ugniesdebesys 0 Newbie Poster

Hi

Imagine situation:

Somebody installs some remote control tool (f.e. ultravnc), changes netstat command,hides service.

How to catch then , what is going on?

I know, that it is possible to scan from another computer, using some port scanner nmap or another scanner to view real situation.

But how to see from local computer , what commands and services where changed?

Is it possibble to hide service, that administrative tools -services does'nt show and tasklist doesnt show? How to see then?

Best regards