my mstask talks to strangers

  • Thread starter Thread starter shahab
  • Start date Start date
S

shahab

Recently I noticed that on my Windows 2000 machine, mstask opens a
socket and listens on port 1025, although it can also be other ports.
Apparently it is supposed to this, so far no problem, but what is
disconcerting is that it also listens to programs from out side of my
computer and recently I saw someone from 218.91.217.35 actually
connect to it.

I have disabled "file and print sharing" and "client for Microsoft
networks" on my Internet connection. The question I have is, should
they be able to connect to mstask without having my password? If so
can they do any harm?. If they shouldn't be able to connect, then my
machine must have been compromised; how can I take back control?
Norton shows no viruses on the machine.

Your expert advice is appreciated.
 
shahab said:
Recently I noticed that on my Windows 2000 machine, mstask opens a
socket and listens on port 1025, although it can also be other ports.
Apparently it is supposed to this, so far no problem, but what is
disconcerting is that it also listens to programs from out side of my
computer and recently I saw someone from 218.91.217.35 actually
connect to it.
Click to expand...


Make sure that mstask is from your system32 folder. If its not, then its
malware.
If your not using task scheduling, id disable it (services).
I have disabled "file and print sharing" and "client for Microsoft
networks" on my Internet connection.
Click to expand...

Id go into network settings and disable support for netbios to be safe.

The question I have is, should
they be able to connect to mstask without having my password? If so
can they do any harm?. If they shouldn't be able to connect, then my
machine must have been compromised; how can I take back control?
Click to expand...

yes, they can take over your machine via port 1025 if your not patched.
Firewall will also stop attacks.
 
Back
Top