Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Hacked by Remote Desktop Management?

Check this out: I'm minding my own business when I suddenly see the cursor tracking across the screen by itself!


Then, it starts opening files! It seemed to have just chosen the nearest folder on the desktop, but by then I had grabbed the cursor (via my trackpad) and actually started to try to wrest control of the mouse pointer.


Then all **** seemed to break loose as I tried to close files that had been opened and gone to System Preferences to see if any Sharing options were checked (even as I type this, weird **** is happening with my mouse pointer!)


I had to restart the computer and go to System Prefs/Sharing to turn everything off, but by now I think the damage has been done.


How can I find out if someone hacked into my computer in that time? I'm in Console but everything looks suspicious. I can't imagine who might have been able to do this.

MacBook Pro, OS X Mountain Lion (10.8.4)

Posted on Jul 18, 2015 6:47 AM

Reply
5 replies

Jul 18, 2015 6:55 AM in response to Nicholas Robinson1

Your description of events suggest that one way or another you (or someone else) may have downloaded and installed some malware. I suggest that you erase the HDD and reinstall the OSX. Selectively install your user data so that the offending malware is not reinstalled. Change all of your pass words and if you do online banking, notify your bank.


Ciao.

Jul 18, 2015 7:20 AM in response to OGELTHORPE

Good one, but I don't think I downloaded any malware. I hate to plug anything, but there's some guy named Thomas who hangs out on these boards who made something called Adware medic or something similar, and that worked for me back in the day and I ran it just now and apparently I don't have anything on my computer.


Erasing the hard drive is an incredibly drastic step! Just because of a *suspicion.* I was wondering more like if there were some foolproof way to find out if someone had logged in remotely; there must be some processes logger like Console that would tell me for sure one way or another. I just have to know what the smoking gun keywords are that would show me one way or another, if indeed there is such a thing.

Jul 18, 2015 9:26 AM in response to Nicholas Robinson1

There are several possible causes for this issue. Please take each of the following steps that you haven't already tried until it's resolved. Some may not apply in your case.

1. Follow the instructions in this support article, and also this one, if applicable. A damaged or defective AC adapter could be the cause, even if it's the right kind.

2. Press down all four corners of the trackpad at once and release. If there's any effect, it's likely to be temporary, and in that case the unit must be serviced or replaced.

3. Open the Bluetooth pane in System Preferences and delete all pointing devices other than the trackpad, if applicable. Disconnect any USB pointing devices. By a "pointing device," I mean a peripheral that moves the cursor, such as a trackpad, mouse, trackball, or graphics tablet. A plain keyboard is not a pointing device.

4. If your model has an infrared receiver for use with an Apple Remote, disable it.

5. Start up in safe mode and test, preferably without launching any third-party applications. If you don't have the problem in safe mode, but it comes back when you restart as usual, stop here and post your results. Do the same if you can't start in safe mode. If there was no difference in safe mode, go on to the next step.

6. Reset the System Management Controller.

7. If you're using a Bluetooth trackpad or mouse, investigate potential sources of interference, including USB 3 devices.

8. A swollen battery in a portable computer can impinge on the trackpad from below and cause erratic behavior. If you have trouble clicking the trackpad, this is likely the reason. The battery must be replaced without delay.

9. A defective peripheral device or a damaged cable can cause the built-in trackpad of a MacBook to behave erratically. If you're using any wired peripherals, disconnect them one at a time and test.

10. There's also a report of erratic cursor movements caused by an external display that was connected but not turned on.

11. If you use Handoff, disable it in the General pane of System Preferences.

12. If none of the above applies, or if you have another reason to think that your computer is being remotely controlled, remove it from the network by turning off Wi-Fi (or your Wi-Fi access point), disconnecting from a Bluetooth network link, and unplugging the Ethernet cable or USB modem, whichever is applicable. If the cursor movements stop at once, you should suspect an intrusion.

13. Make a "Genius" appointment at an Apple Store to have the machine and/or external trackpad tested.

Hacked by Remote Desktop Management?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.