General discussion

Locked

Suspicious IPC$ connection

By D.Tang ·
It seems that occassionally someone is trying to connect to my desktop through the office network. I noticed it as I found from Network Monitor there is sometimes a IPC$ connection from others to my desktop. FYI, my desktop is running MS Win98.What's this IPC$ connection about? Does it hurt to my desktop? Does it attack any vulnerability in my desktop?

I doubt it is just because other's PC has infected with some kinds of virus that is trying to propagate itself to others in the network and so to make such connection. Right?

This conversation is currently closed to new comments.

7 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Suspicious IPC$ connection

by Koetsier In reply to Suspicious IPC$ connectio ...

The IPC$ connection is a netbios way to try to login to your desktop. F.i., if I want to have a authenticated connection to your resources, I can do: net use \\server\ipc$ /username/password after which i don't have to authenticate anymore.
Probably, some pc has a mapped drive to your pc which tries to regain access upon boot.
IPC$ share is accessed via netbios port 139.
But beware, hackers use IPC$ to gain access to the network, so you have to look into this one.

Collapse -

Suspicious IPC$ connection

by D.Tang In reply to Suspicious IPC$ connectio ...

So anything I can do with my desktop now? If there is indeed a hacker trying to gain access to my desktop, what preventive action I can take?

Collapse -

Suspicious IPC$ connection

by Koetsier In reply to Suspicious IPC$ connectio ...

You can install zonealarm to figure out who tries to contact you, but don't expect someone to solve your problem without underlying information about protective measures of your network, although I discourage to propagate these in discussion groups like these.

Collapse -

Suspicious IPC$ connection

by D.Tang In reply to Suspicious IPC$ connectio ...

Poster rated this answer

Collapse -

Suspicious IPC$ connection

by sketch88 In reply to Suspicious IPC$ connectio ...

the owners of these PCs may not be aware that they are trying to connect, this is an effect of the w32.funlove virus which tries to search for the prescence of a shared directory/file/printers over your network, if a workstation doesnt have any shared directory/printers, the virus will try to connect using IPC$

as long as your anti-virus software is updated to handle said virus, your PC cannot be infected

but if you really wanna make sure, you can disable netbeui in your PC, but you can no longer do file sharing

Collapse -

Suspicious IPC$ connection

by D.Tang In reply to Suspicious IPC$ connectio ...

Poster rated this answer

Collapse -

Suspicious IPC$ connection

by D.Tang In reply to Suspicious IPC$ connectio ...

This question was closed by the author

Back to Security Forum
7 total posts (Page 1 of 1)  

Related Discussions

Related Forums