Windows XP PnP-- sux !!!
So if you are like me and want to check on computers that you are admining over, once in awhile it is nice to see what others have downloaded or tried to install locally on their computers,,,, viruses,,adware,,spyware and other shit like that.
Anywho, the other day I did a netstat -an command on a XP computer and looked at the ports this thing was listening on... 5000..... what the hell...
goggle time
This is the exploit that windows xp has that universal plug and play listens on by default.. there are a couple of trojans in the wild that exploit this vulnerability and this is a quick way to deter this from happening,, first of all keep your windows computers up to date by running windows updates.. yes I know windows ...
Next open the control panel and then add and remove programs, within this window find the installed windows components (something like that) on the left hand side and click on this,, then navigate to networking services and click on the details button, in here uncheck the plug and play box,, then OK to get out of everything.. is that all.... HELL NO...
Now you need to open the administrative tools in control panel and then click on serivces...
find the SSDP service and stop this, then set it in the properties to be disabled.. now if you do the same command mentioned earlier,, netstat -an,, you should now NOT SEE the tcp port 5000 listening...
Well, this has been one of my quicker posts, but how much of this do you really want to be reading about on a Tuesday morning anyway....
That's my story and I'm stickin to it...
biz
Anywho, the other day I did a netstat -an command on a XP computer and looked at the ports this thing was listening on... 5000..... what the hell...
goggle time
This is the exploit that windows xp has that universal plug and play listens on by default.. there are a couple of trojans in the wild that exploit this vulnerability and this is a quick way to deter this from happening,, first of all keep your windows computers up to date by running windows updates.. yes I know windows ...
Next open the control panel and then add and remove programs, within this window find the installed windows components (something like that) on the left hand side and click on this,, then navigate to networking services and click on the details button, in here uncheck the plug and play box,, then OK to get out of everything.. is that all.... HELL NO...
Now you need to open the administrative tools in control panel and then click on serivces...
find the SSDP service and stop this, then set it in the properties to be disabled.. now if you do the same command mentioned earlier,, netstat -an,, you should now NOT SEE the tcp port 5000 listening...
Well, this has been one of my quicker posts, but how much of this do you really want to be reading about on a Tuesday morning anyway....
That's my story and I'm stickin to it...
biz
posted by Dan Davis at 9:52 AM
1 Comments:
thanks joe, I wasn't sure if anyone was actually reading any of this.. hope it helps out others
Post a Comment
<< Home