A friend has asked me to help her with her Acer Aspire 5734Z laptop running W7 HP. She was caught out by a very plausible confidence trickster who persuaded her to install TeamViewer10 and got her send money via online banking for a service. He then proceeded to empty her bank account. She has reported to her bank etc and they advised her to get help from an expert regarding her laptop and undoing the damage.
My initial thinking is to reset the laptop back to factory settings using the recovery partition, after backing up her data to a memory stick and scanning it for infection. Will this be safe enough, or could the recovery partition have been compromised too. Should I remove the hard disk and format and do a deep clean?
Any suggestions would be gratefully received.
Edited by hamluis, 14 June 2015 - 06:10 AM.
Moved from Win 7 to Gen Security - Hamluis.