I am a software developer based in Western Canada. A few years ago, I was working on MS Server 2k with only internet on but with McAfee firewall installed. I got up for a coffee and when I got back I saw that the on-screen keyboard was up and some one was clicking the keys. When I sat down, but before I clicked the mouse or keyboard or even sat my coffee down, it disappeared. How do I detect whatever it was? (I had purchased the system from a consultant who was gone.) I used McAfee firewall and regularly scanned for virus, etc. Was it a driver? Concerted attack?