Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Resolved Question

How to remove this mouse moving virus/malware?

Jun 13, 2016 8:41AM PDT

Hello,
Recently my mouse has been moving on its own sporadically, usually when I'm using the key board, but also does it when I'm not using the key board. Looking at the cursor, it will sit there and jump to the far right. I have a feeling this came from a malware issue. When I use Facebook, I enjoy reading articles that people or pages post. Recently however, those articles have been putting malware on my computer and infecting which ever browser (google chrome) I'm using. The malware will redirect my clicks to another website and would get very annoying. Ive used Malwarebites to remove this malware, but this time I got a new infection that moves my mouse. I have ran Malwarebites and Norton Security Suite several times. Norton seems to find cookies and Malwarebites has been finding PUP. files. Ill scan and remove these findings. My mouse will then start acting normally again for about 2 days, and then the sporadic moving comes back. I have tried starting in safe mode, but my computer doesn't do that easily since I have a Fatality (Killer) mother board and there is no F# key for safe mode directly. Also, I did not buy the mouse and keyboard in a bundle and my mouse is a Razer Naga Epic.

If anyone can please help me. I'm assuming I need a good scanning software that can find where ever this infection is hiding. If anyone has a question, Ill be happy to answer

Discussion is locked

Grufflm has chosen the best answer to their question. View answer

Best Answer

- Collapse -
Any names on those PUPs?
Jun 13, 2016 9:15AM PDT
- Collapse -
I just removed Opencandy from a machine.
Jun 13, 2016 9:20AM PDT

It was displaying the same symptoms as the OPs. Running great now.
Dafydd.

- Collapse -
What tools did you use? And...
Jun 13, 2016 9:28AM PDT

Has Opencandy become more invasive? I ran into it over a year ago and it didn't leave anything bad behind. I take it they have changed?

- Collapse -
I used MBAM.
Jun 13, 2016 9:51AM PDT

Firefox was not responding a lot and showing the script error. After removal it's working fine. Maybe it has become more invasive Bob. The machine only presented symptoms yesterday.
Dafydd.

- Collapse -
Answer
And Just In Case It's Not Malware
Jun 13, 2016 11:33AM PDT

Change your mouse settings like this: Open the Control Panel, then the "Mouse" icon, then the "Pointer Options" tab, then UNCHECK the "Enhance pointer precision" box. Then Apply, and OK. It helps prevent the cursor from jumping around.

Hope this helps.

Grif

- Collapse -
Answer
How to remove virus or malware
Jun 13, 2016 11:46PM PDT

why you don't go in virusvanish.com this is an amazing free virus scanner for your PC or Laptop.

- Collapse -
Re: scanner
Jun 14, 2016 12:59AM PDT

It's not free. Only the trial is free. After that it's $90 a year, which is amazingly expensive for an antivirus.
Moreover, they say they currently have 5000 users, that installed the program on 2500 PC's, and that it protects against only 1823 viruses. That's an amazingly low count.

Amazing indeed!

- Collapse -
Amazing?
Jun 15, 2016 5:31PM PDT

Here you state it's an amazing scanner. Yet I noticed where you asked the following yesterday at a different forum ...

'Hey! i just heard about Virus vanish and they are giving me free PC virus scan services, is it true or can i trust on that?'
http://www.techist.com/forums/f51/virus-vanish-277792/

What have you found so amazing about it, within such a short period of time? Or amazing enough to recommend its use. It would help to know, prior to members consider scanning with it.

- Collapse -
Good spot Carol!
Jun 15, 2016 5:37PM PDT

Dafydd

- Collapse -
Right On Carol !
Jun 15, 2016 6:23PM PDT
- Collapse -
Thanks for this.
Jun 16, 2016 10:34AM PDT

I can only guess there is some campaign to spam this title widely now.