help for vulnerable person falling for Microsoft tech scam

Hi Guys

Hope you can help as I have a few questions, first what happened. My son 1 year ago, my son fell for the scam of " M/S infected pc" and he rang a number, they offered to help for £20 so he gave bank details and was scammed for £499 and a second time for £199 later in year, which I managed to claw back.

At the time, I did a reformat and got him back to normal, but 2 weeks ago, this happened. He booted up to find pc frozen, and a number to ring, he did this but no bank details given, just left him with frozen screen, so now my questions. After reading several Google reports on subject, it is happening big style and if the user gives permission for "remote assistance" apparently, they leave "something" on his pc to cause this freeze and promote their number to ring.

1-if I do a reformat to put it back to factory settings, will that remove whatever has been left on pc.
2-if I manage (and remember how) to clean it, is there any way the "baddie" can return remotely.
3-I can tell him how to change passwords, even get a new debit card, what else can I do.
4-I suppose it makes sense for me to apply remote assistance to his pc as we live 30 miles apart, any comment.

He is bringing his laptop here today, so any relies would be gratefully welcome, also if it helps, I do have an Hitachi 250 gb hard drive.

Hi there

1) Block all credit / debit cards
2) get Bank(s) to send new one(s) - visit branch or phone - check number is legit.
3) Wipe computer clean
4) download Ms Media creation tool.
5) create bootable USB - Rufus is usually a good tool for that.
6) install clean windows.
7) install macrium Free and make bootable media.
8) image computer - i.e back it up with Macrium -- Image - don't clone Disk.

Now if any time there's this type of Ransomeware scam do the following :

1) Immediately switch off machine -- don't power down gracefully.
2) disconnect from Internet - if you can turn entire router off so even wifi won't work.
3) boot the Macrium restore USB
4) restore your windows image
5) now you can turn on router and re-connect to internet.

Take clean backups regularly !! that 100% avoids these problems.

If some of these topics seem complex just google a bit further - to explain the whole kybosh in detail would make this post far too long.

Cheers
jimbo

Jimbo

WOW! what a quick and condensed reply, although I am a reasonably experienced user, I cannot take all that info in, so I will do further Googles like you suggest. In the meantime though, will a reformat clear whatever he has left on pc, and does my memory serve me right in thinking, I use the disk that cam with son's pc to do a reformat.

Thanks again

dalchina

And thanks to you also, I have not opened those links yet, will do shortly, in meantime, my last question to Jimbo, memory tells me that me previous reformats just needed me to boot up once disk was inserted in tray.

Maybe your links will explain all.

dalchina

1-do I need to open/use the 3 links
2-can I do all suggested on my pc to a usb, ready to use on son's pc

Find a flash drive that you can format ( > or = 8 GB)
No disks are needed
A windows 10 iso is free:
https://www.microsoft.com/en-us/soft...load/windows10
Make the iso on a computer that is working properly and has no question of malware.
Use the iso to clean install Windows 10 on the problematic computer.

As I was JUST looking for a clean/empty USB stick, I came across one that I have marked Recovery, see attached, am wondering if this is one I did for my W10 ?