Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Yesterday I was looking over my Windows Explorer and figured that my "c:\inetpub" had some contents, which includes "history" and "temp". On history there is a folder named "CFGHISTORY_000000001", which contais "schema", "administration.config" and "applicarionHost.config".

As far I know(I don't know much thing about IIS), this folders means that my IIS service is (or was someday) enabled.

So, the other side of the my doubt is that some months ago I got my computer hacked(from some way that I still don't know) and got some passwords stolen. At this time my antivirus wasn't up-to-date and I had no firewalls(I already fixed it). I never enabled IIS mannually or something else. So, my doubt is.... Could someone hacked my system and used IIS as a backdoor? Should I worry about my system today?

PS: Im using Windows 7 Ultimate 32 bits.

share|improve this question
up vote 5 down vote accepted

Sure it can. Any software with vulnerabilities can be used as a back door.

However, most hackers won't look specifically for IIS because it's not very big of a target. They'd much rather go for what tons and tons of people will use in their normal day because it's just easier. So long as you keep your software up-to-date and your files backed up and encrypted you should be fine.

share|improve this answer
+1 for "Any software with vulnerabilities can be used as a back door." – Shinrai Aug 17 '11 at 16:18

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.