Hi, How do you know that you were being hacked ? 'Cause this morning, I was about to turn off my PC, which is most of the time on, when I got the message asking that I have a connection with someone and if I really want to end this connection (or something like this). Well, I got scared and said yes immediately. I scanned the C drive with Mcaffe, it didn't find anything. I read about using the netstat-a and -n commands in MSDOs, and I tried it (c>netstat -a). But it says that this command can not be run in DOS mode?? Any help is appreciated. Thanks in advance.

Use the Command Prompt in Accessories netstat -na

Thanks, yeah, it worked this time. There are 4 Ip numbers, 2 being the same. It shows that one of them has an established state, the others are close wait and time wait. What do they all mean?

Sorry - I know how to do it but not how to interpret what I see! The only thing I've learned so far is that if you see Port 2734 in there then you've probablty got a Sub-Seven Trojan! I've only just gone onto Broadband - still learning! Hopefully others will enlighten you Lesley

Thanks Lesley I have actually kept on looking for info on the web and found an online tracer which traces ip #'s/URLs etc. All the IP numbers listed under foreign seem to be legitimate (2 of them were from MS hotmail and google network, one of them from my school network and the other one from another school network). I have also found a listing of suspicous port numbers on the internet which I don't seem to have any (though I didn't check the local addresses). I think everything seems Ok, but I still wonder why I got such a message today??

Sorry if I am wrong Leslie, but isn't it 27374? Just checking. I would check on the IP address and see who it belongs to. If it comes up with a name, report that IP to your ISP and tell them to block any incomming "packets" from that IP address. If it comes up with a corporation, notify them, and tell them that you are suspecting that someone from their company at this ip address, (the Ip address), is making trying to hack into your computer. Charger Charger

Maybe this will help a list of computer ports and the trojans that connect to it http://www.doshelp.com/trojanports.htm Netstat info: Displays protocol statistics and current TCP/IP network connections. NETSTAT [-a] [-e] [-n] [-s] [-p proto] [-r] [interval] -a Displays all connections and listening ports. -e Displays Ethernet statistics. This may be combined with the -s option. -n Displays addresses and port numbers in numerical form. -p proto Shows connections for the protocol specified by proto; proto may be TCP or UDP. If used with the -s option to display per-protocol statistics, proto may be TCP, UDP, or IP. -r Displays the routing table. -s Displays per-protocol statistics. By default, statistics are shown for TCP, UDP and IP; the -p option may be used to specify a subset of the default. interval Redisplays selected statistics, pausing interval seconds between each display. Press CTRL+C to stop redisplaying statistics. If omitted, netstat will print the current configuration information once.