Re: Vista Hacked

You may want to take this one step further and monitor the type of traffic
that is being discarded by your firewall. This can be done by enabling security
logging using the steps outlined below:

1. Click Start, All Programs, and Administrative Tools.
2. Select Windows Firewall with Advanced Security.
3. Click Windows Firewall Properties.
4. Click one of the profile tabs, such as Public Profile.
5. Click the Customize button within the Logging area.
6. Enable firewall logging from the dialog box that appears.
7. Click OK.

Once you enable security logging, information is written to a log file
that is stored in the Windows directory.

Carey Frisch
Microsoft MVP
Windows Desktop Experience -
Windows Vista Enthusiast


<S.Quickness@xxxxxxxxx> wrote:

Internet Explore and Windows Host Process Server on my computer are
attempting to connect multiple times a day (20 or more) to numerous ip addresses across a wide viriety of ports in the 45000's.
I have been unable to close the processes. The Internet Explorer
process has been running as a seperate program that I am unable to see
and uses 45,000k of ram. It is also not possible for me to shut the
program down. I have nine svchost.exe (windows host process services)
running which are also attempting to communicate with
These events are of great concern to me as I work for a financial firm
and keep large amounts of proprietary knowledge on my computer. Can
anyone help me determine if in fact I was hacked? If I was hacked, I
am not looking to have this issue repaired, I want evidence to take to
the police so that I do not need to deal with these hassles again.

Relevant Pages

  • Re: Vista Hacked
    ... Windows Vista Enthusiast ... Select Windows Firewall with Advanced Security. ... Click the Customize button within the Logging area. ...
  • Re: Logon Scripts with Windows Firewall
    ... via the firewall control panel on the advanced tab). ... Also, at the time that the logon script fails to run, grab the output from ... Microsoft Windows Networking ... When logging onto the Domain with the new ...
  • Re: Logging IP address when Administrator logs in
    ... There is no way to do this natively [unless you use Windows XP or 2003 ... and enable the Windows firewall]. ... both logs to the same syslog server in real time. ... > which PCs the Administrator user is logging in. ...
  • Re: Decent Windows 2000 Firewall
    ... It seems most software firewalls today are very bloated compared ... ups that tend to impress software firewall reviewers. ... may not have the logging detail you like. ... not a stateful firewall and can not do any logging for Windows 2000 ...
  • Re: Guide to secure installtion of IIS 5
    ... don't forget a well-configured firewall. ... Do not put the computer onto the network or the Internet until after the ... Follow the instructions for hardening Windows and IIS at ... Install all service packs and security fixes from Microsoft and otherwise ...