I'm just curious, how did you know then that someone is trying to hack you? And what kind of firewall do you use?
After login was asking about admin password for install 3rd party software, and found was services what was not installed by me, now reinstalling whole rig
I use comodo on rig, and fireeye on nat
what services exactly? we aren't getting closer to the solution, if you don't say exact things. If you are right, I have to find also the same services on my rig.