A brief on Securing
and Detecting Backdoors on your PC
Added Sept 6, 2000
The
ever increasing numbers of computer viruses out there mean
that your PC needs protection from "the void"
now more than ever.
Anti
viruses
Installing anti virus programs help eliminate that threat
at the cost of system resources. This is the first line
of defense.
"Time
machine" software
A "time machine" software which allows you to
restore your PC in any previous "safe" state.
Which means if an undetected virus strikes, you will be
able to restore your PC back to the state it was before
the virus hit. Pretty incredible stuff eh? This software
is called "Goback" and it is by WildFile.
You can find it here
You can find a version of GoBack in Windows ME as well.
The
best way to prevent viruses though, is to download software
from a trustworthy source.
Detection
of backdoors
If you suspect your PC has been hit by a trojan horse virus,
or a backdoor virus such as NetBus. Do the following test.
Goto Start -> Programs -> MSDOS Prompt. Make sure
you are connected to the Net and type the following command
"netstat", without the "s. Netstat
gives you information on the TCP ports which are "open"
to connections. Look under the Local Address heading, you
should see your computer name followed by a colon, and then
a number. That number is the open port on your PC. The foreign
address is the host to which you are connected to. Open
ports such as 12345 are ports which Netbus operate, if you
see that port open, it almost definately means that you
have been hit by the Netbus trojan horse. Disconnect from
the Net and type "netstat" again, NO ports should
be open once you do that, if you see anything listed, it
also means that an intruder has installed some form of backdoor
program in your PC to gain unauthorized access.
**
Questions? Comments? Like this article? Send me some feedback
by clicking on Contact Me under the Details section.