Re: Spyware?

From: Alex Nichol (alexn.mvpdts_at_ntlworld.delete.com)
Date: 06/21/04 

Date: Mon, 21 Jun 2004 16:04:26 +0100

Kelly wrote:

>Does it read Messenger Service by chance? If so:
>
>You need to turn of networking on your internet connection. You do this by
>either disabling NetBIOS over TCP/IP or turn on the firewall.

I would make that just 'Turn on the Firewall'. These things, and the
Blast worm and the like, come in through the port NETBIOS uses, but
they do not actually *use* NETBIOS (they aim straight at the Messenger
service) and turning it off is no protection 

-- 
Alex Nichol MS MVP (Windows Technologies)
Bournemouth, U.K.  Alexn@mvps.D8E8L.org (remove the D8 bit)

Relevant Pages

  • RE: Patching a Firewall
    ... NetBIOS has been disabled, since the shares don't exist without NetBIOS. ... In my opinion the OS used for a firewall is not really a big deal, ... need to hack the registry to turn off the administrative shares. ... >>Captus Networks ...
    (Security-Basics)
  • Re: access shared files on another computer
    ... I've verified that NetBIOS over TCP/IP is enabled and the Computer ... deactivating the firewall and nothing works. ... Assuming that your logon account is ...
    (microsoft.public.windowsxp.general)
  • Re: Networking WinXP Home to 98se
    ... disconnections, Node on XP machine is "Hybrid", NetBIOS ... >>has XP home and my desktop which has windows 98se. ... >>firewall and my nortel firewall on both machines are ... Make sure that NetBIOS over TCP/IP is enabled on all ...
    (microsoft.public.windowsxp.network_web)
  • Re: Modern antivirus for NT3.51?
    ... >NetBIOS over IPX/SPX ... >NetBIOS over TCP/IP ... machine's antivirus (AVG free) or firewall tell me ...
    (microsoft.public.security.virus)
  • Re: grc.com news server down?
    ... etc.) were a real problem a few years ago. ... There's no doubt that implementing wide ranging and sound security ... He said there was no danger in leaving NetBIOS enabled, ... My ISP wouldn't allow a router, but they did permit a "firewall". ...
    (comp.security.firewalls)