Tracing a Hacker

Sometimes, it's just not enough to simply know that there's a Trojan or Virus onboard. Sometimes you need to know exactly why that file is onboard, how it got there - but most importantly, who put it there.


http://www.bleepingcomputer.com/tutorials/tutorial99.html