Very weird occurance..

So this has happened a few times.. and ive thought someone just got on my computer and went through my stuff.. However.. I took my wife to work this morning and when I got back tons of file folders and applications were open.. as if someone had gone through my computer. Well I know for SURE that there was NO ONE else in my house while this happened.. So this leads me to being extremely stumped.. Should I be worried that this is a security issue?? Has anyone else experienced this? My system is fully up to date on updates.

Golden said:

Hi Frootloop,

Lets start with your current security setup : what security software do you have installed on your computer? Are they up-to-date? Is the firewall turned on?

Regards,
Golden

I've got Kaspersky Internet Security 2011 - Fully updated, and the firewall is on.

Golden said:

OK. I don't see an issue there. To close off this avenue, please download and install free Malwarebytes, update the database, and then run a full system scan and post the results here.

Regards,
Golden

Will do, Thanks for your insight Golden!

In addition to the Malwarebytes scan that Golden suggested, I like to run a couple of additional scans. Often one scan will pick up something that another scan has missed. You can try both of these scans with confidence:
TrendMicro Home Page - Antivirus, Anti-Spam and Internet Security Software - Trend Micro USA (free - go to Free Tools + scan House Call)
MSE Microsoft Security Essentials

Also, is there any possibility that someone is accessing your system remotely?

Be careful about loading two active scanners at the same time, such as MSE and Kaspersky. You'll bog down the system. An online scan isn't a bad idea, nor is downloading Malwarebytes, as suggested. That's a great manual scanner, that's free and provides a second opinion.

Also, go through your Program list in Control Panel and see if you have any remote viewing apps installed, like GoToMeeting, VNC, etc.

frootloop said:

So this has happened a few times.. and ive thought someone just got on my computer and went through my stuff.. However.. I took my wife to work this morning and when I got back tons of file folders and applications were open.. as if someone had gone through my computer. Well I know for SURE that there was NO ONE else in my house while this happened.. So this leads me to being extremely stumped.. Should I be worried that this is a security issue?? Has anyone else experienced this? My system is fully up to date on updates.

This is very curious. You've gotten some good advice here regarding security software, so I'll just submit a few questions along a different line of thought:

1. Were the files open of a sensitive nature or seem to have a 'context'?
2. Does anyone else have access to your house?
3. Are you in a single house or a multi-dwelling? Is your internet connection shared?
4. Is Remote Assistance or Remote Desktop Connection enabled (see screenshot #1)?
5. Are any Remote services allowed through Windows Firewall (see screenshot #2)?
6. Do you have multiple machines? Is file sharing and Network discover enabled (screenshot #3)?

#1



#2



#3




James

James Colbert said:

frootloop said:

So this has happened a few times.. and ive thought someone just got on my computer and went through my stuff.. However.. I took my wife to work this morning and when I got back tons of file folders and applications were open.. as if someone had gone through my computer. Well I know for SURE that there was NO ONE else in my house while this happened.. So this leads me to being extremely stumped.. Should I be worried that this is a security issue?? Has anyone else experienced this? My system is fully up to date on updates.

This is very curious. You've gotten some good advice here regarding security software, so I'll just submit a few questions along a different line of thought:

1. Were the files open of a sensitive nature or seem to have a 'context'?

No, Its been different things every time.. Music and photo's mostly

1. Does anyone else have access to your house?

Negative

1. Are you in a single house or a multi-dwelling? Is your internet connection shared?

Negative

1. Is Remote Assistance or Remote Desktop Connection enabled (see screenshot #1)?

Yes, I use crossloop to remote connect to my parents computer when they need help as they are not computer literate. However, When it's not being used, it is uninstalled. I uninstalled it after this happened the first time.

1. Are any Remote services allowed through Windows Firewall (see screenshot #2)?

Yes, Just my programs I use for work and keeping in touch with family (Skype, AIM)

1. Do you have multiple machines? Is file sharing and Network discover enabled (screenshot #3)?

Just my wife's laptop, and File Sharing services are disabled. I keep my network as secure as possible.
#1



#2



#3




James

Golden said:

James has some very good points, so please check those.

In addition, is your internet connection a wireless one? If so, do you know whether it is protected with a passkey (password)? If so, do you know whether the router is using WEP or WPA2?

Negative, it is a wired linksys router. Our laptops stay on the desk when they arent in transit.

Regards,
Golden

I posted answer's right under the questions in the quote, It was easier to address them that way. I really appreciate your help guys. If I cannot figure this out soon, I am going to wipe this drive and start all over..

I did a malware scan, and also did a kaspersky full scan, both came up with nothing.