Thread: Check if ur pc is hacked!

Well this is my simple guide to see if ur pc has a direct connection to any ip or server!

1. First of all, close IE, msn, uTorrent etc. (not antivirus!) Anything that may have a direct connection to the net.

2. Open Cmd ("command promt" if u cant find it go to "run" and then type in "cmd" or just make a search for cmd)

3. Now when u've cmd opened, type in "netstat -ano"
Now u should have lot's of ip's on cmd. At the right side, look for where it says ”ESTABLISHED" The other's (LISTENING, TIME_WAIT etc) are not important. Just the "ESTABLISHED" dude has a direct contact to ur pc!

4. At the very right side of cmd u see PID (process id) Look for the "ESTABLISGED" connections PID. Now let's find that bit*h!

5. Open "Task manager" (Press "Ctrl + Shift + Esc", the faster way or just "Alt+ Ctrl + Del")

6. Go to Process > Show > Choose colomn and check the "PID" box, and press ok. Now the process-ID should appear same as it was in cmd.
Now look for the same "PID" which said "ESTABLISGED in Cmd and find it's process name. In my case the dude was "Java client" this time! :/ But if u find anything suspicious just kill the process and that's it. U can also trace em if u like! (It’s easy to find ur friends ip via msn by this, which u should not do!)

If u find this post useful or have any questions, please feel free to leave a comment. :laugh:

Cheers
/Vibes

Yes this is good guide. Open ports show you got Trojan program and the hacker can watch your pc. But keylogger programs doesn't use open ports. You can understand that you got keylogger via using Start-->Run-->Msconfig-->Startup(Tab) If u see anormal exe, it would be keylogger. Some keyloggers that coded professional coders isn't displayed on Task Manager. If you use online banking, for keylogger attacks u can use Keyscrambler.

Thanks, this would have helped me out earlier because I got hacked before. lol but I will take this advice next time :)

thanks for this. Im sure I will be using this trick alot in the future ;)

this is not a trick, it is a simple dos command to check connections.

Now Dont consider me wrong but if dere is any fisher , hacker ,.... to bypass dis trick all u need to do is name ur process as Common Window processes like svhost , and even tskmrg so dat victim thinks it as ligit process. And if u r confertable with deassembler den u can even hide ur process in tsk manager.

Originally Posted by Rosey

Thanks, this would have helped me out earlier because I got hacked before. lol but I will take this advice next time :)

Originally Posted by natlim

thanks for this. Im sure I will be using this trick alot in the future ;)

Glad to help u guys out. But as mentioned before this may not protect u! :)

Originally Posted by zapak

Now Dont consider me wrong but if dere is any fisher , hacker ,.... to bypass dis trick all u need to do is name ur process as Common Window processes like svhost , and even tskmrg so dat victim thinks it as ligit process. And if u r confertable with deassembler den u can even hide ur process in tsk manager.

Right, but it's likely that they don't think of it!

This help me now, nice guide