Discussion Locked

Hacker Attack on NT Server

0 helpful
13 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I'm on a project. Three laptops. running Windows NT Server and Windows 2000 server are workgrouped with a cisco router. One of my coworkers keeps hacking onto my laptop and loading annoying screen savers, placing programs on my startup and other generally annoying stuff (nice guy - huh?). I have asked him to stop but he thinks he is being a great wit. I don't want to start a hacker war with this idiot...just want him to stop annoying me. Any suggestions on how I can prevent him from hacking onto my laptop would be appreciated.

13 replies

by pete_may

If you have NTFS partitions he'll need the username and password of an account with administrator access on your laptop. So go into user manager in the administrative tools section and rename and change the password of any account he may be using. Well it's a start!!
Peter

by viperian

You could use a firewall like zonealarm from zonelabs or atguard (now norton internet security) you could also kill his login account, nuke him, put netbus or backorifice on his machine and take him out with a big bang. You could post his e-mail adres on the internet or something like that,, i dont think he likes getting e-mail from the whole world, at a speed rate of 100 mails a second. (Just kidding about the last one, don't do that your system administrator will kill you)

by dc1

Is he doing it remotely (from his laptop) or when your away? If remotely disable your hidden shares with the following registry edit.

HKLM\system\currentcontrolset\services\lanmanserver\parameters

Choose Add Value and the type is reg_dword with the value of 0.

by moorer

You state they are connected via a Cisco router. You could setup an access list on the router denying him access only to your port on the router. Or you can block specific ports such as 135 through 139, thus killing NETBIOS communications between the computers.

by michelm

Rename the admin account on your machine and change the password

Check that he doesn't have any login account or restrict it (e.g. no interactive login)

Remove shares on your machine

Yous the already shown registry-change to disable the admin shares.

or instead of the latter two use a firewall. One thats quite good and free(!) is ZoneAlarm from www.zonelabs.com. Works inbound as well as outbound.

The last thing is wuite difficult, because as long as he can gain physical access toyour machine he can hack the machine with speical hacking tools. There is only one way to avoid it. Passwordprotect the machines bios and disable the floppy in the bios

Michel

This discussion is closed to new replies.