an hour ago I restartet my computer because NIS was not available. after that I tried to start NCC in browser and had a new wallet in my nem ncc directory böser dämon is the wallet called: B%C3%B6ser+D%C3%A4mon.wlt
and NIS is not available since then. Maybe I got hacked because how could be a wallet in my ncc directory, which is not my wallet?
Someone did the same to me because I had port 8989 open. Close this port and you should be fine. As long as you have a strong wallet password you are safe anyway, but it's best to close this port.