Slashdot Mirror

Totally agree with the above post: There should be absolutely no network reachable services running by default on a consumer PC. This is also the philosophy behind this nice free tool.

What do you mean, you killed all services? This doesn't make sense, as some are critical components of the OS. Next time you build a machine, run this tool before connecting it to the net. That's what I always do and I never caught a worm on any of the Windows machines I administer. Presto!

http://stoplistening.com/

or

http://www.firewallleaktester.com/wwdc.htm

These disable certain Windows protocols / services to ensure no worms can attack the system by exploiting known or unknown security holes in those components.

To protect you even further from potential threats, I suggest this hardening tool: http://stoplistening.com/
It allows you to run Windows without any Listening sockets.

Or (how many times must we repeat this?) apply StopListening (free, less than 100K) to close your ports before connecting to the network ... Can't get any easier!

Couldn't agree more. BTW, your post has the exact same philosophy as the StopListening tool.

And you can still get secure, by running this tiny app.

My netstat -an:

C:\Documents and Settings\Admin>netstat -an

Active Connections

Proto Local Address Foreign Address State

C:\Documents and Settings\Admin>

My netstat -an:

C:\Documents and Settings\Admin>netstat -an

Active Connections

Proto Local Address Foreign Address State

C:\Documents and Settings\Admin>

Not that hard - people could use this superb little tool for a start...