DCOM Error

[gtro]

Hi!

I use Windows 2000 with Service Pack 4 installed. I am getting the
following error registered in my eventlog.

Access denied attempting to launch a DCOM Server. The server is:
{00020906-0000-0000-C000-000000000046}
The user is Unavailable/Unavailable, SID=Unavailable.

This error occurs about every 2-3 minutes when I am connected to the
Internet. From an investigation on Googles, it appears that this server is
MS Word Document (it is defined as such in my cmputer's registry).

I have Office 2000 installed and I use IE 6.0.2600.0000 to surf on tne Web.

Any clue on what is the cause of this error?

Thank you!

 

[S.J.Haribabu]

Hi,

Thanks for the posting. If you see this error message, it could be realated
to an attack. See the CERT advisory for details.
CERT - http://www.cert.org/advisories/CA-2003-19.html
Please note that it must not necessarily be an attack, but chances are
good. If you haven't done so, install the patch mentioned in the CERT
advisory. You should also block incoming connections from the Internet to
your machines RPC port.
It could also be related to IIS as outlined in this KB article at
http://support.microsoft.com/default.aspx?scid=kb;en-us;290398

If you run Sharepoint Portal server, Q298095 could apply.

And if you are using the SAP DCOM connector, Q319515 could apply.

Thanks,

(e-mail address removed)

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[John John]

It's probably due to a security hole in dcom, someone might be trying to
hack you. Dcombobulate your pc, you don't need this HUGE security risk
running on your pc. http://grc.com/dcom/

If you really MUST have dcom then make sure you have this patch installed:

MS03-026: Buffer Overrun in RPC May Allow Code Execution
http://support.microsoft.com/default.aspx?scid=kb;en-us;823980

.... along with the other fix to fix the first fix...

John