How to disable 135 445

From D3xt3r01.tk
Jump to navigationJump to search
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

WHY

Because this is what the Blaster worm uses to get high !

HOW

In regedit

1) Set the 'EnableDCOM' value to 'N' in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole

2) Delete the string 'ncacn_ip_tcp' from the 'DCOM Protocols' key in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc

3) Create a string value named 'ListenOnInternet' with the value 'N' in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs

4) Delete the string "\Device\" from the 'TransportBindName' key in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters

BATCH

reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole /v EnableDCOM /t REG_SZ /d N /f

reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc /v "DCOM Protocols" /t REG_MULTI_SZ /d "ncacn_spx ncacn_nb_nb ncacn_nb_ipx" /f

reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs /v ListenOnInternet /f

reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters /v TransportBindName /t REG_SZ /d "" /f