NTFS and sharing is compromised by attacker
Hi, my sharing of the c drive is shared as default, i can not log in to my Administrator profile and when i change my sharing via the management console and restart my pc it is shared again furthermore i can not select the sharing with no one and my ntfs permissions look like they are edited by a attacker. I did scan my PC with antivirus so it is not a malware problem. Please Advise me how to go to work with this.
August 16th, 2010 3:20pm

Sharing the root system drive is generally not needed (there are admin shares for that). Do you have any clean backups of your data & system that you can restore to? If you trully suspect that your system has been hacked using a clean restore point would be the first choice I'd recommend. "I did scan my PC with antivirus so it is not a malware problem." I wish it were the case that AV were 100% in catching issues, but they're not, & the more nasty forms of virues/malware can many times elude virus signatures especially when the scan is run internally as opposed to running it from another system against the attached disc. "Absence of evidence is not evidence of absence".
Free Windows Admin Tool Kit Click here and download it now
August 16th, 2010 8:20pm

The hidden administrative shares (e.g. c$)have always existed in Windows. You can't change this or change the security settings. It's normal. The shares are locked down. Just in case make sure all your accounts have strong passwords. The Administrator account is disabled by default. You can enable it but this is not normally needed. Kerry Brown MS-MVP - Windows Desktop Experience
August 17th, 2010 2:54am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics