Hello friends,
My mom panicked and called a 1-888 number where an Indian man with an unremarkably American name convinced her to install a remote software. My mom started to get suspicious and woke me up when he started asking for bank info. I’m not too sure what he did when he got remote access, but I ran RKILL, Malware Bytes w/ Rootscan kit scan, and ADWCleaner8 . My mom alerted her banks and our phone provider, but aside from activating 2fa and resetting her bank passwords is there anything else I should get her to do? Any way to educate her on what links are safe to click and such?
Format and reinstall. Get it back to how they like it. Then take away their admin rights. Whenever the need something changed you remote in and elevate to admin with your account. I did this with my dads system 10 years ago and not once virus/malware incident since.