is a netbios attack dangerous? I got one last night..

rundilEXE

Banned
Jul 19, 2001
103
0
0
Hey guys, your thoughts/knowledge would be helpful. Last night, trusty Zone Alarm popped up with, "Zone Alarm has blocked attempt, NETBIOS" What does the netbios do, and why would anyone have tried to get into it? Furthermore, what can I do with the i.p. address zonealarm logs, in order to see that it does not happen again?
Your responses would be appreciated, but please, keep them strictly knowledge based, i.e. if you just "think you know" it will not help at all. I want answers from people who truly know what they are talking aboot...:) Thx in advance.
 

rundilEXE

Banned
Jul 19, 2001
103
0
0
They didn't get through, "Zonealarm" but they tried...Thank the lord for good old za...So what does it actually do? Can I use their ip to report, nasterize them in return? From what I hear(www.grc.com)even trying these attacks on my pc can really rock their world, but I still would like to have a little more power over the whole thing....Don't like that *Unknown Anomaly* feeling, or the sense of helplessness it gives..
 

thEnEuRoMancER

Golden Member
Oct 30, 2000
1,415
0
71
I think one can access your disks with read/write permission if your computer has the NetBios enabled and your disks are shared. Happened to me once before I started using ZoneAlarm. Funny thing is, it was a rc5 trojan :)
 

Balt

Lifer
Mar 12, 2000
12,673
482
126
That's what the "More Info" button is for, it will usually answer your questions. ;)

I've gotten them before, but I doubt they are really people trying to hack my computer. :p
 

rundilEXE

Banned
Jul 19, 2001
103
0
0
Trojans:) Yukk....Go to grc and check out his article on them....So awed by it was I, that my name comes from a file in the sub-server7 trojan;)
 

nakedfrog

No Lifer
Apr 3, 2001
62,947
19,190
136
i'd say it was more than likely just a port scan. the simple fact that ZA blocked incoming netbios doesn't necessarily mean someone is actively trying to hack you.
 
Feb 24, 2001
14,513
4
81
oh yeah, remember you have to have netbus or backorfice on your system (virus). just run a virus checker and it should let you know if it's installed. if it isnt on the pc then they cant do anything with it.