Forum Discussion
WIndows 11 Pro Black Screen Update
Recently, I was working on my Desktop PC. My screen went black, and a message appeared: Windows Update in Progress. I immediately powered down my PC. I restarted it and contacted Microsoft Tech Support. I told them what happened. They told me it was a normal update. I explained it to them many times, but they insisted that it was a normal update. A week later, the screen went black again, and the same message appeared. This time, I let the PC update itself. While the system was "updating," I saw the cursor moving on the black screen. During the update, my bank sent me a text with a PIN number that I receive when I access the banking system. After that, the "update" finished. I found that someone had accessed my system. I immediately changed the passwords for all my important accounts. I contacted Microsoft again and explained what occurred. I was told again that it was a normal update. It was not a normal update.
I need to know if anyone else experienced this problem. I need to know what is causing it and how to stop it from happening again. I checked for viruses and malware and found nothing. I am running a VPN, and it still got through. I assume something on my system is allowing access. I was also using my laptop at the same time; it was running all the same updates and is set up the same way. It is
3 Replies
Your experience is extremely concerning, and you are right to be alarmed. While some aspects match known Windows update issues, the presence of the banking PIN code is a massive red flag that points to a sophisticated compromise.
Mark, thank you for responding. I have already changed all my passwords and enabled multi-factor authentication. I do backups daily, so I am covered.
I checked and found that ScreenConnect was running in the background. It took some time, but I deleted it. I don't know of anything else running in the background that can remotely access my PC.
I am a little gun-shy about contacting Microsoft Support. Microsoft Support told me multiple times that it was a normal update. I never got bad information from Microsoft Support before, but I guess there is always a first time.
Thanks again.
What you describe should be treated as possible unauthorized remote access, not assumed to be a normal Windows Update. A moving pointer and unexpected banking code do not prove the cause, but justify immediate containment. Disconnect Ethernet and Wi-Fi, stop using the PC for banking, and call the bank through its official number to review sessions and transactions. From another trusted device, change Microsoft, email, and financial passwords, revoke active sessions, and enable multifactor authentication. On the PC, check Settings > Apps and Task Manager > Startup for remote-support software you did not install, then update Windows Security and run Microsoft Defender Offline. Preserve screenshots and times, and review Protection history and Event Viewer. A VPN does not prevent remote-control malware. If access is confirmed or unexplained activity continues, back up personal documents only, reset or clean-install Windows, and involve Microsoft Support or a qualified incident responder.
