Windows 10: I think I'm being hacked.

Every time I startup my laptop a cmd pops up and does something then closes and when I check my logs a find this.

I found another question on here just like it and they didn't give a perfect awnser all they said was somebody might be trying to hack into it and im lazy so I'll just copy and paste it from that question instead of going on my laptop and looking for it in the logs


An account was successfully logged on.

Subject:
Security ID: SYSTEM
Account Name: DESKTOP-6KNLGLL$
Account Domain: WORKGROUP
Logon ID: 0x3E7

Logon Information:
Logon Type: 5
Restricted Admin Mode: -
Virtual Account: No
Elevated Token: Yes

Impersonation Level: Impersonation

New Logon:
Security ID: SYSTEM
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Logon ID: 0x3E7
Linked Logon ID: 0x0
Network Account Name: -
Network Account Domain: -
Logon GUID: {00000000-0000-0000-0000-000000000000}

Process Information:
Process ID: 0x354
Process Name: C:\Windows\System32\services.exe

Network Information:
Workstation Name: -
Source Network Address: -
Source Port: -

Detailed Authentication Information:
Logon Process: Advapi
Authentication Package: Negotiate
Transited Services: -
Package Name NTLM only: -
Key Length: 0

Now I don't see any users with name:

Account Name: DESKTOP-6KNLGLL$
Account Domain: WORKGROUP

:)

 

Thinking about Going back to Win8.1


If want to disable IE, still can. However, can't uninstall it like were able to in XP/98/whatever.
Here's how, although I find it useful in case Chrome or Firefox stops working and have to re-download it. *Wink
1. Search for turn windows features on or off and click it in the search results.

• 
  

2. When the app opens, uncheck Internet Explorer 11.

• 
  
  

3. Click Yes on the warning dialog.

• 
  

4. Click OK.

• 
  

5. Restart for the changes to finish.

 

Thinking about getting a 1TB m.2

My first thought was that using a 1TB SSD in what is basically a caching scheme is crazy.

On further thought, it's crazy.*Smile

I'd suggest getting this Sabrent Rocket Q 1TB NVMe PCIe M.2 2280 Internal SSD High Performance Solid State Drive R/W 3200/2000 MB/s (SB-RKTQ-1TB) - Newegg.com or this Sabrent 1TB Rocket NVMe PCIe M.2 2280 Internal SSD High Performance Solid State Drive (SB-ROCKET-1TB) - Newegg.com as an alterative to Samsung. If you had a PCI-E 4.0 CPU + motherboard (you do not, at least in your My Computer listing), I'd suggest this: Sabrent 1TB Rocket Nvme PCIe 4.0 M.2 2280 Internal SSD Maximum Performance Solid State Drive With Heatsink (SB-ROCKET-NVMe4-HTSK-1TB) - Newegg.com.

 

Password / security code Limbo .... Hacked by M$ ??

Received "you've probably been hacked" warning [ostensibly] from M$

After numerous repeats of warning & after receiving/applying "security code" - I reset my Password

Attempted to review Recent Activity & find I am now
Locked Out - neither new nor old Password works & "security code" received FAILS!?!

Thus I'm reminded (repeatedly) of M$ overarching philosophy: "No good deed goes unpunished!"

Now, to waste another hour+ of my life accessing/updating all the text files, devices, password managers and cloud files where I had painstakingly noted [now defunct] M$ Password!

Presumably next is dance class, to learn the "authentication two-step" ...... ARGGGGGH!

------------------------ Update -----------------------

Yup, apparently I have been hacked by M$ ....

Changed Password, per M$ "security alert", and now am receiving this ever-so-helpful email "Out-of-Date Account Notification:

"The most common cause of an out-of-date account is an incorrect password. Select Fix account in
the notification bar at the top of the Mail or Calendar app. If your password is incorrect, you'll see a message asking you to update your password ..."

Again ... "No good deed goes unpunished!"