May 14, 2020 08:42 AM
(This post was last modified: May 14, 2020 09:37 AM by SpookyD.)
I am not the most tech savvy when it comes to this.
Can someone tell me what tools i can run on my PC to check if there are any suspicious connections or files running on my PC?
I am quite sure there are, should i just run an anti virus check? (not really sure that's the way to go)
I must be your slave huh, you don't wanna let me know a way out :P
Download Process Hacker and check the network tab. You will see a list of processes that are connected to the internet and also where the connection is going + there are tools like whois lookup included.
(May 14, 2020 08:42 AM)SpookyD Wrote: I am not the most tech savvy when it comes to this.
Can someone tell me what tools i can run on my PC to check if there are any suspicious connections or files running on my PC?
I am quite sure there are, should i just run an anti virus check? (not really sure that's the way to go)
I must be your slave huh, you don't wanna let me know a way out :P
I guess if you are a victim of a botnet, the malware has a startup feature if it don't have rootkit feature check registy entries for startup and startup folder.
Feel free to conatct me if you need more help
(May 14, 2020 08:42 AM)SpookyD Wrote: I am not the most tech savvy when it comes to this.
Can someone tell me what tools i can run on my PC to check if there are any suspicious connections or files running on my PC?
I am quite sure there are, should i just run an anti virus check? (not really sure that's the way to go)
I must be your slave huh, you don't wanna let me know a way out :P
if you think you are infected by a payload tchek download process hacker and see the runing process and close every thing (browsers....) and open process hacker and then look up for name like chrome ore win.exe or Comsurgateor even svchost)
then tchek your start up do windows+r and then type %appdata% and see if there is any suspecious program you dont use delete itifyou delete it and you restart your computerand you still find it download cccleaner and delte it from there in safe mode on windows and then you will delete it olso if you suspect a program right click open folder location and delete it from there if its a miner do the same and run nod av oradvanced system care
if you are looking for best av: is you
if you need help: windows deffender and nod are the best for now
May 14, 2020 03:45 PM
(This post was last modified: May 14, 2020 03:47 PM by SpookyD.)
(May 14, 2020 11:36 AM)3xploit Wrote: Download Process Hacker and check the network tab. You will see a list of processes that are connected to the internet and also where the connection is going + there are tools like whois lookup included.
(May 14, 2020 11:44 AM)Sinistros Wrote: I guess if you are a victim of a botnet, the malware has a startup feature if it don't have rootkit feature check registy entries for startup and startup folder.
Feel free to conatct me if you need more help
Thanks for the answers guys. i am too toasted right now, i am on "READ ONLY" lol
But tomorrow as i wake up i will take the time to finally understand better what is going on on this PC.
(May 14, 2020 12:48 PM)protecteur6 Wrote: if you think you are infected by a payload tchek download process hacker and see the runing process and close every thing (browsers....) and open process hacker and then look up for name like chrome ore win.exe or Comsurgateor even svchost)
then tchek your start up do windows+r and then type %appdata% and see if there is any suspecious program you dont use delete itifyou delete it and you restart your computerand you still find it download cccleaner and delte it from there in safe mode on windows and then you will delete it olso if you suspect a program right click open folder location and delete it from there if its a miner do the same and run nod av oradvanced system care
if you are looking for best av: is you
if you need help: windows deffender and nod are the best for now
Not sure why it left you quote out, and i couldn't edit it in, so Thanks :)
(May 14, 2020 03:45 PM)SpookyD Wrote: Thanks for the answers guys. i am too toasted right now, i am on "READ ONLY" lol
But tomorrow as i wake up i will take the time to finally understand better what is going on on this PC.
Not sure why it left you quote out, and i couldn't edit it in, so Thanks :)
np :D
Just check for suspicious start-up options over there and you will be good to go.
(May 15, 2020 03:57 AM)VisualSoft Wrote: Just check for suspicious start-up options over there and you will be good to go.
Please explain, what is over there?
I just downloaded process hacker and about to start digging in a little, if there is something i shouldn't miss please shed some light on it :)
download Autoruns.exe from the internet and check yourself if there is any program in the start-up which you are not aware of?
remove start-up from Autoruns and you are done.
(May 15, 2020 05:01 AM)VisualSoft Wrote: download Autoruns.exe from the internet and check yourself if there is any program in the start-up which you are not aware of?
remove start-up from Autoruns and you are done.
Thanks mate, it was nowhere mentioned anywhere else in the thread, so i didn't figure why you thought its obvious i should do that ;)
DO NOT DEAL WITH THIS MEMBER
Download Pi-Hole and filter out all of the requests going out of your PC, just filter them out by your IP, once you notice some strange traffic post it here so we can try to ping that lucky person ;3
|