Help! someone in my computer

I was typing in a forum today when the typing was mysteriously erasing itself, then the pointer starts to move without me touching the mouse, and now I have just figured out that I have gotten hacked.

Ive pulled the Ethernet cord and i downloaded comodo firewall but hes still on, I don't know what else to.

 

Hello and welcome to WindowsBBS Forums.

Ok, so if you're physically unplugged from the Net, how's it possible that they are still doing what you're claiming? It is impossible.

Do you have remote desktop disabled? If not follow the instructions on this Microsoft page to disable it

Have you run any anti-spyware scans or anti virus scans to see what they find? You should.

We suggest the following, in the order presented:

• AVG Anti-Malware, set up:
  Download AVG Anti-Spyware 7.5 from HERE and save that file to your desktop.
  This is a 30 day trial of the program
  • Once you have downloaded ewido anti-spyware, locate the icon on the desktop and double-click it to launch the set up program.
  • Once the setup is complete you will need run ewido and update the definition files.
  • On the main screen select the icon "Update" then select the "Update now" link.
  • Next select the [Start Update] button, the update will start and a progress bar will show the updates being installed.
  • Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
  • Once in the Settings screen click on "Recommended actions" and then select "Quarantine ".
  • Under "Reports "
  • Select "Automatically generate report after every scan "
  • Un-Select "Only if threats were found "
  Close ewido anti-spyware, Do Not run a scan just yet, we will shortly.
  
  Reboot, into safe mode, this way:
  • Turn on the computer
  • Immediately begin tapping the <F8> key.
  • Use the arrow keys to highlight Safe Mode and press the <Enter> key.
  IMPORTANT: Do not open any other windows or programs while ewido is scanning, it may interfere with the scanning process.
  
  Launch ewido-anti-spyware by double-clicking the icon on your desktop.
  • Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan ".
  • ewido will now begin the scanning process, be patient this may take a little time.
    Once the scan is complete do the following:
  • If you have any infections you will prompted, then select "Apply all actions "
  • Next select the "Reports" icon at the top.
  • Select the [Save report as[ button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important).
  • Close AVG and reboot your system back into Normal Mode and post the results of the AVG report scan.(Please edit out any cookie, Recyler and System Volume Information Folder references)
  
  Then these two, and neither require any specific set up.
  
  Spybot Search & Destroy v.1.4
  AdAware SE Free v1.06r
  
  With AdAware and Spybot: DL, follow the install instructions, check for updates, then scan, repair/remove/quarantine anything found. Reboot before next scan with whichever app is next. The reason for running these apps, is to clean up some of the other 'crapware' on your pc, which, in turn, will make deciphering your HJT log, easier.
  
  And then we need to run HijackThis:
  Please download HijackThis! SetUp from here. Save the file to your desktop.
  
  Double-click the HijackThis! SetUp icon to begin the installation. Follow the prompts for the default install location of:'C:\Program Files\HijackThis'. Tick the 'Create a desktop' button when the option appears. Select next, then allow HijackThis! to start.
  
  Then press the [Scan] button. You will notice the [Scan] button will turn into a [Save Log] button. Click the [Save Log] button and notepad will open up with the contents of the scan. Right-click in the saved log, and select 'copy'. Then proceed to your original thread, unless otherwise instructed and click the '[Reply]' button and paste the saved contents to be reviewed. Do not make any modifications to the log or perform any 'fixes' until told to do so.