Re: A Hack Attack and IPC$

From: DaveW (moonrover_at_comcast.remove-this-munge.net)
Date: 08/09/03 

Date: Sat, 09 Aug 2003 18:51:47 GMT

Maybe this will help. <shrug>
http://support.microsoft.com/default.aspx?scid=kb;en-us;314984

"John Cesta" <support@serverautomationtools.com> wrote in message
news:02eajvol0b1eg33rhqt3vh727d80moqsg2@4ax.com...
>
>
> My basic question: I know there is a way to delete the IPC$ share
> during a session but is there a way to delete the share so it does not
> create on reboot?
>
> Read the following if you need to know why this is important.
>
> Also, I hope this never happens to you.
>
> On M$ systems there are administrative shares that are created
> automatically. Some of these admin shares include: C$, D$, ADMIN$ and
> most importantly, IPC$ (a remote share).
>
---------snip--------snip------snip--------------

Relevant Pages

  • Re: A Hack Attack and IPC$
    ... >My basic question: I know there is a way to delete the IPC$ share ... >during a session but is there a way to delete the share so it does not ... >most importantly, IPC$. ... That'll disable all the admin shares. ...
    (comp.security.firewalls)
  • Re: A Hack Attack and IPC$
    ... On Sat, 09 Aug 2003 18:50:13 GMT, Lars M. Hansen ... >>most importantly, IPC$. ... >That'll disable all the admin shares. ... A setting of zero prevents the administrative shares, ...
    (comp.security.firewalls)
  • RE: Cannot keep hidden shares alive
    ... Regarding the missing IPC$ share, ... missing admin shares is malware that could be running on the computer, ... Start Registry Editor, and then locate the following registry ... Be aware that reinstalling TCP/IP or using the net share command ...
    (microsoft.public.win2000.file_system)
  • Re: Admin$ and IPC$ shares disappear repeatedly
    ... Administrative shares then being listed as IPC$, ADMIN$, or C$. ... Mapping to network drives works, IF you do not specify a domain ... And when I manually create them via "net share IPC$" or "net share ADMIN$" ...
    (microsoft.public.win2000.general)
  • Re: administrative shares
    ... >> None of the administrative shares are present. ... the ipc$ share appears in the ... >> two and file sharing no longer works afterwards. ... >Please explain this command as I am getting system errors. ...
    (microsoft.public.win2000.networking)