File sharing

I've noticed that in "Network and Sharing Center" my file sharing option is often turned on, even though I keep it turned off. It makes me wonder if I have some kind of malware embedded in my system that responds to outside requests to turn file sharing on.

I run a NOD 32 scan periodically and never find anything so if I've got something it's not being recognized as problem software.

Any thoughts on this anyone? Anybody notice that your file sharing gets turned on from time to time for no reason?

Wondering . . .

 

Do you have someone who uses your laptop with administrator privileges?

 

Not a super expert on this, but doesn't that file sharing only apply to the local network? If you're on a corporate network it might be more of a concern, but if you're only using your computer at home, the only people snooping on your stuff (if there is any snooping going on at all) can only be the people in your immediate proximity (unless your wireless security has been compromised as well). This doesn't sound like malware.

 

Are you using Windows 7? Vista will probably be similar, but a little different. It's been so long since I've used it, I can't tell you where it will vary.

You have three separate sharing settings for each of the three network types. The best place to configure them is in:
network and sharing center -> advanced sharing settings (top menus on the left side)

If you're on a domain, some of this might be set by policy, and might or might not let you override the policy. Sometimes if you're on a domain but not currently on the network, you can change things that are managed by policy, but they'll reset next time you're on the domain network.

You almost certainly want 128bit encryption enabled for all three types, even if you have everything disabled. You also almost certainly want everything disabled for public networks. If you're on a domain, you probably want discovery enabled, but file/printer and publish sharing disabled. I would disable public sharing at home/work, and personally I have file/printer sharing disabled as well since I have a server. You should probably leave discovery enabled.

Now, if you go into the properties applet for a folder, you'll still have the sharing tab present. If you select to share a folder, it will automatically enable file/printer sharing for the network type you are on without prompting you. If you go back in and turn off file/printer sharing for that network type like I explained earlier, it will not remove the share properties that you configured for specific folders. I'm under the assumption that, although I haven't tested it, the share will not actually be accessible so long as you've disabled file/printer sharing for the given network type.

Edit: For the home/work network type, you also have a homegroup option. It's something regarding user accounts, and at what level they're managed. I have no idea what exactly this setting does, and I just have the homegroup provider and listener services disabled.

 

I did a poor job of describing my environment didn't I?

Nobody uses my notebook except me. It is Vista Business, SP2.

Not on a corporate or any other network other than my wireless router at home. Or when traveling on whatever network I have available.

> network and sharing center -> advanced sharing settings (top menus on the left side)

I don't have any selection named "advanced sharing settings", but I never change anything. It's always connected to "Public". One thing I need to check on is whether I log on as Administrator or Standard User. Reading just now I'm learning that I should not log on as Administrator.

When I'm at home I do use WPA2 encryption but when I'm piggybacking I'm obviously using somebody's unsecured router without encryption. I've gotten a bit paranoid lately - checking regularly to see if my file sharing has been switched on. Often, it has!