I'm really in need of some good advice here. It looks like my laptop has been compromised since I can actually see someone trying to type and access my files. I've turned off the Wi-Fi and tried running offline scans, but nothing is showing up. Is a complete system restore the best option? I appreciate any quick suggestions!
6 Answers
You’re probably right to consider a wipe and reload of your system. Modern malware can hide in tricky places, and sometimes it can embed itself in the registry instead of just showing up as files. The best way to ensure you’ve cleaned everything out is to start fresh. Just a heads up—there's some next-level malware that can even live in the UEFI chip, so wiping the hard drives might not be enough if that’s the case.
Honestly, if you think malware is involved, I’d recommend reinstalling Windows from a USB stick. Make sure to change all your passwords, enable two-factor authentication, and log out of all active sessions just to be safe. It's a hassle, but it’s better to be proactive when dealing with these kinds of issues.
Have you tried running a complete scan with Malwarebytes? The free version can do a thorough job, so it’s worth a shot!
Looks like they managed to install OpenSSH, which can grant remote access. Deleting that might have cut off their access, but you should still be cautious.
Just a little reminder that being hacked isn’t the same as having a virus. Make sure you’re clear on which one you’re dealing with.

I really appreciate the insight! I haven't kept up with malware developments since 2002, so this is all pretty new to me. I’ll definitely opt for a clean wipe and hope for the best.