General discussion

Locked

Why can they see my c directory ?

By dancary ·
I have received several e-mails telling me that my computer is vulnerable from internet hackers. The e-mail displays all my top level folders and files at the c level on Win2K. I'd like to know how this is done and what I can do to prevent this. The ad is asking me to buy an internet eraser product. But I'm really concerned/curious about how they can get my computer to return the top level directory info.
Thanks!

This conversation is currently closed to new comments.

19 total posts (Page 2 of 2)   Prev   01 | 02
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Why can they see my c directory ?

by dancary In reply to Why can they see my c:\ d ...

Poster rated this answer

Collapse -

Why can they see my c directory ?

by rapidad In reply to Why can they see my c:\ d ...

There is a script that will echo the contents of your "C" drive (or any other drive).
<FORM ACTION="FILE:///C:/" METHOD=GET>
look for this in the source page of the ad. they actually cant see you harddrive they are just haing your browser echo it.Or they could have it in a link in the email. You can see the same thing by going to my web page............
rhanan.com then go to nerds only and click the contents of your harddrive. It was really trick about three years ago when we put it in.
The other way is for them to have gotten hold of your login and are using thye C$ shared drive utility, this would be a serious problem, but unlikely. Look for that script first. let me know what you find.

Collapse -

Why can they see my c directory ?

by rapidad In reply to Why can they see my c:\ d ...

Nice answer from tim the toolman, and you can see from the code copied from the souce on that page it is in the same class of call

<iframe src="file:///c|/" width="100%" height="200"></iframe>

Collapse -

Why can they see my c directory ?

by dancary In reply to Why can they see my c:\ d ...

This answer describes the problem. Thanks for the info!

Collapse -

Why can they see my c directory ?

by Joseph Moore In reply to Why can they see my c:\ d ...

I agree with Anna777 on going to grc.com and running the ShieldsUp port scan.
Possibly what is happening is your TCP port 139 is open to the Internet, and your Win2K box has either a weak Administrator password or no password at all.
If that werethe case, then ANYONE could connect to port 139 on your system, then connect to the hidden C$ administrative share that ALL Windows machines have, and then they could see your file structure.
It is really a lot easier to do this then you think!
So, do the port scan test, and if it comes up that you are open, seriously think about getting a true firewall, either a physical firewall (SonicWall makes good ones I like!) or a software based one (ZoneAlarm is what I run).

Good luck.

Collapse -

Why can they see my c directory ?

by dancary In reply to Why can they see my c:\ d ...

Poster rated this answer

Collapse -

Why can they see my c directory ?

by TimTheToolMan In reply to Why can they see my c:\ d ...

Hi,

Although it is possible that the suppliers of the internet eraser product have installed a trojan horse on your PC, it is highly unlikely.

Check out the following site. It shows you exactly waht is available from your PC to a website you're visiting. Its quite shocking, really - there's a lot!!

But... To see the C drive? Nope. Thats a trick used by the software suppliers to scare you into thinking you need their software.

http://gemal.dk/browserspy/

(remove spaces from the above URL)

Specifically you can look at this link from their site. It give you what you were seeing.

http://gemal.dk/browserspy/cdrive.html

(remove spaces from the above URL)

I'm sure plenty of people fall prey to these internet scaremongers. At least your decision will be an informed one...

Cheers,
Tim.

Collapse -

Why can they see my c directory ?

by dancary In reply to Why can they see my c:\ d ...

Poster rated this answer

Collapse -

Why can they see my c directory ?

by dancary In reply to Why can they see my c:\ d ...

This question was closed by the author

Back to Web Development Forum
19 total posts (Page 2 of 2)   Prev   01 | 02

Related Discussions

Related Forums