Commands for Checking Trojans

1. Checking Network Connection Status
    
    --netstat -an: shows protocol,local address,foreign address,state. But how do you know what the IPs mean...

2. Stoping the Unkown Server

    --net start: shows what servers are running in you system, maybe useful, or maybe useless and wasting your resource. If you want to kill some sever, just use "net stop server".

3. Checking Users
    
    --net user: shows what user accounts exist in you system. Some Trojans create an account having adminstrator authority to hack in you system and control it, maybe to download other Trojans. "Net user [username]/del" can delete the account you suspect. 
   

转载于:https://www.cnblogs.com/malone542/archive/2008/07/15/1243257.html