Three days ago I created a second user account with administrative rights. The computer turned off for an automatic update, and when it turned back on, my original user account was missing. All of my docs are gone along with my Outlook profile and journals. I am running XP sp2 and have Norton Internet Security.
Nothing was in the recycle bin, and I am understandably miffed about all of this. As I was trying to figure out what happened, I began looking through Norton logs. I found in the alerts file several "Unauthorized Access Logged" warnings (36 between 10:42:21 and 10:42:23). There were another 63 logged between 11:06:03 and 12:07:11. This is around the time I would have lost the profile... or maybe a bit later in the day. There were more logged the next time I turned my computer on.
The warnings all say the following:
Actor: C:\WINNT\system32\winlogon.exe (PID=664)
Target: C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
My question is twofold: Has someone been hacking into my computer? and Is there a way to retrieve my lost data?
Thank you to anyone who can help!!!
Timon
Computer Security