Solved

am I hacked?

Posted on 2004-09-09
5
190 Views
Last Modified: 2013-12-04
Hi, I am using Windows 2000 with IIS. In the middle of the day, I realized that my web-site server is stopped. I tried to start it and I got an message like "address is alreaady in use"

I remove my IIS service from server completely but I still see that "port 80, port 21" is open on the server and when I try to connect using ftp port, it even ask me username and password with a microsoft FTP server message.

What is that? I dont understand. Am I hacked?

I dont have any other web server on the server. I had IIS and MSSQL. that's all..

Urgent help is needed. Thank you very much..
0
Comment
Question by:sophie1
5 Comments
 
LVL 2

Accepted Solution

by:
AbacusOnsite earned 250 total points
ID: 12023737
Are your files still intact, or have they changed at all?  You could have just had a IIS web service hiccup.  When you say that you “realized” the web-server was down, do you mean that the web site was inaccessible, or that you looked at the service and noticed it was stopped, or you saw this from within IIS?

I believe that port 21 and 80 are open by default, otherwise you wouldn’t be able to view web pages or use an FTP program to download files from a server.  Normally, however, if anyone tries to connect to your computer at these ports, the connection is refused… unless, of course, you are hosting a web or FTP server.

Bottom line... I don't think you were hacked.
0
 
LVL 5

Assisted Solution

by:burningmace
burningmace earned 250 total points
ID: 12033986
Un-install the Webserver and FTP server, reboot and re-install. That should fix it.

I had the same problem and it turned out to be a faulty install.
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Permission issue? 10 73
UAC Controls - confused 9 90
Lenovo Helix Laptop: Bitlocker appears to be preventing boot 7 101
Securing a laptop that travels frequently 21 115
Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
OfficeMate Freezes on login or does not load after login credentials are input.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question