My PC running Windows 10 was recently hacked!

[victimofhacker]

So, I believe that someone found out my IP address and has been hacking me nonstop. In fact, I needed to do a factory reset this morning and I noticed that after resetting everything, I am unable to even see the option to switch from a PIN login to a password login within the sign in options menu? Why is this?

I know that I could make the PIN really long like a password, but I would just rather activate the password login option, which it seems I am unable to do. Do I need to sign in first with a security key (my Windows 10 USB stick?) once before I can activate the password login option because I just did a factory reset or is this unnecessary?

I changed my current outlook email password to something much more complicated and harder to hack, but I am still not sure if the hacker is able to hack into my PC anytime he/she wants because he/she might know my IP address?

I have been doing various netstat/task manager checks and before my factory reset, I did some system scans using the free version of Malwarebytes, which came up with nothing as well.

If a hacker knows my IP address, is there anything I can do to block them permanently from hacking my system? I noticed that the router that came with my internet package can't be flashed, so I am unable to add Tomato or Merlin to it.

I feel super vulnerable and I am hoping some of the PC experts on here can give me some advice with this. I have included a screenshot of the sign-in options menu where the password option is missing.

 

[victimofhacker]

So, I did some netstat checks and I noticed that I always have a lot of foreign addresses that have established connections to my system.

I know that most of them are from Microsoft, but are there any in these screenshots that look odd?

When I do IP look ups on various sites, I am often unable to find out any information about them. I either run into an error saying that I need to "enter a valid domain" (even though I typed in the address exactly as it appears in my command prompt) or it will just say that the IP address is not being used and is available for purchase.

Also, some of the formats of these foreign IP addresses are strange, for ex: 133:https, cdn7:https, psh5:https, kix06s10-in-x0e:http, etc.

Are these Google-owned domains?

 

[veeg]

Hello

I will get some help..

@Malnutrition

 

[Malnutrition]

Please download the FRST 32 bit or FRST 64bit version to suit your operating system. It is important FRST is downloaded to your desktop.

If you are unsure if your operating system is 32 or 64 Bit please go HERE.
Once downloaded right click the FRST desktop icon and select "Run as administrator" from the menu"

If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
FRST will open with two dialogue boxes, accept the disclaimer.

1. Accept the default whitelist options,
2. If the additions.txt options box is not checked please select it.
3. Then select Scan

Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt. They will display immediately on the desktop, but can be reopened later as a notepad file.

Please Attach the contents of these logs in your next post for review by our Security Team

 

[Malnutrition]

@victimofhacker

 

[Malnutrition]

@victimofhacker please update the thread or it will be considered abandoned in 48 hours.