Is your computer compromised?

[SmokiestGrunl]

Is your computer compromised?

 

About:

This is a good way to see if your computer is compromised.

 

Pre-tutorial Steps:

• Close your internet browser (firefox, internet explorer, etc.)
  
• Close any peer-2-peer software (limewire, utorrent, etc.)
  
• Make sure no updates are taking place on your system
  
• Turn off anything else that is connecting to the internet
  

 

Tutorial:

1. Type cmd in your Windows Run box.
   
2. Type "netstat -b 5 > activity.txt" and press enter. After say 2 minutes, press Ctrl+C.
   
3. Type "activity.txt" on the command line to open the log file in notepad (or your default text editor)
   

 

For best results you should leave it on for a day or a week. Some malware only connects to the internet at set times.

 

What do these results mean?

If you followed my pre-tutorial steps you should see nothing. If you need help sorting out what is good and bad post your log here.

[iBotPeaches]

netstat is a basic command, however I would sort it more to see exactly what your dealing with.

 

netstat -n I use alot to check my local connections and what not.

 

netstat -b looks really advance. Someday when all my stuff is closed, I'll run this and see what I get. I clicked it now and it loaded over 50 lines of it.

[SmokiestGrunl]

I had bittorrent running when I first did this and it just flooded my screen with bittorrent.

[blacklabelfosho]

http://i3.photobucket.com/albums/y75/la_migra_okay/YAY-2.jpg

 

mine was blank !

 

god i love this computer