Unraveling the Mystery: Unauthorized Remote Access to My Computer

As an IT support professional, I pride myself on solving tech issues, but recently, I encountered a situation that left me utterly perplexed—my computer was remotely accessed. Here’s a breakdown of the unsettling incident and the steps I took in response.

The Disturbing Encounter

One evening while I was away from my desk, I discovered that someone had taken control of my computer, specifically manipulating the Firefox browser. Here’s a sequence of events that unfolded:

1. Firefox, which was already open, had a new tab opened.
2. The individual began by searching for “Google” in the address bar but misspelled it initially.
3. Next, they searched for a specific cryptocurrency game and pressed enter.

Upon realizing that my system was compromised, I rapidly disconnected my network cable and took action to secure my computer.

Steps I Took for Security

In response to the unauthorized access, I implemented several crucial measures:

• Disabled remote access to my PC.
• Uninstalled AnyDesk, a remote access tool I use for work.
• Conducted thorough scans with Malwarebytes and its rootkit scanner—both returned no results.
• Altered my local security policy to restrict network connections.
• Removed other recently installed applications like ClipClip and Winamp.

Despite my efforts, including ensuring that my Windows operating system was up-to-date and running Windows Defender, I was still left wondering about the how and why of the intrusion.

Questions That Remain: How and Why?

It’s difficult to pinpoint exactly how this access occurred—whether through a compromised extension, a backdoor in AnyDesk, or an unknown vulnerability. But the more pressing question is why anyone would be interested in searching for a cryptocurrency game on my computer? It leaves me searching for answers.

Looking Ahead

With a determination to restore my system’s integrity, I decided that a complete reinstallation of Windows 10 was the best course of action. I wanted to eliminate any potential threats that may have eluded detection.

Update: After thorough investigation, I couldn’t find the cause of the breach. It’s likely that it stemmed from an extension, AnyDesk, or perhaps a deeper issue I haven’t identified yet. I appreciate the community feedback and have since removed all browser extensions except for LastPass, uBlock Origin, and Dark Reader for the time being. Additionally, I’ve adopted a new routine of shutting down my computer when not in use and