Windows 10: Someone has a remote access to my PC, how to block them?

I've experienced today a control takeover on my pc as i was doing my business, the hacker started typing chinese, opened a lot of windows, used the mouse. I've shut down the pc immediately and deactivated the WIFI. I've ran anti-malware scans but nothing to report here. I've digged into the event observer and with some internet articles, managed to find myself in the TerminalService - LocalSessionManager and discovered that a "defaultuser100000", a few minutes before the attack, launched the distant desktop service as i've undertood what i've read. See more here : - <Event xmlns="http://sch

:)

 

Remote Access

1. Follow these steps to disallow remote access to your PC completely:
2. 1. Type “remote settings” into the Cortana search box. Select “Allow remote access to your computer”. This may seem counter-intuitive, but this opens the Control panel
   dialog for Remote System Properties.
3. 2. Check “Don't Allow Remote Connections” to this Computer. You've now disabled remote access to your computer.

Try these two steps and tell us if your issue gets solved. If it does not then your PC may be infected. Use a Good antivirus to remove the infection from your device completely.

 

Ways to use ACLs to block remote network access?


Hi all,

Just wondering if there are any ways to block remote system access from unauthorised parties by using ACLs?

Is Windows 10 configured with vulnerabilities in the ACL SID list? i.e. Are some of the SIDs found under the 'User, Group or Built-In Security Principal' list designed as remote access methods for users who want to connect to a Win 10 machine remotely?

Would appreciate some clarification on this as there are a lot of SIDs under "Properties > Security > Advanced > Owner (Change) > Advanced... > Find Now"

Appreciated. .

.

 

Remote access

Hi zabby937

Did you allow those Tech Support scammers to have Remote Access to your PC, they would have asked you to allow that?

Once you have turned off Remote Access, they can no longer access your PC.

Open Control Panel - Programs and Features, order that list by Date Installed

Check for any software installed on that date, like TeamViewer or LogMeIn, if you find any remoting application like those, uninstall it

Other than that, you have taken all the right steps and your PC will be fine, you do not need to worry about this further . .