席天卷地个人博客 前几天闲来无事，准备安装个sql 2005，1G多，太大了，装安装有威盾的服务器开能上网功能了，一会儿，威盾就自动关闭了，看来是有后门，补互普发现了，再打开就连不上了，一直提示是否要连接到服务端，同时sql 2000装后，SP4一直安装不上，重装威盾，还是一样，准备安装个威盾3.0，SQL 要打SP4，没办法，准备重装系统，拿着2003的盘去机房，才想起来这个BT的HP 服务器在安装时要加载软盘上RIAD驱动，外接软驱又不在身边，只好做罢。
看看威盾好像没有什么服务启动，后来想起把注册表相关的内容删了试看，结果成功了，在注册表中找到ocular，然后把其上级目录TCE全部删除，删除前一定要记得备份。具体位置在：[HKEY_LOCAL_MACHINESOFTWARETECOcular.1
其注册内容为如下所示，哪位有精力研究下是怎么回事：
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINESOFTWARETEC]
[HKEY_LOCAL_MACHINESOFTWARETECOcular.1]
[HKEY_LOCAL_MACHINESOFTWARETECOcular.1Agent]
"TimeSyncType"=dword:00000001
"ServerTime"=dword:47a412a4
"TimeZone"=dword:fffffe20
"RelativeTick"=dword:5c826c80
"OnlyLogLocalPrinter"=dword:00000001
"LogOtherUserPrintDoc"=dword:00000001
"NeedShareIPC"=dword:00000064
"ExitWindow"=dword:00000000
"PrinterStatus"=dword:00000000
"LastActiveTime"=dword:00000000
"Time Interval"=dword:0000000f
"Idle Time"=dword:00000003
"Flag"=dword:00000101
"Max Limit"=dword:00000032
"Free Limit"=dword:00000032
"Desktop Mode"=dword:00000004
"Inactive min. time"=dword:0000000a
"Get report from time0"=dword:0000e100
"Get report to time0"=dword:0000e100
"Get report from time01"=dword:0000e100
"Get report to time01"=dword:0000e100
"Get report from time012"=dword:0000e100
"Get report to time012"=dword:0000e100
"NoDDraw2"=dword:00000000
"LockComputer"=dword:00000001
"rcstring"="UGOUGCUGUUGLUGAUGRUGGUGZUZOLCACLCAULCALLCAALCARLCAGLCAZLCRO"
[HKEY_LOCAL_MACHINESOFTWARETECOcular.1Console]
"Last user name"="admin"
"Trace Interval"=dword:00000003
"Monitor Interval"=dword:00000005
"Group Turn Interval"=dword:00000032
"Monitor Rect Number"=dword:00000002
[HKEY_LOCAL_MACHINESOFTWARETECOcular.1ConsoleServerConnections]
"Number"=dword:00000000
"LastConnection"=dword:00000000
[HKEY_LOCAL_MACHINESOFTWARETECOcular.1ConsoleServerConnectionsConnection1]
"Name"="xx"
"Type"=dword:00000001
"ServerNo"=dword:00000002
"Address"="192.168.2.7"
[HKEY_LOCAL_MACHINESOFTWARETECOcular.1ConsoleServerConnectionsConnection2]
"Name"="xx"
"Type"=dword:00000001
"ServerNo"=dword:00000002
"Address"="192.168.2.7"
[HKEY_LOCAL_MACHINESOFTWARETECOcular.1Server]
"Database Type"=dword:00000000
"Backup Time Spec."=dword:386dec40
"Backup Time Options"=dword:00000000
"Backup Type"=dword:00000000
"Backup Disk Device Path"=""
"Backup Tape Drive Index"=dword:00000000
"Reserve Days"=dword:00000005
"Get Records Interval"=dword:0000000a
"Database Auto Clear App"=dword:00000000
"Database Clear App Days"=dword:0000003c
"Database Auto Clear Log"=dword:00000000
"Database Clear Log Days"=dword:0000003c
"Database Auto Clear URL"=dword:00000000
"Database Clear URL Days"=dword:0000003c
"Database Max Logs Once"=dword:00000064
"Report Send From"=""
"Report SMTP Server"=""
"Report Username"=""
"Report Password"=""
"Allow Remote Control"=dword:00000001
"ServerNo"=dword:00000001
"Get Switch IP Type"=dword:00000000
"SwitchIPAddr"="192.168.123.9"
"Remote POP3 Server"=""
"Remote POP3 Account"=""
"Remote POP3 Password"=""
"pstr"="arpF@f`K0kPP"
"RegisterUser"=""
"RegisterEmail"=""
"RegisterTel"=""
"RegisterId"="
"Last Switch IP"=dword:c0a87b09
"Last user name"="admin"
[HKEY_LOCAL_MACHINESOFTWARETECOcular.1Switch]
"Send IP Address to Email"=dword:00000000
"Email Address"=""
"SMTP Server"=""
"POP3 Server"=""
"Account"=""
"Password"=""
"pstr"="bspF@f`K0kPP"
[HKEY_LOCAL_MACHINESOFTWARETECOcular.1Viewer]
评论前必须登录！
注册