57df\u63a7\u5236\u5668)\u7684\u7528\u6236\u6703\u88ab\u65b7\u958b\u9023\u63a5\u3002\u60a8\u53ef\u80fd\u9084\u9700\u8981\u91cd\u65b0\u555f\u52d5\u8a08\u7b97\u6a5f\u3002 \u5982\u679c Esent.dll \u932f\u8aa4\u5730\u8655\u7406\u5c07\u6587\u4ef6\u5237\u65b0\u5230\u78c1\u76e4\u7684\u65b9\u5f0f\uff0c\u5247\u6703\u51fa\u73fe\u6b64\u75c7\u72c0\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u89e3\u6c7a\u65b9\u6848<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000Service Pack \u4fe1\u606f<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u8981\u89e3\u6c7a\u6b64\u554f\u984c\uff0c\u8acb\u7372\u53d6\u6700\u65b0\u7684 Microsoft Windows 2000 Service Pack\u3002\u6709\u95dc\u5176\u5b83\u4fe1\u606f\uff0c\u8acb\u55ae\u64ca\u4e0b\u9762\u7684\u6587\u7ae0\u7de8\u865f\uff0c\u4ee5\u67e5\u770b Microsoft \u77e5\u8b58\u5eab\u4e2d\u76f8\u61c9\u7684\u6587\u7ae0:<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000260910 \u5982\u4f55\u7372\u53d6\u6700\u65b0\u7684 Windows 2000 Service Pack<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u4fee\u5fa9\u7a0b\u5e8f\u4fe1\u606f<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000Microsoft \u63d0\u4f9b\u4e86\u53d7\u652f\u6301\u7684\u4fee\u88dc\u7a0b\u5e8f\uff0c\u4f46\u8a72\u7a0b\u5e8f\u53ea\u662f\u70ba\u4e86\u89e3\u6c7a\u672c\u6587\u6240\u4ecb\u7d39\u7684\u554f\u984c\u3002\u53ea\u6709\u8a08\u7b97\u6a5f\u9047\u5230\u672c\u6587\u63d0\u5230\u7684\u7279\u5b9a\u554f\u984c\u6642\u624d\u53ef\u61c9\u7528\u6b64\u4fee\u88dc\u7a0b\u5e8f\u3002\u6b64\u4fee\u88dc\u7a0b\u5e8f\u53ef\u80fd\u9084\u6703\u63a5\u53d7\u5176\u5b83\u4e00 \u4e9b\u6e2c\u8a66\u3002\u56e0\u6b64\uff0c\u5982\u679c\u9019\u500b\u554f\u984c\u6c92\u6709\u5c0d\u60a8\u9020\u6210\u56b4\u91cd\u7684\u5f71\u97ff\uff0cMicrosoft \u5efa\u8b70\u60a8\u7b49\u5f85\u5305\u542b\u6b64\u4fee\u88dc\u7a0b\u5e8f\u7684\u4e0b\u4e00\u500b Windows 2000 Service Pack\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u8981\u7acb\u5373\u89e3\u6c7a\u6b64\u554f\u984c\uff0c\u8acb\u8207\u300cMicrosoft \u7522\u54c1\u652f\u6301\u670d\u52d9\u300d\u806f\u7e6b\uff0c\u4ee5\u7372\u53d6\u6b64\u4fee\u88dc\u7a0b\u5e8f\u3002\u6709\u95dc\u300cMicrosoft \u7522\u54c1\u652f\u6301\u670d\u52d9\u300d\u96fb\u8a71\u865f\u78bc\u548c\u652f\u6301\u8cbb\u7528\u4fe1\u606f\u7684\u5b8c\u6574\u5217\u8868\uff0c\u8acb\u8a2a\u554f Microsoft Web \u7ad9\u9ede:<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u6ce8\u610f :\u7279\u6b8a\u60c5\u6cc1\u4e0b\uff0c\u5982\u679c Microsoft \u652f\u6301\u5c08\u696d\u4eba\u54e1\u78ba\u5b9a\u67d0\u500b\u7279\u5b9a\u7684\u66f4\u65b0\u7a0b\u5e8f\u80fd\u5920\u89e3\u6c7a\u60a8\u7684\u554f\u984c\uff0c\u53ef\u514d\u6536\u901a\u5e38\u60c5\u6cc1\u4e0b\u6536\u53d6\u7684\u96fb\u8a71\u652f\u6301\u670d\u52d9\u8cbb\u7528\u3002\u5c0d\u65bc\u7279\u5b9a\u66f4\u65b0\u7a0b\u5e8f\u7121\u6cd5\u89e3\u6c7a\u7684\u5176\u5b83\u652f\u6301\u554f\u984c\u548c\u4e8b\u9805\uff0c\u5c07\u6b63\u5e38\u6536\u53d6\u652f\u6301\u8cbb\u7528\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u4e0b\u8868\u5217\u51fa\u4e86\u6b64\u4fee\u88dc\u7a0b\u5e8f\u7684\u5168\u7403\u7248\u672c\u7684\u6587\u4ef6\u5c6c\u6027(\u6216\u66f4\u65b0\u7684\u5c6c\u6027)\u3002\u9019\u4e9b\u6587\u4ef6\u7684\u65e5\u671f\u548c\u6642\u9593\u6309\u5354\u8abf\u901a\u7528\u6642\u9593 (UTC) \u5217\u51fa\u3002\u67e5\u770b\u6587\u4ef6\u4fe1\u606f\u6642\uff0c\u5b83\u5c07\u8f49\u63db\u70ba\u672c\u5730\u6642\u9593\u3002\u8981\u77ad\u89e3 UTC \u8207\u672c\u5730\u6642\u9593\u4e4b\u9593\u7684\u6642\u5dee\uff0c\u8acb\u4f7f\u7528\u300c\u63a7\u5236\u9762\u677f\u300d\u4e2d\u7684\u300c\u65e5\u671f\u548c\u6642\u9593\u300d\u5de5\u5177\u4e2d\u7684 \u6642\u5340 \u9078\u9805\u5361\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u72c0\u614b<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000Microsoft \u5df2\u7d93\u78ba\u8a8d\u9019\u662f\u5728\u672c\u6587\u958b\u982d\u5217\u51fa\u7684 Microsoft \u7522\u54c1\u4e2d\u5b58\u5728\u7684\u554f\u984c\u3002\u6b64\u554f\u984c\u6700\u521d\u662f\u5728 Microsoft Windows 2000 Service Pack 4 \u4e2d\u66f4\u6b63\u7684\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30004\u3001\u6b63\u5e38\u8edf\u4ef6\u9020\u6210CPU\u4f7f\u7528\u7387\u4f54\u7528100%<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u9996\u5148\uff0c\u5982\u679c\u662f\u5f9e\u958b\u6a5f\u5f8c\u5c31\u767c\u751f\u4e0a\u8ff0\u60c5\u6cc1\u76f4\u5230\u95dc\u6a5f\u3002\u90a3\u5e7a\u5c31\u6709\u53ef\u80fd\u662f\u7531\u67d0\u500b\u96a8\u7cfb\u7d71\u540c\u6642\u767b\u9678\u7684\u8edf\u4ef6\u9020\u6210\u7684\u3002\u53ef\u4ee5\u901a\u904e\u904b\u884c \u8f38\u5165\u300cmsconfig\u300d\u6253\u958b\u300c\u7cfb\u7d71\u5be6\u7528\u914d\u7f6e\u5de5\u5177\u300d\uff0c\u9032\u5165\u300c\u555f\u52d5\u300d\u9078\u9805\u5361\u3002\u63a5\u8457\uff0c\u4f9d\u6b21\u53d6\u6d88\u53ef\u7591\u9078\u9805\u524d\u9762\u7684\u5c0d\u9264\uff0c\u7136\u5f8c\u91cd\u65b0\u555f\u52d5\u96fb\u8166\u3002\u53cd\u8986\u6e2c\u8a66\u76f4\u5230\u627e\u5230\u9020\u6210\u6545 \u969c\u7684\u8edf\u4ef6\u3002\u6216\u8005\u53ef\u4ee5\u901a\u904e\u4e00\u4e9b\u512a\u5316\u8edf\u4ef6\u5982\u300c\u512a\u5316\u5927\u5e2b\u300d\u9054\u5230\u4e0a\u8ff0\u76ee\u7684\u3002\u53e6:\u5982\u679c\u9375\u76e4\u5167\u6309\u9375\u5361\u4f4f\u4e5f\u53ef\u80fd\u9020\u6210\u958b\u6a5f\u5c31\u51fa\u73fe\u4e0a\u8ff0\u554f\u984c\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5982\u679c\u662f\u4f7f\u7528\u96fb\u8166\u9014\u4e2d\u51fa\u9805\u9019\u985e\u554f\u984c\uff0c\u53ef\u4ee5\u8abf\u51fa\u4efb\u52d9\u7ba1\u7406\u5668(WINXP CTRL+ALT+DEL WIN2000 CTRL+SHIFT\u300cESC)\uff0c\u9032\u5165\u300d\u9032\u7a0b\u300c\u9078\u9805\u5361\uff0c\u770b\u300dCPU\u300c\u6b04\uff0c\u5f9e\u88e1\u9762\u627e\u5230\u4f54\u7528\u8cc7\u6e90\u8f03\u9ad8\u7684\u7a0b\u5e8f(\u5176\u4e2dSYSTEM IDLE PROCESS\u662f\u5c6c\u65bc\u6b63\u5e38\uff0c\u5b83\u7684\u503c\u4e00\u822c\u90fd\u5f88\u9ad8\uff0c\u5b83\u7684\u4f5c\u7528\u662f\u544a\u8a34\u7576\u524d\u4f60\u53ef\u7528\u7684CPU\u8cc7\u6e90\u662f\u591a\u5c11\uff0c\u6240\u4ee5\u5b83\u7684\u503c\u8d8a\u9ad8\u8d8a\u597d)\u901a\u904e\u641c\u7d22\u529f\u80fd\u627e\u5230\u9019\u500b\u9032\u7a0b\u5c6c\u65bc\u54ea\u500b\u8edf \u4ef6\u3002\u7136\u5f8c\uff0c\u53ef\u4ee5\u901a\u904e\u5347\u7d1a\u3001\u95dc\u9589\u3001\u5378\u8f09\u9019\u500b\u8edf\u4ef6\u6216\u8005\u4e7e\u8106\u627e\u500b\u540c\u985e\u8edf\u4ef6\u66ff\u63db\uff0c\u554f\u984c\u5373\u53ef\u5f97\u5230\u89e3\u6c7a\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30005\u3001\u75c5\u6bd2\u3001\u6728\u99ac\u3001\u9593\u8adc\u8edf\u4ef6\u9020\u6210CPU\u4f7f\u7528\u7387\u4f54\u7528100%<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u51fa\u73feCPU\u4f54\u7528\u7387100% \u7684\u6545\u969c\u7d93\u5e38\u662f\u56e0\u70ba\u75c5\u6bd2\u6728\u99ac\u9020\u6210\u7684\uff0c\u6bd4\u5982\u9707\u76ea\u6ce2\u75c5\u6bd2\u3002\u61c9\u8a72\u9996\u5148\u66f4\u65b0\u75c5\u6bd2\u5eab\uff0c\u5c0d\u96fb\u8166\u9032\u884c\u5168\u6a5f\u6383\u7784 \u3002\u63a5\u8457\uff0c\u5728\u4f7f\u7528\u53cd\u9593\u8adc\u8edf\u4ef6Ad&mdash;Aware\uff0c\u6aa2\u67e5\u662f\u5426\u5b58\u5728\u9593\u8adc\u8edf\u4ef6\u3002\u8ad6\u58c7\u4e0a\u6709\u4e0d\u5c11\u670b\u53cb\u90fd\u9047\u5230\u904esvchost.exe\u4f54\u7528CPU100%\uff0c\u9019\u500b\u5f80\u5f80\u662f\u4e2d\u6bd2 \u7684\u8868\u73fe\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000svchost.exe Windows\u4e2d\u7684\u7cfb\u7d71\u670d\u52d9\u662f\u4ee5\u52d5\u614b\u93c8\u63a5\u5eab(DLL)\u7684\u5f62\u5f0f\u5be6\u73fe\u7684\uff0c\u5176\u4e2d\u4e00\u4e9b\u6703\u628a\u53ef\u57f7\u884c\u7a0b\u5e8f\u6307\u5411svchost.exe\uff0c\u7531\u5b83\u8abf\u7528\u76f8\u61c9\u670d\u52d9\u7684\u52d5\u614b\u93c8\u63a5\u5eab\u4e26 \u52a0\u4e0a\u76f8\u61c9\u53c3\u6578\u4f86\u555f\u52d5\u670d\u52d9\u3002\u6b63\u662f\u56e0\u70ba\u5b83\u7684\u7279\u6b8a\u6027\u548c\u91cd\u8981\u6027\uff0c\u4f7f\u5b83\u66f4\u5bb9\u6613\u6210\u70ba\u4e86\u4e00\u4e9b\u75c5\u6bd2\u6728\u99ac\u7684\u5bbf\u4e3b\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30006\u3001explorer.exe\u9032\u7a0b\u9020\u6210CPU\u4f7f\u7528\u7387\u4f54\u7528100%<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5728system.ini\u6587\u4ef6\u4e2d\uff0c\u5728[BOOT]\u4e0b\u9762\u6709\u500b\u300cshell=\u6587\u4ef6\u540d\u300d\u3002\u6b63\u78ba\u7684\u6587\u4ef6\u540d\u61c9\u8a72\u662f \u300cexplorer.exe\u300d\uff0c\u5982\u679c\u4e0d\u662f\u300cexplorer.exe\u300d\uff0c\u800c\u662f\u300cshell= explorer.exe \u7a0b\u5e8f\u540d\u300d\uff0c\u90a3\u5e7a\u5f8c\u9762\u8ddf\u8457\u7684\u90a3\u500b\u7a0b\u5e8f\u5c31\u662f\u300c\u6728\u99ac\u300d\u7a0b\u5e8f\uff0c\u5c31\u662f\u8aaa\u4f60\u5df2\u7d93\u4e2d\u300c\u6728\u99ac\u300d\u4e86\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5728\u8a3b\u518a\u8868\u4e2d\u7684\u60c5\u6cc1\u6700\u8907\u96dc\uff0c\u901a\u904eregedit\u547d\u4ee4\u6253\u958b\u8a3b\u518a\u8868\u7de8\u8f2f\u5668\uff0c\u5728\u9ede\u64ca\u81f3:\u300cHKEY-LOCAL- MACHINESoftwareMicrosoftWindowsCurrentVersionRun\u300d\u76ee\u9304\u4e0b\uff0c\u67e5\u770b\u9375\u503c\u4e2d\u6709\u6c92\u6709\u81ea\u5df1\u4e0d\u719f\u6089\u7684 \u81ea\u52d5\u555f\u52d5\u6587\u4ef6\uff0c\u64f4\u5c55\u540d\u70baEXE\uff0c\u9019\u88e1\u5207\u8a18:\u6709\u7684\u300c\u6728\u99ac\u300d\u7a0b\u5e8f\u751f\u6210\u7684\u6587\u4ef6\u5f88\u50cf\u7cfb\u7d71\u81ea\u8eab\u6587\u4ef6\uff0c\u60f3\u901a\u904e\u507d\u88dd\u77c7\u6df7\u904e\u95dc\uff0c\u5982\u300cAcid Battery v1.0\u6728\u99ac\u300d\uff0c\u5b83\u5c07\u8a3b\u518a\u8868\u300cHKEY-LOCAL-MACHINESOFTWAREMicrosoftWindows CurrentVersionRun\u300d\u4e0b\u7684<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000Explorer \u9375\u503c\u6539\u70baExplorer=\u300cC:Windowsexpiorer.exe\u300d\uff0c\u300c\u6728\u99ac\u300d\u7a0b\u5e8f\u8207\u771f\u6b63\u7684Explorer\u4e4b\u9593\u53ea\u6709\u300ci\u300d\u8207\u300cl\u300d\u7684\u5dee\u5225\u3002 \u7576\u7136\u5728\u8a3b\u518a\u8868\u4e2d\u9084\u6709\u5f88\u591a\u5730\u65b9\u90fd\u53ef\u4ee5\u96b1\u85cf\u300c\u6728\u99ac\u300d\u7a0b\u5e8f\uff0c\u5982:\u300cHKEY-CURRENT-USERSoftwareMicrosoftWindows CurrentVersionRun\u300d\u3001\u300cHKEY-USERS****SoftwareMicrosoftWindows CurrentVersionRun\u300d\u7684\u76ee\u9304\u4e0b\u90fd\u6709\u53ef\u80fd\uff0c\u6700\u597d\u7684\u8fa6\u6cd5\u5c31\u662f\u5728\u300cHKEY-LOCAL-MACHINESoftware MicrosoftWindowsCurrentVersionRun\u300d\u4e0b\u627e\u5230\u300c\u6728\u99ac\u300d\u7a0b\u5e8f\u7684\u6587\u4ef6\u540d\uff0c\u518d\u5728\u6574\u500b\u8a3b\u518a\u8868\u4e2d\u641c\u7d22\u5373\u53ef\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30007\u3001\u8d85\u7dda\u7a0b\u5c0e\u81f4CPU\u4f7f\u7528\u7387\u4f54\u7528100% <br \/>\u3000\u3000\u9019\u985e\u6545\u969c\u7684\u5171\u540c\u539f\u56e0\u5c31\u662f\u90fd\u4f7f\u7528\u4e86\u5177\u6709\u8d85\u7dda\u7a0b\u529f\u80fd\u7684P4 CPU\u3002\u6211\u67e5\u627e\u4e86\u4e00\u4e9b\u8cc7\u6599\u90fd\u6c92\u6709\u660e\u78ba\u7684\u539f\u56e0\u89e3\u91cb\u3002\u64da\u4e00\u4e9b\u7db2\u53cb\u7e3d\u7d50\u8d85\u7dda\u7a0b\u4f3c\u4e4e\u548c\u5929\u7db2\u9632\u706b\u7246\u6709\u885d\u7a81\uff0c\u53ef\u4ee5\u901a\u904e\u5378\u8f09\u5929\u7db2\u4e26\u5b89\u88dd\u5176\u5b83\u9632\u706b\u7246\u89e3\u6c7a\uff0c\u4e5f\u53ef\u4ee5\u901a\u904e\u5728BIOS\u4e2d\u95dc\u9589\u8d85\u7dda\u7a0b\u529f\u80fd\u89e3\u6c7a\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30008\u3001AVI\u8996\u983b\u6587\u4ef6\u9020\u6210CPU\u4f7f\u7528\u7387\u4f54\u7528100%<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5728Windows XP\u4e2d\uff0c\u55ae\u64ca\u4e00\u500b\u8f03\u5927\u7684AVI\u8996\u983b\u6587\u4ef6\u5f8c\uff0c\u53ef\u80fd\u6703\u51fa\u73fe\u7cfb\u7d71\u5047\u6b7b\u73fe\u8c61\uff0c\u4e26\u4e14\u9020\u6210exploere.exe\u9032\u7a0b\u7684\u4f7f\u7528\u7387100%\uff0c\u9019\u662f\u56e0\u70ba\u7cfb\u7d71\u8981\u5148\u6383\u7784\u8a72\u6587 \u4ef6\uff0c\u4e26\u6aa2\u67e5\u6587\u4ef6\u6240\u6709\u90e8\u5206\uff0c\u5efa\u7acb\u7d22\u5f15\u3002\u5982\u679c\u6587\u4ef6\u8f03\u5927\u5c31\u6703\u9700\u8981\u8f03\u9577\u6642\u9593\u4e26\u9020\u6210CPU\u4f54\u7528\u7387100%\u3002\u89e3\u6c7a\u65b9\u6cd5:\u53f3\u9375\u55ae\u64ca\u4fdd\u5b58\u8996\u983b\u6587\u4ef6\u7684\u6587\u4ef6\u593e\uff0c\u9078\u64c7\u300d\u5c6c\u6027&mdash; &gt;\u5e38\u898f&mdash;&gt;\u9ad8\u7d1a\u300c\uff0c\u53bb\u6389\u300d\u70ba\u4e86\u5feb\u901f\u641c\u7d22\uff0c\u5141\u8a31\u7d22\u5f15\u670d\u52d9\u7de8\u88fd\u8a72\u6587\u4ef6\u593e\u7684\u7d22\u5f15\u300c\u524d\u9762\u5fa9\u9078\u6846\u7684\u5c0d\u9264\u5373\u53ef\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30009\u3001\u6bba\u6bd2\u8edf\u4ef6CPU\u4f7f\u7528\u7387\u4f54\u7528100%<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u73fe\u5728\u7684\u6bba\u6bd2\u8edf\u4ef6\u4e00\u822c\u90fd\u52a0\u5165\u4e86\uff0c\u5c0d\u7db2\u9801\u3001\u90f5\u4ef6\u3001\u500b\u4eba\u96b1\u79c1\u7684\u5373\u6642\u76e3\u7a7a\u529f\u80fd\uff0c\u9019\u6a23\u7121\u7591\u6703\u52a0\u5927\u7cfb\u7d71\u7684\u8ca0\u64d4\u3002\u6bd4\u5982:\u5728\u73a9\u904a\u6232\u7684\u6642\u5019\uff0c\u6703\u975e\u5e38\u7de9\u6162\u3002\u95dc\u9589\u8a72\u6bba\u6bd2\u8edf\u4ef6\u662f\u89e3\u6c7a\u5f97\u6700\u76f4\u63a5\u8fa6\u6cd5\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u300010\u3001\u8655\u7406\u8f03\u5927\u7684Word\u6587\u4ef6\u6642CPU\u4f7f\u7528\u7387\u904e\u9ad8<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u4e0a\u8ff0\u554f\u984c\u4e00\u822c\u9084\u6703\u9020\u6210\u96fb\u8166\u5047\u6b7b\uff0c\u9019\u4e9b\u90fd\u662f\u56e0\u70baWORD\u7684\u62fc\u5beb\u548c\u8a9e\u6cd5\u6aa2\u67e5\u9020\u6210\u7684\uff0c\u53ea\u8981\u6253\u958bWORD\u7684\u300c\u5de5\u5177&mdash;\u9078\u9805\u300d\uff0c\u9032\u5165\u300c\u62fc\u5beb\u548c\u8a9e\u6cd5\u300d\u9078\u9805\u5361\uff0c\u5c07\u5176\u4e2d\u7684\u300c\u9375\u5165\u6642\u6aa2\u67e5\u62fc\u5beb\u300d\u548c\u300c\u9375\u5165\u6642\u6aa2\u67e5\u8a9e\u6cd5\u300d\u5169\u9805\u524d\u9762\u7684\u5fa9\u9078\u6846\u4e2d\u7684\u9264\u53bb\u6389\u5373\u53ef\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u300011\u3001\u7db2\u7d61\u9023\u63a5\u5c0e\u81f4CPU\u4f7f\u7528\u7387\u4f54\u7528100%<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u7576\u4f60\u7684Windows2000\/xp\u4f5c\u70ba\u670d\u52d9\u5668\u6642\uff0c\u6536\u5230\u4f86\u81ea\u7aef\u53e3445\u4e0a\u7684\u9023\u63a5\u8acb\u6c42\u5f8c\uff0c\u7cfb\u7d71\u5c07\u5206\u914d\u5167\u5b58\u548c\u5c11\u91cf CPU\u8cc7\u6e90\u4f86\u70ba\u9019\u4e9b\u9023\u63a5\u63d0\u4f9b\u670d\u52d9\uff0c\u7576\u8ca0\u8377\u904e\u91cd\uff0c\u5c31\u6703\u51fa\u73fe\u4e0a\u8ff0\u60c5\u6cc1\u3002\u8981\u89e3\u6c7a\u9019\u500b\u554f\u984c\u53ef\u4ee5\u901a\u904e\u4fee\u6539\u8a3b\u518a\u8868\u4f86\u89e3\u6c7a\uff0c\u6253\u958b\u8a3b\u518a\u8868\uff0c\u627e\u5230HKEY&mdash;LOCAL&mdash; MACHNESYSTEMCurrentControlSetServiceslanmanserver\uff0c\u5728\u53f3\u9762\u65b0\u5efa\u4e00\u500b\u540d\u70ba&quot;\uff1b maxworkitems&quot;\uff1b\u7684DWORD\u503c.\u7136\u5f8c\u96d9\u64ca\u8a72\u503c\uff0c\u5982\u679c\u4f60\u7684\u96fb\u8166\u6709512\u4ee5\u4e0a\u5167\u5b58\uff0c\u5c31\u8a2d\u7f6e\u70ba&quot;\uff1b1024&quot;\uff1b\uff0c\u5982\u679c\u5c0f\u65bc512\uff0c\u5c31\u8a2d\u7f6e\u70ba 256.<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u4e00\u4e9b\u4e0d\u5b8c\u5584\u7684\u9a45\u52d5\u7a0b\u5e8f\u4e5f\u53ef\u4ee5\u9020\u6210CPU\u4f7f\u7528\u7387\u904e\u9ad8<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u7d93\u5e38\u4f7f\u7528\u5f85\u6a5f\u529f\u80fd\uff0c\u4e5f\u6703\u9020\u6210\u7cfb\u7d71\u81ea\u52d5\u95dc\u9589\u786c\u76e4DMA\u6a21\u5f0f\u3002\u9019\u4e0d\u50c5\u6703\u4f7f\u7cfb\u7d71\u6027\u80fd\u5927\u5e45\u5ea6\u4e0b\u964d\uff0c\u7cfb\u7d71\u555f\u52d5\u901f\u5ea6\u8b8a\u6162\uff0c\u4e5f\u6703\u4f7f\u662f\u7cfb\u7d71\u5728\u904b\u884c\u4e00\u4e9b\u5927\u578b\u8edf\u4ef6\u548c\u904a\u6232\u6642CPU\u4f7f\u7528\u7387100%\uff0c\u7522\u751f\u505c\u9813\u3002 <\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u9032\u7a0b\u4f54\u7528CPU 100%\u6642\u53ef\u80fd\u4e2d\u7684\u75c5\u6bd2 <\/font><\/p>\n<p><font size=\"2\">\u3000\u3000system Idle Process<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u9032\u7a0b\u6587\u4ef6: [system process] or [system process]<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u9032\u7a0b\u540d\u7a31: Windows\u5167\u5b58\u8655\u7406\u7cfb\u7d71\u9032\u7a0b<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u63cf \u8ff0: Windows\u9801\u9762\u5167\u5b58\u7ba1\u7406\u9032\u7a0b\uff0c\u64c1\u67090\u7d1a\u512a\u5148\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u4ecb \u7d39:\u8a72\u9032\u7a0b\u4f5c\u70ba\u55ae\u7dda\u7a0b\u904b\u884c\u5728\u6bcf\u500b\u8655\u7406\u5668\u4e0a\uff0c\u4e26\u5728\u7cfb\u7d71\u4e0d\u8655\u7406\u5176\u5b83\u7dda\u7a0b\u7684\u6642\u5019\u5206\u6d3e\u8655\u7406\u5668\u7684\u6642\u9593\u3002\u5b83\u7684CPU\u4f54\u7528\u7387\u8d8a\u5927\u8868\u793a\u53ef\u4f9b\u5206\u914d\u7684CPU\u8cc7\u6e90\u8d8a\u591a\uff0c\u6578\u5b57\u8d8a\u5c0f\u5247\u8868\u793aCPU\u8cc7\u6e90\u7dca\u5f35\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000Spoolsv.exe<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u9032\u7a0b\u6587\u4ef6: spoolsv or Spoolsv.exe<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u9032\u7a0b\u540d\u7a31: Printer Spooler Service<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u63cf \u8ff0: Windows\u6253\u5370\u4efb\u52d9\u63a7\u5236\u7a0b\u5e8f\uff0c\u7528\u4ee5\u6253\u5370\u6a5f\u5c31\u7dd2\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u4ecb \u7d39:\u7de9\u885d(spooler)\u670d\u52d9\u662f\u7ba1\u7406\u7de9\u885d\u6c60\u4e2d\u7684\u6253\u5370\u548c\u50b3\u771f\u4f5c\u696d\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000Spoolsv.exe&rarr;\u6253\u5370\u4efb\u52d9\u63a7\u5236\u7a0b\u5e8f\uff0c\u4e00\u822c\u6703\u5148\u52a0\u8f09\u4ee5\u4f9b\u5217\u8868\u6a5f\u6253\u5370\u524d\u7684\u6e96\u5099\u5de5\u4f5c<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000Spoolsv.exe\uff0c\u5982\u679c\u5e38\u589e\u9ad8\uff0c\u6709\u53ef\u80fd\u662f\u75c5\u6bd2\u611f\u67d3\u6240\u81f4<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u76ee\u524d\u5e38\u898b\u7684\u662f:<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000Backdoor\/Byshell(\u53c8\u53eb\u96b1\u5f62\u5927\u76dc\u3001\u96b1\u5f62\u6bba\u624b\u3001\u897f\u9580\u6176\u75c5\u6bd2)<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5371\u5bb3\u7a0b\u5ea6:\u4e2d<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u53d7\u5f71\u97ff\u7684\u7cfb\u7d71: Windows 2000\uff0c Windows XP\uff0c Windows Server 2003<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u672a\u53d7\u5f71\u97ff\u7684\u7cfb\u7d71: Windows 95\uff0c Windows 98\uff0c Windows Me\uff0c Windows NT\uff0c Windows 3.x\uff0c Macintosh\uff0c Unix\uff0c Linux\uff0c<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u75c5\u6bd2\u5371\u5bb3:<\/font><\/p>\n<p><font size=\"2\">\u3000\u30001. \u751f\u6210\u75c5\u6bd2\u6587\u4ef6<\/font><\/p>\n<p><font size=\"2\">\u3000\u30002. \u63d2\u5165\u6b63\u5e38\u7cfb\u7d71\u6587\u4ef6\u4e2d<\/font><\/p>\n<p><font size=\"2\">\u3000\u30003. \u4fee\u6539\u7cfb\u7d71\u8a3b\u518a\u8868<\/font><\/p>\n<p><font size=\"2\">\u3000\u30004. \u53ef\u88ab\u9ed1\u5ba2\u9060\u7a0b\u63a7\u5236<\/font><\/p>\n<p><font size=\"2\">\u3000\u30005. \u8eb2\u907f\u53cd\u75c5\u6bd2\u8edf\u4ef6\u7684\u67e5\u6bba<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u7c21\u55ae\u7684\u5f8c\u9580\u6728\u99ac\uff0c\u767c\u4f5c\u6703\u522a\u9664\u81ea\u8eab\u7a0b\u5e8f\uff0c\u4f46\u5c07\u81ea\u8eab\u7a0b\u5e8f\u5957\u5165\u53ef\u57f7\u884c\u7a0b\u5e8f\u5167(\u5982:exe)\uff0c\u4e26\u8207\u8a08\u7b97\u6a5f\u7684\u901a\u53e3(TCP \u7aef\u53e3138)\u639b\u9264\uff0c\u76e3\u63a7\u8a08\u7b97\u6a5f\u7684\u4fe1\u606f\u3001\u5bc6\u78bc\uff0c\u751a\u81f3\u662f\u9375\u76e4\u64cd\u4f5c\uff0c\u4f5c\u70ba\u56de\u50b3\u7684\u4fe1\u606f\uff0c\u4e26\u4e0d\u6642\u9a45\u52d5\u7aef\u53e3\uff0c\u4ee5\u7b49\u5019\u50b3\u9032\u7684\u547d\u4ee4\uff0c\u7531\u65bc\u8a72\u6728\u99ac\u4e0d\u80fd\u5224\u5225\u4f55\u8005\u662f\u6b63\u78ba\u7684\u7aef\u53e3\uff0c \u6240\u4ee5\u8ca0\u8cac\u8f38\u51fa\u7684\u5217\u8868\u6a5f\u4e5f\u662f\u5176\u9a45\u52d5\u5c0d\u8c61\uff0c\u4ee5\u81f4Spoolsv.exe\u7684\u4f7f\u7528\u7570\u5e38\u983b\u7e41&#8230;&#8230;<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000Backdoor.Win32.Plutor<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u7834\u58de\u65b9\u6cd5:\u611f\u67d3PE\u6587\u4ef6\u7684\u5f8c\u9580\u7a0b\u5e8f<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u75c5\u6bd2\u63a1\u7528VC\u7de8\u5beb\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u75c5\u6bd2\u904b\u884c\u5f8c\u6709\u4ee5\u4e0b\u884c\u70ba:<\/font><\/p>\n<p><font size=\"2\">\u3000\u30001\u3001\u5c07\u75c5\u6bd2\u6587\u4ef6\u8907\u88fd\u5230%WINDIR%\u76ee\u9304\u4e0b\uff0c\u6587\u4ef6\u540d\u70ba&quot;\uff1bSpoolsv.exe&quot;\uff1b\uff0c\u4e26\u8a72\u75c5\u6bd2\u6587\u4ef6\u904b\u884c\u3002 &quot;\uff1bSpoolsv.exe&quot;\uff1b\u6587\u4ef6\u904b\u884c\u5f8c\u91cb\u653e\u6587\u4ef6\u540d\u70ba&quot;\uff1bmscheck.exe&quot;\uff1b\u7684\u6587\u4ef6\u5230%SYSDIR%\u76ee\u9304\u4e0b\uff0c\u8a72\u6587\u4ef6\u7684\u4e3b\u8981\u529f\u80fd\u662f\u6bcf\u6b21\u6fc0\u6d3b\u6642\u904b \u884c&quot;\uff1bSpoolsv.exe&quot;\uff1b\u6587\u4ef6\u3002\u5982\u679c\u6240\u904b\u884c\u7684\u6587\u4ef6\u662f\u611f\u67d3\u4e86\u6b63\u5e38\u6587\u4ef6\u7684\u75c5\u6bd2\u6587\u4ef6\uff0c\u75c5\u6bd2\u5c07\u6703\u628a\u8a72\u6587\u4ef6\u6062\u5fa9\u4e26\u5c07\u5176\u904b\u884c\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30002\u3001\u4fee\u6539\u8a3b\u518a\u8868\u4ee5\u4e0b\u9375\u503c:<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentversionRun<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u589e\u52a0\u6578\u64da\u9805:&quot;\uff1bMicrosoft Script Checker&quot;\uff1b \u6578\u64da\u70ba:&quot;\uff1bMSCHECK.EXE \/START&quot;\uff1b<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u4fee\u6539\u8a72\u9805\u8a3b\u518a\u8868\u4f7f&quot;\uff1bMSCHECK.EXE&quot;\uff1b\u6587\u4ef6\u6bcf\u6b21\u7cfb\u7d71\u6fc0\u6d3b\u6642\u90fd\u5c07\u88ab\u904b\u884c\uff0c\u800c&quot;\uff1bMSCHECK.EXE&quot;\uff1b\u7528\u65bc\u904b\u884c&quot;\uff1bSpoolsv.exe&quot;\uff1b\u6587\u4ef6\uff0c\u5f9e\u800c\u9054\u5230\u75c5\u6bd2\u81ea\u6fc0\u6d3b\u7684\u76ee\u7684\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30003\u3001\u5275\u5efa\u4e00\u500b\u7dda\u7a0b\u7528\u65bc\u611f\u67d3C\u76e4\u4e0b\u7684PE\u6587\u4ef6\uff0c\u4f46\u662f\u6587\u4ef6\u8def\u5f91\u4e2d\u5305\u542b&quot;\uff1bwinnt&quot;\uff1b\u3001&quot;\uff1bWindows&quot;\uff1b\u5b57 \u7b26\u4e32\u7684\u6587\u4ef6\u4e0d\u611f\u67d3\u3002\u53e6\u5916\uff0c\u8a72\u75c5\u6bd2\u9084\u6703\u679a\u8209\u5c40\u57df\u7db2\u4e2d\u7684\u5171\u4eab\u76ee\u9304\u4e26\u8a66\u5716\u5c0d\u9019\u4e9b\u76ee\u9304\u4e0b\u7684\u6587\u4ef6\u9032\u884c\u611f\u67d3\u3002\u8a72\u75c5\u6bd2\u611f\u67d3\u6587\u4ef6\u65b9\u6cd5\u6bd4\u8f03\u7c21\u55ae\uff0c\u5c07\u6b63\u5e38\u6587\u4ef6\u7684\u524d 0x16000\u500b\u5b57\u7bc0\u66ff\u63db\u70ba\u75c5\u6bd2\u6587\u4ef6\u4e2d\u7684\u6578\u64da\uff0c\u4e26\u5c07\u539f\u4f860x16000\u500b\u5b57\u7bc0\u7684\u6578\u64da\u63d2\u5165\u6240\u611f\u67d3\u7684\u6587\u4ef6\u5c3e\u90e8\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30004\u3001\u8a66\u5716\u8207\u5c40\u57df\u7db2\u5167\u540d\u70ba&quot;\uff1badmin&quot;\uff1b\u7684\u90f5\u69fd\u806f\u7e6b\uff0c\u5275\u5efa\u540d\u70ba&quot;\uff1bclient&quot;\uff1b\u7684\u90f5\u69fd\u7528\u65bc\u63a5\u6536\u5176\u63a7\u5236\u7aef\u6240\u767c\u9001\u7684\u547d\u4ee4\uff0c\u70ba\u5176\u63a7\u5236\u7aef\u63d0\u4f9b\u4ee5\u4e0b\u9060\u7a0b\u63a7\u5236\u670d\u52d9:<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u986f\u793a\u6216\u96b1\u85cf\u6307\u5b9a\u7a97\u53e3\u3001\u5c4f\u5e55\u622a\u53d6\u3001\u63a7\u5236CDROM\u3001\u95dc\u9589\u8a08\u7b97\u5668\u3001\u8a3b\u92b7\u3001\u7834\u58de\u786c\u76e4\u6578\u64da\u3002 <\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u90a3\u4e9b\u75c5\u6bd2\u6703\u9020\u6210CPU\u4f54\u6709\u7387\u904e\u9ad8 <\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u9707\u76ea\u6ce2\u8815\u87f2<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5229\u7528\u5fae\u8edf\u64cd\u4f5c\u7cfb\u7d71\u7684LSASS\u7de9\u885d\u5340\u6ea2\u51fa\u6f0f\u6d1e\u9032\u884c\u9060\u7a0b\u4e3b\u52d5\u653b\u64ca\u548c\u50b3\u67d3\uff0c\u5c0e\u81f4\u7cfb\u7d71\u7570\u5e38\u548c\u7db2\u7d61\u56b4\u91cd\u64c1\u585e\uff0c\u5177\u6709\u6975\u5f37\u7684\u5371\u5bb3\u6027\uff0c\u75c5\u6bd2\u5982\u679c\u653b\u64ca\u6210\u529f\uff0c\u5247\u6703\u4f54\u7528\u5927\u91cf\u7cfb\u7d71\u8cc7\u6e90\uff0c\u4f7fCPU\u4f54\u7528\u7387\u9054\u5230100%\uff0c\u51fa\u73fe\u96fb\u8166\u904b\u884c\u7570\u5e38\u7de9\u6162\u7684\u73fe\u8c61\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5982\u679c\u4e2d\u4e86\u9019\u7a2e\u75c5\u6bd2\u53ef\u63a1\u7528\u4e0b\u9762\u7684\u56db\u7a2e\u65b9\u6cd5\u9032\u884c\u6e05\u9664\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30001\u3001\u65b7\u7db2\u6253\u88dc\u4e01<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5982\u679c\u4e0d\u7d66\u7cfb\u7d71\u6253\u4e0a\u76f8\u61c9\u7684\u6f0f\u6d1e\u88dc\u4e01\uff0c\u5247\u9023\u7db2\u5f8c\u4f9d\u7136\u6703\u906d\u53d7\u5230\u8a72\u75c5\u6bd2\u7684\u653b\u64ca\uff0c\u7528\u6236\u61c9\u8a72\u5148\u4e0b\u8f09\u76f8\u61c9\u7684\u6f0f\u6d1e\u88dc\u4e01\u7a0b\u5e8f\uff0c\u7136\u5f8c\u65b7\u958b\u7db2\u7d61\uff0c\u904b\u884c\u88dc\u4e01\u7a0b\u5e8f\uff0c\u7576\u88dc\u4e01\u5b89\u88dd\u5b8c\u6210\u5f8c\u518d\u4e0a\u7db2\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30002\u3001\u6e05\u9664\u5167\u5b58\u4e2d\u7684\u75c5\u6bd2\u9032\u7a0b<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u8981\u60f3\u5fb9\u5e95\u6e05\u9664\u8a72\u75c5\u6bd2\uff0c\u61c9\u8a72\u5148\u6e05\u9664\u5167\u5b58\u4e2d\u7684\u75c5\u6bd2\u9032\u7a0b\uff0c\u7528\u6236\u53ef\u4ee5\u6309CTRL+SHIFT+ESC\u4e09\u6216\u8005\u53f3\u9375\u55ae\u64ca\u4efb\u52d9\u6b04\uff0c\u5728\u5f48\u51fa\u83dc\u55ae\u4e2d\u9078\u64c7\u300c\u4efb\u52d9\u7ba1\u7406\u5668\u300d\u6253\u958b\u4efb\u52d9\u7ba1\u7406\u5668\u754c\u9762\uff0c\u7136\u5f8c\u5728\u5167\u5b58\u4e2d\u67e5\u627e\u540d\u70ba\u300cavserve.exe\u300d\u7684\u9032\u7a0b\uff0c\u627e\u5230\u5f8c\u76f4\u63a5\u5c07\u5b83\u7d50\u675f\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30003\u3001\u522a\u9664\u75c5\u6bd2\u6587\u4ef6<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u75c5\u6bd2\u611f\u67d3\u7cfb\u7d71\u6642\u6703\u5728\u7cfb\u7d71\u5b89\u88dd\u76ee\u9304(\u9ed8\u8a8d\u70baC:WINNT)\u4e0b\u7522\u751f\u4e00\u500b\u540d\u70baavserve.exe\u7684\u75c5\u6bd2\u6587\u4ef6\uff0c \u4e26\u5728\u7cfb\u7d71\u76ee\u9304\u4e0b(\u9ed8\u8a8d\u70baC:WINNTSystem32)\u751f\u6210\u4e00\u4e9b\u540d\u70ba&lt;\uff1b\u96a8\u6a5f\u5b57\u7b26\u4e32&gt;\uff1b_UP.exe\u7684\u75c5\u6bd2\u6587\u4ef6\uff0c\u7528\u6236\u53ef\u4ee5\u67e5\u627e\u9019\u4e9b\u6587 \u4ef6\uff0c\u627e\u5230\u5f8c\u522a\u9664\uff0c\u5982\u679c\u7cfb\u7d71\u63d0\u793a\u522a\u9664\u6587\u4ef6\u5931\u6557\uff0c\u5247\u7528\u6236\u9700\u8981\u5230\u5b89\u5168\u6a21\u5f0f\u4e0b\u6216DOS\u7cfb\u7d71\u4e0b\u522a\u9664\u9019\u4e9b\u6587\u4ef6\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30004\u3001\u522a\u9664\u8a3b\u518a\u8868\u9375\u503c<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u8a72\u75c5\u6bd2\u6703\u5728\u96fb\u8166\u8a3b\u518a\u8868\u7684HKEY_LOCAL_MACHINESoftwareMicrosoft WindowsCurrentversionRun\u9805\u4e2d\u5efa\u7acb\u540d\u70ba\u300cavserve.exe\u300d\uff0c\u5167\u5bb9\u70ba:\u300c%Windows% avserve.exe\u300d\u7684\u75c5\u6bd2\u9375\u503c\uff0c\u70ba\u4e86\u9632\u6b62\u75c5\u6bd2\u4e0b\u6b21\u7cfb\u7d71\u555f\u52d5\u6642\u81ea\u52d5\u904b\u884c\uff0c\u7528\u6236\u61c9\u8a72\u5c07\u8a72\u9375\u503c\u522a\u9664\uff0c\u65b9\u6cd5\u662f\u5728\u300c\u904b\u884c\u300d\u83dc\u55ae\u4e2d\u9375\u5165\u300cREGEDIT\u300d \u7136\u5f8c\u8abf\u51fa\u8a3b\u518a\u8868\u7de8\u8f2f\u5668\uff0c\u627e\u5230\u8a72\u75c5\u6bd2\u9375\u503c\uff0c\u7136\u5f8c\u76f4\u63a5\u522a\u9664\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000bride\u75c5\u6bd2<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u6b64\u75c5\u6bd2\u53ef\u4ee5\u5728Windows 2000\u3001Windows XP\u7b49\u64cd\u4f5c\u7cfb\u7d71\u74b0\u5883\u4e0b\u6b63\u5e38\u904b\u884c\uff0c\u75c5\u6bd2\u904b\u884c\u6642\u6703\u91cb\u653e\u51fa\u4e00\u500bFUNLOVE\u75c5\u6bd2\u4e26\u5c07\u4e4b\u57f7\u884c\uff0c\u800cFUNLOVE\u75c5\u6bd2\u6703\u5728\u8a08\u7b97\u6a5f\u4e2d\u5927\u91cf\u7e41\u6b96\uff0c\u9020\u6210\u7cfb\u7d71\u8b8a\u6162\uff0c\u7db2\u7d61\u963b\u585e\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u75c5\u6bd2\u6e05\u9664\u65b9\u6cd5<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u6b64\u75c5\u6bd2\u53ef\u4ee5\u7528\u8da8\u52e2\u3001\u8afe\u9813\u3001\u745e\u661f\u3001\u91d1\u5c71\u548c\u6c5f\u6c11\u7b49\u6bba\u6bd2\u8edf\u4ef6\u9032\u884c\u6e05\u9664\u3002 <\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5c0f\u77e5\u8b58:\u7cfb\u7d71\u9032\u7a0b <\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u4e00\u6b3e\u597d\u7684\u9632\u706b\u7246\u4e26\u4e0d\u80fd\u767c\u73fe\u6240\u6709\u75c5\u6bd2\uff1b\u4e00\u500b\u597d\u7684\u6bba\u6bd2\u8edf\u4ef6\u4e26\u4e0d\u80fd\u6bb2\u6ec5\u6240\u6709\u7684\u5e36\u6bd2\u7a0b\u5e8f!\u9047\u5230\u9019\u4e9b\u60c5\u6cc1\u6211\u5011\u8a72\u505a\u4f55\u8655\u7406\u5462?\u5f88\u7c21\u55ae&mdash;&mdash;\u624b\u5de5\u6bba\u6bd2\u3002\u800c\u8981\u8ad6\u5230\u624b\u5de5\u6bba\u6bd2\uff0c\u5c31\u4e0d\u80fd\u4e0d\u63d0\u5230\u7cfb\u7d71\u9032\u7a0b\u4e86\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u9032\u7a0b\u3001\u75c5\u6bd2?<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u66f8\u4e0a\u8aaa:\u300c\u9032\u7a0b\u70ba\u61c9\u7528\u7a0b\u5e8f\u7684\u904b\u884c\u5be6\u4f8b\uff0c\u662f\u61c9\u7528\u7a0b\u5e8f\u7684\u4e00\u6b21\u52d5\u614b\u57f7\u884c\u3002\u300d\u770b\u4f3c\u9ad8\u6df1\uff0c\u6211\u5011\u53ef\u4ee5\u7c21\u55ae\u5730\u7406\u89e3\u70ba:\u5b83\u662f\u64cd\u4f5c \u7cfb\u7d71\u7576\u524d\u904b\u884c\u7684\u57f7\u884c\u7a0b\u5e8f\u3002\u5728\u7cfb\u7d71\u7576\u524d\u904b\u884c\u7684\u57f7\u884c\u7a0b\u5e8f\u88e1\u5305\u62ec:\u7cfb\u7d71\u7ba1\u7406\u8a08\u7b97\u6a5f\u500b\u9ad4\u548c\u5b8c\u6210\u5404\u7a2e\u64cd\u4f5c\u6240\u5fc5\u9700\u7684\u7a0b\u5e8f\uff1b\u7528\u6236\u958b\u555f\u3001\u57f7\u884c\u7684\u984d\u5916\u7a0b\u5e8f\uff0c\u7576\u7136\u4e5f\u5305\u62ec\u7528\u6236\u4e0d \u77e5\u9053\uff0c\u800c\u81ea\u52d5\u904b\u884c\u7684\u975e\u6cd5\u7a0b\u5e8f(\u5b83\u5011\u5c31\u6709\u53ef\u80fd\u662f\u75c5\u6bd2\u7a0b\u5e8f)\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5371\u5bb3\u8f03\u5927\u7684\u53ef\u57f7\u884c\u75c5\u6bd2\u540c\u6a23\u4ee5\u300c\u9032\u7a0b\u300d\u5f62\u5f0f\u51fa\u73fe\u5728\u7cfb\u7d71\u5167\u90e8(\u4e00\u4e9b\u75c5\u6bd2\u53ef\u80fd\u4e26\u4e0d\u88ab\u9032\u7a0b\u5217\u8868\u986f\u793a\uff0c\u5982\u300c\u5b8f\u75c5\u6bd2\u300d)\uff0c\u90a3\u5e7a\u53ca\u6642\u67e5\u770b\u4e26\u6e96\u78ba\u6bba\u6389\u975e\u6cd5\u9032\u7a0b\u5c0d\u65bc\u300c\u624b\u5de5\u6bba\u6bd2\u6709\u8d77\u8457\u95dc\u9375\u6027\u7684\u4f5c\u7528\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5982\u4f55\u6253\u958b\u7cfb\u7d71\u9032\u7a0b\u5217\u8868?<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u8981\u901a\u904e\u9032\u7a0b\u5217\u8868\u67e5\u770b\u7cfb\u7d71\u662f\u5426\u67d3\u6bd2\uff0c\u5fc5\u9808\u6253\u958b\u7576\u524d\u7684\u57f7\u884c\u7a0b\u5e8f\u9032\u7a0b\u5217\u8868\uff0cMicrosoft\u7684\u6bcf\u7a2e\u7cfb\u7d71\u90fd\u6709\u76f8\u61c9\u7684\u6253\u958b\u65b9\u6cd5\uff0c\u4f46\u80fd\u5920\u986f\u793a\u7684\u80fd\u529b\u537b\u56e0(\u7cfb\u7d71)\u4e0d\u540c\uff0c\u6709\u6240\u5dee\u7570:<\/font><\/p>\n<p><font size=\"2\">\u3000\u30001.Windows 98 \/Me\u7cfb\u7d71<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u6253\u958b\u7cfb\u7d71\u9032\u7a0b\u7684\u65b9\u5f0f\u5f88\u7c21\u55ae\uff0c\u5feb\u6377\u9375\u300cCtrl+Alt+Delete\u300d(\u5982\u57161)\uff0c\u9019\u500b\u7a97\u53e3\u5927\u5bb6\u61c9\u8a72\u6bd4\u8f03\u719f\u6089\uff0c \u4f7f\u7528Windows\u7cfb\u7d71\u7684\u7528\u6236\u90fd\u77e5\u9053\u7528\u9019\u500b\u65b9\u6cd5\u4f86\u95dc\u9589\u7a0b\u5e8f\uff0c\u4e0d\u904e\u5b83\u540c\u6a23\u7528\u65bc\u986f\u793a\u7cfb\u7d71\u9032\u7a0b\uff0c\u53ea\u662fWindows 98\u7cfb\u7d71\u8f03\u521d\u7d1a\uff0c\u5c0d\u9032\u7a0b\u7684\u986f\u793a\u5c40\u9650\u65bc\u540d\u7a31\uff0c\u4e14\u88e1\u9762\u6240\u986f\u793a\u7684\u9084\u6709\u6253\u958b\u7684\u6587\u4ef6\u53ca\u76ee\u9304\u540d\uff0c\u67e5\u770b\u6642\u6613\u6df7\u6dc6\u3002Windows Me\u7684\u9032\u7a0b\u6253\u958b\u65b9\u5f0f\u548cWindows 98\u76f8\u540c\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000Windows 9x\u7cfb\u7d71\u6253\u958b\u7684\u9032\u7a0b\u5217\u8868\u6df7\u4e82\u4e14\u4e0d\u5b8c\u5168\uff0c\u986f\u7136\u4e0d\u4fbf\u65bc\u67e5\u770b\u7cfb\u7d71\u7684\u5177\u9ad4\u9032\u7a0b\u72c0\u6cc1\uff0c\u6240\u4ee5\u5efa\u8b70\u4f7f\u7528\u4e00\u4e9b\u5de5\u5177\u7a0b\u5e8f\u4f86\u70baWindows 9x\u7cfb\u7d71\u986f\u793a\u9032\u7a0b\uff0c\u5982\u300cWindows\u512a\u5316\u5927\u5e2b\u300d\uff0c\u5728\u300c\u512a\u5316\u5927\u5e2b\u300d\u7684\u300c\u7cfb\u7d71\u5b89\u5168\u512a\u5316\u300d\u9805\u5167\u6253\u958b\u300c\u9032\u7a0b\u7ba1\u7406\u300d\uff0c\u5728\u57162\u6240\u793a\u7684\u300cWindows \u9032\u7a0b\u7ba1\u7406\u300d\u7a97\u53e3\u5167\uff0c\u53ef\u4ee5\u8a73\u7d30\u67e5\u770b\u7576\u524d\u8a08\u7b97\u6a5f\u6240\u904b\u884c\u7684\u6240\u6709\u9032\u7a0b\uff0c\u53ca\u5177\u9ad4\u7a0b\u5e8f\u6240\u5728\u7684\u4f4d\u7f6e\uff0c\u9019\u6a23\u66f4\u65b9\u4fbf\u5b8c\u6210\u5f8c\u9762\u8981\u4ecb\u7d39\u7684\u5982\u4f55\u5229\u7528\u9032\u7a0b\u9032\u884c\u67e5\u6bd2\u3001\u6bba\u6bd2\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30002.Windows 2000\/ XP\/2003\u7cfb\u7d71<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000Windows 2000\u3001Windows XP\u3001Windows 2003\u6253\u958b\u9032\u7a0b\u7a97\u53e3\u7684\u65b9\u5f0f\u8207Windows 9x\u7cfb\u7d71\u76f8\u540c\uff0c\u53ea\u662f\u4e09\u9375\u5f8c\u6253\u958b\u7684\u662f\u300cWindows \u4efb\u52d9\u7ba1\u7406\u5668\u300d\u7a97\u53e3\uff0c\u9700\u8981\u9078\u64c7\u88e1\u9762\u7684\u300c\u9032\u7a0b\u300d\u9805\u3002Windows 2000\u7cfb\u7d71\u53ea\u986f\u793a\u5177\u9ad4\u9032\u7a0b\u7684\u5168\u540d\uff0c\u4f54\u7528\u7684\u5167\u5b58\u91cf\uff1bWindows XP\u3001Windows 2003\u7cfb\u7d71\u76f8\u6bd4Windows 2000\u6703\u986f\u793a\u8a72\u9032\u7a0b\u6b78\u5c6c\u65bc\u90a3\u500b\u7528\u6236\u4e0b\uff0c\u5982\u64cd\u4f5c\u7cfb\u7d71\u6240\u5fc5\u9808\u7684\u57fa\u790e\u7a0b\u5e8f\uff0c\u6703\u5728\u5f8c\u9762\u7684\u300c\u7528\u6236\u540d\u300d\u5167\u986f\u793a\u70ba\u300cSYSTEM\u300d\uff0c\u7531\u7528\u6236\u53e6\u5916\u958b\u555f\u7684\u7a0b\u5e8f\u5247\u7528\u6236\u540d\u70ba\u7576 \u524d\u7684\u7cfb\u7d71\u767b\u9304\u7528\u6236\u540d\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u7d93\u9032\u7a0b\u767c\u73fe\u75c5\u6bd2<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5728\u4ecb\u7d39\u5177\u9ad4\u7684\u67e5\u6bd2\u548c\u6bba\u6bd2\u524d\uff0c\u7b46\u8005\u5148\u56de\u7b54\u958b\u7bc7\u63d0\u51fa\u7684\u5169\u500b\u554f\u984c\u3002\u70ba\u4ec0\u5e7a\u6bba\u6bd2\u8edf\u4ef6\u4e26\u4e0d\u80fd\u5168\u9762\u7684\u67e5\u627e\u548c\u6bba\u6389\u75c5\u6bd2?\u9996\u5148\uff0c \u75c5\u6bd2\u9632\u706b\u7246\u662f\u901a\u904e\u5c0d\u7a0b\u5e8f\u9032\u884c\u53cd\u5f59\u7de8\uff0c\u7136\u5f8c\u8207\u81ea\u5df1\u7684\u75c5\u6bd2\u5eab\u9032\u884c\u5c0d\u6bd4\u4f86\u67e5\u627e\u75c5\u6bd2\uff0c\u5982\u679c\u75c5\u6bd2\u8f03\u65b0\uff0c\u800c\u6bba\u6bd2\u8edf\u4ef6\u53c8\u672a\u80fd\u53ca\u6642\u5347\u7d1a\u4fbf\u4e0d\u80fd\u8b58\u5225\u75c5\u6bd2\u3002\u5176\u6b21\uff0c\u6bba\u6bd2\u8edf\u4ef6\u5728\u767c \u73fe\u75c5\u6bd2\u5f8c\uff0c\u5982\u679c\u662f\u7368\u7acb\u7684\u53ef\u57f7\u884c\u75c5\u6bd2\u7a0b\u5e8f\uff0c\u6703\u9078\u64c7\u76f4\u63a5\u522a\u9664\u7684\u8655\u7406\u65b9\u5f0f\uff0c\u800c\u75c5\u6bd2\u5982\u679c\u88ab\u7576\u4f5c\u9032\u7a0b\u57f7\u884c\u4e86\uff0c\u6bba\u6bd2\u8edf\u4ef6\u5c31\u7121\u80fd\u70ba\u529b\u4e86\uff0c\u56e0\u70ba\u5b83\u6c92\u6709\u529f\u80fd\u548c\u6b0a\u9650\u5148\u505c\u6b62\u6389\u7cfb \u7d71\u7684\u9019\u4e9b\u9032\u7a0b\uff0c\u88ab\u7576\u4f5c\u9032\u7a0b\u57f7\u884c\u7684\u7a0b\u5e8f\u662f\u4e0d\u80fd\u88ab\u522a\u9664\u7684(\u9019\u4e5f\u662f\u5927\u5bb6\u5728\u522a\u9664\u4e00\u500b\u7a0b\u5e8f\u6642\uff0c\u63d0\u793a\u8a72\u7a0b\u5e8f\u6b63\u5728\u88ab\u4f7f\u7528\u4e0d\u80fd\u522a\u9664\u7684\u539f\u56e0)\u3002\u6240\u4ee5\u5728\u4f7f\u7528\u6bba\u6bd2\u8edf\u4ef6\u6bba\u6bd2\u6642\uff0c\u624d \u6703\u6709\u6bba\u6bd2\u5b8c\u6210\u5f8c\uff0c\u53c8\u51fa\u73fe\u75c5\u6bd2\u63d0\u793a\u7684\u539f\u56e0\u3002 \u3000\u3000\u56de\u5230\u539f\u4f86\u8a71\u984c\u4e0a!\u901a\u904e\u9032\u7a0b\u5982\u4f55\u767c\u73fe\u548c\u6bba\u6389\u75c5\u6bd2\u5462?\u7531\u524d\u9762\u7684\u77e5\u8b58\u4ecb\u7d39\u53ef\u77e5\uff0cWindows 9X\u548cWindows 2000\u7cfb\u7d71\u53ea\u80fd\u986f\u793a\u9032\u7a0b\u7684\u540d\u7a31\uff0c\u9019\u5c0d\u5224\u65b7\u8a72\u9032\u7a0b\u662f\u5426\u662f\u75c5\u6bd2\u9084\u4e0d\u5920\uff0c\u5982\u679c\u8981\u6e96\u78ba\u7684\u65b7\u5b9a\u75c5\u6bd2\uff0c\u6700\u597d\u4f7f\u7528\u524d\u9762\u4ecb\u7d39\u7684\u300cWindows\u512a\u5316\u5927\u5e2b\u300d\u4f86\u67e5\u770b\u9032\u7a0b\u7a0b\u5e8f \u7684\u6e90\u8def\u5f91\uff0c\u5982\u679c\u662f\u300cC:Windowssystem\u300d\u4e0b\u7684\u4e00\u4e9b\u672a\u77e5\u7684\u300cEXE\u300d\u90a3\u4fbf\u6975\u6709\u75c5\u6bd2\u7684\u53ef\u80fd\u6027\u4e86\u3002Windows XP\u548cWindows 2003\u7cfb\u7d71\uff0c\u9032\u7a0b\u5f8c\u6703\u6709\u300c\u7528\u6236\u540d\u300d\u7684\u986f\u793a\uff0c\u75c5\u6bd2\u662f\u4e0d\u53ef\u80fd\u7372\u5f97\u300cSYSTEM\u300d\u6b0a\u9650\u7684\uff0c\u6240\u4ee5\u61c9\u6ce8\u610f\u300c\u7528\u6236\u540d\u300d\u662f\u7576\u524d\u767b\u9304\u7528\u6236\u7684\u9032\u7a0b\uff0c\u4e00\u65e6\u767c\u73fe\u662f\u75c5\u6bd2\uff0c\u53ef\u4ee5 \u7acb\u5373\u300c\u6bba\u6389\u300d\u3002\u9019\u88e1\u4ecb\u7d39\u5169\u500b\u6280\u5de7:<\/font><\/p>\n<p><font size=\"2\">\u3000\u30001.\u767c\u73fe\u53ef\u7591\u9032\u7a0b\u5f8c\uff0c\u5229\u7528Windows\u7684\u67e5\u627e\u529f\u80fd\uff0c\u67e5\u627e\u8a72\u9032\u7a0b\u6240\u5728\u7684\u5177\u9ad4\u8def\u5f91\uff0c\u901a\u904e\u8def\u5f91\u53ef\u4ee5\u77e5\u9053\u8a72\u9032\u7a0b\u662f\u5426\u5408\u6cd5\uff0c\u8b6c\u5982\u7531\u8def\u5f91\u300cC:Program Files3721assistse.exe\u300d\u77e5\u9053\u8a72\u7a0b\u5e8f\u662f3721\u7684\u9032\u7a0b\uff0c\u662f\u5408\u6cd5\u7684\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u30002.\u5728\u5c0d\u9032\u7a0b\u662f\u5426\u75c5\u6bd2\u62ff\u4e0d\u5b9a\u4e3b\u610f\u6642\uff0c\u53ef\u4ee5\u8907\u88fd\u8a72\u9032\u7a0b\u7684\u5168\u540d\uff0c\u5982:\u300cxxx.exe\u300d\u5230googl.com\u6216baidu.com\u9019\u6a23\u7684\u5168\u7403\u641c\u67e5\u5f15\u64ce\u4e0a\u9032\u884c\u641c\u67e5\uff0c\u5982\u679c\u662f\u75c5\u6bd2\u6703\u6709\u76f8\u95dc\u7684\u4ecb\u7d39\u7db2\u9801\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u78ba\u5b9a\u4e86\u8a72\u9032\u7a0b\u662f\u75c5\u6bd2\uff0c\u9996\u5148\u61c9\u8a72\u6bba\u6389\u8a72\u9032\u7a0b\uff0c\u5c0d\u65bcWindows 9x\u7cfb\u7d71\uff0c\u9078\u4e2d\u8a72\u9032\u7a0b\u5f8c\uff0c\u9ede\u64ca\u4e0b\u9762\u7684\u300c\u7d50\u675f\u4efb\u52d9\u300d\u6309\u9215\uff0cWindows 2000\u3001Windows XP\u3001Windows 2003\u7cfb\u7d71\u5247\u5728\u9032\u7a0b\u4e0a\u55ae\u64ca\u53f3\u9375\u5728\u5f48\u51fa\u83dc\u55ae\u4e0a\u9078\u64c7\u300c\u7d50\u675f\u4efb\u52d9\u300d\u3002\u300c\u6bba\u6389\u300d\u9032\u7a0b\u5f8c\u627e\u5230\u8a72\u9032\u7a0b\u7684\u8def\u5f91\u522a\u9664\u6389\u5373\u53ef\uff0c\u5b8c\u6210\u5f8c\u6700\u597d\u5728\u9032\u884c\u4e00\u6b21\u6bba\u6bd2\uff0c\u9019\u6a23\u5c31\u842c\u7121\u4e00\u5931 \u4e86\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u4e00\u6b21\u5229\u7528\u9032\u7a0b\u6bba\u6bd2\u7684\u5177\u9ad4\u904e\u7a0b\u662f\u9019\u6a23\u7684:\u300c\u901a\u904e\u9032\u7a0b\u540d\u53ca\u8def\u5f91\u5224\u65b7\u662f\u5426\u75c5\u6bd2&mdash;&mdash;\u6bba\u6389\u9032\u7a0b&mdash;&mdash;\u522a\u9664\u75c5\u6bd2\u7a0b\u5e8f\u300d\uff0c\u70ba\u4e86\u8b93\u8b80\u8005\u66f4\u597d\u7684\u5224\u65b7\u9032\u7a0b\uff0c\u5728\u9019\u88e1\u88dc\u5145\u4e00\u4e9bWindows\u7684\u9032\u7a0b\u8cc7\u6599\u7d66\u5927\u5bb6:<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u9032\u7a0b\u540d\u63cf\u8ff0<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000smss.exe\u3000Session\u3000Manager<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000csrss.exe \u5b50\u7cfb\u7d71\u670d\u52d9\u5668\u9032\u7a0b<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000winlogon.exe\u3000\u7ba1\u7406\u7528\u6236\u767b\u9304<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000services.exe\u3000\u5305\u542b\u5f88\u591a\u7cfb\u7d71\u670d\u52d9<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000lsass.exe \u7ba1\u7406 IP \u5b89\u5168\u7b56\u7565\u4ee5\u53ca\u555f\u52d5 ISAKMP\/Oakley (IKE) \u548c IP \u5b89\u5168\u9a45\u52d5\u7a0b\u5e8f\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000svchost.exe\u3000 Windows 2000\/XP \u7684\u6587\u4ef6\u4fdd\u8b77\u7cfb\u7d71<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000Spoolsv.exe \u3000\u5c07\u6587\u4ef6\u52a0\u8f09\u5230\u5167\u5b58\u4e2d\u4ee5\u4fbf\u9072\u5f8c\u6253\u5370\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000explorer.exe\u3000\u8cc7\u6e90\u7ba1\u7406\u5668<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000internat.exe\u3000\u6258\u76e4\u5340\u7684\u62fc\u97f3\u5716\u6a19<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000mstask.exe\u5141\u8a31\u7a0b\u5e8f\u5728\u6307\u5b9a\u6642\u9593\u904b\u884c\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000regsvc.exe\u5141\u8a31\u9060\u7a0b\u8a3b\u518a\u8868\u64cd\u4f5c\u3002(\u7cfb\u7d71\u670d\u52d9)&rarr;remoteregister<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000tftpd.exe \u5be6\u73fe TFTP Internet \u6a19\u6e96\u3002\u8a72\u6a19\u6e96\u4e0d\u8981\u6c42\u7528\u6236\u540d\u548c\u5bc6\u78bc\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000llssrv.exe\u8b49\u66f8\u8a18\u9304\u670d\u52d9<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000ntfrs.exe \u5728\u591a\u500b\u670d\u52d9\u5668\u9593\u7dad\u8b77\u6587\u4ef6\u76ee\u9304\u5167\u5bb9\u7684\u6587\u4ef6\u540c\u6b65\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000RsSub.exe \u63a7\u5236\u7528\u4f86\u9060\u7a0b\u5132\u5b58\u6578\u64da\u7684\u5a92\u9ad4\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000locator.exe \u3000\u7ba1\u7406 RPC \u540d\u7a31\u670d\u52d9\u6578\u64da\u5eab\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000clipsrv.exe \u3000\u652f\u6301\u300c\u526a\u8cbc\u7c3f\u67e5\u770b\u5668\u300d\uff0c\u4ee5\u4fbf\u53ef\u4ee5\u5f9e\u9060\u7a0b\u526a\u8cbc\u7c3f\u67e5\u95b1\u526a\u8cbc\u9801\u9762\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000msdtc.exe \u4e26\u5217\u4e8b\u52d9\uff0c\u662f\u5206\u4f48\u65bc\u5169\u500b\u4ee5\u4e0a\u7684\u6578\u64da\u5eab\uff0c\u6d88\u606f\u968a\u5217\uff0c\u6587\u4ef6\u7cfb\u7d71\u6216\u5176\u5b83\u4e8b\u52d9\u4fdd\u8b77\u8cc7\u6e90\u7ba1\u7406\u5668\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000grovel.exe\u6383\u7784\u96f6\u5099\u4efd\u5b58\u5132(SIS)\u6372\u4e0a\u7684\u91cd\u8907\u6587\u4ef6\uff0c\u4e26\u4e14\u5c07\u91cd\u8907\u6587\u4ef6\u6307\u5411\u4e00\u500b\u6578\u64da\u5b58\u5132\u9ede\uff0c\u4ee5\u7bc0\u7701\u78c1\u76e4\u7a7a\u9593(\u53ea\u5c0d NTFS \u6587\u4ef6\u7cfb\u7d71\u6709\u7528)\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000snmp.exe\u3000\u5305\u542b\u4ee3\u7406\u7a0b\u5e8f\u53ef\u4ee5\u76e3\u8996\u7db2\u7d61\u8a2d\u5099\u7684\u6d3b\u52d5\u4e26\u4e14\u5411\u7db2\u7d61\u63a7\u5236\u53f0\u5de5\u4f5c\u7ad9\u532f\u5831\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u4ee5\u4e0a\u9019\u4e9b\u9032\u7a0b\u90fd\u662f\u5c0d\u8a08\u7b97\u6a5f\u904b\u884c\u8d77\u81f3\u95dc\u91cd\u8981\u7684\uff0c\u5343\u842c\u4e0d\u8981\u96a8\u610f\u300c\u6bba\u6389\u300d\uff0c\u5426\u5247\u53ef\u80fd\u76f4\u63a5\u5f71\u97ff\u7cfb\u7d71\u7684\u6b63\u5e38\u904b\u884c\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5fae\u8edf\u9084\u70ba\u6211\u5011\u63d0\u4f9b\u4e86\u4e00\u7a2e\u5bdf\u770b\u7cfb\u7d71\u6b63\u5728\u904b\u884c\u5728svchost.exe\u5217\u8868\u4e2d\u7684\u670d\u52d9\u7684\u65b9\u6cd5\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u4ee5Windows XP\u70ba\u4f8b:\u5728\u300c\u904b\u884c\u300d\u4e2d\u8f38\u5165:cmd\uff0c\u7136\u5f8c\u5728\u547d\u4ee4\u884c\u6a21\u5f0f\u4e2d\u8f38\u5165:tasklist \/svc\u3002\u7cfb\u7d71\u5217\u51fa\u670d\u52d9\u5217\u8868\u3002\u5982\u679c\u4f7f\u7528\u7684\u662fWindows 2000\u7cfb\u7d71\u5247\u628a\u524d\u9762\u7684\u300ctasklist \/svc\u300d\u547d\u4ee4\u66ff\u63db\u70ba:\u300ctlist -s\u300d\u5373\u53ef\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u5982\u679c\u4f60\u61f7\u7591\u8a08\u7b97\u6a5f\u6709\u53ef\u80fd\u88ab\u75c5\u6bd2\u611f\u67d3\uff0csvchost.exe\u7684\u670d\u52d9\u51fa\u73fe\u7570\u5e38\u7684\u8a71\u901a\u904e\u641c\u7d22svchost.exe \u6587\u4ef6\u5c31\u53ef\u4ee5\u767c\u73fe\u7570\u5e38\u60c5\u6cc1\u3002\u4e00\u822c\u53ea\u6703\u627e\u5230\u4e00\u500b\u5728:\u300cC:WindowsSystem32\u300d\u76ee\u9304\u4e0b\u7684svchost.exe\u7a0b\u5e8f\u3002\u5982\u679c\u4f60\u5728\u5176\u5b83\u76ee\u9304\u4e0b\u767c\u73fe svchost.exe\u7a0b\u5e8f\u7684\u8a71\uff0c\u90a3\u5f88\u53ef\u80fd\u5c31\u662f\u4e2d\u6bd2\u4e86\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u9084\u6709\u4e00\u7a2e\u78ba\u8a8dsvchost.exe\u662f\u5426\u4e2d\u6bd2\u7684\u65b9\u6cd5\u662f\u5728\u4efb\u52d9\u7ba1\u7406\u5668\u4e2d\u5bdf\u770b\u9032\u7a0b\u7684\u57f7\u884c\u8def\u5f91\u3002\u4f46\u662f\u7531\u65bc\u5728Windows\u7cfb\u7d71\u81ea\u5e36\u7684\u4efb\u52d9\u7ba1\u7406\u5668\u4e0d\u80fd\u5bdf\u770b\u9032\u7a0b\u8def\u5f91\uff0c\u6240\u4ee5\u8981\u4f7f\u7528\u7b2c\u4e09\u65b9\u7684\u9032\u7a0b\u5bdf\u770b\u5de5\u5177\u3002<\/font><\/p>\n<p><font size=\"2\">\u3000\u3000\u4e0a\u9762\u7c21\u55ae\u7684\u4ecb\u7d39\u4e86svchost.exe\u9032\u7a0b\u7684\u76f8\u95dc\u60c5\u6cc1\u3002\u7e3d\u800c\u8a00\u4e4b\uff0csvchost.exe\u662f\u4e00\u500b\u7cfb\u7d71\u7684\u6838\u5fc3\u9032 \u7a0b\uff0c\u4e26\u4e0d\u662f\u75c5\u6bd2\u9032\u7a0b\u3002\u4f46\u7531\u65bcsvchost.exe\u9032\u7a0b\u7684\u7279\u6b8a\u6027\uff0c\u6240\u4ee5\u75c5\u6bd2\u4e5f\u6703\u5343\u65b9\u767e\u8a08\u7684\u5165\u4fb5svchost.exe\u3002\u901a\u904e\u5bdf\u770bsvchost.exe\u9032 \u7a0b\u7684\u57f7\u884c\u8def\u5f91\u53ef\u4ee5\u78ba\u8a8d\u662f\u5426\u4e2d\u6bd2\u3002 <\/font><\/p>\n<p><\/span><\/font><\/p>\n<p><\/span><\/font><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp;\u8cc7\u6599\u4f86\u6e90 \u6211\u5011\u5728\u4f7f\u7528 Windows XP\u64cd\u4f5c\u7cfb\u7d71\u7684\u6642\u5019\uff0c\u7528\u8457\u7528\u8457\u7cfb\u7d71\u5c31\u8b8a\u6162\u4e86\uff0c\u4e00\u770b\u300c\u4efb\u52d9\u7ba1\u7406\u5668\u300d<span class=\"post-excerpt-end\">&hellip;<\/span><\/p>\n<p class=\"more-link\"><a href=\"https:\/\/learn-house.idv.tw\/?p=66\" class=\"themebutton\">Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[],"class_list":["post-66","post","type-post","status-publish","format-standard","hentry","category-8"],"_links":{"self":[{"href":"https:\/\/learn-house.idv.tw\/index.php?rest_route=\/wp\/v2\/posts\/66","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/learn-house.idv.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/learn-house.idv.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/learn-house.idv.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/learn-house.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=66"}],"version-history":[{"count":0,"href":"https:\/\/learn-house.idv.tw\/index.php?rest_route=\/wp\/v2\/posts\/66\/revisions"}],"wp:attachment":[{"href":"https:\/\/learn-house.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=66"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/learn-house.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=66"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/learn-house.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=66"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}