-1
Update: Just now, it happened again. After waking the computer from suspension, it was sluggish. I pressed Ctrl-Alt-Delete, but this time, it froze everything right away, the mouse and keyboard had power, but did not do anything. After a while, the screen went black, and the computer was unresponsive and forced me to press the manual reset once again. It seems it is related to suspension, somehow.
Old info:
Last night I had a scary event. I woke my computer out of suspended mode, and found that it reacted sluggishly. Changing tabs took several seconds, there was a distinct delay to everything.
So I pressed Ctrl-Alt-Delete to bring up the task manager. I clicked the tab to sort the CPU intensive processes to the top, and saw that it was something like nvstreamnv.exe
slurping up a gig and more of memory. Then all of a sudden I lost control of mouse and keyboard! The mouse had no power, the infrared light was not glowing. I think the keyboard lights were still on, but no keys worked. After a while, all my Firefox windows were shut down at once. Later I got the message about restoring the session did not work as expected, so it seemed like an unusual shutdown.
At this point I pressed the reset button and restarted in failsafe mode.
I fiddled around in there, checked logs, and found nothing of significance (but then I don't know what to look for). I did turn off the "accept remote help" option, which was mysteriously turned on. I could not run any program in failsafe mode, as I thought I could, so I rebooted and ran my antivirus, which found nothing.
Since my antivirus (F-Secure) had been acting strange just the day before, this added to my paranoia. It had gone offline, giving me the windows warning thing "No antivirus is active" or whatnot, and then asking me to reboot. So I went to www.microsoft.com and found some online downloadable scanner, which reported no viruses. I also went to www.kapersky.com and downloaded a scannar, which reported no viruses or malware.
Feeling a bit more reassured, I am still worried. Due to a game I had played earlier, I had switched from my regular firewall to the Windows Firewall, which might have left me vulnerable. This was done via msconfig, turning off the service at the time in a trial and error fashion.
My question is, what could account for losing control of keyboard and mouse like that? The "nvstream.exe" seems to be connected to my NVIDIA software, as near as I can tell, and it looks like someone was remote controlling my computer, using my video card to send visuals? Should I be worried, do something else? Could some malware/trojan be still in my computer, even though the antivirus scans found nothing?
possible duplicate of How do I get rid of malicious spyware, malware, viruses or rootkits from my PC?
– Moses – 2014-04-01T13:05:23.207@TLP: Which Kaspersky tool did you use? I would recommend using one that runs at boot-time before Windows has loaded, e.g. Kaspersky Rescue Disk. This is because some root-kits can hide very effectively from programs running on the OS. – James P – 2014-04-01T13:12:56.067
@James I took the one on the front page, it downloaded and ran, no reboot. http://www.kaspersky.com/se/security-scan Supposedly my F-Secure checks for rootkits.
– TLP – 2014-04-01T13:24:31.593@Moses This question is not about how to remove viruses, it is about what could account for losing control over keyboard and mouse, and identifying a possible infection when all antivirus says everything is okay. – TLP – 2014-04-01T13:25:54.203
Honestly, download and run Malware Bytes anti-malware. - Also use their chameleon and Anti-Rootkit tool. – Samuel Nicholson – 2014-04-01T13:39:39.737
2You say you lost control of your keyboard and mouse. Does that mean the mouse was moving/clicking on its own? Was there typing happening without your input? OR do you mean they stopped working? There is a big difference. – CharlieRB – 2014-04-01T13:39:49.217
1@CharlieRB They stopped working. Moments after I brought up task manager, they went offline. The mouse lost power, as I said earlier. It did not move on its own that I could see. Something did happen though, and that was that Firefox was shut down, all the windows at once. – TLP – 2014-04-01T13:43:07.873