1

I was writing some text on my Windows 10 computer and suddenly characters and words that I wasn't typing showed up.

I removed the mouse and keyboard dongle and turned on airplane mode but it didn't stop. Still, text that I soon recognized as a comment I wrote on some website one month ago continued to appear.

It was written at the exact same pace I had, and all the operations I did were repeated, like writing some words, then going back to change them. Here's a little video I took after turning of the keyboard:

text self writing

Unfortunately I didn't think about checking the running processes before restarting the computer. For now, the problem didn't come back.

I did full scans with multiple softwares like Microsoft Defender, Malwarebytes, Sophos and Kaspersky Virus removal tools... but without any result.

At first I though that it could be some kind of keylogger, but what would be the purpose of replaying these keystrokes on my computer?

What could be the cause of this behaviour?

Note: I see my question as been marked as duplicate of this one but I'm not asking how to remove malicious spyware from my PC. I was just searching to understand this strange behaviour, as I would have expect from a keylogger to collect data without me knowing.

Michaël Polla
  • 382
  • 2
  • 4
  • 17

2 Answers2

3

This is extremely strange behaviour. There is no bug or native feature that might cause the behaviour you are experiencing. It could indeed be malware, but i am unsure of what the end goal may be other than to instil fear into the user. Generally unwanted services or applications being launched without your intent would point to some form of malware, but again this is a very confusing issue, never seen something like this before. You are likely correct in assuming it would be best to start from fresh.

#Edit: One other possibility I have just thought of, is perhaps you have a macro keyboard and at one point hit record, and did not notice. This could have resulted in a whole session of logged keystrokes, and typing, to the point that it is perfectly emulating your behaviour. If you then accidentally replay this macro, you could then experience the situation you have described above

paddywan
  • 352
2

Given that you removed the mouse and keyboard (assuming no other devices connected over USB that aren't identified) then it can only be a software issue. This is very weird and in my own opinion can only be the work of malware such as a keylogger somehow playing back the keys (or a remote process injecting keystrokes - which still is a result of an infection).

I would immediately shut down and boot into a live Linux USB (or mount your HDD/SSD into an external enclosure) to get your sensitive files, and then wipe the drive. Afterwords, or at the same time from a known secure computer or your phone you should change ALL of your passwords for anything remotely sensitive. Whatever it is has clearly demonstrated recording your keystrokes which means you can assume whatever you type (including passwords) have been compromised.

Check on your email service if your account has been accessed from another location to see if you have been compromised further.

QuickishFM
  • 1,082