Solved

am I hacked?

Posted on 2004-09-09
5
192 Views
Last Modified: 2013-12-04
Hi, I am using Windows 2000 with IIS. In the middle of the day, I realized that my web-site server is stopped. I tried to start it and I got an message like "address is alreaady in use"

I remove my IIS service from server completely but I still see that "port 80, port 21" is open on the server and when I try to connect using ftp port, it even ask me username and password with a microsoft FTP server message.

What is that? I dont understand. Am I hacked?

I dont have any other web server on the server. I had IIS and MSSQL. that's all..

Urgent help is needed. Thank you very much..
0
Comment
Question by:sophie1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 2

Accepted Solution

by:
AbacusOnsite earned 250 total points
ID: 12023737
Are your files still intact, or have they changed at all?  You could have just had a IIS web service hiccup.  When you say that you “realized” the web-server was down, do you mean that the web site was inaccessible, or that you looked at the service and noticed it was stopped, or you saw this from within IIS?

I believe that port 21 and 80 are open by default, otherwise you wouldn’t be able to view web pages or use an FTP program to download files from a server.  Normally, however, if anyone tries to connect to your computer at these ports, the connection is refused… unless, of course, you are hosting a web or FTP server.

Bottom line... I don't think you were hacked.
0
 
LVL 5

Assisted Solution

by:burningmace
burningmace earned 250 total points
ID: 12033986
Un-install the Webserver and FTP server, reboot and re-install. That should fix it.

I had the same problem and it turned out to be a faulty install.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
In a recent article here at Experts Exchange (http://www.experts-exchange.com/articles/18880/PaperPort-14-in-Windows-10-A-First-Look.html), I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
In this video, viewers will be given step by step instructions on adjusting mouse, pointer and cursor visibility in Microsoft Windows 10. The video seeks to educate those who are struggling with the new Windows 10 Graphical User Interface. Change Cu…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question