Remote hacking

[Bewicked2]

My laptop is a supposed to be a Windows 11 laptop but it is instead running Windows NT. I have remote access turned off, yet I'm being remotely hacked. I have tried stopping the remote call task but it says access denied. In fact, several of the settings on my laptop are grayed out and inaccessible. If you look at my event log, it will say connected to remote workstation. What is that? I should not be connected to anything. Can someone please tell me how this person is able to bypass my settings and remotely hack me?

[Nal_NR]

Hi @Bewicked2,

Welcome to the HP Support Community. 

I'd be glad to help you! 

I'm sorry you're going through this frustrating situation with your laptop—it can be really unsettling to feel like your device is compromised. Let’s work through this together to help you regain control.

• Have you recently installed any unknown software or received suspicious emails that might have led to unauthorized access?
• Do you notice unusual behavior, such as unknown programs running, changes to system settings, or unfamiliar network connections?
• Have you checked your installed user accounts to ensure no unauthorized accounts have been added?

Let's try these steps.

Disconnect from the Internet Immediately

• Turn off Wi-Fi and unplug any Ethernet cable to cut off any potential remote access while troubleshooting.

Boot into Safe Mode

• Restart your laptop and press F8 (or hold Shift while clicking Restart), then select Safe Mode with Networking to prevent unauthorized programs from running.

Run a Full Security Scan

• Use Windows Security (Settings > Update & Security > Windows Security > Virus & Threat Protection) to perform a deep scan.
• Additionally, download a trusted anti-malware tool like Malwarebytes to scan for hidden threats.

Check and Disable Remote Access Features

• Go to Control Panel > System > Remote Settings and ensure "Allow remote connections" is unchecked.
• Open Services (Win + R, type services.msc) and disable services like Remote Desktop Services and Remote Registry.

Check for Unauthorized User Accounts and Processes

• Navigate to Settings > Accounts > Family & other users to check for unknown accounts.
• Open Task Manager (Ctrl + Shift + Esc) and look for suspicious processes. Right-click any unfamiliar ones and choose Open File Location to investigate further.

Hope this helps! Keep me posted for further assistance

Please mark this post as “Accepted Solution” if the issue is resolved and if you feel this reply was helpful click “Yes”.