Port 135

[J. E. Smith]

In Windows XP Home Edition is there a way to close port 135? The
reason I ask is whenever I run netstat -an it is shown to be in the
listening state. I have this, and other high risk ports, blocked with
my firewall (Sygate Personal Firewall) and my traffic and packet logs
indicate that any attempts to connect to this port are blocked. So I
am wondering if there is a specific program in Windows XP that uses
this port, and if so, can I disable the program? Or should I even be
concerned since all traffic to that port is blocked?

Thanks for any answers and suggestions.

JES

 

[Wesley Vogel]

Disabling Distributed COM (this closes Port 135)
http://www.uksecurityonline.com/husdg/windows2000/close135.htm

Download and run DCOMbobulator. Don't forget the Remote Port 135 Test
button.

DCOMbobulator
http://grc.com/dcom/

 

[J. E. Smith]

Thanks for the information. I have previously ran DCOMbobulator.
After running the program, I did the remote port test and the results
said it was stealthed. That is why I'm concerned that my PC is still
listening on that port.

When I go to Services (local) , I don't see and entry for DCom.

If you have anymore information, I would gladly like to hear it.

Thanks again
JES

 

[Wesley Vogel]

JES,

[[TCP port 135 - Microsoft DCOM/RPCSS. Impossible to close in Windows
NT/2000/XP Pro.
Windows 9x/ME/XP Home: Start REGEDIT.EXE, go to HKLM\Software\Microsoft\OLE
and change both EnableDCOM and EnableRemoteConnect to 'N'. Reboot. ]]

From >>>
How to read NETSTAT -AN results
http://www.geocities.com/merijn_bellekom/new/netstatan.html

Keep in mind that merijn_bellekom is Merijn Bellekom, the creater of
HijackThis and CWShredder.

My Key...
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole
EnableDCOM
REG_SZ
N
No entry for EnableRemoteConnect.

How to disable DCOM support in Windows
http://support.microsoft.com/default.aspx?scid=kb;en-us;825750