My computer is hacked. A hidden user is running all remotely.

My computer is hacked and keylogged. New hidden user has changes my user accounts so I can not access my files, I apparently don't have permissions. Norton Internet Security has been comprimised and corrupted and is useless at this point.  A hidden user has been added and name or user ID doesn't show.  Already done the Control Alt Delete x2 and not finding hidden user that way either.  Is there any other way to find the hidden user, especially without paying $ to do so?
 

Question Info


Last updated March 21, 2019 Views 28,967 Applies to:

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

firstly, you should disconnect your internet cord from the computer "or" if it is running on a wireless connection then you should disable the machines internal modem and unplug your external one too.

 

secondly, see if you have access via safe mode. 

Status - Off line

29 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

So, are you saying it is hacked and being used remotely? Or locally because someone you know has access to it in your home?

63 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Remotely.  By a stalker who I have restraining order against.  Police were unable to track IP address so I can't prove it's him, although I'm 99% sure it is.  No one has had physical access to my computer for about 5 months, and the new user thing just happened when I let my guard down and connected through router (wireless) rather than LAN.  He also disabled sound and made my DVD drive inaccessible.
 

14 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

If you don't see a "hidden user," why do you think one exists?  Do the following:

1.  Open Windows Explorer and navigate to C:\Documents and Settings
2.  Click Tools > Folder Options > View
3.  Scroll down in the Advanced Settings window and make the following changes:
  • Select the radio button to "Show hidden files and folders"
  • Uncheck the box to "Hide extensions for known file types"
  • Uncheck the box to "Hide protected operating system files (recommended)"
4.  Click OK
5.  Click View > Refresh

You should now be able to see all of the "users" known to Windows.  These will include the following:
  • Administrator
  • All Users
  • Default User           *
  • Local Service         *
  • Network Service    *
  • your user name

The three users marked with an * above will appear dimmed.  This is because they are hidden folders.  Do not delete any of the user folders listed above.  The first 5 are Windows system folders; if you delete them, you will run into difficulty later.

If your computer has actually been compromised by someone with enough knowledge to gain access while you were connected to a wireless access point (that presumably was not protected by a WPA2 encryption key), then the only guaranteed safe thing for you to do is a clean install of Windows.

Back up your data to an external hard drive and do the clean re-install, either with a Windows XP CD or by using a restore mechanism built in to your computer (if you identify your computer's make and model, someone here can probably tell you if you have such a restore mechanism and how to use it).

You will have to reinstall any applications that you have previously installed, so collect all of your install media.  If you are going to do a clean install with a Windows CD, you should first download all of the necessary hardware drivers (usually obtainable from your computer manufacturer's web site) and burn them to a CD.

Finally, after you successfully re-install Windows, you will have to restore your saved data very carefully in case your stalker has hidden any malware in the data.  I suggest that you obtain a good antivirus application (not Symantec/Norton or McAfee) and scan the data on the external drive before restoring it to your computer.  Also scan it with MalwareBytes AntiMalware and SUPERAntiSpyware
-----
LemP
Volunteer Moderator
MS MVP (Windows Desktop Experience) 2006-2009
Microsoft Community Contributor (MCC) 2011-2012

38 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Hewlett Packard Pavilion G series

4 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

i don't know if my computer is hacked but when i install a game or a program it always asks me if i want to install it for this user or the others to but there is only 1 user on my laptop and that is me even hp support assistant gave me a message saying ( hp support assistant can only run on on account at the time *or something like that* ) but i can still control my computer and nothing has changed no passwords,settings etc..... it just looks like some virus or some hacker has made a invisible account!

how can i track it down on my computer if there is someone else? please help!!

3 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Even if you are the only user there are other user types, by default, as explained in the previous response.

So no you have not been hacked, the installation process for 'all users' is a default request.

4 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

I had the same thing happen the hacker.installed.virtual drives and remote protocols  he took over everything I have pbotos

5 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

My computer is hacked and keylogged. New hidden user has changes my user accounts so I can not access my files, I apparently don't have permissions. Norton Internet Security has been comprimised and corrupted and is useless at this point.  A hidden user has been added and name or user ID doesn't show.  Already done the Control Alt Delete x2 and not finding hidden user that way either.  Is there any other way to find the hidden user, especially without paying $ to do so?

Me too, they are doing this through another cable box in my home, and using my Twc Wi Fi App. I need help. I'm sure there is someone helping. It must be DSL. Who knows there ate so many gadgets and How to, video's. Thanx for any advice given.

9 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

no someone i know locally

5 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.