Re: Detecting hidden processes?
From: NoneOfBusiness (NoneofBusiness_at_nob.com)
Date: 05/30/03
- Next message: Harini Raghavan \(MSFT\): "Re: Track when users login"
- Previous message: Chris Corio [MSFT]: "Re: Add/Remove Printers on all Servers in a domain"
- In reply to: Yaroslav Bulatov: "Detecting hidden processes?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 29 May 2003 20:41:53 -0400
Look for any strange services running that you are not aware of,
examples would be psexec, firedaemon, srvany, etc... If you have these
it is highly likely you have been hacked and i would start exploring
your system32 directory...
On 24 May 2003 05:01:01 -0700, bulatov@engr.orst.edu (Yaroslav
Bulatov) wrote:
>Hi is there a way to detect processes which don't show up in the Task
>Manager list? The reason I suspect such processes exist is because
>1) I have suspicion my system has been hacked due to weird internet
>behavior
>2) When I shut-down Win2K I briefly get a dialog box saying
>"Closing You Should Not See Me", and another one "Closing WinVNC tray
>icon"
>
>I can't see "You should not see me" process nor "WinVNC" in the
>process list, nor is there an icon for WinVNC in my tray.
>
>Yaroslav
- Next message: Harini Raghavan \(MSFT\): "Re: Track when users login"
- Previous message: Chris Corio [MSFT]: "Re: Add/Remove Printers on all Servers in a domain"
- In reply to: Yaroslav Bulatov: "Detecting hidden processes?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]