Dameware Mini Remote Control

[No_Ghia]

Hopefully someone can answer a neophite question.
We had someone hack a station at our international office using
Dameware Mini Remote Control. I removed the software and gave the
station a more secure admin password, but I remain curious.
How is this done? The user is on a small network with no firewall.
He accesses the internet through an ISDN router. How would someone
gain access to his station through the router to install the software?
All of the internal IP addresses are statically assigned, but anyone
pinging from the outside would only see the router address and not the
internal adresses, correct?
Again, I don't have a lot of experience in this area, but I just don't
see how it can be done.
Can someone out there enlighten me?

 

[Lanwench [MVP - Exchange]]

You answered your own question when you mentioned that there is no firewall.
NAT alone won't protect you from much at all. Get one ASAP. Also run Windows
Update regularly to get patches, use good AV software, etc - the general
'good housekeeping' thing.