Hey Guys, Welcome again to my curious article series. I know the topic is different from what i post regularly but today my poloniex account was logged in from a new ip. So i just want you guys to be safe.
So Lets see how to know if you are hacked?
See there are many ways you can follow to know if you have been hacked but in this article i am going to show you the simplest one using CMD.
Step 1: Close Every Program running in the background. Click on "Start" , search for "CMD" and run the program as an administrator.
Step 2: Type "netstat -ano" and press enter. The first column that appears show you the type of connection, second column shows you local ip , third one shows the foreign ip , fourth one shows the status of the connection and fifth one shows the Port that is being used which is very important.
Step 3 : Now Check Note down all the connections that are "Established" from your Pc. This means your Pc is trying to connect to another ip address. This may be because of a software connection which is normal or you are hacked.
Step 4: Go to The Task Manager and Search for the application according to the Ports (PID) in The processes tab. In windows 10 you can search it in Details tab.
Step 5: if you find Any Suspicious application in the tab just look it up in google. You will get your answer is it system application or malware.
Step 6: Delete that file or in case you have got very valuable data , just backup your data and format your Pc , do not take chances.
Heres my Poloniex Account that was Logged In from New IP While I was Sleeping.
Hope you liked my article if you did please let me know in the comments. And please support me by following me.
Other works by me:
Nice. I wonder if my VPN would mess this up though?
Vpn Might mess up . my advice is not using VPN
I live in China, it's a must, unfortunately =(
i have heard about this.
thank you for sharing
welcome
"Step 5: if you find Any Suspicious application in the tab just look it up in google. You will get your answer is it system application or malware."
You can't just rely only on suspicious application list. Hackers can use Powershell as a payload if they have then wherever you see you won't find any suspicious application because it's the powershell which is doing all the bad deed and as powershell is a microsoft registered tool , no any antivirus is going to alarm you.
Just wanted to make this clear. If you want you can update this on your article.
And don't forget to check out my profile : @doctorbg