DCOMbobulate
Skeptical as I am about unknown e-mail attachments, even I was puzzled by the latest file sent to me from “support@microsoft.com”. The e-mail [My Life as a Fischer has an example of it] looked official enough and, stranger still, Norton AntiVirus did not flag the file as infected. I nevertheless did not run the attachment, of course, and I wasn’t surprised, afterward, to find out the attachment was indeed yet another variant of the MS Blast worm.
Evidently all these worms in the MS Blast family want to exploit vulnerabilities in DCOM, a component that allows networked computer to communicate. Since DCOM would hardly ever be used in a home environment there’s no reason for it to be running at all. But Microsoft, instead of deactivating it, has concentrated on distributing patches that simply rewrite the code. DCOMbobulate, another great free utility from GRC.com, is a small program that will deactivate DCOM for you, eliminating the vulnerability that MS Blast-type worms try to exploit. It’s a quick and painless and highly recommended. Why leave something running that you will never use?
