Sorry for my bad English

A few days ago I noticed that my Internet bandwidth is changing And there is a lot of downloads and uploads Without my permission I use tp link modem and connected to lan cable I encountered security issues on the modem, only Upnp modem has been active

I installed NetWorx software and DU Meter software

One day I was again suspicious 100 or 200 MB to receive information on my windows without permission

I run two software I installed I monitored two or three days of net use, and found that in the software application, Net-Worx was running software

Folder c: \ windows \ system

Of course, the C: \ Windows \ system address was completely empty


and had a set of send and receive values 148 megabytes recevie and 4 megabytes of data sending The software DU Meter had written more details The system called "System" has received approximately 144 megabytes and 1 megabyte and sent and sent on the Internet, sending and receiving about 1 and 5 megabytes per LAN.



I've looked at the entire Windows folder. A series of files were created or edited in the same history:

MEMORY.DMP file has been edited on the path

C: \ Windows \ SoftwareDistribution \ Download

Several files were created

The WindowsUpdate.log file recorded a series of descriptions

AU setting next sqm report timeout to 2018-11 ****

There are two subfolders for editing

C: \ Windows \ ServiceProfiles

Then I installed the netLimiter software, I noticed the system program Communicates with the following IP

224.0.0.251 239.255.255.250 239.255.255.250:137

I completely disabled the Windows Update, even the windows defender was not upgraded

Unfortunately, Windows Firewall has been shut down for a short time

After that, the whole system is equipped with various antivirus tools including Kaspersky, Norton Anti-Malware and ... I checked, there was no problem

Now what do you think the problem is exactly what you send and receive?

There is nothing registered in the Windows Update section for updating.

Do you think I'm hacked? Has anyone accessed my system?

Thank you