Full Disclosure mailing list archives

Re: Windows Dcom Worm Killer


From: Nick FitzGerald <nick () virus-l demon co uk>
Date: Wed, 13 Aug 2003 22:01:05 +1200

joey2cool () yahoo com wrote:

I suggest that you also disable DCOM completely with
the dcomcnfg utility. More info is available at the
address below. Be sure to remove all of the DCOM
"Default Protocols" including TCP to stop windows from
listening on port 135

I agree in general, but also be aware that using dcomcnfg, or manually 
tweaking the associated registry setting and restarting, to disable 
DCOM does not work on Win2K for SP0 - SP2 inclusive and may not work on 
some other OSes.


Regards,

Nick FitzGerald

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: