Printable View
since i am running cable on this pc for quite some time now , i displayed all my connections and went into my cable stats.from there on the tab file and printer sharing was checked.i have had no knowledge whatsoever on this incident.Was there a chance somebody may have penetrated my file share and gotten into my pc?
-N
Its entirely possible that your system could have been compromised. Do you have a firewall installed or any other kind of protection? Have you noticed any files appearing or dissapearing that you never saw before? You might want to provide a bit more info so people can suggest you some ways to secure your machine a bit better.
Yes, a PC set up on the internet without a firewall, or without being locked down(as this one apparently was not, Q.E.D. it had file and printer sharing turned on)is always at risk.
Some performed a test once, and wrote an article from it( I forget who and where, and even the exact details) about taking a windows 98se box and putting it out on the internet and it being compromised in 18 hours.
if i were you id go get a good firewall, virus protection, format and reinstall.
You can use Sygate's free scan online. I dunno how detailed the scans are, but from what I understand, Sygate is reasonably trustworthy. Check it out, a couple various types of port scans etc. Hope this helps you secure your computer :D
http://scan.sygate.com/
I'd have to agree your chances of an invasion is pretty great. Besides the firewalls mentioned you maight also consider ZoneAlarm. It is easy to setup if you have only basic knowledge. Another tool to get is Ad-ware http://www.lavasoftusa.com because you had an open port you wil have spyware on your system and this will remove those. Backup your files and start with a firewall that will tell you what is running or wants to access the internet. A virus scan do some digging here in the tools section and find out the exploits for file and print sharing this way you will know what to look for manually on your system. Last time tests were run around where I live it took only 17 minutes for a computer to be hacked on a cable network. Quickest resort is to re-format and re-install the OS and then install the firewall first before you hook it back to the cable modem.
if you've been exposed for that long (not that it would take that long) there's really no telling whats on your system. its better not to take any chances. change all your passwords, reinstall and just chalk it up to experiance.
I'll vouch for what everybody recommends. I've been there and now have good up to date antivirus, firewall, and a program called SpyBot, which takes care of a variety of nasty stuff.
Anybody who got into my computer would get nothing but bored, but I'd prefer not to share even that with anyone else.
Quote:
Originally posted here by IchNiSan
Yes, a PC set up on the internet without a firewall, or without being locked down(as this one apparently was not, Q.E.D. it had file and printer sharing turned on)is always at risk.
Some performed a test once, and wrote an article from it( I forget who and where, and even the exact details) about taking a windows 98se box and putting it out on the internet and it being compromised in 18 hours.
...surprised it took that long! Maybe my neighborhood is just vicious with the scans/hacking.
you can also try shields up https://grc.com/x/ne.dll?bh0bkyd2 it's a little quicker than the scans over at sygate, although it is less indepth
Now wait. I'm not sure excatly how the gears work for windows file sharing, but wouldn't he have to have something shared for them to access it? or have remote access enabled or something to that sort?
Yes, they usually do. But some worms share them all out for them.
If 137 and 139 (netbios) ports are open, its possible to do a net use \\targetIP\c$ IF you know the username password on NT machines, OR the guest is enabled. lots of people install XP and never add a administrator password....
on 98 machines its possible to do a net use to the IPC$ directory which is a start...
I wont go into great detail, but if you have a box that has sharing, use VERY strong passwords, or best yet, turn it off completely.
Microsoft loves to ship products with lots of things turned on by default.... this is one of the reasons linux is superior... it ships with things OFF by default, enable what you need.
Yes , i am now running Zone Alarm.File and print sharing is turned off , i am running an up to date virus scanner , and everything is fine.Thank you everybody for the support.
-N
but the only thing is that when i run a nbtstat in dos on my own ip , i do get a table.But the thing is that there is no <20> so that means there is no share.But am i still at risk?