Hello, I've been battling this for weeks and have disabled all remote services (and more), blocked ports and protocols, did system restore before the hack, purchased new hardware (router/modem), and in event viewer used to show the pc is accessed remotely however I need to check it again tomorrow (not my pc). They block the internet so it's ruined the owners IP home Phone service which sucks because they are elderly. Wifi is disabled and for about 10 minutes after all the changes and new setup it worked great until the offender got back in again. This person did have access to the pc and local network for a couple months, then moved and took control. The pc has no internet because they block it but I need to know how to disable the MMC because it is running in task manager and I believe that's how they are controlling it now. It's a Windows 7 home pc. Wifi is disabled but I think this pc is now on the offenders network by a different wifi. He is an IT specialist that specializes in security so this is beyond my scope. Most of their activity is hidden until I run across it as I'm searching, so little by little I was knocking them out but they always found a way back in and I believe it is because this pc is on their network or a hidden wifi. Also, when I opened IE a message popped up and said it could not access the internet because Remote Access Connection Manager is disabled (and I wasn't going to re-enable it). When I'm working on it to disable services etc, black window (DOS/Command prompt window) flashes frequently like scripts are running or taking snapshots of what I'm doing. Because of no IP phone service, I'm assuming he's blocking at the gateway? I need help with: 1- gaining control back, keeping them out 2- need commands or scanners to somehow show their location for proof. 3- anything else that would help as the owners are in their 80's and have no phone service! 4- can/should law enforcement get involved? Thank you so much for any help!!!