Time-sensitive. If you are mid-incident, do the first 1-2 self-help steps below immediately, then book a session.
Security · Fix
Think You've Been Hacked? Lock It Down in Under an Hour
If you think your computer has been hacked, the right move is to act fast and act right — not panic. Real compromise requires immediate containment: cut the network, change the right passwords in the right order, find and remove what the attacker installed, check what they accessed, and harden the machine so it does not happen again. A CyberITEX security tech can be on a screen-share with you within minutes and walk you through the entire response. Most incidents are containable in a single session.
$150 $79 per 30-minute session · No contract · You watch every action
Fast response
Typical response within minutes during business hours.
Encrypted CyberDesk session
End-to-end encrypted. Removable at session end. You watch the whole time.
No contract, no upsell
$79 for the session. If we cannot help, we tell you upfront.
Try this first
Real, useful steps to try before you book. If they do not resolve it, the next sections explain what is actually wrong and how a remote session fixes it.
- 1
Disconnect from the internet
Unplug ethernet, turn off WiFi. This stops anything in progress (data exfiltration, ransomware encrypting more files, attacker maintaining a session).
- 2
Do not turn the computer off
Powering off destroys forensic evidence (memory artifacts, active connections, malicious processes). Disconnect from the network, but leave the machine on for diagnosis.
- 3
From a different device, change critical passwords
Email first (Microsoft 365 / Gmail), banking next, then cloud storage. Use a separate device — your phone or a different computer — that is not the suspected one.
- 4
Note what made you think you were hacked
Suspicious popup? Email from yourself? Bank alert? Unusual activity? Write it down. Tell us when we connect — it tells us what kind of compromise to look for.
What is actually going wrong
Real compromise (versus false alarms) usually comes from one of: clicking a phishing link and entering credentials on a fake login page, downloading and running malware disguised as a software installer or attachment, granting "remote access" to someone claiming to be Microsoft or Apple support (the popup scam), reusing a password that was leaked from another service, or — rarely — a vulnerable internet-facing service on your network. False alarms also exist: scary popups telling you to call a number are themselves the scam, you do not have a virus from seeing one. We always check both: was there an actual breach, and how. Knowing how it happened is essential to making sure it does not happen again.
What we do in a 30-minute session
Through CyberDesk we run a structured incident response: snapshot of running processes and network connections, check of recent file modifications, scan for known malware and persistence mechanisms (scheduled tasks, startup entries, services), audit of recent sign-ins to your Microsoft / Google / banking accounts, review of installed programs for the past 30 days, and verification of email rules and forwarding (a common attacker trick). If we find compromise, we contain it: kill malicious processes, remove persistence, change the right passwords in the right order, enable MFA where missing, and harden the machine. If we do not find compromise (often the case with scam-popup victims), we tell you that too — clearly. You leave the session knowing what happened and that the machine is safe.
CyberDesk encrypted remote session
One-click connect. No software stays on your machine after the session unless you choose to keep it.
You stay in control
See your screen the whole time. End the session in one click. We document what we did when the session ends.
Why trust us with this
Important: we are CyberITEX, a managed security service provider. We are not the popup that told you to call a number. If you got here from a popup or phone call telling you to "call Microsoft" or "call Apple support" — that was a scam, and we can verify that for you in the session. Real incident response is methodical and transparent. You watch every action. We document what we did. No upsell, no pressure.
FAQ
A popup said my computer is infected and gave me a number to call. Was it real?
No. Microsoft, Apple, and your antivirus do not show popups telling you to call a phone number. Those popups are 100% scams. The popup itself does not infect you — but if you called the number or installed software they told you to install, you may have a real problem. Either way, we can verify in a 30-minute session and remove anything they planted.
I got an email saying my account was hacked and they have my password. Real?
Usually a sextortion / extortion scam using a password leaked years ago in a breach. Annoying but not a current hack. We can confirm by checking your account sign-in logs and current security posture during the session.
How do I know if I was actually hacked?
Real signs: unauthorized purchases or sign-ins on your bank/email/cloud accounts, files you did not create or did not delete, programs you did not install, antivirus disabled by something other than you, contacts receiving emails or DMs you did not send. We check all of these in the session.
Can you recover encrypted files if I have ransomware?
Honest answer: usually no, unless you have backups. Modern ransomware uses unbreakable encryption. Our priority in a ransomware case is containment, identifying what was compromised, securing other accounts before they spread, restoring from backups if available, and reporting to authorities. We can talk you through the realistic options before you do anything irreversible.
What does the session cost given the urgency?
Same $79 / 30-minute pricing as standard sessions. Security incidents often need a follow-up to verify nothing returns — that is included in the same session if possible, or we book a short follow-up.
Related fixes
Browse allSecurity
Ransomware Attack? Don't Pay — Call Us First
Files encrypted by ransomware? Get a CyberITEX security tech immediately. We contain, recover where possible, and prevent re-infection. $79 / 30-min.
Fix itSecurity
"Microsoft Security Warning" Popup? It's a Scam — We'll Verify
Got a Microsoft security warning popup with a phone number? It is a scam. CyberITEX verifies your computer is clean. $79 / 30-min.
Fix itAccount
Locked Out of Your Microsoft Account? Recover Access Fast
Cannot get into Microsoft 365 / Outlook / Teams? CyberITEX walks you through the right recovery path. $79 / 30-min remote session.
Fix itReady to get this fixed?
Send us a quick description and a CyberITEX technician will respond fast. $79 per 30-minute session, no account or contract required.