2. Unusual Disk activity.
Without your authorization, a hacker may be able to manage your device remotely. If you see your cursor move or your mouse click, it's likely that it's being controlled by someone else, especially if you're opening programs. This attack is dangerous, so immediately disconnect from the internet or LAN.
If the hard disk or cooling fan continues to spin constantly, malware may be searching for data to destroy or steal.