Solved

am I hacked?

Posted on 2004-09-09
5
189 Views
Last Modified: 2013-12-04
Hi, I am using Windows 2000 with IIS. In the middle of the day, I realized that my web-site server is stopped. I tried to start it and I got an message like "address is alreaady in use"

I remove my IIS service from server completely but I still see that "port 80, port 21" is open on the server and when I try to connect using ftp port, it even ask me username and password with a microsoft FTP server message.

What is that? I dont understand. Am I hacked?

I dont have any other web server on the server. I had IIS and MSSQL. that's all..

Urgent help is needed. Thank you very much..
0
Comment
Question by:sophie1
5 Comments
 
LVL 2

Accepted Solution

by:
AbacusOnsite earned 250 total points
ID: 12023737
Are your files still intact, or have they changed at all?  You could have just had a IIS web service hiccup.  When you say that you “realized” the web-server was down, do you mean that the web site was inaccessible, or that you looked at the service and noticed it was stopped, or you saw this from within IIS?

I believe that port 21 and 80 are open by default, otherwise you wouldn’t be able to view web pages or use an FTP program to download files from a server.  Normally, however, if anyone tries to connect to your computer at these ports, the connection is refused… unless, of course, you are hosting a web or FTP server.

Bottom line... I don't think you were hacked.
0
 
LVL 5

Assisted Solution

by:burningmace
burningmace earned 250 total points
ID: 12033986
Un-install the Webserver and FTP server, reboot and re-install. That should fix it.

I had the same problem and it turned out to be a faulty install.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
Security measures require Windows be logged in using Standard User login (not Administrator).  Yet, sometimes an application has to be run “As Administrator” from a Standard User login.  This paper describes how to create a shortcut icon to launch a…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question