Re: services.exe nee fscan
From: Karl Levinson [x y] mvp (levinson_k@excite.com)
Date: 12/20/02
- Next message: Karl Levinson [x y] mvp: "Re: services.exe nee fscan"
- Previous message: Karl Levinson [x y] mvp: "Re: Thanks Karl and Michael - I'll just live with it, I guess...."
- In reply to: George Hester: "Re: services.exe nee fscan"
- Next in thread: Robert Moir: "Re: services.exe nee fscan"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Karl Levinson [x y] mvp" <levinson_k@excite.com> Date: Thu, 19 Dec 2002 19:01:26 -0500
If your SQL SA password was blank, that makes me think you might not have
the latest SQL service pack installed. One of the Service Packs I believe
makes you change the password. Check that out using HFNETCHK from
www.microsoft.com/technet/security.
Also, there are a number of Stored Procedures you should consider dropping
for security reasons, as they allow a hacker to remotely run code on your
computer. check out www.sqlsecurity.com for a hardening SQL checklist, if
you haven't already. There are other things besides this.
Last, check this out for other ways you should consider securing your
computer. Disabling NetBIOS and installing a firewall are like the first
two things anyone hardening a Windows computer would do. If these haven't
been done, I would be willing to guess there are other vulnerabilities still
on your machine:
http://securityadmin.info/faq.htm#harden
"George Hester" <hesterloli@hotmail.com> wrote in message
news:OZRpm85pCHA.2620@TK2MSFTNGP10...
Hey thanks. I probably overreacted. I just get all queasy inside when
errors start popping up all over the place when I install something.
So what I did is I disabled NetBIOS from TCP\IP on the card. Disabled it
entirely. That seems to have helped the erros. Now I have none. A few
warnings but that's OK they are SQL Bugs and my damn W32 Time service which
seems just cannot find a nice Time Server out there.
But the errors are gone. Know what else are gone?
All these strange logon requests in my Event Viewer Security. Not one since
yesterday. They were occurring about 20 every four hours. Not a single one
since I started using this Sygate Firewall full time. And removed
C:\WINNT\system32\drivers\service.exe I have to attribute that head's up to
B. Goodman and the Sygate.
It looks as though I had a number of security holes that all added up to a
very insecure system. Number 1 being a sa password of "". Not a good thing
to do. Now my sa password is so friggin convoluted I have to keep it in my
wallet. I wouldn't remember it in a million years.
I think my security woes are in the past but for any that are interested
I'll ask again if I end up falling later. Thanks everyone for stepping
through this with me.
-- George Hester __________________________________ "Karl Levinson [x y] mvp" <levinson_k@excite.com> wrote in message news:#1m0s$2pCHA.1664@TK2MSFTNGP10... > If you have problems with one firewall solution, I would recommend trying > another. You wouldn't give up all word processors just because WordPerfect > didn't work right on your computer, or go without antivirus because one > antivirus program gave you errors. > > I've run several different firewall solutions and while any one of them can > cause errors in some environments, I haven't encountered the problems you > describe. > > > "George Hester" <hesterloli@hotmail.com> wrote in message > news:#qxrgWxpCHA.2204@TK2MSFTNGP09... > Oh my goodness. I just cannot deal with the errors that occur in the Event > log using this firewall stuff. I am going to have to find a way to secure > this machine down without this crap. It's just too much. NetDDE errors, > perl script errors, Service Control Manager Errors, Node Name MachineName > already in use on Lana Number 0 error; NDDENB32.dll failed; the Network DDE > Session terminated unexpectedly. Too much. Thanks for all the suggestions > but there has to be a better way. > > -- > George Hester > __________________________________ > "George Hester" <hesterloli@hotmail.com> wrote in message > news:OiT#YEwpCHA.2444@TK2MSFTNGP10... > I have a file in C:\WINNT\system32\drivers it is called services.exe and it > looks like it is being called at boot. I will investigate this further. I > have broken down and installed a personal fireall and I see this was trying > to connect. It was the first thing I noticed. Anyway I should get rid of > this? What does it do other than scan ports? > > -- > George Hester > __________________________________ > >
- Next message: Karl Levinson [x y] mvp: "Re: services.exe nee fscan"
- Previous message: Karl Levinson [x y] mvp: "Re: Thanks Karl and Michael - I'll just live with it, I guess...."
- In reply to: George Hester: "Re: services.exe nee fscan"
- Next in thread: Robert Moir: "Re: services.exe nee fscan"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
