There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
General Security
Tag Cloud
access acer asus bios bsod computer crash dns driver drivers error ethernet excel freeze gaming google hard drive hardware hdmi internet laptop mac malware memory monitor motherboard mouse network printer problem ram registry router server slow software sound svchost.exe trojan usb video virus vista wifi windows windows 7 windows 7 32 bit windows 7 64 bit windows xp wireless
Search
Search for:
Tech Support Guy Forums > Security & Malware Removal > General Security >
Solved: My pc compromised?

Reply  
Thread Tools
leneal's Avatar
Member with 128 posts.
 
Join Date: Oct 2004
Experience: Intermediate
07-May-2008, 10:40 PM #1
Solved: My pc compromised?
I have a laptop and a desktop on a wireless home network, both running XP2. I don't use file sharing, nor have I ever had one PC access the other.

Out of the blue yesterday, my laptop gets a ZoneAlarm alert saying my desktop is trying to access it. Taken aback, I blocked access. Then I went to the desktop and ran every security software I have (current freeware versions of AVG, AVG Antispyware, SpyBot S&D, Spyware Terminator, A-Squared, Ad-Aware, and SUPERAntiSpyware). No threats anywhere. I then checked ZoneAlarm for outgoing transmissions; no record of any program trying to access the laptop.

Tonight, it happens again, so I jot it down the message: NetBIOS session [desktop address] (TCP Port 2779) [TCP flags: S]. I blocked access again, ran security apps again. Repeat of the night before.

Is this evidence that my PC has been compromised? What else should I do to investigate this?

Any and all advice/insights/wisdom welcome!
DoubleHelix's Avatar
Trusted Advisor with 21,014 posts.
 
Join Date: Dec 2004
Experience: A little of this...a litt
08-May-2008, 12:04 AM #2
If the two computers are connected to the same network (i.e. router), they're networked whether or not you've enabled file sharing. Whether or not it's a threat depends on the current security of the computer making the request. Are you sure it's clean of spyware? If so, there's no threat.
nocrap's Avatar
Junior Member with 2 posts.
 
Join Date: May 2008
Experience: Advanced
08-May-2008, 12:54 AM #3
Disable NetBIOS
Turn off NetBIOS protocol on your network card, your not using it anyway, your using TCP only.
leneal's Avatar
Member with 128 posts.
 
Join Date: Oct 2004
Experience: Intermediate
08-May-2008, 10:06 PM #4
Thanks, both of you, for the advice. I'll try turning off the protocol.

Still, I wonder what caused these alerts out of the blue and would sure love to diagnose the cause (to reassure myself there's no malware involved). Security apps still find nothing on either pc.

I don't know if this sheds any more light, but this evening, I got an alert that the laptop is blocking it's own attempt to communicate with the network printer. Unlike the last two alerts saying the desktop is calling in, this one says the laptop is calling out. (Haven't even used the printer today.) Makes me all the more nervous.
lunarlander's Avatar
Computer Specs
Senior Member with 3,484 posts.
 
Join Date: Sep 2007
10-May-2008, 06:29 PM #5
Try the online scanners listed in Security Help Tools sticky in this forum. They will give you a second opinion on whether your desktop is infected.
leneal's Avatar
Member with 128 posts.
 
Join Date: Oct 2004
Experience: Intermediate
10-May-2008, 09:25 PM #6
I just tried two of the on-line security tools, and they found no threats. Breathing easier. Thanks for pointing me to the sticky, lunarlander!
Reply

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.
Thread Tools


Similar Threads
Title Thread Starter Forum Replies Last Post
Have I been compromised? bigsmoothie555 Virus & Other Malware Removal 1 21-Jan-2008 11:49 AM
Compromised...but not sure how or how bad...help please Tcheser Virus & Other Malware Removal 3 20-Jun-2007 03:47 PM
Is my ID compromised? adf Virus & Other Malware Removal 2 30-Apr-2005 05:54 PM
Very compromised PC tyker Virus & Other Malware Removal 14 25-Jul-2004 12:34 PM
I have been Compromised mvconnell Virus & Other Malware Removal 0 18-Jul-2004 09:16 AM


Facebook Facebook Twitter Twitter TechGuy.tv TechGuy.tv Mobile TSG Mobile
You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 10:21 AM.
Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved.

Powered by Cermak Technologies, Inc.