Frett's Config - Just starting

[frett]

So, I guess I'm an advanced user (over three decades of PC use, I build PCs, networks, etc) and have never had a personal machine get infected.

However, I just discovered someone has created a new user with Administrator privileges on one of my PCs. They installed a VPN and a couple other things. I have no idea what else they have done, but I disabled the account and took the PC off the network.

I am trying to learn how this happened and get up to date on security practices--because obviously I screwed up big time.

 

[frogboy]

Hello and welcome to MT.

For help if needed make a post here. Malware Removal Assistance

 

[Deleted member 178]

Approved by Staff

However, I just discovered someone has created a new user with Administrator privileges on one of my PCs

not good

 

[Exterminator]

Set UAC to always notify
Consider adding a stronger real time security solution And use MBAM as on demand
Consider adding one or two more on demand scanners
Sandboxie or another Sandbox
I would consider HTTPS Everywhere and uBlock Origin in FF

 

[frett]

Thanks for the input. I am taking all suggestions seriously.

I had to have been attacked through software I deliberately installed. Because I NEVER click on attachments unless I know what they are. However, I often find software on Downloads.com and I had always felt confident they were successfully vetting the programs they offer. Now I am learning that might not be true.

 

[jamescv7]

Well since you are aware from your configuration then its fine already.

Optional: You may add a backup browser just in case you experience something issue.
Optional 2: Add Sandboxie for such case you want to test some programs in isolated without harming to the actual system.