Can I check if someone is remote accessing my computer if AV is not picking up on any rootkits etc?

[Guest Neo]

Hi. I wanted to know if there are tell tale signs someone is accessing my computer via spoofing means or has a rootkit on my system. I heard that most good rootkits will stay well hidden from most antiviruses so I was wondering if there’s any way I can block all connections to my computer in hopes that if a prevalent rootkit is on my system it can’t access or do anything because I blocked connections.

[peteyt 359]

On 5/2/2023 at 4:41 PM, Guest Neo said:

Hi. I wanted to know if there are tell tale signs someone is accessing my computer via spoofing means or has a rootkit on my system. I heard that most good rootkits will stay well hidden from most antiviruses so I was wondering if there’s any way I can block all connections to my computer in hopes that if a prevalent rootkit is on my system it can’t access or do anything because I blocked connections.

Blocking all connections I presume would block stuff needed to. By default outbound connections are allowed but inbound are blocked.

Best thing to do would be to make sure you have at least internet security installed as Nod32 doesn't include a firewall or network protection. Password protect it so settings cannot be changed.

If RDP is enabled (Remote desktop Protocol), either disable or make sure you have a good password and set up some group policies to avoid multiple login attempts

[Guest JohnK]

Came across this a few weeks ago.if nothing shows uo on Eset try;    Press windows key + R ;this will give you the run bar, type netplwiz should show users of your computer.