Malware Through a Router?

C and A Bredt wrote:
> Can malware be transferred to my computer from another computer using
> the same router?
>
> Both computers are running Windows Vista Home Premium with a Linksys
> Router with WAP security.
> Both computers connect to the internet, but I have not set up a network
> and we do not share any files.
> Thanks, CB

Yes malware can travel between computers on the LAN behind the router.
But if one computer is not sharing resources, like all the Windows
Networking Ports are closed on a computer on the LAN, then no other
computer on the LAN can communicate with the computer.

If the computer cannot communicate with other computers on the LAN, then
it cannot be attacked by malware trying to populate itself from
computers that are infected on the LAN.

You should be watching traffic to from the router, as that is a real
threat with wireless, with someone attacking the LAN on the wireless or
join your wireless network to exploit sites.

http://www.wallwatcher.com/

Here are some basics.

http://compnetworking.about.com/od/wirelesssecurity/tp/wifisecurity.htm
http://www.wardrive.net/

There are many ways besides windows networking that computers communicate
over a LAN. It is possible for worms to spread if Windows networking is
blocked.

--
Kerry Brown
MS-MVP - Windows Desktop Experience: Systems Administration
http://www.vistahelp.ca/phpBB2/


"Vista Succubus Hunter" <Sucuubus.DeleteThis@Hunter.com> wrote in message
news:uJlOkvjDKHA.1376@TK2MSFTNGP02.phx.gbl...
> C and A Bredt wrote:
>> Can malware be transferred to my computer from another computer using the
>> same router?
>>
>> Both computers are running Windows Vista Home Premium with a Linksys
>> Router with WAP security.
>> Both computers connect to the internet, but I have not set up a network
>> and we do not share any files.
>> Thanks, CB
>
> Yes malware can travel between computers on the LAN behind the router. But
> if one computer is not sharing resources, like all the Windows Networking
> Ports are closed on a computer on the LAN, then no other computer on the
> LAN can communicate with the computer.
>
> If the computer cannot communicate with other computers on the LAN, then
> it cannot be attacked by malware trying to populate itself from computers
> that are infected on the LAN.
>
> You should be watching traffic to from the router, as that is a real
> threat with wireless, with someone attacking the LAN on the wireless or
> join your wireless network to exploit sites.
>
> http://www.wallwatcher.com/
>
> Here are some basics.
>
> http://compnetworking.about.com/od/wirelesssecurity/tp/wifisecurity.htm
> http://www.wardrive.net/

Kerry Brown wrote:
> There are many ways besides windows networking that computers
> communicate over a LAN. It is possible for worms to spread if Windows
> networking is blocked.
>

Yeah it's possible but highly unlikely that a machine on the LAN,
particularly on a home user LAN, is going to be in communications with
another machine on the LAN, other than, using the Windows networking ports.

One closes those ports by shutting down the services that listen on
those ports, and he or she is in pretty good shape.

When I go on the road and connect to networks not under my control, such
as hotels, wifi cafe, other such public spots and client sites, Client
for MS Network and MS File and Print sharing services are disabled.

The Windows Networking ports are closed, and I flat-out know there is
no way I am going into communications with another machine on the LAN in
those settings with my machine, unless I make it so.

On the other hand, there is a personal packet filter/personal firewall
running too on the machine, and it's my machine that must initiate the
contact with a remote machine on the LAN before ports are open on the FW
or packet filter, otherwise, they are closed.

If a person does things and/or uses the right tools to protect the
machine, they are in pretty good shape. He or she really doesn't have to
worried about his or her machine being on a LAN and not being protected.