So i’m currently in a paranoid state right now. Earlier this morning, while I was working on my personal PC, my pointer just started moving on its own. At first I thought it was something with my mouse (maybe the sensor is dirty or something) so I blew on it. However, I noticed that it was still moving in a very human-like circular motion even without it touching any surface. Like how you would move it when you’re warming up your hand to use your PC.
I immediately pulled the mouse cord but it wouldn’t stop. Suddenly it right-clicked on its own, and I saw it was about to click on refresh when I just decided to pull the LAN cable. It was still moving for a few seconds even after the Internet connection was terminated (kept moving it to disrupt whatever the pointer was doing). Once it finally stopped, I did everything I could think of. I disconnected my webcam, cleared my browser history and saved passwords, uninstalled all the stuff I can think of that might have the virus. I did a quick scan, a full scan, and then a custom scan for each of my drives using windows defender. I uninstalled all the VPNs I had installed. I even changed the mouse I was using. I kept my PC disconnected to the Internet for atleast an hour before I decided to connect it again.
Nothing happened since then, I think my mouse was just bugging out but I still can’t get the thought that maybe someone is controlling my PC remotely. Maybe they gave up after trying to do something in my PC without success and might try again next time. I just need help or information regarding this experience.
Any advice on what I should do or look for?
There are a lot of conditions and circumstances that could cause this with nothing nefarious going on. If you are on the latest Windows 10 or 11 and use any newer mouse that has its own software (RGB or rebinding with iCUE or Synapse for instance), the device (in part) is actually virtualized by Windows for safety reasons (and to allow the mouse to store profiles internally) and this can create strange delays or stutters at times depending on a lot of things. Or depending on your system resource load, USB input can halt entirely and “queue” your movement up in a sort of buffer so that when it frees up the CPU and system it will perform those movements after a delay of up to a few seconds. This is compounded depending on so many other things like if you were in a full-screen, GPU-heavy app or hi-def stream, RDP/VNC running, etc. If Windows or your mouse software was updating in the background, that’s another possibility of what could look like ghost movement or mismatch between your hand and the pointer.
However, if you were “fighting” against it and did have control but felt like another person also was in real-time control and/or it was doing this and autonomously clicking things 15-30 seconds after you took your hand off, that is a bit more concerning. As a minimum, you could make sure to disable any remote connections and remote support, close those ports in your firewall, and run a full Malwarebytes scan. The nuclear option is a Windows Reset, which will keep photos and documents but reset Windows back to stock. The thermonuclear option is a fresh Windows install via USB, sending the whole HDD back to Day One.
It does sound like how you’re describing it. But I was fighting against it and it still was moving around. So yes, it is a bit concerning. It hasn’t happened for a while now, I’ve been using my PC the entire day since it last happened. I’ll disconnect my LAN connection before I shut down tonight just to be extra careful.
Thank you! I’ll keep all of this in mind.
Does it happen only when *your PC is connected to the Internet? If so, you may have installed a RAT that has granted a hacker remote access to your PC.
The next time it happens, disconnect from the Internet and see it the problems persists.