Someone took over my computer

[Atlanta CG]

I am on my computer and all of a sudden the screen turns all black and the arrow is moving around. I was in my bank account at the time, I cntr/alt/delete to cancel the program I was in and the arrow goes to the cancel my delete. Finally I pulled the plug. I know someone bad is operating my computer but I just do not know what to do. I'm fairly confident moving around a computer but do not know where to turn to stop this.

 

[swandel1]

Have you run any quality virus scanners? Do you use anti-virus software?

 

[shrubberyvaluation]

I am on my computer and all of a sudden the screen turns all black and the arrow is moving around. I was in my bank account at the time, I cntr/alt/delete to cancel the program I was in and the arrow goes to the cancel my delete. Finally I pulled the plug. I know someone bad is operating my computer but I just do not know what to do. I'm fairly confident moving around a computer but do not know where to turn to stop this.

Probably check some sort of tech forums. Make sure your banking is ok on another device and change passwords. Not sure if safe mode works, if windows. Full wipe might work, but inconvenient. DO you have Teamviewer or some other program for remote access?

 

[alebrewer]

Two step authentication is a PITA - but it works.

 

[Vermonter]

I am on my computer and all of a sudden the screen turns all black and the arrow is moving around. I was in my bank account at the time, I cntr/alt/delete to cancel the program I was in and the arrow goes to the cancel my delete. Finally I pulled the plug. I know someone bad is operating my computer but I just do not know what to do. I'm fairly confident moving around a computer but do not know where to turn to stop this.

Sounds like someone had remote access and possibly has your login details. Call your bank first and reset your passwords.

 

[Elliott]

AI:


Immediate Emergency Steps
1. Disconnect from the Internet
Unplug the Ethernet cable or turn off Wi‑Fi right away. This cuts off the hacker’s remote access immediately .
2. Power Off the Computer
Hold the power button until the system completely shuts down. This stops any ongoing unauthorized activity or data theft .
3. Disconnect External Devices
Remove any USB drives, external hard disks, or backup drives to prevent them from being accessed or infected .
After Powering Off
1. Restart in Safe Mode (Offline)
Boot in safe mode with networking disabled to prevent reconnection. This allows you to safely diagnose the computer .
2. Run a Full Antivirus and Anti‑Malware Scan
Use reputable tools such as Malwarebytes, Windows Defender, or Norton to detect malware or remote control programs .
3. Inspect Installed Programs
Look for unfamiliar or recently installed applications—especially remote desktop tools like AnyDesk, TeamViewer, or Chrome Remote Desktop .
4. Check Recent Activity and Logs
Review browser histories, file modifications, and system logs for any recent suspicious actions such as new user accounts or altered settings .
5. Change Passwords on a Clean Device
Using a separate, trusted computer or smartphone, change all passwords for your email, bank, and online accounts. Enable two‑factor authentication everywhere possible .
Additional Security Hardening
• Keep your operating system and all software fully updated with security patches .
• Ensure your firewall is active and properly configured .
• Disable or restrict Remote Desktop Protocol (RDP) connections and remote access tools unless absolutely necessary, and require VPN plus multifactor authentication if used .
When to Seek Help
If the attack seems advanced or your system holds sensitive financial or work data, contact professional cybersecurity support or your company’s IT department. In serious breaches involving personal data or financial loss, report it to the FBI’s Internet Crime Complaint Center (IC3.gov) or local law enforcement .
These actions together limit the intruder’s control, help identify the breach, and restore your computer’s security while protecting your personal data from further misuse.




.....................
I'm at a car dealership waiting for service and on a cellular hotspot.

 

[Flakey]

Call your bank immediately

 

[Bobby Bucks]

I had that happen several years ago on a crypto exchange outside the US. The "tech" with the exchange asked a question that set off alarm bells so I hung up on him. A few minutes later I saw my cursor moving across the screen so I disconnected from the internet. I scanned and removed the program, but just to be safe I took it to a local tech guy I trust who is super computer savvy to be certain I got rid of it. The internet is the wild west. Two step authentication and eggs in more than one basket is my motto. It's a creepy feeling to realize a hacker has control of your machine, especially when you can see the cursor moving.

 

[Tom D]

Your computer could have had a nervous breakdown. Might need a new one.

Disconnect the internet to it, run several different virus scans. Without the internet watch how it boots up and starts.

If this is a valuable computer take it to a neighborhood computer tech.

Or, if you care not what you have on it, do a whole new install again. Now reloading everything again.

Opening up email which you do not recognize usually is virus impacted. And watch the web sites you go to

 

[sputnam]

I am on my computer and all of a sudden the screen turns all black and the arrow is moving around. I was in my bank account at the time, I cntr/alt/delete to cancel the program I was in and the arrow goes to the cancel my delete. Finally I pulled the plug. I know someone bad is operating my computer but I just do not know what to do. I'm fairly confident moving around a computer but do not know where to turn to stop this.

Run a full system AV/malware scan. Understand that there is malware that is designed to hide from your scanner... but if you have the paid version of one of the better ones, it's less likely. Take your computer to a reputable and experienced computer service place (or hire one to come to you). Immediately, go to your bank and change your log in credentials and maybe switch to a new account.

Once you're confident it's clean, make sure that your security includes a good firewall, good anti-virus software, and a VPN... at minimum. I hope you have a back up... you might not need it... but, you might.

BTW... this is going to become more common and harder to deal with as the bad guys use AI tools more. The plus side is that the good guys will use AI tools more too.