Navigating Unexplained Remote Access: A Personal Account from IT Support

In the realm of IT support, encountering inexplicable issues is par for the course. However, one particular incident truly baffled me, as I found myself grappling with an alarming case of unknown remote access to my computer. Here’s a detailed recount of the events, the actions I took, and the lessons I learned from this unsettling experience.

The Intrusion

One day, while going about my routine tasks, I noticed that someone else seemed to have taken control of my machine—specifically, my Firefox browser. Here’s a brief overview of the suspicious activities that unfolded:

1. A new tab was opened in Firefox, which was already running.
2. The intruder began a search in the address bar, albeit with a couple of spelling errors.
3. They then proceeded to look up the name of a cryptocurrency game on Google.

Realizing the severity of the situation, I immediately disconnected my network cable to prevent any further unauthorized access. Following that, I implemented several security measures:

• Disabled remote access to my PC.
• Uninstalled AnyDesk, which I primarily used for work.
• Conducted thorough scans with Malwarebytes and its rootkit scanner, both of which returned no issues.
• Altered the local security policy to block network connections.
• Uninstalled recently added software applications, including ClipClip and Winamp.

It’s worth noting that my Windows operating system was fully updated, and I was protected by Windows Defender.

The Burning Questions: How and Why?

As I reflected on the incident, two fundamental questions loomed large: how did this happen, and what motivated the intruder to search for that specific game? While the “how” of this situation remains elusive, the “why” troubles me even more. What could drive someone to invade my digital space in this manner?

Despite my decision to reinstall Windows 10 as a precaution, I found myself craving a deeper understanding of the underlying issues.

A Continuation of the Investigation

After sharing my experience for assistance, I continued to dig into the potential causes. Despite my imposition of strict security protocols, I couldn’t find a definitive explanation for the intrusion. It’s possible that a rogue extension, an issue with AnyDesk, or perhaps something more sinister could be at play.

In collaboration with the advice received, I opted to remove all browser extensions, retaining only essential ones like LastPass, uBlock, and Dark