Is secedit.exe left by a hacker?

From: Jim Matthews (jim_matt@swbell.net)
Date: 11/01/02 

From: "Jim Matthews" <jim_matt@swbell.net>
Date: Fri, 1 Nov 2002 10:06:50 -0800

Recently I noticed a lot of net activity on my LAN from
my W2K system. When I looked to see what was going on, I
found a program called secedit.exe running out of
WINNT\System32. When I looked further, I saw a file
called secedit.sdb. I also found a file called 445.txt
which seems to contain a list of IP addresses that were
tested on port 445.

There are times when I have restarted my computer, I
have noticed a command window with a title of secedit.

I have a Linksys router that I use as a firewall to my
DSL connection so I thought I was pretty safe.

Can anyone tell me if this is legitimate or has a hacker
gotten in? Also, is there anything I need to set on the
Linskys that is not a default setting?

Thanks,

Jim

Relevant Pages

  • Re: Cant browse system on netowrk
    ... the firewall was disabled throughout ... >make sure no firewall on the lan. ... >> All connected to Linksys router which goes to a cable ...
    (microsoft.public.windowsxp.network_web)
  • Re: How save is a Windows PC on a Linux network.
    ... firewall between the dialup and the internal lan. ... Being of sound mind and body, I never surf with the Windows machine and ... Assuming you trust your firewall, and you know what's running on the ... I have to have it on the lan to access the Linux servers but sometimes it ...
    (comp.os.linux.misc)
  • Re: OWA
    ... 'Thats good news at least about the firewall. ... Tried them both earlier and same error message - 403. ... get ths same error message in and outside of the LAN? ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Wohin mit dem OpenVPN Server?
    ... Ich geb dem Server eine öffentliche IP und setze ihn in die DMZ, ... Adresse über die Firewall von der DMZ aus ins LAN verbinden... ... Ein kompromittierter VPN-Server ...
    (de.comp.security.firewall)
  • Re: [SLE] Firewall zones
    ... Looking at the firewall configuration in Yast, ... My network card is assigned its IP address by the router using DHCP. ... It connects to the LAN and to the router; the router in turn talks to the ... All the systems on the LAN are supposed to have the same firewall protection, ...
    (SuSE)