Re: Access viewer

[John Patota <john.patota () gmail com>]

First of all, why do you think someone may be accessing your computer?
Are files missing or tampered with? is your antivirus telling you that
you may have a rootkit?

Are there any unauthorized processes running
(http://www.sysinternals.com/Utilities/ProcessExplorer.html) or
starting up (http://www.sysinternals.com/utilities/autoruns.html). Are
these programs phoning home?
(http://www.sysinternals.com/Utilities/TcpView.html)

do you have a root kit?
http://www.sysinternals.com/utilities/rootkitrevealer.html



These are the tools I usually use in determining such things. Im
interested in hearing from other people what they use.



On 12/13/05, kacrut <kacrut () gmail com> wrote:
> Dear all,
>
>
> I would like to know if someone is accessing my computer. As far as i
> know,  by typing netstat (in M$)..i can see someone's IP connected to
> my PC, but i don't know what is being accessed (like opening file,
> etc...). Is there any way or any tool to view this? Any help would be
> appreciated.
>
> Sorry for my bad english and grammar... :)
>
>
>
> Kacrut