I left my Windows PC connected to an unsecured Wi‑Fi network for quite a while. When I returned, cloud files containing game backups and other data had appeared on my desktop. OneDrive, which I thought I had quit and stopped syncing, also seemed to resume and synchronize files. I did not intentionally make these changes, so I'm worried that someone accessed my computer. I ran a full malware scan and it found nothing. What could have caused this, and what steps should I take before resorting to changing every password or completely wiping the system?
3 Answers
A clean malware scan is reassuring, although no scan can prove with absolute certainty that a system is clean. Start with proportionate steps: disconnect temporarily if you’re worried, check installed programs and recent logins, change passwords only from a trusted device if you find suspicious activity, and enable multifactor authentication. A full reinstall is mainly warranted if you find clear evidence of unauthorized access or need the highest level of certainty; back up personal files carefully first and avoid restoring unknown executables.
Simply joining an open network does not normally give another person direct access to a properly configured Windows computer. The firewall and other security protections still apply. An unsecured network is more commonly a risk for traffic interception, especially if websites or apps are not using encryption. Keep Windows and applications patched, make sure the firewall is enabled, and review your sign-in and OneDrive activity for anything unfamiliar.
This sounds more like OneDrive restarting or signing back in than someone breaking into your PC through Wi‑Fi. OneDrive can resume after a reboot, an update, or a change to its startup settings, and its default folder behavior may make cloud files appear on the desktop. Check the OneDrive account, sync status, recent activity, and Windows update history before assuming compromise.
I had not seen it happen before, but I’ll check the update history and OneDrive settings. Thanks.
That makes me feel a lot better. I’ll review the account activity and security settings instead of immediately wiping everything.