Showing posts with label ethical hacking. Show all posts
Showing posts with label ethical hacking. Show all posts

Wednesday, February 9, 2011

pc running slow or u think that your system is infected or gotta virus? read and share full articals by hforhacker.blogspot.com


Is your computer running running slow or do you think you are infected? If yes than this thread is for you!


First you must learn to differentiate between an infection and just general computer slowness.

Monday, January 31, 2011

use netstat to find keyloggers and Rats

I havent seen anything cover this before (at least not this way of using netstat) and sometimes people want to know if they are infected by a RAT or something. This mini tutorial should help you out a little bit Smile

PART 1 - Preparing Task Manager

Open Task Manager (ctrl+alt+del). Go to the processes column and click View > Select Columns.

[Image: 10078053.png]

Check the top one (PID (Process Identifier))

[Image: 95940603.png]

Now, organize Task Manager by PID. This will make things easier to read for the next step.

[Image: 25585407.png]

PART 2 - Using Netstat to see Established Connections

Now you want to go into Start > Run > cmd > "netstat -ano". It should look similar to the picture below:

[Image: 81215086.png]

Only look for ESTABLISHED connections (it would be established if its a RAT or malicious), read the PID and crosscheck into Task Manager. Notice in my example that the only established connections use the PID 424. Lets take a look at what that is:

[Image: 30170121.png]

As we can see, its Firefox. Now lets say you notice the PID reads something like "svchost.exe". You should open the file location by right clicking it and pressing Open File Location and either scan it with Virustotal or check to see if in its legit location (if it was in Appdata or Program Files and it is svchost.exe, then you may have a problem).

Hope this helped some of you out and good luck :)