Relative got scammed by 'Windows' cold call - how to ensure computer is safe?

Bored

How do I go about reinstalling Windows? The PC is about 8 years old so I have no memory of whether it came with a disk or not, but I definitely don't have it now.

sillygoose

1st think they do is direct people to look at the Windows Event Viewer log, on virtually any system this shows some 'normal' errors due to left overs from past programs, unneeded drivers etc. They tell people this is a sign of virus infection and as most people have never looked at this in their life they believe it (we are all told computers are infallible so 'errors' must mean a problem right?)

Then they try to get you a website to download the cure.. (logmein or remote access permission etc)

From the sounds of it they didn't get this far with your Mum. I wouldn't panic just yet. I would run a check with Malwarebytes, run updates and scans with your antivirus.

Bored

That's what I'm hoping, but I'm still feeling paranoid since I don't know exactly what she clicked or did whilst on the phone.

Malwarebytes scan running at the moment.

macman

Look in Control Panel>Programs and see what software has recently been installed.
There's no evidence that they have done anything other than make her open Event Viewer in order to show scary 'viruses'.
If you don't have the OS install disks then you can't do a reinstall, but you could possibly do a Factory Restore after you have backed up all your data.
I'd settle for a full MBAM and AV scan first (assuming a decent one is installed).

JasX

If you want to go the reformat route a good start would be confirming the make and model, which version of windows its running and whether or not you have an intact windows license sticker on the PC somewhere with a readable license key (don't post the actual key).

you can gauge how easy that route will be then.

(eg major manufacturer like dell - all drivers readily available in one place online etc etc and probably not even needing the license sticker would be a better place to start from than say.... unknown brand, no sticker, god knows what hardware is in the thing or what drivers it might need )

Bored

It's a hp pavilion (can't find the exact model written anywhere) running XP home edition. I've found the product key on written on the side.

Bored

Malwarebytes full scan just finished and came back clear, as did the Avast antivirus scan.

Notmyrealname

Bored wrote: »

Malwarebytes full scan just finished and came back clear, as did the Avast antivirus scan.

Doesn't mean that you're home safe. You need to find a good app to hunt for rootkits.

Personally if she only uses it for internet stuff and a bit of word processing I'd shove Linux Mint on it.

londonTiger

dont let kids and old people use an account with admin privelages

set them up to use a limited account which does not have installation or system modification privelages

bod1467

Did she definitely use Chrome? Maybe these scammers directed her to use Internet Explorer? Have you checked its history too?