# Was someone trying to hack my wife's PC last night?

**URL:** <https://boards.straightdope.com/t/was-someone-trying-to-hack-my-wifes-pc-last-night/157898>\
**Category:** Factual Questions\
**Created:** [February 27, 2003, 3:38pm UTC](https://boards.straightdope.com/t/was-someone-trying-to-hack-my-wifes-pc-last-night/157898 "2003-02-27T15:38:59Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![bernse](https://avatars.discourse-cdn.com/v4/letter/b/a9a28c/32.png) [@bernse](https://boards.straightdope.com/u/bernse)\
**Post date:** [February 27, 2003, 3:38pm UTC](https://boards.straightdope.com/t/was-someone-trying-to-hack-my-wifes-pc-last-night/157898/1 "2003-02-27T15:38:59Z")

</div>

I was using my wifes PC last night for the first time in ages. It is hooked up to our DSL connection that has no firewall, and running Win98SE. I had the computer on for about 1/2 an hour.

When I went to shut it down, Windows gave me a message “A file is open for a user” or something like that, and asked if I still wanted to shut down, which I did.

I looked at the DSL modem and there appeared to be some activity on it. I am sure I terminated the executable that I ran on her PC before I shut her PC down.

I’m not too concerned about security on her PC as it is just a fresh, bare install of Win98SE and no other files on it… other than my little Executable so I’m not concerned about any information leaving, but I was curious as to the message I received as I shut down.

---

<div class="post-metadata">

**Author:** ![JRootabega](https://avatars.discourse-cdn.com/v4/letter/j/8e7dd6/32.png) [@JRootabega](https://boards.straightdope.com/u/JRootabega)\
**Post date:** [February 27, 2003, 3:57pm UTC](https://boards.straightdope.com/t/was-someone-trying-to-hack-my-wifes-pc-last-night/157898/2 "2003-02-27T15:57:55Z")

</div>

You’re right, Derleth, we’re so very sorry, we’ll try to use the correct terminology in the future.

Oops, force of habit.

Anyway, bernse, you probably have File and Printer sharing enabled – it’s under the Network section of the Control Panel. Someone on the network to which your DSL modem connects you was accessing the files that you were thus sharing on that network. If they didn’t have write permissions, there’s not much they can do.

---

<div class="post-metadata">

**Author:** ![bernse](https://avatars.discourse-cdn.com/v4/letter/b/a9a28c/32.png) [@bernse](https://boards.straightdope.com/u/bernse)\
**Post date:** [February 27, 2003, 4:17pm UTC](https://boards.straightdope.com/t/was-someone-trying-to-hack-my-wifes-pc-last-night/157898/3 "2003-02-27T16:17:18Z")

</div>

Well, I know I do have sharing allowed on her PC as I do transfer the odd file between the two PCs of ours (only my PC and hers on the LAN) but mine was turned off at the time.

I guess I am wondering if it was someone browsing/opening her files via the net.

---

<div class="post-metadata">

**Author:** ![World\_Eater](https://avatars.discourse-cdn.com/v4/letter/w/f04885/32.png) [@World\_Eater](https://boards.straightdope.com/u/World_Eater)\
**Post date:** [February 27, 2003, 4:27pm UTC](https://boards.straightdope.com/t/was-someone-trying-to-hack-my-wifes-pc-last-night/157898/4 "2003-02-27T16:27:48Z")

</div>

Well it’s possible it could be a trojan trying to “phone home”, but who knows. I would do as **JRoot** suggested and disable filesharing, and download this free firewall, it does the job well.

[http://www.agnitum.com/products/outpost/](http://www.agnitum.com/products/outpost/)

---

<div class="post-metadata">

**Author:** ![Will\_Repair](https://avatars.discourse-cdn.com/v4/letter/w/a698b9/32.png) [@Will\_Repair](https://boards.straightdope.com/u/Will_Repair)\
**Post date:** [February 27, 2003, 4:46pm UTC](https://boards.straightdope.com/t/was-someone-trying-to-hack-my-wifes-pc-last-night/157898/5 "2003-02-27T16:46:33Z")

</div>

Go to [grc.com](http://grc.com) and perform the Shield’s Up test. Follow the directions for fixing security holes.

---

<div class="post-metadata">

**Author:** ![Larry\_Mudd](https://avatars.discourse-cdn.com/v4/letter/l/f14d63/32.png) [@Larry\_Mudd](https://boards.straightdope.com/u/Larry_Mudd)\
**Post date:** [February 27, 2003, 7:24pm UTC](https://boards.straightdope.com/t/was-someone-trying-to-hack-my-wifes-pc-last-night/157898/6 "2003-02-27T19:24:15Z")

</div>

[RegisterUK article](http://www.theregister.co.uk/content/8/17188.html) on a simple exploit of Microsoft’s notoriously lax Windows networking security.

> [@](#):
>
> A program that scans Internet addresses for unprotected disk drives might be viewed as a hacking tool. But to the man who wrote it, ShareSniffer is an honest peer-to-peer venture that brings out the full potential of Windows’ networking features.  
> “I want people to know that they don’t have to take the time to make a web site and pay somebody to host it,” says ShareSniffer Inc. co-founder Kerry Rogers, 40, the author of the program. “All they have to do is right-click on a folder, and they can make all their music and art and other incredible stuff available to the world.”

Nice spin, there.

Password-protect your open shares at the very least. A firewall is a good idea, too. If you’re not used to configuring firewalls, I recommend [ZoneAlarm](http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp). After it’s installed, every time you have network requests, a dialog comes up and asks if it’s okay, or if it should be blocked in the future. A very simple case-by-case approach.

---

<div class="post-metadata">

**Author:** ![KneadToKnow](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kneadtoknow/32/3999_2.png) [@KneadToKnow](https://boards.straightdope.com/u/KneadToKnow)\
**Post date:** [February 27, 2003, 7:41pm UTC](https://boards.straightdope.com/t/was-someone-trying-to-hack-my-wifes-pc-last-night/157898/7 "2003-02-27T19:41:38Z")

</div>

You know, if you’re a little sloppy about the way you pronounce _PC_, this becomes a much more disturbing question.

---

<div class="post-metadata">

**Author:** ![bernse](https://avatars.discourse-cdn.com/v4/letter/b/a9a28c/32.png) [@bernse](https://boards.straightdope.com/u/bernse)\
**Post date:** [February 27, 2003, 8:23pm UTC](https://boards.straightdope.com/t/was-someone-trying-to-hack-my-wifes-pc-last-night/157898/8 "2003-02-27T20:23:30Z")

</div>

Yes, but I already know who that person was.

😉

---

<div class="post-metadata">

**Author:** ![bernse](https://avatars.discourse-cdn.com/v4/letter/b/a9a28c/32.png) [@bernse](https://boards.straightdope.com/u/bernse)\
**Post date:** [February 27, 2003, 8:25pm UTC](https://boards.straightdope.com/t/was-someone-trying-to-hack-my-wifes-pc-last-night/157898/9 "2003-02-27T20:25:33Z")

</div>

Actually, um, never mind. I just realized how bad that sounded in conjunction with _hack_.

---

<div class="post-metadata">

**Author:** ![KneadToKnow](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kneadtoknow/32/3999_2.png) [@KneadToKnow](https://boards.straightdope.com/u/KneadToKnow)\
**Post date:** [February 27, 2003, 8:31pm UTC](https://boards.straightdope.com/t/was-someone-trying-to-hack-my-wifes-pc-last-night/157898/10 "2003-02-27T20:31:15Z")

</div>

Yeah, see? _Much_ more disturbing.

But at least you took it in the spirit it was intended. 😉

---

<div class="post-metadata">

**Author:** ![NutMagnet](https://avatars.discourse-cdn.com/v4/letter/n/ea5d25/32.png) [@NutMagnet](https://boards.straightdope.com/u/NutMagnet)\
**Post date:** [February 27, 2003, 8:36pm UTC](https://boards.straightdope.com/t/was-someone-trying-to-hack-my-wifes-pc-last-night/157898/11 "2003-02-27T20:36:26Z")

</div>

**bernse**  
“my little Executable”

That’s so cute! I’ve never heard it called that before.

---

<div class="post-metadata">

**Author:** ![something\_clever](https://avatars.discourse-cdn.com/v4/letter/s/3bc359/32.png) [@something\_clever](https://boards.straightdope.com/u/something_clever)\
**Post date:** [February 27, 2003, 8:52pm UTC](https://boards.straightdope.com/t/was-someone-trying-to-hack-my-wifes-pc-last-night/157898/12 "2003-02-27T20:52:33Z")

</div>

go get [ZoneAlarm](http://www.zonelabs.com/), you should probably have it already. it should be a law for broadband users or something…
