People looking for RA ports

[John Cuccia]

Are there reports of people actively scanning machines for port 3389?
That is, if I bring up a machine running RA, what are the chance that
it will be probed and attacked?

 

[Jeffrey Randow (MVP)]

A machine that is only using Remote Assistance should not be actively
listening without a valid invitation issued to a remote user...

If you are using Remote Desktop, you can be scanned and others can
attempt to hack your system... To protect yourself, make sure you use
a strong password. Many hackers will stop and give up since there are
more computers out their easier to attack...

Visit http://www.microsoft.com/security for more information.

Jeffrey Randow (Windows Net. & Smart Display MVP)
(e-mail address removed)

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone

 

[REP]

Does this apply to the person sending a remote access,
the person actually doing the remote access, or both?
That is, who is vulnerable?
Someone hijacked an email my wife was typing while she
was typing it...told her (by typing on her email) he/she
was in the house with her; also typed a bunch of
jibberish but clearly was watching her type real-time..
No evidence anything else touched on computer. I have
used remote access to help with my mom's PC. All of the
online hack-testing programs find no open ports or report
any access problems on my system, though I only have XP
Pro Firewall running on my DSL connection. This is rather
frightening as this person might be watching me type
right now without my knowledge---any ideas, help,
suggestions?

 

[Jeffrey Randow (MVP)]

In a remote assistance environment, only the person who is requesting
assistance is opening up the port...

As for the scenario you describe, it sounds like a trojan program
(maybe NetBus or something similar). Do a search on google for trojan
removal software (I don't have enough information on them to make a
recommendation).

Jeffrey Randow (Windows Net. & Smart Display MVP)
(e-mail address removed)

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone