I have a friend that fell for the phone scam where the person over the phone says they are from Microsoft and need to take control of your computer so they can get known viruses off. These calls are apparently coming from India. Well long story short, the person claiming to be Microsoft created another administrative user account named "Windows" and change the password of the original user account. I was able to reset the password, clear recent installs (seemed they had gone through logmein), rand Tdsskiller and Combofix and everything seemed great. Then I get a call about two hours later and their computer was back to the way it was before I removed everything. Does anyone know a fix for this besides reformatting?