AVG Network Inspector alert: Vulnerable service found

This article explains how to resolve the issue if Network Inspector in AVG AntiVirus shows the following alert:

• Vulnerable service found

Description

After running a Network Inspector scan, you may come across an alert warning that certain system folders are accessible to everyone. This issue arises when the files or folders shared via Server Message Block (SMB) service, also known as Windows File and Printer Sharing, can be accessed without authentication. In such cases, the Network Inspector lists the affected system folders as Accessible folders under vulnerability details. This means that sensitive areas of the system, such as user directories or program files, may be exposed to unauthorized access over the network.

This is a problem because, when certain folders like C:\Users or C:\Program Files are accessible without restriction, it opens up significant security risks. For example:

• C:\Users: If this folder is accessible, all usernames become public. This makes it easier for attackers to target specific accounts and may eliminate the need for them to guess usernames.
• C:\Program Files: If program files are exposed, attackers can easily see what software is installed on the system. This gives them an opportunity to search for vulnerabilities in outdated programs, making it easier to exploit known issues in those applications.

Solution

To fix this issue, you must locate and modify the sharing properties of the affected folders on the affected PC. Follow the steps below:

1. Locate the Accessible Folders: Identify the folders listed in the Accessible folders section of the Network Inspector alert.
2. Modify Sharing Permissions:
   • Right-click on the identified folder and select Properties.
   • Go to the Sharing tab.
   • Click on Advanced Sharing.... and untick the Share this folder if it is ticked.
   • Alternatively, adjust the permissions to restrict access to specific users or groups only, ensuring that unauthorized users cannot access the folder.
3. Apply the Changes: Once you modify the sharing settings, click Apply and OK to save the changes.
4. Re-scan the Network: Re-run a scan with Network Inspector to confirm that the issue has been resolved and the system folders are no longer publicly accessible.