Think your computer has been hacked or compromised? Take these steps immediately to limit damage and recover.
Signs You’ve Been Hacked
- Mouse moving on its own
- Programs opening without you
- Passwords no longer work
- Unknown programs installed
- Webcam light on unexpectedly
- Files missing or encrypted
- Friends received spam from your accounts
- Unusual bank/credit card activity
- Antivirus disabled
- Pop-ups about hacking or ransom
Immediate Steps
Step 1: Disconnect from Internet
Do this NOW:
- Unplug ethernet cable
- Turn off WiFi
- Enable airplane mode
- This stops hacker’s connection
Step 2: Don’t Panic
- Take a breath
- Follow steps methodically
- Document what you notice
- Don’t pay ransom demands
Step 3: Don’t Use the Hacked Computer for Sensitive Tasks
Use a different device (phone, tablet, another computer) for:
- Changing passwords
- Checking bank accounts
- Contacting support
Change Passwords Immediately
From a DIFFERENT Device
Change these passwords first:
- Email accounts (most critical)
- Banking and financial accounts
- Social media accounts
- Any account using same password
- Computer/Windows password
Password Change Tips
- Use strong, unique passwords
- Don’t reuse any password
- Use password manager
- Enable two-factor authentication on everything
Secure Your Accounts
Enable Two-Factor Authentication
For all important accounts:
- Email (Gmail, Outlook, etc.)
- Banking
- Social media
- Shopping sites
- Cloud storage
Check Account Activity
For each account:
- Check login history
- Look for unknown locations/devices
- Check for unauthorized changes
- Review recent transactions
Remove Unknown Devices
- Go to account security settings
- View connected devices
- Remove any you don’t recognize
- Sign out of all sessions
Financial Protection
Contact Your Bank
- Report potential compromise
- Check for unauthorized transactions
- Consider freezing accounts temporarily
- Request new cards if needed
Monitor Credit
- Check credit card statements
- Review bank accounts
- Consider credit monitoring
- Place fraud alert with credit bureaus
- Consider credit freeze
Scan Your Computer
After Disconnecting
Run multiple scans:
-
Windows Security offline scan
- Windows Security > Virus & threat protection
- Scan options > Microsoft Defender offline scan
-
Malwarebytes
- Download on clean device
- Transfer via USB
- Run full scan
-
Additional scanners
- HitmanPro
- ESET Online Scanner
What to Look For
- Remote access tools (RATs)
- Keyloggers
- Backdoors
- Trojans
Check for Remote Access Tools
Programs Hackers Use
Look in installed programs for:
- TeamViewer (if you didn’t install)
- AnyDesk
- LogMeIn
- Remote Desktop software
- Unknown VNC programs
Uninstall Unknown Remote Tools
- Settings > Apps
- Uninstall anything suspicious
- Check startup programs
- Disable unknown startup items
Check Windows Settings
Remote Desktop
- Settings > System > Remote Desktop
- Turn OFF if you don’t use it
- Remove any allowed users you don’t recognize
User Accounts
- Settings > Accounts > Other users
- Remove accounts you didn’t create
- Check for hidden admin accounts
Command Prompt Check
- Open Command Prompt as Admin
- Type:
net user - Review all listed accounts
- Remove unknown accounts:
net user USERNAME /delete
Recover Accounts
If Locked Out
Google Account:
- Go to accounts.google.com/signin/recovery
- Follow account recovery steps
Microsoft Account:
- Go to account.live.com/password/reset
- Use recovery options
Social Media:
- Use each platform’s account recovery
- Verify identity as required
Report Compromised Accounts
- Facebook: facebook.com/hacked
- Instagram: Report through app
- Twitter/X: Use help center
- Google: google.com/accounts/recovery
Document Everything
Keep Records Of
- When you noticed the hack
- What you observed
- Changes made to accounts
- Unauthorized transactions
- Steps you’ve taken
Why Document
- May need for insurance claims
- Required for police reports
- Helps track what was affected
- Useful for professional help
Report the Hack
File Reports
- Local police - for identity theft
- FBI IC3 - ic3.gov for cyber crimes
- FTC - identitytheft.gov
- State attorney general - consumer protection
Report Identity Theft
If personal information stolen:
- Visit identitytheft.gov
- Create recovery plan
- Get recovery steps specific to your situation
Clean or Reset Computer
Option 1: Clean the System
- Run all malware scans
- Remove found threats
- Update all software
- Change all passwords
- Monitor for continued issues
Option 2: Reset Windows
For severe compromise:
- Back up important files to external drive
- Settings > System > Recovery
- Reset this PC > Remove everything
- Clean reinstall Windows
- Reinstall programs from scratch
Option 3: Fresh Install
Most secure option:
- Back up files carefully (scan for malware first)
- Create Windows installation USB
- Boot from USB
- Delete all partitions
- Install Windows fresh
After Recovery
Ongoing Monitoring
For the next few months:
- Monitor credit reports
- Watch bank statements
- Check account activity regularly
- Be alert for phishing attempts
Improved Security
Going forward:
- Use unique passwords everywhere
- Enable 2FA on all accounts
- Keep software updated
- Be cautious with emails and links
- Use reputable security software
Consider Identity Protection
- Credit monitoring services
- Identity theft protection
- Dark web monitoring
If Ransomware
Don’t Pay
- No guarantee of recovery
- Marks you as willing to pay
- Funds criminal operations
Recovery Options
- Check nomoreransom.org for decryptors
- Restore from backup
- Use shadow copies if available
- Accept data loss if no backup
Computer Hacked? Our Dallas technicians provide emergency hack recovery services. We secure your computer and help protect your identity. Same-day service throughout DFW.
Prevention Going Forward
- Strong unique passwords
- Two-factor authentication everywhere
- Keep all software updated
- Be suspicious of unexpected emails
- Regular backups
- Security awareness
Dallas-Fort Worth Security Help
We help with computer security breaches throughout DFW including Dallas, Fort Worth, Plano, Frisco, McKinney, Irving, Arlington, Richardson, and all surrounding areas.
