How to know if someone is trying to access my PC unauthorizedly?
Hi! Ruth Nelson,
These intruders usually go for passwords, email accounts, financial information, log-in information to financial websites, etc. Photos are probably one of the least to be targeted, especially if the photos are not renamed to describe the photo, unless maybe specified by the folder they are in or if those photos are what the intruder is really after.
Tracking down a prowler, especially on manipulated passwords are difficult. You should just be glad that there wasn’t anything else that was taken or used.
Here are some ways you can find out that your someone is trying to access your computer unauthorizedly and how you can protect yourself:
1. Enabled ports – You can check ports that are enabled. If some ports are opened and is used by an unrecognized application, that could be an indication that someone is trying to steal the information on your computer.
XP: Click Start > Run
Vista/7: Click Start > Search box
-
Type “cmd” press enter
-
In the command line, type “netstat –ano” press enter
-
Take note of all the Enabled state and their PID
-
Press Alt+Ctrl+Del to open the Task Manager
-
In the Task Manager, click "View" > Select Columns > Check PID (Process Indentifier)
-
Now match the PID from the command line window to the PID of the "Task Manager"
-
Usually, the ones that you’ll see are your browser and your Antivirus.
-
If there are other processes that show enabled in the command line window, Google that process and see if it is a valid application or not.
-
End it if not and run a virus scan
-
Look for a way to remove it manually if needed.
2. Check your resources – Another sign to consider is if your computer unusually uses a lot of resources. Sypwares, keyloggers, rootkits, etc. have been known to be taken up a huge amount of memory resource because they do stuff in the background.
-
Close all programs/ applications that you are using.
-
Press Alt+Ctrl+Del to open the "Task Manager".
-
Check CPU Usage or the green box in the task bar.
-
If it says that you are using about 50% or more than that even and if you don’t have any programs open, then there is something suspicious going on in your PC.
-
Do solutions #2 and #3
-
It is also a good practice to Google the processes that you don’t recognize to make sure if they’re safe or not.
3. Redirects and pop-ups – When surfing the internet, if you notice that when you search or type any web address, you suddenly get redirected to another website, and/or you get pop ups of the same advertisements/websites, then something nasty is in your computer. This infection may also lead to attacks and remote access to your computer.
4. Check your email accounts – Since attackers use email as means of transportation of key logs, files, etc. See if you have any unrecognized sent email, especially if you’re using Outlook.
5. Virus Scan in Safe Mode – There are some virus and other Malware than have been known and programmed to hide themselves from the Antivirus, a good example for this is a Trojan. As the name suggests, it disguises itself as a safe application but does something nasty in the background.
Most Malware are not operational in "Safe Mode", therefore there is a better chance that the Antivirus or Antimalware can detect these malicious software and get rid of them.
-
Update your Antivirus
-
Restart your computer and as soon as it lights up hit F8 a few times to get to the "Windows Advanced Options Menu".
-
Choose "Safe Mode"
-
Choose your operating system.
-
Login as the "Administrator"
-
Do another scan of your PC
-
Finding some Trojan, worm, spyware, rootkit, etc. are indicative of an attacked computer.
6. Other Malware – If you have not found any virus and as mentioned above, it may not be a virus at all. It could be a worm, rootkits or other malicious software that is changing your settings. Some Antivirus software cannot detect other Malware or at least some of it. You need another layer of protection to make sure your PC is really Malware free.
Try some of these popular Antimalware, Antispyware and Rootkit Scanners:
-
Spybot Search and Destroy
-
Malwarebyte’s Antimalware
-
Ad-Aware
-
Sophos Anti-Rootkit
-
GMER Rootkit scanner and remover
Download and install them. Update and run a scan. Again, finding some Trojan, worm, spyware, rootkit, etc. are indicative of an attacked computer.
7. Replace Antivirus – If you really suspect that someone is trying to intrude on your computer, then it’s probably time to replace your Antivirus. As you have seen, your Antivirus was not effective in stopping this attack or even the software that got in to your computer to allow this illegal deed in the first place. Free Antiviruses are good but paid versions are always better, which is why they cost money.
Some of the reputable Antiviruses are:
-
Kaspersky
-
BitDefender
-
Avira
-
F-Secure
8. Always update – Always install updates to your computer and the applications you have. Believe it or not, there are quite a number of flaws in computer systems and applications. These flaws are exploited by attackers making the use of them to their advantage. Take for example the Adobe Photoshop.
This application has had a security vulnerability which has been reported to be used by attackers to get in or send malicious software to PC’s. Security updates by Microsoft are important patches to avoid any kind of Malware attack.
9. Password protect your folders – There are numerous third party software that allows you to lock, encrypt, and shred your files and folders. They can also monitor if someone is trying to steal your information , clean history and can hide themselves so that it won’t be known to others that you have these kinds of software installed.
Some of the well-known file and folder security software:
10. Reformat – If you are definitely sure that you have been victimized by intruders, then the only 100% sure way is to start with a clean slate. Reformat your hard drive to erase everything and reinstall using genuine software. Update the installation, install an Antivirus FROM A CLEAN SOURCE, update it and scan every removable media you need before using.
As mentioned above, trying to find out if someone is intruding on your computer is not an easy task. Intruders don’t usually leave any trace so they can come back, unless they intentionally left it there as a signature.
Good luck!
