Security

Ask something
Discussion Locked

Suspicious IPC$ connection

0 helpful
7 replies

by d.tang 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

It seems that occassionally someone is trying to connect to my desktop through the office network. I noticed it as I found from Network Monitor there is sometimes a IPC$ connection from others to my desktop. FYI, my desktop is running MS Win98.What's this IPC$ connection about? Does it hurt to my desktop? Does it attack any vulnerability in my desktop?

I doubt it is just because other's PC has infected with some kinds of virus that is trying to propagate itself to others in the network and so to make such connection. Right?

7 replies

by koetsier

The IPC$ connection is a netbios way to try to login to your desktop. F.i., if I want to have a authenticated connection to your resources, I can do: net use \\server\ipc$ /username/password after which i don't have to authenticate anymore.
Probably, some pc has a mapped drive to your pc which tries to regain access upon boot.
IPC$ share is accessed via netbios port 139.
But beware, hackers use IPC$ to gain access to the network, so you have to look into this one.

by d.tang

So anything I can do with my desktop now? If there is indeed a hacker trying to gain access to my desktop, what preventive action I can take?

by koetsier

You can install zonealarm to figure out who tries to contact you, but don't expect someone to solve your problem without underlying information about protective measures of your network, although I discourage to propagate these in discussion groups like these.

by sketch88

the owners of these PCs may not be aware that they are trying to connect, this is an effect of the w32.funlove virus which tries to search for the prescence of a shared directory/file/printers over your network, if a workstation doesnt have any shared directory/printers, the virus will try to connect using IPC$

as long as your anti-virus software is updated to handle said virus, your PC cannot be infected

but if you really wanna make sure, you can disable netbeui in your PC, but you can no longer do file sharing

This discussion is closed to new replies.