Guide

How to check if someone can remote-control your Windows PC

Published

A dark Windows PowerShell window showing a check for remote control apps such as AnyDesk

Short answerRun Get-Process for AnyDesk, TeamViewer, RustDesk and UltraViewer, check winget list for installed copies, and read fDenyTSConnections to see if Remote Desktop is on. Uninstall anything you did not install and change your passwords from another device.

The most common scam call goes like this: "We are from Microsoft, your PC has a virus, install this app so we can fix it." The app is a remote control tool like AnyDesk or TeamViewer, and it often stays on your PC after the call. These three checks take about ten seconds.

Check 1: Is a remote control app running now?

PowerShell
Get-Process *anydesk*, *teamviewer*, *rustdesk*, *ultraviewer* | select Name, Path
Example output
Name      Path
AnyDesk   C:\Users\dev\Downloads\AnyDesk.exe

Nothing printed is the good result. A remote app running from your Downloads folder usually means someone asked you to run it, and it can still let them back in.

Check 2: Is one installed, even if it isn't running?

PowerShell
winget list | findstr /i "anydesk teamviewer rustdesk ultraviewer"
Example output
AnyDesk      AnyDesk.AnyDesk      9.0.5      winget

findstr with several words in one pair of quotes matches any of them, so one line checks all four. Also look in Settings > Apps > Installed apps for anything with "remote", "desk" or "support" in the name.

Check 3: Is Remote Desktop switched on?

PowerShell
Get-ItemPropertyValue 'HKLM:\System\CurrentControlSet\Control\Terminal Server' fDenyTSConnections

1 means Remote Desktop is off. 0 means it is on. If you never use it, turn it off in Settings > System > Remote Desktop. Windows Home editions can't accept Remote Desktop connections at all.

Didn't install it yourself?

  1. Uninstall it: winget uninstall AnyDesk.AnyDesk (use the ID from check 2), or from Installed apps.
  2. Change your email, bank and other important passwords from another device, such as your phone.
  3. If you gave anyone bank details or a one-time code, call your bank now.

Using AnyDesk on purpose with your own family is fine. The point is to know it's there.

On a Mac

Open System Settings > General > Sharing. Screen Sharing, Remote Management and Remote Login should be off unless you use them. Then check Applications for remote apps you did not install.

Remember

Real support never calls you first. Microsoft, your bank and your internet company don't phone you to fix a virus.

More quick tips

Keep reading
All guides →