MS share dump
advICE :Intrusions : 2002802

Summary

Someone has listed all the available "shares" on a Windows machine. This is a hostile activity on home machines, but is somewhat common in corporate environments.

Details

"File and Print Sharing" is a feature of Microsoft Windows that allows sharing of files on a network. A frequent problem is that users turn this feature on unintentionally, allowing anybody on the Internet access to their hard drive.

This scan was triggered because file sharing is enabled on the system, and somebody has attempted to list all the "shares" available. A share is either the entire hard drive, or subdirectories within the hard drive.

False Positives

This is somewhat common in corporate environments as people browse the Network Neighborhood. In addition, corporations frequently have automated network programs that might walk through everyone's shares

 
Version appeared: