|
Posted by on April 9, 2006, 6:30 pm
If you were Registered and logged in, you could reply and use other advanced thread options
> From: <>
>
>| I've been trying to close as many unnecessary open ports as possible.
>| Whenever I do a netstat -an command or use TCPView by Sysinternals, I
>| notice that Port 135 is in this state:
>|
>| Local Address Foreign Address
>|
>| TCP 0.0.0.0:135 0.0.0.0:0
>| LISTENING
>|
>| Since I'm not using a networked computer and had netbios running, I
>| disabled that. I deleted my "client for MS networks" option in the
>| local area connection properties. Then I tried running Dcomcnfg.exe
>| and unchecked the "enable Distributed Com" box.
>|
>| I then edited HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc as follows:
>| Created an "Internet Key" with the string "UseInternetPorts" and a
>| value of N.
>|
>| However, when I rebooted, Port 135 was still showing when doing a
>| netstat -an command.
>|
>| I see it's blocked in my ZA internet zone security (incoming and
>| outgoing).
>|
>| Why can't I shut it down upon rebooting?
>|
>| TCPView tells me the port is running:
>|
>| svchost -k rpcss.
>|
>| I have noticed that when I disable dcom and create the RPC key, upon
>| rebooting Windows Defender beta Spyware by Microsoft won't run after
>| booting. Supposedly, that program depends on the remote procedure
>| call service.
>|
>| I now keep getting this error message even after uninstalling and
>| reinstalling, and re-enabling Dcom.
>|
>| Windows Defender Application failed to initialize: 0x800106ba. A
>| problem caused Windows Defender Service to stop. To start the
>| service, restart your
>| computer or search Help and Support on how to start a service
>| manually.
>|
>| Has anyone got a solution?
>|
>
> RPC/RPCSS DCOM is required and many software components are dependent
> upon it.
>
> If you are on Broadband Internet then I suggest using a Cable/DSL
> Router. This will isolate Internet inbound activity to the Router and
> not the PC.
I'm using a router. Are you saying I can't close Port 135 if it's
running rpcss? When I closed Dcom created the UseInternetPorts key, I
was still able to use the net and e-mail services.
I've since found out that Windows Defender can't run unless the "Client
for MS Networks" component is included in the Local Area Connection
properties. After I reinstalled that, Windows Defender ran again. What
a quirky program.
|