Is there a log showing hidden (malware) connections to internet?

Is there some way to see a log of when my XP-Home computer connects itself to the internet over my DSL without my knowledge (eg Symantec or Windows automatic updates or malware etc)?

 

I added "over my DSL" and yes it is without my knowledge which is common for Microsoft/Symantec updates.

 

Hello robls99,

The firewall log should tell you the IP and time of any connections.

Regards - Charles

 

Where can I find the firewall log? I use a SMC7004 router as a firewall.

 

There is a great little tool produced by DiamondCS, called Port Explorer

Features:

• Finds ALL open and active TCP and UDP ports on your system.
• Packet Sniffing allows you to see what data applications are sending over the internet.
• Country Detection shows what countries all the IP's on your system are from.
• Bandwidth throttling allows you to restrict how much data a program or socket can receive or send.
• Trojan Detection built in allowing you to quickly see any possible trojans.
• Block or close open ports and processes on your system.
• Six BONUS network utilities, including improved Ping, Resolve and Whois clients.
• Easy to use graphical interface, totally configurable, no more fumbling around.
• Low CPU, MEMORY and RESOURCE usage.

Unfortunately this is not a free product, but there is a fully functional trial available, and I think you can 'open' the app something like 50 times, but don't quote me on that.

Also a good quality software\hardware firewall will have logs as well.

 

Hello robls99,

If you have SP2, unless you turned it off, XP's firewall is on by default, the logging is not though, you have to trun that on:

Control Panel > Security Center > Windows Firewall > Advanced tab > Security Logging > Settings > in the log settings dialog box: tick "Log successfull connections" and click the Save as Bar: \WINDOWS\pfirewall.log.

Tick the "Log dropped Packets" if you want to see blocked connections. The log is accessible with Notepad.

Regards - Charles

 

Thanks guys, I'm going to check out the security logging as well as see if there is a router logging function.