I noticed a few weeks back that there was some activity on the laptop while in sleep mode. I went in and told it to shut down and I received a message saying that there was another user on the computer. Well that was odd because we only have 1 user and the guest (deactivated) on our laptop. So I went ahead and shut down the computer and thought little of it until the next day when I saw the same thing happening. I thought it was something I should look into so I went in and started poking around.
I decided to run a quick virus scan and it said no problems there. I checked to see if there was an automatic update running. Nope. I then checked the users and only saw our 1 account so that seemed fine then I went in to check to see if the firewall was up. Hmmm... it was not, so I turned it on and chose the recommended settings for it and thought OK that should take care of the problem. A few days later I was up late and sure enough the computers little blue light was blinking with activity so I logged in and went to shut down the computer to see if there was another user. Yep, there was the message again saying " are you sure you want to shut down...there additional users ect " well I said NO and went back in to see that the firewall was down again. Sure enough it was. So i figured for sure someone was up to no good and had hacked the computer.
The next night I decided to see if I could find out what was going on. I ran another virus scan and it said no problems. I went into my wireless router and made sure the security was good there with the settings preventing outside users from accessing the network. So I then googled and searched for answers and after seeing ppl checking the processes in task manager to find viruses ect. I decided to check every process with process library and they all checked out as ok. I had 10 svchost running but none with caps or extra letters so I assumed they were ok as well. I ran another full system scan with F-Secure and Windows Defender and nothing. No virus ect. Now I'm not sure what to do, I can't find any additional users from the control panel but when I shut it down it says there is another user and when I turned on the computer today the firewall was turned off again. So it seems like someone or something like a trojan or worm is accessing the computer while its in sleep mode. Any help would be greatly appreciated figuring out what is going on. Thanks
Edited by hamluis, 25 August 2010 - 07:21 AM.
Moved from Vista forum to Am I Hacked ~ Hamluis.