How and what exactly do I look for remote access programs or similar?

Anonymous
2025-06-17T21:01:23+00:00

I have had this feeling for a while that someone is on my computer, not that I see the obvious signs of remote access nor is it frequent but sometimes it feels like my computer is being remotely accessed.

The reasons to why I think its being remotely accessed are:

  • Microsoft Edge has redirected me to a random website whenever I search anything (something among the lines of salsapet.info), but I resolved that by clearing everything in MS Edge.
  • Once my mouse has randomly scrolled down, including youtube controls showing by itself without me moving my cursor at all (keep in mind it should only show if I actually move my mouse)
  • Weird active connections found via 'netstat' command,
  • Mouse slightly moving by itself on other applications.

I have ran MSERT multiple times, did an offline scan via Microsoft Defender, checked through user accounts or any remote connections but I simply didn't find anything suspicious.

I would be really glad if someone could help me with this, would very much appreciate it.

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments
Answer accepted by question author
quietman7 MVP Alumni 19,830 Reputation points Volunteer Moderator
2025-06-17T21:15:27+00:00

Did you check Event Viewer logs? Windows automatically audits logon events and logs every time you log into your device. Event Viewer will provide a long list of activities.

  • Press the Windows Key on your keyboard or in the Search Box, type: eventvwr and click on the top search result.
  • Press Enter to open.
  • Go to Windows Logs > Security and look for any suspicious logon attempts. 
    4624 records as a Logon.
    4672 records a Special Logon.
    4634 will be listed when an account logs.

Do you have Remote Access Enabled? If so, disable it to prevent unauthorized users from connecting to your computer.

  • Press the Windows Key on your keyboard or in the Search Box, type: SystemPropertiesRemote.exe (or sysdm.cpl) and click on the top search result
  • Press Enter to access System Properties.
  • In the Remote tab, ensure “Don’t allow remote connections to this computer” is selected.

How To Check For Unauthorized Access To Your PC with Event Viewer

Related Resources:

If Microsoft Defender Antivirus and Defender Offline cannot find any threats or finds but cannot remove threats, there are various secondary opinion scanners which can be used to supplement your existing antivirus.

I provide a more detailed list of malware removal tools with scanning instructions in Supplementing your Anti-Virus Program with Anti-Malware Tools (Post #4)...just scroll down near the bottom of that post.

Was this answer helpful?

1 person found this answer helpful.
0 comments No comments

8 additional answers

Sort by: Newest
  1. quietman7 MVP Alumni 19,830 Reputation points Volunteer Moderator
    2025-06-18T00:07:57+00:00

    You're welcome.

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2025-06-17T23:59:40+00:00

    Thank you for helping me out, I really appreciate it even though nothing much happened but you did teach me some things which I don't know. After all, I don't know that much about Windows 11.

    If the issues persist, I will find a way...once again, thank you very much.

    Was this answer helpful?

    0 comments No comments
  3. quietman7 MVP Alumni 19,830 Reputation points Volunteer Moderator
    2025-06-17T23:49:26+00:00

    Ok then. As the old saying goes....it's better to be safe than sorry.

    Was this answer helpful?

    0 comments No comments
  4. Anonymous
    2025-06-17T22:41:08+00:00

    That's correct...when I said "it simply turns itself back on", it means that as soon as I close or in my case uninstalled Malwarebytes, it turned itself back on and is working again.

    Malwarebytes shows nothing, I'd have to assume someone was in my room and accidentally pushed my mouse because I don't live alone.

    Anyhow, I don't really see anything else to do because I've checked everything and see nothing interesting. I could provide you a screenshot of netstat or inbound rules from Defender Firewall, but I don't know how sensitive those are for my safety.

    Was this answer helpful?

    0 comments No comments