Mouse cursor moves on it's own??.?

So me and my little sister have been freaking out over our new system acting weird. Today she left her laptop open to get back in home later and find out the cursor moving as if someone had remote access and took over the cursor and opened many programs I don't know how a hacker would use them (disk management, 2 MSpaint windows, though the camera was open and the Internet Security was turned off, which is why I'm paranoid).


Upon further inspection the cursor moving as if it had no purpose. Moving everywhere on screen doing left and right click with no definitive pattern so I thought maybe the usb touch tablet was causing the problem since it had a wire over it and causing false input signal. So I intentionally unplugged the tablet without disconnecting from internet and it stopped acting ever since.


But I did not stop there. I've done a full system check "processes, services, "netstat -ano" in command prompt, msconfig, etc" and found nothing suspicious. What I have found instead is when I did a full system scan the security software (Which is Eset Internet Security and Malwarebytes, in this case) and it detected the following thread.


Win32/Bundled.Toolbar.Google.d


Or


Win32/Bundled.Toolbar.Google


I did my research and apparently it's a PUP that came from an application named Ccleaner and defraggler I installed in her laptop, which is weird since Eset did not give me Any warnings when installing.


Can this object be used for remote access to other computers? and can a hacker really access in our computer just like that even though eveything is up to date?

TairikuOkami said:

Malware used by hackers, like fileless malware, is usually undetected by AVs.

Security turned off, mspaint used for screenshots, etc, that definitely sounds like you have been hacked.
You mention CCleaner, make sure you do not have version 5.33, which was infected and update it.

Use Autoruns and disable any suspicious entries in Logon/Scheduled Tasks/Services/Boot Execute/AppInit.
Install other firewall or https://www.glasswire.com , which provides a better GUI for Windows Firewall.

Try other tools for scanning like RKill, HitmanPro 3.7, Kaspersky virus removal tool and tdsskiller.

Thanks Okami, so far non of the programs you mentioned showed any signed of potential thread.

mspaint was open, probably because she put the icon in the desktop. The touch tablet was glitching so we have to take that into consideration as well. The cursor was moving all around rapidly clicking both mouse buttons (left/right).

Today I plugged the USB tablet "wacom intuos5, if you're wondering" and after rubbing it's usb cable over the active area and the pointer start acting again, just not as it did before.


Regarding autoruns, logon showed one cmd.exe and two n/a entry claims to be windows host process (c:\windows\system32\rundll32.exe)

Scheduled task showed gathernetworkinfo.vbs, I don't know what that is.

services showed nothing suspecious, all of programs I installed.

Both boot execute and appinit showed nothing.

I'll upload a screenshot if you want to.

EDIT: Ccleaner version is 5.35