bugtraq - Re: Windows Dcom Worm Killer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20030813080529.95586.qmail@web20604.mail.yahoo.com>
Date: Wed, 13 Aug 2003 01:05:29 -0700 (PDT)
From: Joey <joey2cool@...oo.com>
To: w g <xillwillx@...oo.com>, bugtraq@...urityfocus.com,
   full-disclosure@...ts.netsys.com
Subject: Re: Windows Dcom Worm Killer

I suggest that you also disable DCOM completely with
the dcomcnfg utility. More info is available at the
address below. Be sure to remove all of the DCOM
"Default Protocols" including TCP to stop windows from
listening on port 135

http://www.uksecurityonline.com/husdg/windowsxp/close135.htm

--- w g <xillwillx@...oo.com> wrote:>  Directions:
>  2. All done  :) ... next step 
>     W32.Blaster.Worm exploits the DCOM RPC
> vulnerability. This is described in Microsoft
> Security Bulletin MS03-026, 
>     and a patch is available there. You must
> download and install the patch.Also buy an antivirus
> and keep it 
>     updated weekly . Also I'd suggest getting a
> firewall to protect from any outside intruders.

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html