Monitoring Netbios Shares for virus activities

  • Thread starter Thread starter cook
  • Start date Start date
It seems that recent virus are trying to use shares to infest
computers.
Do you think that it is usefull to use a little shareware application
to monitor shares like NetBiosSpy ? (http://www.netbiosspy.4t.com/)
Click to expand...

Better to remove or disable netbios access to tcp.

Win95/98 (standalone) - remove M$ client for networks.
Win95/98 (lan) - un-buind TCP/IP from the M$ client

Xp (standalone) - turn off file sharing in the M$ client and turn on the firewall
See http://isc.sans.org/presentations/xpsurvivalguide.pdf
Xp (lan) un-bind TCP/IP from both File and Printer Sharing and Client for Microsoft Networks
See http://www.pcurtis.com/network-xp.htm

Regards, Dave Hodgins
 
Back
Top