Firewall Wizards mailing list archives

Re: Help, some one's hacked into my home computer


From: Richard Toscano <tokicker () pacbell net>
Date: Sun, 02 Jan 2000 13:02:44 -0800

Actually, someone did hack my system, and used FINDFAST to scan for
files.  They had open a .MPG movie
I had made from my digital camera.   Here's my setup:  Win98SE with
internet sharing enabled.  I have a local
net and am trying to share the DSL connection amongst my various
machines.  The DSL modem has a fixed IP
and is always connected.  The intruder came in to the host machine and
ran FINDFAST and was accessing
the MPG.  I caught all this a day later.  I guess their connection got
hung.  I used NETWATCH to discover
the connection, and what files they were looking at.

Seeing this, I looked over my system and found FFASTUN.* in both root
directories of my C and D drive.
All files had the same time/date stamp when the intrusion occured.  This
matched the connection time reported
by NETWATCH.

So, Windows 98 SE with internet sharing is allowing people to hack into
systems from the outside.  I don't
have a web server running, so I'm not sure what services they were using
to access my file system.  I did have
the C and D drives setup with full read/write shares!  Ack, not again!

...Doug



Current thread: