Shulou(Shulou.com)06/01 Report--

Shutdown of port 135

The value of HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Ole\ EnableDCOM is changed to "N"

Delete "ncacn_ip_tcp" from HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Rpc\ DCOM Protocols (2000 requires the next registry tool. Pass it above.)

In addition, the "Distributed Transaction Coordinator" service needs to be disabled.

The shutdown of port 137x138 / 139

Select "Internet Protocol (TCP/IP)" property in "Local connection" in "Network and Dial-up connection", enter "Advanced TCP/IP Settings" and "WinS Settings". There is an item "disable NETBIOS for TCP/IP" and check it.

Shutdown of port 445

HKEY_LOCAL_MACHINE\ System\ Current ControlSet\ Services\ NetBT\ Parameters

Create a SMBDeviceEnabled of type REG_DWORD with a key value of 0

In the end, the worst-hit areas of the virus are all Microsoft system objects. I hope everyone will keep backing up important documents on a daily basis and raise security awareness. There is no absolute security, only relative security! Try to gradually use the Linux environment and enter the open source family.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.