Tracking who is connected to My computer

[Shadrack]

Hello,

I was wanting to know if there is a way to find out if anyone is logged on to my machine from outside. I did a virus scan the other day and found backdoor.xenozbot on my computer. I have fixed it, but going through my security logs from that time. I have found a number of anon user loggins. I still have them. I did my research and found what this does. I still have a few anon log ins, but want to see where and when they are logging in from. I also want to see if they are logged on when I am. Any idea? Thanks

John

 

[34534534534555]

John,

ZoneAlarm will alert you to all incoming and outgoing's to or from your computer.

Task Manager > Users will tell you about windows log-ins.

Norton Firewall 2003 has a tracking utility, how accurate this is i am not too sure. Please let us know what you think of posts, feedback is always appreciated as this will help to further our knowledge as well.
_________________________________________________
Create like a God, Command like a King, Work like a slave..

 

[crow053]

When you are online, go to start, run, type in cmd.That brings up your dos prompt. Type in "netstat -a" or "netstat -A" that will tell you who is connected. Also try netstat -an. good luck

 

[ceigl]

John, you can also install "Sygate Personal FireWall".
It's fre for private users which tells you who is going to connect to your IP.
You can get a version at

http://soho.sygate.com/free/default.php

Greetings,
Chris

 

[browolf]

a program like active ports also shows open ports and what programs are attached to them

http://www.webattack.com/get/activeports.shtml

===============
Security Forums

http://www.security-forums.com

 

[duker1]

crow053:

I tryed the netstat -a and so on, I get " netstat-a is not recognized as an internal or external command. Duker

 

[linney]

http://www.diamondcs.com.au:8080/portexplorer/

Aides in the detection of Trojans too.

 

[LongStar]

There is a space between "netstat" and "-a".... --------------------------------
LongStar
"If everything seems to be going
well, you obviously don't know what
the hell is going on !" (Murphy)

 

[ih8bills]

explanations of what netstat results mean abound on the web --

one I found through a google search:

http://www.mycgiserver.com/~ethicalhackers/netstat.html

it is pretty well put together, explains in "layman`s" terms.