I've been wondering whether NIS skips certain areas of the computer - for example the backup and recovery partition - during a full system scan? Also, can intruders who somehow get a hold of your PC manage to label their own files as trusted to avoid a scan?
Reason I'm asking is due to the time on my PC changing recently at random. Sometimes the time would change from PM to AM and other times it would push itself an hour ahead.
Checking Event Viewer, some of these changes were not made by me. They were made by: Security ID: LOCAL SERVICE, or Security ID: System
I have a feeling an intruder made changes to the time and deleted the action from the logs so I can't view the changes, or Windows itself is changing the time randomly due to a glitch. Either way, NIS isn't picking up any threats nor is Norton Power Eraser when I used it. Does NIS / NPE skip certain areas of the computer and should I be worried that there's an intruder lurking in my PC?