 | Senior Member with 107 posts. | | Join Date: Oct 2004 Experience: Intermediate | | Solved: My pc compromised? I have a laptop and a desktop on a wireless home network, both running XP2. I don't use file sharing, nor have I ever had one PC access the other.
Out of the blue yesterday, my laptop gets a ZoneAlarm alert saying my desktop is trying to access it. Taken aback, I blocked access. Then I went to the desktop and ran every security software I have (current freeware versions of AVG, AVG Antispyware, SpyBot S&D, Spyware Terminator, A-Squared, Ad-Aware, and SUPERAntiSpyware). No threats anywhere. I then checked ZoneAlarm for outgoing transmissions; no record of any program trying to access the laptop.
Tonight, it happens again, so I jot it down the message: NetBIOS session [desktop address] (TCP Port 2779) [TCP flags: S]. I blocked access again, ran security apps again. Repeat of the night before.
Is this evidence that my PC has been compromised? What else should I do to investigate this?
Any and all advice/insights/wisdom welcome! | | Distinguished Member with 12,781 posts. | | Join Date: Dec 2004 Experience: A little of this...a little of that | | If the two computers are connected to the same network (i.e. router), they're networked whether or not you've enabled file sharing. Whether or not it's a threat depends on the current security of the computer making the request. Are you sure it's clean of spyware? If so, there's no threat. | | Junior Member with 2 posts. | | Join Date: May 2008 Experience: Advanced | | Disable NetBIOS Turn off NetBIOS protocol on your network card, your not using it anyway, your using TCP only. | | Senior Member with 107 posts. | | Join Date: Oct 2004 Experience: Intermediate | | Thanks, both of you, for the advice. I'll try turning off the protocol.
Still, I wonder what caused these alerts out of the blue and would sure love to diagnose the cause (to reassure myself there's no malware involved). Security apps still find nothing on either pc.
I don't know if this sheds any more light, but this evening, I got an alert that the laptop is blocking it's own attempt to communicate with the network printer. Unlike the last two alerts saying the desktop is calling in, this one says the laptop is calling out. (Haven't even used the printer today.) Makes me all the more nervous. | | Senior Member with 1,333 posts. | | | | Try the online scanners listed in Security Help Tools sticky in this forum. They will give you a second opinion on whether your desktop is infected. | | Senior Member with 107 posts. | | Join Date: Oct 2004 Experience: Intermediate | | I just tried two of the on-line security tools, and they found no threats. Breathing easier. Thanks for pointing me to the sticky, lunarlander! |  THIS THREAD HAS EXPIRED.
Are you having the same problem?
We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.
|
Smart Search
| Find your solution! | |
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | | |  WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.
| You Are Using: |
Advertisements do not imply our endorsement of that product or service.
All times are GMT -5. The time now is 04:19 AM.
Copyright © 1996 - 2009 TechGuy, Inc. All rights reserved.
Powered by vBulletin, Copyright © 2000 - 2009, Jelsoft Enterprises Ltd. | |
|