'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Disable Remote Desktop After a Scam on Windows
Question details
The user needs to completely sever remote access and secure their device and accounts after falling victim to a tech support scam.
- Product
- Windows Remote Desktop
- Device & OS
- not provided
- Scenario
- Recovering from a remote-access scam where an attacker gained control of the computer, potentially installing secondary backdoors or accessing financial information.
- Observed behavior
- Even after built-in Remote Desktop is disabled, attackers might still control the mouse, access browsers, or make fraudulent purchases using stealthy third-party remote tools.
Immediately disconnect your computer from the internet (unplug the Ethernet cable or turn off Wi-Fi) to instantly cut off the scammer's active connection while you perform these security checks.
Disable Remote Desktop and Remove Unauthorized Tools
The most critical step is to turn off built-in remote features and uninstall any third-party remote software the scammer may have installed.
Scammers rarely rely solely on Windows Remote Desktop. They often trick victims into installing legitimate but easily abused third-party remote support applications. You must check for and remove these tools to ensure your system is isolated.
Click the Start button, go to Settings > System > Remote Desktop, and toggle the 'Enable Remote Desktop' switch to the 'Off' position.
Press the Windows Key + R to open the Run dialog, type 'appwiz.cpl', and press Enter to open your installed programs list.
Sort the list by the 'Installed On' date. Look for software installed on the day of the scam (such as AnyDesk, TeamViewer, LogMeIn, or ScreenConnect), right-click them, and select 'Uninstall'.
Open Windows Security (or your preferred antivirus software), navigate to Virus & threat protection, select 'Scan options', and run a 'Full scan' to detect and remove any hidden malware or keyloggers.
Secure Your Accounts from a Safe Device
Because scammers may have compromised your passwords or active browser sessions, you must secure your accounts using a different, uncompromised phone or computer.
Stay Productive and Secure with WPS Office
While securing your computer from remote access scams, you may need a reliable and safe office suite to manage your personal and financial documents. WPS Office is a highly secure, free alternative to Microsoft Office that focuses on local productivity without relying on easily exploited remote-access integrations.
- 1. Visit the Official Website: Go to the official WPS Office website using a secure browser.
- 2. Download the Installer: Click the 'Free Download' button to get the latest, most secure version.
- 3. Install WPS Office: Run the installer and follow the on-screen instructions to safely set up your new office suite.
Frequently Asked Questions
Why is someone still controlling my mouse after I disabled Remote Desktop?
The scammer likely installed a third-party remote access tool (such as AnyDesk, ScreenConnect, or TeamViewer) which operates completely independently of Windows Remote Desktop. You must find and uninstall these specific programs from your Control Panel to stop the unauthorized access.
Can I completely uninstall Windows Remote Desktop Connection?
Windows Remote Desktop Connection (mstsc.exe) is a core component of the Windows operating system and cannot be cleanly uninstalled through standard menus. However, ensuring the 'Enable Remote Desktop' toggle is switched off in System Settings completely blocks incoming connections.
Is it safe to use my computer for banking immediately after a scam?
No. It is not safe to log into banking or financial accounts until you have completely disconnected from the internet, removed all unauthorized remote software, and run a full system anti-malware scan to ensure no hidden keystroke loggers remain on your device.
