I
I
Irven762022-02-08 17:00:12
Malware
Irven76, 2022-02-08 17:00:12

How to close port 135, which does not close in any way?

rpceptmapper is listening on port 135 . unable to close.
I did what I managed to find on the Internet, but nothing came of it:
Method 1.
Start -> Run and enter
Dcomcnfg.exe
To turn off DCOM, open the Default Properties panel and uncheck "Allow DCOM on this computer".
We reboot.
Method 2.
In the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole
for the "EnableDCOM" parameter, which has the value "Y", change this value to "N"
"EnableDCOM"="N"
Reboot.
3.
1. Run "Component Services":
2. Open the properties of "My Computer":
Component Services ▶ Computers ▶ My Computer ▶ [Right Mouse Button] ▶ Properties ▶ Default
Properties ” and press the “Remove” button:
5. Now it remains to click “Apply”, then the “OK” button
6. Reboot the computer

4.
netsh advfirewall firewall add rule dir=in action=block protocol=tcp localport=135 name=“Block1_TCP- 135”
does not work
in the firewall there is a rule that prohibits incoming calls on 135

5.
windows worms doors cleaner
shows that port 135 is closed.

netstat -a shows that the port is listening. Xspider shows that it is open.
other ports are still
listening , which are closed in the firewall in the rules 0.0:49666 LISTENING TCP 0.0.0.0:49667 LISTENING TCP 0.0.0.0:49668 LISTENING TCP 127.0.0.1:49279 LISTENING TCP 127.0.0.1:49716 LISTENING TCP 127.0.0.1:55372 LISTENING TCP 127.0.0.1 :55374 LISTENING TCP 127.0.0.1:55375 LISTENING
TCP 127.0.0.1:55376 LISTENING
reinstalled the system. without the Internet, I set up the rules immediately after the reinstallation and everything turned out to be closed. netstat showed that everything is closed. as soon as I plugged in the internet cable, they opened. and do not close.

In general, the problem is solved. suddenly someone needs it: everything that is with rcp in services is disabled, what is disabled. I still had rules in my firewall allowing incoming rpc-related incoming rules. everything was forbidden there and port 135 was closed.

Answer the question

In order to leave comments, you need to log in

2 answer(s)
T
Talyan, 2022-02-08
@flapflapjack

As far as I remember, port 135 is an RPC port.
Try simply turning off RPC related services.

Z
Zzzz9, 2022-02-09
@Zzzz9

Watch openness from another computer, netstat shows up to firewall .

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question