How to disable 135 445: Difference between revisions
New page: ==WHY== Because this is what the Blaster worm uses to get high ! ==HOW== In regedit 1) Set the 'EnableDCOM' value to 'N' in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole 2) Delete the stri... |
m →BATCH |
||
| (6 intermediate revisions by the same user not shown) | |||
| Line 8: | Line 8: | ||
1) Set the 'EnableDCOM' value to 'N' in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole | 1) Set the 'EnableDCOM' value to 'N' in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole | ||
2) Delete the string 'ncacn_ip_tcp' from the 'DCOM Protocols' key in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc | 2) Delete the string 'ncacn_ip_tcp' from the 'DCOM Protocols' key in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc | ||
3) Create a string value named 'ListenOnInternet' with the value 'N' in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs | 3) Create a string value named 'ListenOnInternet' with the value 'N' in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs | ||
4) Delete the string "\Device\" from the 'TransportBindName' key in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters | |||
==BATCH== | |||
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole /v EnableDCOM /t REG_SZ /d N /f | |||
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc /v "DCOM Protocols" /t REG_MULTI_SZ /d "ncacn_spx ncacn_nb_nb ncacn_nb_ipx" /f | |||
reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs /v ListenOnInternet /f | |||
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters /v TransportBindName /t REG_SZ /d "" /f | |||
[[Category: Windows]] | [[Category: Windows]] | ||
[[Category: Patches]] | [[Category: Patches]] | ||
Latest revision as of 01:33, 31 July 2009
WHY
Because this is what the Blaster worm uses to get high !
HOW
In regedit
1) Set the 'EnableDCOM' value to 'N' in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole
2) Delete the string 'ncacn_ip_tcp' from the 'DCOM Protocols' key in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc
3) Create a string value named 'ListenOnInternet' with the value 'N' in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs
4) Delete the string "\Device\" from the 'TransportBindName' key in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters
BATCH
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole /v EnableDCOM /t REG_SZ /d N /f
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc /v "DCOM Protocols" /t REG_MULTI_SZ /d "ncacn_spx ncacn_nb_nb ncacn_nb_ipx" /f
reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs /v ListenOnInternet /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters /v TransportBindName /t REG_SZ /d "" /f
