Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I recently had to install something to allow a tech agent free reign on my Win 8 Pro Home PC. The tech agent was courteous and professional and I have reasonable faith in her/him; however, I must be prudent when protecting my home PC.

What do I need to do that make 100% sure that the tech agent or an associate of the same company can never remote into my PC again? I have unchecked "Allow Remote Assistance connection to this computer" in Control Panel/System Properties. Also, I have a DLink 2540B external Firewall/Router but I'm not sure how to block the appropriate ports.

NOTE: This is nothing against the tech agent or her/his company. I'm just paranoid...

share|improve this question
This question seems a bit overly broad, and likely to get more debate than solid definitive answers. – killermist Jun 17 '13 at 3:43
The question is purposefully broad to try and protect the tech agent and her/his company. It's very unfortunate that I was nearly forced into allowing the agent into my machine. The 100% legal software in question had serious activation issues... – Mr. Paranoid Jun 22 '13 at 8:00
up vote -5 down vote accepted

Destroy the computer.

If someone has already been on the computer then there is no guarantee. In fact if that computer is so much as on then it's not 100%. Since your agent has been inside it's more like 50%. You have done the biggest step but past that there isn't really much you can do.

Welcome to information security :)

share|improve this answer
Don't "destroy your computer". What a ridiculous suggestion. – Austin ''Danger'' Powers Jun 17 '13 at 3:57
100% way of guaranteeing nobody could EVER use it again. – Michael Frank Jun 17 '13 at 21:03
@Griffin: so presumably you throw every computer that gets a boot sector virus in the garbage and tell the user they need to buy a new one (instead of doing a low level format and re-flashing the BIOS if you felt it necessary as an extra precaution)? Where else, other than the BIOS and the hard drive, can malware realistically persist in a computer? Be careful- your response to this may seriously reduce your credibility. Someone who didn't know any better could waste hundreds of dollars unnecessarily if they made the mistake of believing you. – Austin ''Danger'' Powers Jun 29 '13 at 0:34
@Griffin: so where in the chassis can malware persist? Where in the CPU can malware persist? Where in the motherboard after the BIOS has been re-flashed can malware persist? Where on a hard drive after doing a low-level format can malware persist, or even better, on an SSD after running the Secure Erase command? Where on the network card or graphics card can malware persist? Where in the RAM can a virus persist? Discarding the ENTIRE computer is starting to look a bit foolish now. – Austin ''Danger'' Powers Jun 29 '13 at 0:39
Just realized I'm arguing with a 16-year old. Poor guy's parents probably buy him a new computer every time he gets a virus. – Austin ''Danger'' Powers Jun 29 '13 at 0:42

Do a wipe and reload of the OS to remove all prior traces of software and start with an OS you can trust again.

No need to "destroy the computer".

This implies it has been PHYSICALLY compromised which, of course, it has not.

share|improve this answer
Well, I agree with Griffin. While its very unlikely the tech agent would do this, it is theoretically possible that the agent may have flashed my BIOS when my children were distracting me... If that happened, then reformatting the HD will not help me. – Mr. Paranoid Jun 22 '13 at 7:52
But you would still not need to "destroy the computer". If you were that paranoid and believed they were that smart, you could simply re-flash your BIOS and save yourself a few hundred dollars (i.e. the expense of a new computer). I will always call people on their useless, alarmist answers which could end up someone a lot of money for no reason. And that was one of them. – Austin ''Danger'' Powers Jun 29 '13 at 0:26

I might start by looking for new icons in the task tray that when hovered show an IP or something remote oriented, then find the corresponding program in add remove programs and get rid of it.

Could open a RUN menu and type msconfig and go to the startup tab and untick anything that looks suspect.

Also probably go down and change the default RDP Port if you don't remote access your computer yourself at times.

share|improve this answer
Yes, I think changing the RDP Port is one of my better options, but maybe I just need to destroy the computer as Griffin said... – Mr. Paranoid Jun 22 '13 at 7:55

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.