Symptoms
- Unfamiliar remote access program found running or installed
- Mouse or screen occasionally moves on its own
- Program icon in the system tray you don't recognize
- Computer performs actions you didn't initiate
Likely causes
- CommonLeftover from a legitimate remote support sessionA tech support session (even a legitimate one) may have left remote access software installed afterward.
- PossibleInstalled by a tech support scam callA scammer may have talked you into installing it during a fake support call.
- PossibleMalware bundled with another downloadSome malicious downloads quietly install remote access tools for later use.
What to do
- Disconnect the computer from the internet immediately if you see any sign of active remote control, such as the mouse moving on its own.
- Open the list of installed programs and uninstall any remote access software you don't recognize or use.
- End its process in Task Manager first if the uninstall won't complete while it's running.
- Change your important account passwords from a different, trusted device.
- Run a full antivirus and anti-malware scan after removal.
- Check your firewall settings for any rules that might have been added to allow remote connections.
- If it keeps reappearing after removal, have a professional check for a deeper infection.
When to call a pro
If remote access software resists removal or you suspect active unauthorized control, have a professional clean the system or consider a full reinstall.
Safety
Use caution
If you believe someone is actively controlling your computer remotely, disconnect from the internet immediately and avoid entering any passwords until it's confirmed removed.