PDA

View Full Version : <hacking with microsoft-ds> ??


January 9th 04, 06:40 PM
Hi, I don't know whether this sucking guy from Brazil has hacked me or not.
I use XP. Does Windows Xp involve the security issue that the hacker hack
you with the victim's microsoft-ds port????

Please help.


begin 666 hack.gif
M1TE&.#EA@0)5`+,``'-M8S(Q,F]N;SX]/DI)2F-B8Y62E<;#Q@``````````
M`````````````````````"'Y! ``````+ ````"!`E4```3_$*!)J[TXZ\V[
M_V HCF1IGFBJKFSKOG LS_0FU7BN[WSO_\"@<$C\W8K(I'+);#J?T*CL**U:
MK]BL=LM-4KO@L'A,+IN'W[-ZS6Z[W]LT?$ZOV^_XD3S/[_O_@%E[@82%AH>(
M+C<'!RB,+HR/29*)E9:7A!*1C1V<%Y0JDJ ZGA:CF*BIJFL`HJ48IS"4L32T
MJ[>XN6"MG+.1%)N^OA/"KY_&")O RL3,S:#.P9[.R;_/T-:ZVMO<++S-X-7+
M&</BYK;F%:[AZ^>][^'IIM/P[NS(W?GZ^Q:\S+&TRKFB=JR@O8,#K0'$)[!>
M.7X0(_+[=G %CQ
M44N,,RNBW,GSD$IZ-TM)$[FLY+6B.&56<TF2:4*1Q7I*G0IH$-6K6+.RL:JU
MJ]>O5[B"'4NVK!"Q9M.J7?L"+=NW<.-Z<"NWKMVX=._JW3LV+]^_@*?Z#4RX
M,,3!AA,KSH5XL>/'*2%+GLR8LN7+EAICWLS9C.;.H$-K^2RZM&DGI$^K7GV6
MM>O74E+#GDV[A>S:N'/KT<V[]XS;OH,'!RZ\>.Z\0XD03+$<%K)LSW!)PU?"
MJ(B%3:G?:6[:;[OK+ZR3,-K\E'A#WT-I'U'^XWHZZ=\#>^R]7HCS(/#?7Y\^
M'M%5LSC1G_\\_O7QG7CZR54?.+]$=8V#[+G'E#K0%6A0,4 -E XU'%:HABA(
M%;4A=!TV8A-W4&6H8G00+B64AU*8%TR(#V;X5WW9G&BB?3=9Z$&/.5%HT08R
M*:5C3DJM,6--.^Y8X$LZ7>@13>(T.&605U1HRT-4WK7@/$X>V)2/G4R#)5)C
;H7AC8'.,GF##B==V?0HXX9(+V
M)-EEG(GNJ6BBSAG4!I!<0CJIHXM>*>:0E8*:)8]I9LIH65]22J>346H$CZ3]
ME00KJ9W2-* 9F.*4HJAKVA?JK/_A^6B,M!K)ZJV&YD>BELR^R.C_=$?1R.([
M*(IY[(DN$DKAA)<V:^.VSC([;*1M:MBGMM)FJP5!R[*Z%+@W&E<'LO+F0UR]
M4*"(+S?W[NNO:/W^*_!F`0]L\&0%'ZSP8@DO[#!AR+VI;G)NG*J>?!H4BD2)
*
MRCYA[*09IZES2,)J&FRN2Y#7-,I(JQH?U*!>2TS.-I_IGZ2#!6HKU45H?+*E
MK@KMZ<\:RUQKT5^/FRXZ/?\0=W@HQSRRSOJ&O/;6M.[LM4Q=O_@KV!\(8+@`
M!B1N``&,$W#XXP(4('D!C3M^N(@UOAWS_XC<9AV4V'::'/:K=>;M==1Z=^HN
MV\&*ZESGZJKYN;04YQU[[!1?I-#/T:G*]^\O7PWIWTGY^I^,X03N^X,R/*[X
([A[J\
MJ<:OO=+J4C(H*Z)H+J_LYKPBU:#4)S))**]UYE.!\Q17.>D9CGH-O%ZELJ>K
M;9&/:*M2'](R-3IXG6M_Y/*?_([7I#*%T'4:[%7ZF%>U:)0J3XB*B=(Z@K\4
M/L=H$1+>TL(%I0#Y"$H'C >]6+# Q$50>A"TGN$PE[/3@>2$1/D4"@<W12 $
M17_U"Z 0,0:_H_^Q;ECL*Y[;P'@E`@T1?C*$6QDM.+\;5O%'+Y1:WX:&MWH$
ML6TT"( >`S" /@Y@CWST(R [/
*$I*D7C$47:H1;@0`-*0
MMQ0D(0=IR"\FA&:WNQW'1 >Z=P%3DF]*9HG0]"T[.8N9F<O:NZ(IS&;5S)BT
;O=N9"'8(-6-7O8JW;>[69@R&4?Y?G'7=+S8808
MXG'B64A=ZA&7]NQG'_&9SV+BIF$$36A=$*K0AK*%H0Z-**HD2M'+0+18HAC%
MBC^4@;Z,>O0MFC#3!3]*TK6$-'\E3>E$031&E;I4,*%KZ4MGBI*3ED^F-,WI
J8>"D3YWZU%X;TM]/AWJ2C5K)H$1-ZBTNJM2F5L6I4-T)4Z-*U3I$```[
`
end

Ramesh \(XP Power User\)
January 9th 04, 06:41 PM
there are possibilities. To know which application is connecting to that IP
(may be a trojan)

type "netstat -o" will give the process ID which can be mapped to that
application.

Disconnect ur system from internet
remove all startup applications
run a virus scanner, adaware

--
_______________________________________
Ramesh Srinivasan
MSWindows OS- Poweruser
eMail:
Aim: SRamesh2k
INDIA


<pixelmana> wrote in message ...
Hi, I don't know whether this sucking guy from Brazil has hacked me or not.
I use XP. Does Windows Xp involve the security issue that the hacker hack
you with the victim's microsoft-ds port????

Please help.

Kent W. England [MVP]
January 9th 04, 06:46 PM
Blocking out port 445 just makes me have to look it up, you aren't
protecting yourself by obscuring the fact that "microsoft-ds" is port
445 on TCP or UDP.

Port 445 is SMB directly over TCP/IP without NetBIOS, so this Brazilian
character is coming in on your open file share by typing in your IP
address like \\x.x.x.x. You may have already disabled or blocked
NetBIOS, but XP has this new feature of file sharing directly over
TCP/IP w/o NetBIOS. Gotcha.

You should unshare your shares on this Internet connection and get a
firewall to plug ports 445 and any other ports you may have open that
you don't need or can't easily shut down on your system.

I doubt that this person has installed a trojan, otherwise he'd be using
some other high number port to access your system and you'd have some
unknown process listening on that port. But it would still be a good
idea to update your AV and scan your system and download one of the two
well-known spyware cleaners and check your system for trojans.

--
Kent W. England, Microsoft MVP for Windows



<pixelmana> wrote in message
...
> Hi, I don't know whether this sucking guy from Brazil has hacked me or
not.
> I use XP. Does Windows Xp involve the security issue that the hacker
hack
> you with the victim's microsoft-ds port????

Google