NTRO downloading script on computer of domain investor

In another cybercrime of NTRO/tata on domain investor whose identity they have robbed, NTRO is downloading a script on the computer of the domain investor, whenever she connects to the internet.
NTRO controlled the laptops of the domain investor completely, diverting the internet connection , and when she switched to a desktop, they are now downloading a script
The script is residing in the ram of the computer, and moving the cursor randomly, resulting in spelling mistakes or errors