How to disable 135 445: Difference between revisions
From D3xt3r01.tk
Jump to navigationJump to search
m →BATCH |
m →BATCH |
||
| Line 17: | Line 17: | ||
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole /v EnableDCOM /t REG_SZ /d N /f | reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole /v EnableDCOM /t REG_SZ /d N /f | ||
reg | reg add | ||
reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs /v ListenOnInternet /f | reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs /v ListenOnInternet /f | ||
Revision as of 01:09, 31 July 2009
WHY
Because this is what the Blaster worm uses to get high !
HOW
In regedit
1) Set the 'EnableDCOM' value to 'N' in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole
2) Delete the string 'ncacn_ip_tcp' from the 'DCOM Protocols' key in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc
3) Create a string value named 'ListenOnInternet' with the value 'N' in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs
BATCH
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole /v EnableDCOM /t REG_SZ /d N /f
reg add
reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs /v ListenOnInternet /f
