Skip to content
Affordable Computer Repair logoAffordable Computer Repair

I Think My Computer Was Hacked: What To Do First

Strange behaviour, popups, a cursor moving on its own or a support call you now regret. Here's how to tell what you're dealing with, what to do first, and what not to do.

Written by The Affordable Computer Repair Bench, Repair TechniciansReviewed by Steven W. Nickerson, Sr.Updated 8 min read

Short answer

Take it seriously, but don't panic. The first priority isn't the computer — it's your accounts and your money. Disconnect, then work through the accounts that matter, then get the machine checked properly.

First, this happens to careful people

These scams are built to work on sensible, cautious people. They use urgency, a warning that looks official, and a friendly voice who says they're helping. Nobody at our counter has ever been judged for it, and you won't be either. Let's deal with what's in front of you.

Work out what actually happened

"Hacked" covers several very different situations, and they need different responses.

What you experiencedWhat it usually is
A full-screen warning with a phone number, but you didn't callA scam webpage. Usually nothing was installed.
You called the number and let someone connectRemote access. Treat accounts and banking as the priority.
Popups appearing outside the browserSomething was installed and needs removing properly.
The cursor moved on its ownActive remote access, or remote software left running.
Friends got emails you didn't sendAn email account problem, which may not involve the computer at all.
A demand for payment to unlock your filesRansomware. Don't pay anything and don't restart repeatedly — bring it in.

What to do right now

  1. 1

    Stop talking to them

    Hang up. Don't call any number they gave you, don't reply to their emails, and don't reconnect "to finish the refund". The refund story is the second half of the same scam.

  2. 2

    Disconnect from the internet

    Unplug the network cable, or turn off Wi-Fi. That ends any live remote session immediately.

  3. 3

    Use a different device for the next steps

    Your phone or another computer. Don't do account or banking work on the machine in question until it's been checked.

  4. 4

    Contact your bank directly if money or banking was involved

    Use the number on the back of your card or on a statement — never a number the caller gave you and never one from a popup. Tell them exactly what happened; they deal with this constantly.

  5. 5

    Change the important passwords, from the other device

    Email first, because it can reset everything else. Then banking, then anything with a card stored.

  6. 6

    Turn on two-step verification where you can

    Especially on email. It's the single change that does the most good.

What not to do

  • Don't pay them, and don't pay a ransom demand.
  • Don't let them back on "to remove the software".
  • Don't install another security program on top to "clean it" — several tools fighting each other makes diagnosis harder.
  • Don't assume a scan that says "no threats found" means you're clear. Remote-access tools are legitimate software and most scanners won't flag them.
  • Don't do your banking on that computer until it's been looked at.

Signs worth writing down

Anything you can tell us shortens the job. If you remember, note down: what the warning said, whether you called, how long they were connected, whether they asked you to log in to anything, whether any payment was made, and whether new icons or programs appeared afterwards.

What a proper cleanup actually is

Running a scan isn't a cleanup. On the bench we look at what was installed and when, what remote-access tools are present, what startup items and scheduled tasks were added, whether browser settings were changed, and whether anything was set up to let them back in later. Then we tell you what we found — including if the honest answer is that they were connected but didn't get far.

Bring it to us in Bellevue

Bring the computer to Affordable Computer Repair in Bellevue and tell us what happened. There's no lecture and no judgement. If you're not sure whether it's worth bringing in, call 402-953-0001 and describe it — we'll tell you honestly.

Common questions

Can a scammer get into my bank account from my computer?
If they had remote access while you were signed in, or watched you type, it's possible. That's why the first call is to your bank on a number you already trust, not to us.
Should I just reset the computer myself?
Not before your files are backed up, and not before anyone can see what was done. A reset also destroys the evidence of what happened, which sometimes matters to your bank.
My antivirus says there's nothing wrong. Am I fine?
Not necessarily. Remote-access programs are normal software, so scanners often ignore them. A clean scan is reassuring but it isn't proof.
They only had access for a few minutes. Does that matter?
It reduces the risk but doesn't remove it. A few minutes is enough to install something or view a saved password list. Still worth checking.
Do I need to throw the computer away?
No. In almost every case the machine can be cleaned up or rebuilt and used normally again.
How long does a cleanup take?
It depends what we find. Bring it in and we'll give you a realistic answer after looking, rather than a number over the phone.

The service that covers this

Virus, Spyware & Adware Removal

Browser popups, fake warnings, malware and hacked computers cleaned out properly — registry, temp files, browsers and hidden leftovers.

Virus, Spyware & Adware Removal in Bellevue →

Affordable Computer Repair serves customers from Bellevue and throughout the Omaha metro — computer repair for Omaha, NE.

Optional next step

After we clean it up, keep it protected.

Ask us about Home-IT for ongoing protection, monitoring and remote support — an optional extra layer of help when something looks wrong.

Learn About Home-IT

Related guides

← More virus, malware & scam help

Free counter consultation

Call NowBook Repair