• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Why is my c:\windows\system32 on the intenet?!

C

CletusTheDwarf

Senior member
So i just discovered today that if I browse to my pc's IP address, it brings up the index of my C:\Windows\System32 directory! you can browse the subfolders, download the files, etc. I am behind a netgear router and even if i turn off http port forwarding to my local ip, it still happens. What is supposed to happen if I go to my ip, is i'm supposed to get a login screen to access a plugin for trillian, which lets me get at my buddy list for anywhere. That works correctly if i use my local ip address. But if i use my global ip, it just shows all my sys32 files! Can someone tell me how to turn that off?
 
Small Office/Home Office

Things like Linksys, Netgear, and D-Link Cable/DSL routers are SOHO routers.
 
Originally posted by: CletusTheDwarfThat works correctly if i use my local ip address. But if i use my global ip, it just shows all my sys32 files! Can someone tell me how to turn that off?
Click to expand...
What that means in functional term (local vs. Global)?

Do you have more than one PC on the Network?

If you do, how the connection through the Internet is directed toward the correct PC?

Are you sure that on the computer in question is Not on the DMZ?

I think that when you deselect the open ports one at time, at the end they are all deselected?

:sun:
 
1. on your desktop, right click on your computer and click manage. Sometimes my computer is on the start menu.

2. Double click on 'shared folder' and click once on 'shares'

The only things listed should have dollar signs next to them. Anything else that is shared, and that you do want to have shared, you can remove by right-clicking on it, and selecting 'stop sharing'
 
shared folders should NOT show up on port 80 (assuming this guy isn't looking for shares, but is instead hitting port 80 with a web browser). Netstat (not sure with windows switches, linux would be a -p) can show you what program is listening to what port.
 
Originally posted by: nweaver
shared folders should NOT show up on port 80 (assuming this guy isn't looking for shares, but is instead hitting port 80 with a web browser). Netstat (not sure with windows switches, linux would be a -p) can show you what program is listening to what port.
Click to expand...

oh.. i thought he meant '\\ip' and not '//ip'

yeah....check your ports IMMEDIATELY
 
Originally posted by: JackMDS
Originally posted by: CletusTheDwarfThat works correctly if i use my local ip address. But if i use my global ip, it just shows all my sys32 files! Can someone tell me how to turn that off?
Click to expand...
What that means in functional term (local vs. Global)?

Do you have more than one PC on the Network?

If you do, how the connection through the Internet is directed toward the correct PC?

Are you sure that on the computer in question is Not on the DMZ?

I think that when you deselect the open ports one at time, at the end they are all deselected?

:sun:
Click to expand...

what i mean is if i use the ip address for the router, it goes to my sys32 directory. but if i go to 192.168.0.3, my local IP, then i get the IM Everywhere login screen.

There are 3 pc's on the network, the router takes care of directing the internet towards the right one.


I also ran several intenet security tests that I found online that scan your ports and such for security holes, and none of them found anything wrong. does this mean I'm fine?
 
what port? Are you trying to open a share to your computer (i.e \\live.ip.of.router\) or browsing to it with a web browser (i.e. http://ip.of.live.router)?

If you can open a browser to that from anywhere, I would grab your important non executable files and format. Who knows what has happened if people have access to that...hacked executables, configs, etc.
 
here is what i get when i run netstat:

Active Connections

Proto Local Address Foreign Address State
TCP cletusthedwarf:1042 cs52.msg.dcn.yahoo.com:5050 ESTABLISHED
TCP cletusthedwarf:1044 64.12.24.164:5190 ESTABLISHED
TCP cletusthedwarf:1045 baym-cs139.msgr.hotmail.com:1863 ESTABLISHED
TCP cletusthedwarf:1053 oam-d17c.blue.aol.com:5190 ESTABLISHED
TCP cletusthedwarf:1054 205.188.5.88:5190 ESTABLISHED
TCP cletusthedwarf:1055 mail.umich.edu:993 ESTABLISHED
TCP cletusthedwarf:1087 72.14.207.104:http TIME_WAIT
 
If you use your External IP locally i.e. typing it to the browser that is one of your LAN's computer, it can do many strange things, but that does Not mean that your are exposed if connected through the Internet.

You have to try your external IP from another location through the Internet.

If you want to see Live the computer?s ports action download and run this free program: http://www.sysinternals.com/Utilities/TcpView.html

:sun:
 
here's what i get:

C:\Documents and Settings\Evan>netstat -v -b

Active Connections

Proto Local Address Foreign Address State PID
TCP cletusthedwarf:1042 cs52.msg.dcn.yahoo.com:5050 ESTABLISHED 29
4
C:\WINDOWS\System32\mswsock.dll
C:\WINDOWS\system32\WS2_32.dll
D:\Internet Programs\Trillian\plugins\yahoo.dll
-- unknown component(s) --
[trillian.exe]

TCP cletusthedwarf:1044 64.12.24.164:5190 ESTABLISHED 2904
C:\WINDOWS\System32\mswsock.dll
C:\WINDOWS\system32\WS2_32.dll
D:\Internet Programs\Trillian\plugins\aim.dll
-- unknown component(s) --
[trillian.exe]

TCP cletusthedwarf:1045 baym-cs139.msgr.hotmail.com:1863 ESTABLISHED
2904
C:\WINDOWS\System32\mswsock.dll
C:\WINDOWS\system32\WS2_32.dll
D:\Internet Programs\Trillian\plugins\msn.dll
-- unknown component(s) --
[trillian.exe]

TCP cletusthedwarf:1053 oam-d17c.blue.aol.com:5190 ESTABLISHED 290

C:\WINDOWS\System32\mswsock.dll
C:\WINDOWS\system32\WS2_32.dll
D:\Internet Programs\Trillian\plugins\aim.dll
-- unknown component(s) --
[trillian.exe]

TCP cletusthedwarf:2641 205.188.5.88:5190 ESTABLISHED 2904
C:\WINDOWS\System32\mswsock.dll
C:\WINDOWS\system32\WS2_32.dll
D:\Internet Programs\Trillian\plugins\aim.dll
-- unknown component(s) --
[trillian.exe]

TCP cletusthedwarf:2643 mail.umich.edu:993 ESTABLISHED 4040
C:\WINDOWS\System32\mswsock.dll
C:\WINDOWS\system32\WS2_32.dll
C:\WINDOWS\system32\inetcomm.dll
C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\pstprx32.dll
[OUTLOOK.EXE]

TCP cletusthedwarf:3389 eecs4440p21.engin.umich.edu:1639 ESTABLISHED
708
-- unknown component(s) --
[svchost.exe]

TCP cletusthedwarf:2646 oe.bay108.hotmail.com:http TIME_WAIT 0
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top