My co-worker told me that, he saw someone remotely controlling his home PC. The attacker opens browser and tried installing WebBrowserPassView. He said he saw paypal.com opened and soon he disconnected the network cable and shut down his router. I asked him if there were any port forwarding on his router and any remote access services running. All I remember him mentioning running TV on his computer.