General security operation

When someone begin to create original own encrypting program on personal computer, what kind of interrupting can be considered?

1)By security update of operating system, replacement of standard runtime libraries
2)By security update of operating system, taking a snapshot of user's filesystem
3)By remote controlling of router, triggering update of operatiing system
4)By taking a movie of Desktop of PC, observation of history of operation