windows XP internet gateway removal

what the heck is internet gateway in XP?

I'm guessing it has to do with connection sharing over a network.

My problem is that I have a connection listed under "internet gateway" for a computer I didnt put there ( MSN Explorer on <insert comp name here> ).

I didn't configure the connection sharing and it shouldnt be there. Though the person who's computer it indicates has had access to my computer so it is possible they were trying to give themselves remote access to my comp.

However, as I said... I am not sure of exactly what the gateway is or how it works so I dont really know if its a security problem or not.

I've tried removing it, and removing ICS and disabling all of the services that might cause potential security problems and removing MSN Explorer but nothing seems to make this icon in my network connections window go away.

any thoughts?

thanks

-Ryan

 

oh yeah... also

oh yeah... i forgot to mention

when i do a netstat it shows this dude's computer name on the network and "ESTABLISHED "... its always on my port 5000

there is also a second listing for his computer and it says "CLOSE_WAIT" on my port 1135

-Ryan

 

A good virus scan using very current def files is in order. Hopefully you have something running on the PC. In addition to checking with it, also use a couple of good on-line checkers like Housecall and Norton (click the "check for security risks" button near the page bottom).

And any firewall including the built-in one with XP should be able to block traffic thru any port(s) you choose.

Needed but slightly less urgent would be spyware locating and removal. Ad-aware and Spybot both would be a good idea.

 

Uninstall using Add/Remove Programs > Windows Components > Networking Services.

http://www.practicallynetworked.com/sharing/xp_ics/internetgateway.htm

 

fixed

if anyone cares, i managed to get rid of it.
Not sure which did it but...

I dl'd all the latest security patches for xp home edition.
I enabled firewall protection and basically denied all access to my computer by outside sources.
I disabled all network services that were unnecessary.

i had the feeling it wasnt a trojan...