A friend (yes - honestly!) has allowed a scammer to have access to his win7 PC for 20 minutes and money has subsequently been taken from his Paypal account.
I've advised him to disconnect his PC from the internet until it's "clean" but I'd appreciate some advice on what is needed.
Would a complete re-install of Win7 be necessary?
Thanks
The first thing I would advise your friend is change all passwords of everything.
Use a known clean computer to do the password replacement.
Then your friend should notify all financial association of the passwords being stolen.
Then check all accounts for any strange things of any kind.
Then I would do a Clean Install. It would take forever to figure out what the intruder did to the computer and what little goodies they left behind.
Please read these tutorials by Brink and Gregrocker.
Disk - Clean and Clean All with Diskpart Command
Clean Install Windows 7
Clean Reinstall - Factory OEM Windows 7
Thanks, Layback Bear. I've read the articles but there are a couple of things (at least) that I'm uncertain about:
1. The pc has just one disk, but a full clean can't be done over the OS. How do I get round this?
2. To reload win7 all I have are the three recovery discs (DVDs) created when the pc was first set-up. Can these be used to reinstall Win7?
Thanks
The pc is a Dell Inspiron 660. According to Dell's website the pc can be reset to factory settings via the F8 button at start-up. Would this be sufficient to restore the pc to a safe state?
Setting to factory settings should bring your computer back to the way it was when it was bought. If that is okay with the owner I would try it. The intruder probably never went into that partition where your factory setting are.
When done I would still scan the computer with many security scans.
Did you read the tutorials I posted?
He should also phone the police and let them know he's been scammed right in front of his face and tell them who it was.
Yes, I read the tutorials - please see my second post.
It sounds as though the reset to factory settings option isn't 100% safe? It would be awful if my friend lost any further money.
Hi Boozad, Yes he has spoken to the police and passed them all the details. Lloyds bank and Paypal have also been informed.
At least he should get his money back as long as he can provide proof to Paypal.
You can create a bootable USB stick using an ISO image of Windows 7 instead of using any disks you have. These will include Service Pack 2 and will save some update time once installed. You'd have to download the relevant ISO from here then mount that to a USB stick following Part 2 of this tutorialWindows 7 USB/DVD Download Tool
Then move onto the links Layback Bear posted.
Paypal have made encouraging noises, but as he gave the scammer his password I'm not sure that they'll want to pay out. We'll see.
Thanks for the info regarding the bootable USB stick. I've had a quick look but it seems rather complicated.
Can the USB stick be created on my pc and then used to boot his?
Quote