How to disable 135 445

From D3xt3r01.tk
Revision as of 01:33, 31 July 2009 by Admin (talk | contribs) (→‎BATCH)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search

WHY

Because this is what the Blaster worm uses to get high !

HOW

In regedit

1) Set the 'EnableDCOM' value to 'N' in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole

2) Delete the string 'ncacn_ip_tcp' from the 'DCOM Protocols' key in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc

3) Create a string value named 'ListenOnInternet' with the value 'N' in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs

4) Delete the string "\Device\" from the 'TransportBindName' key in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters

BATCH

reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole /v EnableDCOM /t REG_SZ /d N /f

reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc /v "DCOM Protocols" /t REG_MULTI_SZ /d "ncacn_spx ncacn_nb_nb ncacn_nb_ipx" /f

reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs /v ListenOnInternet /f

reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters /v TransportBindName /t REG_SZ /d "" /f

Retrieved from "https://wiki.d3xt3r01.tk//index.php?title=How_to_disable_135_445&oldid=111"