random activity when computer is inactive

over the last few months I've screen / cursor move typically a few minutes after i am inactive. it seems to move windows around and type in stuff in the browser (i attached a screenshot of what is in the search history. the first search item is something i typed - all others are what is happening!!). I have bitdefender installed and it doesn't seem to detect any malware. What in the world is happening here? Help!

Find more posts tagged with

malware

virus

trojan

cybersecurity

Comments

Gjoksi

Hello.
First, take screenshot(s) of the issue,
create a log file on your Windows device using Bitdefender Support Tool, by following these steps:
https://www.bitdefender.com/consumer/support/answer/1733/
and
create a log file on your Windows device using BDsysLog, by following these steps:
https://www.bitdefender.com/consumer/support/answer/1922/
Next, contact Bitdefender Consumer Support by e-mail:
https://www.bitdefender.com/consumer/support/help/
with short description of the issue.
After that, you will get an automated reply by the Bitdefender Customer Care Team, with your ticket number.
Now, in reply to that automated reply, you can send the screenshot(s) you already took and the log files you already created in the first step.
Since you are all done, just wait for the support engineers to investigate your issue and find a solution to fix the issue.
Remember that the screenshot(s) and the log files will help a lot to the support engineers for better and faster investigation on your issue and finding a solution.
NOTE: If any of the log file is larger than 25MB, you can upload the log file here:
https://upload.bitdefender.net/
After the upload is done, you will get a notification with the file's URL and then you can share the file's URL with the Bitdefender Consumer Support.
Regards.

Alexandru_BD

Hello,

Given the symptoms, I think there are a few possible causes. I'm not certain it’s a browser hijacker, though that is one possibility. First, to address the elephant in the room, are you sure this is not remotely controlled? Because the movement happening automatically suggests some remote control of the system.. That could be via a remote-access tool (legitimate or malicious) or screen-sharing that you may be unaware of.

I'm not excluding some malicious software, as this could be controlling the system, interacting with the browser, typing the things you see there. The fact the antivirus didn't detect anything doesn't guarantee no infection, as some malware can evade detection, there's always that "000.1 percent" scenario.. but let's assume it's not the case here.

If its's specifically typing in browser windows, opening tabs etc., a browser extension or malicious plugin could be auto-executing tasks or opening things. Browser hijackers often redirect searches, change homepages, etc. But the movement of the cursor seems more indicative of controller access, so that's why I said that I can't say 100% you are dealing with a hijacker there.

Less likely but possible, there could be a ghost input (touchpad/hardware) or a connected device sending input, for example wireless mouse or keyboard controlled by someone else. However, the typing and search history suggests something more than a phantom hardware ghost, so maybe that's a bit far-fetched… still, worth mentioning as a possible cause.

Again, perhaps some legitimate remote support tool is active and causing this? Or some s c r i p t or automation triggered on idle time? You know your device best, so if you are unaware of such things going on, then maybe it's best to reach out to Bitdefender Support and investigate further.

Nevertheless, it's a very intriguing behavior and I'm really curious to find out what was causing this, so if you are kind enough to share the outcome here, that would be highly appreciated. 👍️

Regards