Link to home
Start Free TrialLog in
Avatar of robert hesner
robert hesner

asked on

Intruder on PC?

I have a win10 pc that was hacked, we had it cleaned and all the malwarebytes and norton scans show clean but we are having strange things like, programs being stopped (malwarebytes, norton, and system mechanic) outlook rules being setup to reroute the inbox to RSS feeds, etc. Is there any way I can tell if there is something that is letting someone obtain unauthorized access to the pc?
ASKER CERTIFIED SOLUTION
Avatar of WORKS2011
WORKS2011
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Kesavan Jeganarayanan
The Office 365 account might been compromised.
When an account is compromised RSS Feed is a common location as people rarely think to look in that folder when trying to find out where their messages are.

Please refer this links:

https://docs.microsoft.com/en-us/office365/troubleshoot/security/determine-account-is-compromised
https://blogs.technet.microsoft.com/office365security/how-to-fix-a-compromised-hacked-microsoft-office-365-account/
Anything regarding Office 365 change the password immediately. Also confirm an additional admin user wasn't created in the Office 365 portal.
If you got "hacked" .....there is always a good chance that the "hacker" has some good " code" that's is probably invisible to most security measures.
If this is the case don't hesitate...just clean format your system and you would be good to go.
Getting "hacked" is a bit hard.. you must be somewhat high profile individual... probably you got a virus/malware that probably installed a backdoor for remote control
Malicious people are always trying to find ways around protection software.  For the protection software to be effective, they have to 100% certain they are stopping the bad guys and there's just no way to do that.  If you're not 99.9% certain the machine is clean, then wipe it and reload it.  If you're REALLY paranoid, replace it.

THEN change all your passwords.