最近发现公司员工都是使用的是360、金山、nod32等杀毒软件，只是运行在电脑上，没有详细的调试，我这样做除了能解决一下明显的病毒外，其他的加壳的病毒基本防御不了，所以我就简单的弄了个脚本，参照网络的一下脚本知识，弄了个关闭不安全端口，希望多大家有用！
@echo off
title 关闭常见的危险端口
echo.
echo 本批处理用于启动XP系统的防火墙并关闭常见的危险端口
echo.
echo 请确认您正在使用的是XP系统 并且未安装其他防火墙
echo.
echo 以避免与XP系统的防火墙发生冲突
echo.
pause
echo 正在启动防火墙 请稍候…
netsh firewall set opmode mode=enable
echo 防火墙已经成功启动
echo.
echo 正在关闭常见的危险端口 请稍候…
echo.
echo 正在关闭135端口 请稍候…
netsh firewall set portopening protocol = ALL port = 135 name = 135 mode = DISABLE scope = ALL profile = ALL
echo 正在关闭137端口 请稍候…
netsh firewall set portopening protocol = ALL port = 137 name = 137 mode = DISABLE scope = ALL profile = ALL
echo 正在关闭138端口 请稍候…
netsh firewall set portopening protocol = ALL port = 138 name = 138 mode = DISABLE scope = ALL profile = ALL
echo 正在关闭139端口 请稍候…
netsh firewall set portopening protocol = ALL port = 139 name = 139 mode = DISABLE scope = ALL profile = ALL
echo 正在关闭161端口 请稍候…
netsh firewall set portopening protocol = ALL port = 161 name = 161 mode = DISABLE scope = ALL profile = ALL
echo 正在关闭445端口 请稍候…
netsh firewall set portopening protocol = ALL port = 445 name = 445 mode = DISABLE scope = ALL profile = ALL
echo 正在关闭593端口 请稍候…
netsh firewall set portopening protocol = TCP port = 593 name = 593 mode = DISABLE scope = ALL profile = ALL
echo 正在关闭1025端口 请稍候…
netsh firewall set portopening protocol = TCP port = 1025 name = 1024 mode = DISABLE scope = ALL profile = ALL
echo 正在关闭2745端口 请稍候…
netsh firewall set portopening protocol = TCP port = 2745 name = 2745 mode = DISABLE scope = ALL profile = ALL
echo 正在关闭3127端口 请稍候…
netsh firewall set portopening protocol = TCP port = 3127 name = 3127 mode = DISABLE scope = ALL profile = ALL
echo 正在关闭3389端口 请稍候…
netsh firewall set portopening protocol = ALL port = 3389 name = 3389 mode = DISABLE scope = ALL profile = ALL
echo 正在关闭6129端口 请稍候…
netsh firewall set portopening protocol = TCP port = 6129 name = 6129 mode = DISABLE scope = ALL profile = ALL
cls
echo.
echo 常见的危险端口已经关闭
echo.
echo By: Alan.deng
echo.
echo 按任意键退出
pause>nul
本文转自 dl528888 51CTO博客，原文链接：http://blog.51cto.com/dl528888/545707，如需转载请自行联系原作者
