Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Yesterday I was looking over my Windows Explorer and figured that my "c:\inetpub" had some contents, which includes "history" and "temp". On history there is a folder named "CFGHISTORY_000000001", which contais "schema", "administration.config" and "applicarionHost.config".

As far I know(I don't know much thing about IIS), this folders means that my IIS service is (or was someday) enabled.

So, the other side of the my doubt is that some months ago I got my computer hacked(from some way that I still don't know) and got some passwords stolen. At this time my antivirus wasn't up-to-date and I had no firewalls(I already fixed it). I never enabled IIS mannually or something else. So, my doubt is.... Could someone hacked my system and used IIS as a backdoor? Should I worry about my system today?

PS: Im using Windows 7 Ultimate 32 bits.

share|improve this question
up vote 5 down vote accepted

Sure it can. Any software with vulnerabilities can be used as a back door.

However, most hackers won't look specifically for IIS because it's not very big of a target. They'd much rather go for what tons and tons of people will use in their normal day because it's just easier. So long as you keep your software up-to-date and your files backed up and encrypted you should be fine.

share|improve this answer
+1 for "Any software with vulnerabilities can be used as a back door." – Shinrai Aug 17 '11 at 16:18

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .