How to disable 135 445: Difference between revisions

From D3xt3r01.tk
Jump to navigationJump to search
Line 19: Line 19:
reg del
reg del


reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs /v ListenOnInternet /t REG_SZ /d N /f
reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs /v ListenOnInternet /f


[[Category: Windows]]
[[Category: Windows]]
[[Category: Patches]]
[[Category: Patches]]

Revision as of 01:08, 31 July 2009

WHY

Because this is what the Blaster worm uses to get high !

HOW

In regedit

1) Set the 'EnableDCOM' value to 'N' in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole

2) Delete the string 'ncacn_ip_tcp' from the 'DCOM Protocols' key in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc

3) Create a string value named 'ListenOnInternet' with the value 'N' in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs

BATCH

reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole /v EnableDCOM /t REG_SZ /d N /f

reg del

reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs /v ListenOnInternet /f