How to close ports 135, 137, 138, 139, 445

Shutdown of port 135

The value of HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Ole\ EnableDCOM is changed to "N"

Delete "ncacn_ip_tcp" from HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Rpc\ DCOM Protocols (2000 requires the next registry tool. Pass it above.)

In addition, the "Distributed Transaction Coordinator" service needs to be disabled.

The shutdown of port 137x138 / 139

Select "Internet Protocol (TCP/IP)" property in "Local connection" in "Network and Dial-up connection", enter "Advanced TCP/IP Settings" and "WinS Settings". There is an item "disable NETBIOS for TCP/IP" and check it.

Shutdown of port 445

HKEY_LOCAL_MACHINE\ System\ Current ControlSet\ Services\ NetBT\ Parameters

Create a SMBDeviceEnabled of type REG_DWORD with a key value of 0

In the end, the worst-hit areas of the virus are all Microsoft system objects. I hope everyone will keep backing up important documents on a daily basis and raise security awareness. There is no absolute security, only relative security! Try to gradually use the Linux environment and enter the open source family.