Solved Person controlling computer without permission?

[chewyboy000]

Someone hacking into computer remotly

Hi, I know I've had bad past experiences with this forum (pirating windows), but I don't do that kind of stuff anymore. I was on my laptop today just doing what I do everyday, banking, youtube, etc, and I noticed that all of a sudden while on banking my keyboard started typing random garbage all over the screen. notepad was open and I typed " get off my [ ] pc" to which a bunch of random dots appeared after I typed that. I immediately disconnected from the internet and changed my bank account settings on a different device. Please note that right after I disconnected from the internet all this random stuff stopped happening. Should I do a factory restore? AKA clean install? I really don't want to risk anyone getting into my personal information. Obviously I would be moving everything off the hard drive onto an external one. My computer is running Windows 7 Home Premium.

 

[GokAy]

Well, welcome to the light side!

Before doing anything drastic, do full scans with:
- SuperAntiSpyware
- Malwarebytes Anti-Malware
- ESET Online

and whatever else other people will advice in this thread.

Don't use your laptop for anything until you are given a clear sign.

 

[chewyboy000]

Now, just a question do these scanners require an internet connection because I don't really want to take a risk at someone being on the computer. I do know that Malwarebytes uses internet to download the database files.

 

[Berton]

Malwarebytes and antivirus programs do need the Internet to download updated definitions but they can run just fine when not connected, just won't list/look for the latest nasties floating 'out there'. I would also check with MajorGeeks.Com - MajorGeeks, sometimes have newer definitions one can put on a Thumb/Flash drive from another computer to update your computer.

 

[GokAy]

Hmm, valid point.

I believe you can:
- download those programs from another computer
- transfer to problem computer
- first scan without updates
- connect to internet just enough to update the programs
- scan again

I doubt it will harm you this way. They should update in relatively short time.

There are also bootable versions of some AV but I am not sure of their effectiveness.

 

[UsernameIssues]

For Malwarebytes, visit this forum post: https://forums.malwarebytes.org/ind...stions-issues-and-their-solutions/#entry49525 for instructions and a link to offline updates. That said, an offline scanner like WDO should work fine for this situation. If you don't like WDO or you just want a second opinion, then pick one or more of these: https://www.raymond.cc/blog/13-anti...-compared-in-search-for-the-best-rescue-disk/

 

[chewyboy000]

Update: Malwarebytes didn't find anything and the database was new enough. Superantispyware is scanning.

 

[chewyboy000]

None if the programs found anything except for superantispyware but it was only tracking cookies, but still I could've swore that it was someone messing around with my computer because some of the characters that it was typing weren't even on my keyboard. Any suggestions?

 

[Space Elation]

Laptop keyboards like any can have sticky keys check them. Change your keyboard with a USB one and see if you have the same problem.

 

[RoasterMen]

And make sure to uncheck "Allow remote assistance on this computer" in System > Remote Settings

 

[chewyboy000]

Laptop keyboards like any can have sticky keys check them. Change your keyboard with a USB one and see if you have the same problem.

It can't be a problem with the keyboard because my laptop keyboard doesn't work and I only use a USB keyboard. Also the mouse was moving around too and trying to do things and it also can't be my keyboard because as I already explained as soon as I disconnected the laptop from the internet the mouse and keyboard stopped doing things.

 

[RolandJS]

This happens to me now & then, I save my work, close all programs, and restart. Everything is fine upon reboot. Scans came up clean. I figure two programs got into a control argument and I lost.

 

[torchwood]

change your passwords

If you ever suspect you are "remote controlled"
Change ALL your passwords ON A DIFFERENT computer.

Roy

 

[chewyboy000]

This happens to me now & then, I save my work, close all programs, and restart. Everything is fine upon reboot. Scans came up clean. I figure two programs got into a control argument and I lost.

Yet again the problem disappears after I disconnect from the internet? I only got the idea that someone was controlling my computer because I was just doing everyday stuff before that and it was still typing random stuff in. I didn't think it was anything serious till I got on my banking, then my mouse started moving instead of just keyboard stuff. The mouse and keyboard immediately started working normally after disconnecting from the internet.

 

[RolandJS]

?Whatever is being done on the internet is clashing with whatever is being done that doesn't need the internet? Or, your computer may be a victim of malware, time to run scans by your antivirus and antiSpy&Mal-ware programs. There are also a couple of very good online scans you can run. Someone earlier posted this advice, please take care of your computer

 

[tommycake50]

I don't know if I'm pointing out the obvious It sounds to me like some kind of RAT.
May I ask when this started happening and what kind of activities you use the computer for(And if you, for example, pirate programs which could potentially install malware).
There are the obvious things like checking for programs you don't remember installing, etc. But if MWB didn't find it, it is either a new piece of malware or it hides itself very well. Try scanning with malwarebytes chameleon, it may be evading anti-malware programs and one of the chameleon solutions could find something.

Of course it could be that remote assistance is turned on and someone knows your password, in this case they either phished it off of you or it is possible that they have a RAT installed with a keylogger or just a keylogger on your computer, I think it is quite likely.

In the event that you do find the executable responsible, please submit it for analysis(for example Kaspersky Virus Desk) to one of the companies that deal with malware.

Although, when it comes to malware I tend to think it is worse than it actually is, better to be over analysing than risk possible infection.

 

[GokAy]

There are also
- Adwcleaner
- TDSSkiller
- Rkill

to scan with, but I don't know if you can crash your OS trying to clean with these, so if you find anything with these first ask advice here on forums.

 

[chewyboy000]

Thanks for all the tips but I'm probably going to end up buying a new laptop anyways. Not because of this issue just because the laptop is 5-6 years old and I'm getting tired of it not working and it being so worn out everywhere.