Windows Worms Doors Cleaner

[Shinobi]

What is Windows Worms Doors Cleaner ?

Most of the worms, in particular the most famous, use known vulnerabilities in Windows services which are enabled by default and that often can't be disabled via the OS's configuration.
Even with these services patched with Microsoft security fixes, they are still exposed to the Internet at large ready to be exploited by the next exploit.

Windows Worms Doors Cleaner allows you to close these services the worms rely on



WWDC.EXE
Check page before hand if you do not trust the direct link :smile:
http://www.firewallleaktester.com/wwdc.htm

These ports/services on client side are :

* DCOM RPC (listen on port 135) MS03-026
* RPC Locator (port 445) MS03-001, MS04-011
* NetBIOS (ports 137/138/139) MS03-049
* UPNP (port 5000) MS01-059
* Messenger service (uses RPC/NetBIOS ports) MS03-043

An example of server side ports/services :

* WebDAV on IIS server (port 80) MS03-007
* SQL Server 2000 (port 1434) MS02-061


Server side services are not covered by windows worms doors cleaner which aims only home users computers, who themselves shouldn't run any webservers.
These webservers should be patched and can't really be disabled without removing the service offered to the Internet (like the website).

All of the above vulnerabilities are used by many worms nowadays because it's a very fast and efficient way to infect computers via the network (Internet) without users having to choose to click an attachment or not, they are direct network attacks only blockable by firewalls.

http://www.firewallleaktester.com/wwdc.htm

Another excellent tool, it saves time for those who dont know how to use the services.msc in windows
or other commands to disable specific services. Enjoy.

[subgenius]

thanks i may play around with it on my windoze drive.