detecte hacker when put tcpview.exe

[bkpro]

I explore anti hack the code and I saw the scan process capable of function and found in the file list detecte hacker



However, the structure of this memory, I do not get out that much. hope you comment
if we can use this function to remove the unauthorized program we will reduce the possibility of hackers load Flood proxy port


you for the comments
if you do this, then probably not use service providers to help us fight.
I also understand the mechanism of the server detect hack other 1 have yielded good results.

 

[bobsobol]

It's just a memory scan for the arrays at the top. Find a unique signature for any process you want to ban. Must be unique to that program and constant regardless of the process state.

 

[zaharavn]

you try using e-xpt client to detect it ????

 

[bkpro]

no no !
it is example with module file .
detect tcpview i can see . and i think need protect port .
hide port for client or
auto change port ...... but i still connect to server .

 

[klux666]

there is no way you can "protect port" or hide the port.
a simply netstat will show where you are connected to.