Question I am in desperate need of help.

[SmallSchwene]

I recently woke up to find my team viewer app open on my computer and someone controlling my computer from God only knows where. I quickly stopped it and uninstalled team-viewer but today I wake up to find my computer has been controlled again and team viewer has been reinstalled. I uninstalled it and ran a scan but no virus detections were found. Yet walwarebytes continues to block an outgoing response from my PowerShell. I fear whoever this is has used PowerShell to get into my computer the second time but don’t know what I should do. Please help.

 

[rgd1101]

virus scan or malware scan?
fresh os install

 

[SmallSchwene]

virus scan or malware scan?
fresh os install

I did a threat scan but it stills finds nothing. How should I proceed?

 

[ex_bubblehead]

Wipe the drive and reinstall Windows. This is the only way to ensure that any malware has been removed. Then change the password on, and reboot your router/firewall. Further, ensure that ALL remote admin features have been disabled and, if this is a wireless router, that WPS is disabled (Major security hole there).

 

[mdd1963]

Concur with above wholeheartedly; as you don't know how long they were on it before you noticed the breech, anything could have been installed prior to you noticing the intrusion. Delete partitions on OS drive, and full reinstall, aka, the 'nuke and pave'!

(Do any changes to accounts/password, etc., on a known uninfected system elsewhere, or at least post wipe and reload., f possible)

Was your Teamviewer password used anywhere else, or, easily 'hackable'? (Alas, Password1! is not as rock solid as it once was!)