My wallpaper went back and someone controlled my mouse. Can I find out how they did it?

Question

They opened some folders, then the settings menu and tried to sync my settings. I don't have a Microsoft account and have disabled syncing in a way that overrides the Settings app. At that point I shut off the router. What useful information can one extract from the system settings - wireless networks, windows key, log in details, ...?

I checked the TeamViewer log and found no recent connections apart from pinging the TeamViewer server. No account or unattended access was set up, and the program wasn't running, only its service. I've already uninstalled some apps like Skype, Zoom meetings, and TeamViewer. I ran Kaspersky and Malwarebyles full scans, with the latter reporting the Google Chrome preferences file as a potentially unwanted program. Then I reconnected and updated both programs, scanned again and results came out clean. Remote Desktop seems to be blocked in Kaspersky firewall.

Are there logs in Kaspersky I can check? It's always running. What are some other programs that allow such access?

Thank you!