Possibly hacked laptop

[AGC8]

Oddest thing happened to me this morning shortly after midnight. I was playing a video file and then went to look in it's folder. The folder vanished. It was there maybe 30 minutes previous. Or the last time I looked in it.

Not too long before this the Bookmarked folders I had on my Chrome (incognito mode) browser changed to a series of folders I had on my other computers also using Chrome. I couldn't understand how that happened. Did I press some key combination by accident to do this?

This is on my HP laptop WIn7...a few years old. I think I bought it in 2013.

I assumed to get access to any computer you need to have a remote access program on that computer. No one has touched my laptop but me...unless some one broke into my condo suite during my dog walks. And put some app on my HP? One I can't see?

Ideas guys? My WiFi is secured WAP. So the person would need to break into my WiFi network first then find my HP laptop. The folder in question had adult URL's. It was as if this "hacker" specifically targeted this one folder.

Also my HP laptop requires a password to gain access. Don't know why I turned it on. But it is. So the "intruder" would need to break into my WiFi Network (secured) and then my HP laptop. I do have firewalls setup.

Can you accidentally delete a folder in Chrome...adding bookmarks? I wouldn't think so. Unknowingly.

But if I was hacked...and it was about the nature of the URL's bookmarked...why wasn't my iMac (I never turn off my iMac) hacked as well? My MBP. Both Apple computers untouched. My HP laptop is usually in my bedroom. It's as if some one is targeting that one laptop because I play sometimes Adult videos.

Something doesn't jive here. Help please!

 

[mikeymikec]

Your Chrome bookmark problem - do you sign into Chrome with a Google account? To me that seems like some kind of (borked?) sync'ing has occurred.

Wifi - You typo'd - WEP or WPA? Even then it still seems like an unlikely attack vector.

 

[AGC8]

I don't think I logged in using Google+. I set it up so that I would be using a Chrome Incognito Shortcut on the desktop. So that I could just click that shortcut icon and be in incognito mode.

Thinking it over...I doubt any one hacked my WiFi (WPA) or my HP laptop...if for the sole purpose of stopping me from playing certain kind of video content. Because removing the URL's doesn't stop a user from playing any videos. It would just be a minor annoyance. That and as I said...the bookmarks on my iMac and MBP are untouched. So I think it has to do with the way I had Win7 setup and/or using a "Chrome Incognito shortcut"...

Syncing problem? Can you explain?

And if any one really was bothered by my playing XXX videos..and went to the trouble of hacking my WiFi/HP laptop..I would think they would have removed the bookmarked URL's n my imac as well which I keep on all the time...easy access there...no password to get access...unless I shut it down.

Again, removing bookmarks via hacking serves no real purpose but to be an annoyance. Doesn't stop me from playing any kind of video content. Which if that was the reason makes all effort a waste of time.

 

[mikeymikec]

There's an option to sign in to Google Chrome, IIRC the user sees it when the start the browser for the first time. If you do that, I wouldn't be surprised if your bookmarks are getting sync'd with Google's servers for your account. If you then do it on other devices with the same Google account, apparently you can sync all that data between your devices.

Here is what the first page looks like:

I believe you can sign out of it in Chrome's settings. The 'People' feature (again under Settings) may play a role, but probably if you have set up multiple 'people'.

By the way, it's a really common reaction when one is mystified about a possible system security compromise / weird bit of behaviour to assume the worst. IMO you should work on each symptom as a separate issue until evidence leads you to a conclusion (which could be that they're all linked).

I'm not sure what to suggest wrt the other symptoms at present, perhaps others will have some ideas and/or maybe I'll get some inspiration.

 

[AGC8]

Hi Mike,

I now get what you mean now. But I just compared the bookmarks for my HP laptop Chrome browser (not Incognito shortcut) vs iMac. Not identical bookmark for bookmark on both.

Thinking it over...it DOES seem ridiculous any one could/would go to the trouble to hacking my WiFi network or break into my condo suite to plant an invisible remote access program on only the HP laptop. My iMac (has more XXX bookmarks) was on...no password protection when in "sleep mode" and awakened...plus, to get that serious...why not put some program on both computers to prevent access to certain websites? Just to delete a folder and put some remote access program on one computer sounds like a waste of time/effort. Not worth the risk of being caught.

But the question remains...Why would one folder mysteriously disappear late last night (e.g. "XXX"). And weeks earlier most bookmark folders/bookmarks partially "sync'd". And if "Google sync" was on then ALL bookmarks on my iMac should have migrated to my HP laptop during that "sync".

The version of Chrome is different on Win7 and Mac OS X (latest ver.). Such as when you go to bookmark a website URL. Looks slightly different. Setup in a different format. Could the Win7 version be clunky? "Hiccuping" once in a while..."hates XXX bookmarks"?

 

[PhIlLy ChEeSe]

Hi Mike,

I now get what you mean now. But I just compared the bookmarks for my HP laptop Chrome browser (not Incognito shortcut) vs iMac. Not identical bookmark for bookmark on both.

Thinking it over...it DOES seem ridiculous any one could/would go to the trouble to hacking my WiFi network or break into my condo suite to plant an invisible remote access program on only the HP laptop. My iMac (has more XXX bookmarks) was on...no password protection when in "sleep mode" and awakened...plus, to get that serious...why not put some program on both computers to prevent access to certain websites? Just to delete a folder and put some remote access program on one computer sounds like a waste of time/effort. Not worth the risk of being caught.

But the question remains...Why would one folder mysteriously disappear late last night (e.g. "XXX"). And weeks earlier most bookmark folders/bookmarks partially "sync'd". And if "Google sync" was on then ALL bookmarks on my iMac should have migrated to my HP laptop during that "sync".

The version of Chrome is different on Win7 and Mac OS X (latest ver.). Such as when you go to bookmark a website URL. Looks slightly different. Setup in a different format. Could the Win7 version be clunky? "Hiccuping" once in a while..."hates XXX bookmarks"?

How old is the laptop, do you leave it on all the time? I have had I cons disappear from my desk top on Win 764bit with Firefox.

 

[PhIlLy ChEeSe]

I would down load HIGH JACK THIS"(google it) then run it and see, if it was me.

 

[AGC8]

Thanks Philly Cheese. Icons disappearing. I'm not alone. So it was likely not someone having managed to hack their way onto my HP. Bought it in 2013. so roughly 2 years. Not that old.

My imaginative mind was working overtime. But as I said...it would make no sense for some idiot to hack their way in some how...manage to delete a folder...for what? fun? Not to stop me from watching adult content. Left my iMac alone...assuming the HP was hacked. Probably not. Doesn't make sense.

As I said...I have more adult URL bookmarks on my iMac. Untouched or unchanged.

Hijack...will Google it. Heard about it. Forgot about it till now. Thanks.

 

[LPCTech]

You accidentally deleted the folder without realizing it. Then the next time you looked it seemed really strange. But you were not hacked. At worst malware could have done that but its most likely a combo of user error/memory loss.

I mean if it was a hacker they would have to either have access to your apartment and PC or have hacked into your wireless network then into your pc just to delete a folder...and thats not super easy. Perhaps you could have downloaded malware that put a reverse access trojan that could give someone access. But more likely...you did something by accident and forgot. No nefarious anti porn plots are occurring. I get calls from people thinking they were hacked all the time for tech support and its usually malware, or nothing. At a certain companies tech support...

 

[AGC8]

You accidentally deleted the folder without realizing it. Then the next time you looked it seemed really strange. But you were not hacked. At worst malware could have done that but its most likely a combo of user error/memory loss.

I mean if it was a hacker they would have to either have access to your apartment and PC or have hacked into your wireless network then into your pc just to delete a folder...and thats not super easy. Perhaps you could have downloaded malware that put a reverse access trojan that could give someone access. But more likely...you did something by accident and forgot. No nefarious anti porn plots are occurring. I get calls from people thinking they were hacked all the time for tech support and its usually malware, or nothing. At a certain companies tech support...

As I said in my last post. I thought it over. And it WAS probably me. Some how accidentally deleting the entire folder and not realizing it. As you said. Just thought I would have known I did it and remembered. That it woudld have involved obviously key presses. Guess I'm "talented". So good at it I didn't even know I did.

Wish I knew how I did it so I could avoid doing that. Or, doing a "partial syncing" of my bookmarks with what was on my HP laptop already. That I had some how "activated" it.

Malware? Possible. But probably not. I'd need to get an add telling me to "upgrade" or "download" some software for a good reason. Do it and install it. No? Or can it be more insidious? Like opening a seemingly legit email and clicking on some link that looks legit but isn't?

Also, as I said...for any one to go to the trouble of an actual break-in just to delete some folder...making such a HUGE risk of being caught in the process when I suddenly returned...why bother installing a "remote access program"? Why not simply take the laptop? So much quicker and effortless. And they get a free laptop (which has a password requirement to access it from a cold boot). Makes little sense.

Will avoid adding bookmarks with Chrome (Win7) Incognito for a while. See if this happens again. Just run the laptop. Maybe use the link once in a while...nothing should happen.

 

[Murloc]

sometimes weird stuff happens in explorer where stuff that you didn't want to select gets selected and stuff gets moved into folders or trashed.
Unless the Mossad hates you, there's nothing on the internet that would delete a specific file on your PC, change your bookmarks to anything that is not adware and then do nothing else.

 

[AGC8]

sometimes weird stuff happens in explorer where stuff that you didn't want to select gets selected and stuff gets moved into folders or trashed.
Unless the Mossad hates you, there's nothing on the internet that would delete a specific file on your PC, change your bookmarks to anything that is not adware and then do nothing else.

That hasn't happened to me using IE for decades. But did recently with Chrome (Win7). I'd bookmark a website and Chrome would put in in an "Other bookmarks" folder sometimes. I didn't tell it to. It just did it. I could have sworn choosing a specific folder.

About the one folder delete by an "intruder" (breaking in my place or Wifi + laptop basic password security + firewall while in Incognito mode)..not likely since that would be too time consuming and risky (getting caught)...ALL to install a "remote access software" I wouldn't see? ...easier/quicker to simply steal my laptop and run...to stop me from watching certain content they might not like hearing the sounds of.

Heck. IF some idiot neighbour went to the trouble of a break-in why not take my 27" iMac while they're at it? Worth a lot more money. Huge 27" screen...etc. And some of my other belongings.

I guess sometimes certain browsers will "hiccup". Depending on which version. Etc.

 

[Xtrem]

Check your antivirus, maybe it quarantined the file thinking it was malware?

 

[PhIlLy ChEeSe]

IE sucks, Exploder has access to the HDD'S, not cool!! Use any browser but IE, for gods sake man. I use fire fox, it sucks to but way WAY WAY better then exploder!!!!

 

[inachu]

If it was me the victim then when in doubt, throw the hard drive out.

You never know what keylogger hidden stuff could be hiding.
I used to know a guy who continued banking on his infected pc. I refused to help him any more because he never took my advice and he lost all his money. He was so stingy he refused to buy a new drive and now it cost him greatly for it.

 

[JohnAlmighty]

Buy a mac!