Overclock.net › Forums › Software, Programming and Coding › Operating Systems › Windows › I think someone entered my apartment and tried to use my computer while I was at work
New Posts  All Forums:Forum Nav:

I think someone entered my apartment and tried to use my computer while I was at work

post #1 of 30
Thread Starter 
I came home to find my PC on and unresponsive with a black screen. I am 100% positive I put the computer into a full shutdown everyday before I leave for work. I know they were not able to log on in any way because I have my OS encrypted with Truecrypt, and the firewall logs show nothing since the time I shut down the computer to leave for work.

While I was at work, somebody turned on the PC, somehow managed to bypass my BIOS password but was not able to start the OS, otherwise I would have alerts from the previous 8 hours while I was at work. I am almost positive that the OS was not booted because I would have DHCP alerts in the firewall log every 2 minutes. This is the only way I can be sure the OS was not up and running, but the PC was on.

I am ruling out the possibility that I might have accidentally turned the PC on, because I would have a BIOS password screen, not a blank screen.

How do I find out when the computer was turned on and the MBR was attempted to be read from? Is this even possible? I have checked all the windows event logs and there is NOTHING since the time I turned the PC off before leaving for work. that means it is impossible that I might have logged off and left it running while I was at work.

This is perplexing and scary!!
Edited by aweir - 8/3/11 at 9:45pm
post #2 of 30
What motivation would someone have to enter your house simply to use your PC? Unless you have some sensitive information on there which is useful to someone else, I doubt it's the case and you might be forgetting something. If you do in fact have sensitive info on there, then I think it would be pretty easy to root out who it was, since it had to be someone you know.
BRAAAAAAIINS
(13 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i7-2600K @ 4.6ghz/1.305v ASUS P8P67 EVO MSI N580GTX Lightning Corsair Vengeance 8GB (2 x 4) 
Hard DriveOSMonitorPower
SAMSUNG Spinpoint F3 1TB 7200 RPM Windows 7 Enterprise x64 AW2310 Corsair TX750 
CaseMouseMouse Pad
CM 690 II Advanced Mionix Naos 5000 Steelpad 5L 
  hide details  
Reply
BRAAAAAAIINS
(13 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i7-2600K @ 4.6ghz/1.305v ASUS P8P67 EVO MSI N580GTX Lightning Corsair Vengeance 8GB (2 x 4) 
Hard DriveOSMonitorPower
SAMSUNG Spinpoint F3 1TB 7200 RPM Windows 7 Enterprise x64 AW2310 Corsair TX750 
CaseMouseMouse Pad
CM 690 II Advanced Mionix Naos 5000 Steelpad 5L 
  hide details  
Reply
post #3 of 30
Thread Starter 
No one has a key except the landlord.

Like I said there are no event logs from the time I left for work which means there is no way I could have logged off and left it running otherwise I would have some kind of alerts for the previous 8 hours. But why would the PC be on, with a black screen instead of the BIOS password screen? I can't figure this out.
post #4 of 30
Sounds more like an accident to me. Though it is possible someone was trying to steal your information, there are identity theives out there.

If someone entered your apartment, there would be some kind of evidence that they did. Misplacement, etc. As said I dont see any reason they would unless there was info on the computer useful to them.

I dont think reading the MBR is possible.
Edited by brobanmanx2 - 8/3/11 at 9:58pm
Challenger
(13 items)
 
  
CPUMotherboardGraphicsRAM
AMD Phenom II x4 955 @ 4Ghz Gigabyte 880GA-UD3H EVGA Geforce GTX 460 SE OC'd @ 850/1700/1850mhz 2 x 2gb G-skill DDR3-1333mhz 
Hard DriveOSMonitorPower
Western Digital Caviar black 500gb 7200rpm Windows 7 Home premium 62-bit Acer G195w 1440x900 Antec Earthwatts 500D 
Case
Rosewill Challenger 
  hide details  
Reply
Challenger
(13 items)
 
  
CPUMotherboardGraphicsRAM
AMD Phenom II x4 955 @ 4Ghz Gigabyte 880GA-UD3H EVGA Geforce GTX 460 SE OC'd @ 850/1700/1850mhz 2 x 2gb G-skill DDR3-1333mhz 
Hard DriveOSMonitorPower
Western Digital Caviar black 500gb 7200rpm Windows 7 Home premium 62-bit Acer G195w 1440x900 Antec Earthwatts 500D 
Case
Rosewill Challenger 
  hide details  
Reply
post #5 of 30
That is why you have carpet that shows footprints. Hah just joking.

No one in there right mind would break in to use a computer.
Main system
(13 items)
 
  
CPUMotherboardGraphicsRAM
980x Evga e760 classified GTX 580 tri-sli 12 gb corsiar 
Hard DriveOptical DriveOSMonitor
x3 OCZ Vertex 2 200 gb+ 2 tb spinpoint f3 Sony bluray burner/player Windows 7 64 X3 Asus 24 inch In 3D 
KeyboardPowerCaseMouse
Razer Arctosa Antec 1200W x2 Lian-Li x2000 RAZER Lachesis Banshee 
Mouse Pad
Some old mousepad 
  hide details  
Reply
Main system
(13 items)
 
  
CPUMotherboardGraphicsRAM
980x Evga e760 classified GTX 580 tri-sli 12 gb corsiar 
Hard DriveOptical DriveOSMonitor
x3 OCZ Vertex 2 200 gb+ 2 tb spinpoint f3 Sony bluray burner/player Windows 7 64 X3 Asus 24 inch In 3D 
KeyboardPowerCaseMouse
Razer Arctosa Antec 1200W x2 Lian-Li x2000 RAZER Lachesis Banshee 
Mouse Pad
Some old mousepad 
  hide details  
Reply
post #6 of 30
Thread Starter 
Even if they did enter to use the PC, they're not getting in , and why leave the PC on? Probably just an oversight, but EXPLAINABLE. Does Windows stop creating administration and firewall alerts when the screen locked but you're still logged in?? It's possible that I locked the screen instead of shutting down or logging off, but the lack of logs anywhere proves that did not happen if logs are still created at all after the screen has been locked. My forensics will get to the bottom of this.

I Windows+L when I'm away for along time. I never "log out" to the welcome screen unless I'm shutting down because there's no need to, I only use one account.
Edited by aweir - 8/3/11 at 10:11pm
post #7 of 30
Oh, Power outage could of triggered a reboot upon power lose. The Bios could of bypassed the password trying to restore a previous session. No clue, not an IT guy.
Main system
(13 items)
 
  
CPUMotherboardGraphicsRAM
980x Evga e760 classified GTX 580 tri-sli 12 gb corsiar 
Hard DriveOptical DriveOSMonitor
x3 OCZ Vertex 2 200 gb+ 2 tb spinpoint f3 Sony bluray burner/player Windows 7 64 X3 Asus 24 inch In 3D 
KeyboardPowerCaseMouse
Razer Arctosa Antec 1200W x2 Lian-Li x2000 RAZER Lachesis Banshee 
Mouse Pad
Some old mousepad 
  hide details  
Reply
Main system
(13 items)
 
  
CPUMotherboardGraphicsRAM
980x Evga e760 classified GTX 580 tri-sli 12 gb corsiar 
Hard DriveOptical DriveOSMonitor
x3 OCZ Vertex 2 200 gb+ 2 tb spinpoint f3 Sony bluray burner/player Windows 7 64 X3 Asus 24 inch In 3D 
KeyboardPowerCaseMouse
Razer Arctosa Antec 1200W x2 Lian-Li x2000 RAZER Lachesis Banshee 
Mouse Pad
Some old mousepad 
  hide details  
Reply
post #8 of 30
No signs of forced entry? Nothing else amiss? Either your landlord, or your imagination.
Craptop
(13 items)
 
  
CPUMotherboardGraphicsRAM
I7 Q740 M Intel HM55 GT425M 6GB 
Hard DriveOptical DriveOSMonitor
500GB BDROM/DVDRW 7 64bit LED Backlit 17inch 
Power
Baterry 
  hide details  
Reply
Craptop
(13 items)
 
  
CPUMotherboardGraphicsRAM
I7 Q740 M Intel HM55 GT425M 6GB 
Hard DriveOptical DriveOSMonitor
500GB BDROM/DVDRW 7 64bit LED Backlit 17inch 
Power
Baterry 
  hide details  
Reply
post #9 of 30
paranoid much?? I'm going with accident unless there were other signs of break-in.
Jimi Hendrix v2
(16 items)
 
  
CPUMotherboardGraphicsRAM
i5 750 @ 3.6ghz GA-P55A-UD4P radeon hd 5850 g skill ripjaws 7-8-7-24-2N 1600 4gb 2x2gb 
Hard DriveHard DriveOptical DriveCooling
samsung spinpoint f3 500gb agility 3 120gb some loud samsung archon (stock) 
OSMonitorKeyboardPower
windows 7 home premium 64 bit Asus VH242H steelseries merc ocz modxstream pro 700w 
CaseMouseMouse PadAudio
HAF 922 Gigabyte M8000 Ghost gaming JVC RX700 
  hide details  
Reply
Jimi Hendrix v2
(16 items)
 
  
CPUMotherboardGraphicsRAM
i5 750 @ 3.6ghz GA-P55A-UD4P radeon hd 5850 g skill ripjaws 7-8-7-24-2N 1600 4gb 2x2gb 
Hard DriveHard DriveOptical DriveCooling
samsung spinpoint f3 500gb agility 3 120gb some loud samsung archon (stock) 
OSMonitorKeyboardPower
windows 7 home premium 64 bit Asus VH242H steelseries merc ocz modxstream pro 700w 
CaseMouseMouse PadAudio
HAF 922 Gigabyte M8000 Ghost gaming JVC RX700 
  hide details  
Reply
post #10 of 30
Sometimes when I shut down my computer it either stays on the Shutting Down... screen where I need to hard power-off or the screen blanks but doesn't power down. Doesn't happen very often, actually very rare but it's happened to me after installing updates some times (I reinstall Windows often).
Tiny Fun
(8 items)
 
4P Folding Rig 1
(16 items)
 
4P Folding Rig 2
(11 items)
 
CPUMotherboardGraphicsRAM
i7-4770K @ 4.0GHz MSI Z87I EVGA GTX 660 Ti Corsair Vengeance 16GB 
Hard DriveCoolingOSCase
Samsung 840 Pro 256GB Swiftech Apogee Drive II Windows 8 Enterprise x64 Cooler Master Elite 120 Advanced 
CPUCPUCPUCPU
AMD Opteron 6274 ES 2.2GHz 16-Core AMD Opteron 6274 ES 2.2GHz 16-Core AMD Opteron 6274 ES 2.2GHz 16-Core AMD Opteron 6274 ES 2.2GHz 16-Core 
MotherboardGraphicsRAMHard Drive
SuperMicro H8QGi+-F Matrox G200eW 16x2 (32GB) Crucial Ballistix DDR3 1600MHz Crucial C300 64GB 
OSPowerCase
Linux Mint 15 Cinnamon 64-bit Enermax Galaxy Evo 1250W Spotswood Tech Tray 
CPUCPUCPUCPU
AMD Opteron 6176 SE 12-Core 2.3GHz AMD Opteron 6176 SE 12-Core 2.3GHz AMD Opteron 6176 SE 12-Core 2.3GHz AMD Opteron 6176 SE 12-Core 2.3GHz 
MotherboardGraphicsRAMHard Drive
Supermicro H8QGL-IF+ Matrox G200eW Kingston Server 16x1GB DDR3 Corsair Nova 32GB 
OSPower
Linux Mint 15 Cinnamon 64-bit Cooler Master Silent Pro 1000W 
  hide details  
Reply
Tiny Fun
(8 items)
 
4P Folding Rig 1
(16 items)
 
4P Folding Rig 2
(11 items)
 
CPUMotherboardGraphicsRAM
i7-4770K @ 4.0GHz MSI Z87I EVGA GTX 660 Ti Corsair Vengeance 16GB 
Hard DriveCoolingOSCase
Samsung 840 Pro 256GB Swiftech Apogee Drive II Windows 8 Enterprise x64 Cooler Master Elite 120 Advanced 
CPUCPUCPUCPU
AMD Opteron 6274 ES 2.2GHz 16-Core AMD Opteron 6274 ES 2.2GHz 16-Core AMD Opteron 6274 ES 2.2GHz 16-Core AMD Opteron 6274 ES 2.2GHz 16-Core 
MotherboardGraphicsRAMHard Drive
SuperMicro H8QGi+-F Matrox G200eW 16x2 (32GB) Crucial Ballistix DDR3 1600MHz Crucial C300 64GB 
OSPowerCase
Linux Mint 15 Cinnamon 64-bit Enermax Galaxy Evo 1250W Spotswood Tech Tray 
CPUCPUCPUCPU
AMD Opteron 6176 SE 12-Core 2.3GHz AMD Opteron 6176 SE 12-Core 2.3GHz AMD Opteron 6176 SE 12-Core 2.3GHz AMD Opteron 6176 SE 12-Core 2.3GHz 
MotherboardGraphicsRAMHard Drive
Supermicro H8QGL-IF+ Matrox G200eW Kingston Server 16x1GB DDR3 Corsair Nova 32GB 
OSPower
Linux Mint 15 Cinnamon 64-bit Cooler Master Silent Pro 1000W 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Windows
Overclock.net › Forums › Software, Programming and Coding › Operating Systems › Windows › I think someone entered my apartment and tried to use my computer while I was at work