Acceptable Use Violation Policy?

[Bonka]

I recently received this email from my cable internet provider:


-----

Dear Shaw Internet Service customer;

*** Please note: we ask that you provide confirmation by reply email
(keeping the subject line intact) that you have received this email and will
be acting upon the information contained below. If no reply is received a
temporary service interruption may be implemented as a protective measure.
Thank you in advance for your assistance in this matter. ***

We're contacting you to advise that we have received reports of NetBIOS port
probes originating from your Shaw Internet connection.

The IP address from which this activity originated from is 24.83.15.77

Log information of this activity is available upon request.


NetBIOS port probes may be the result of: a misconfigured network - file and
printer sharing enabled and not secured; an insecure proxy server; a worm
virus and/or a Trojan virus. For assistance in securing your computer please
visit the websites below:

http://housecall.antivirus.com

http://www.sarc.com/avcenter/tools.list.html

http://support.shaw.ca/networks/virusinfo.htm


For detailed assistance in removing Trojans from your system, visit
http://www.ddiction.com/tds-help.php. Carefully follow the 12 steps of
instructions on how to download, install, update, configure and perform a
full system scan using TDS-3 (Trojan Defence Suite 3).


If you don't have any virus scanning software here are some suggestions:

http://housecall.antivirus.com

http://www.symantec.com/sabu/nis/nis_pe/

http://www.pandasoftware.com/activescan/


These are only useful in removing an existing virus. They will not protect
your system from future virus infection. Obtaining an antivirus program for
your computer is the best method of protecting your computer and information
from virus damage.


IMPORTANT - PLEASE READ:

It is critical that your system be cleaned as a virus or Trojan creates a
severe security risk to you and our network community.
To effectively secure your computer, we recommend that you disable File and
Print Sharing. In the event that you have an internal network requiring this
service, we strongly recommend that you disable File and Print Sharing over
TCP/IP, utilize the NetBEUI protocol on each computer, and bind File and
Print Shares through this protocol only.

How to disable File and Print Sharing:
http://support/networks/fileprintshare.htm

Windows 95/98 NetBEUI configuration:
http://www.practicallynetworked.com/sharing/netbeui.htm

Windows 2000 NetBEUI configuration:
http://www.practicallynetworked.com/sharing/netbeui-w2k.htm

Windows XP NetBEUI configuration:
http://www.practicallynetworked.com/sharing/xp/network_protocols.htm



Please refer to our full Acceptable Use Policy located at
https://secure.shaw.ca/policy/Use-Policy.asp

Please include all previous correspondence when replying

Acceptable Use Policy Management Team
Shaw High-Speed Internet Service
Shaw Cablesystems G.P.
Suite 1100, 630 - 3rd Avenue S.W.
Calgary, Alberta T2P 4L4
Telephone: (403)750-7420
Facsimile: (403)234-6280
<mailto:internet.abuse@sjrb.ca>


----

What the heck does this all mean?

Does it have anything to do with my computer, on a regular basis, having this dos screen pop up out of no where? It seems like someone is trying to access my computer. Here's a pic of what I'm talking about:

http://members.shaw.ca/bonka/images/image2.jpg

[6502kid]

It looks to me like you have been hacked.....

[Ridenow]

That screen shot looks like someone is manually trying to guess your administrator password. I am not the most knowledgeable, but I suspect the person making the attempt is an idiot and may or may not have gotten access.

I recomend changing your admin password, deleting any unknown user accounts(be careful not to delete any system accounts) and look into a software firewall.

[Yakbak]

Or someone is using your computer as a proxy to launch NetBIOS attacks on other computers...

[AMD'er]

you have been hacked...the problem is you may have to do a complete reinstall of your OS to get all the files and trogans that individual may have placed on your machine... then like the others have stated... you must invest in either a software firewall or a router...

They are using your computer as a portal to access other machines..

[Bonka]

Just what I thought. Thanks for the recommendations. I'll see if I can salvage some time to do a format :s