Need to reinstall windows 10 due to a remote access hack.

[pb25]

I had a remote IT service for several years. They contacted me last week 3/18/2020 that they were going out of business and needed to refund my money. They got into my laptop (took a webcam picture of my office/spare bedroom), got int my bank account. I found some of the remote access software and removed it. Ran several scans and came back clean. However, I don't trust that I got everything. Recommendation is that I reformat and reinstall Windows 10, programs and restore user data. Need guidance. Thanks, PB25

[WAWood]

@pb25 

You're absolutely correct in being concerned that you did not get everything.  Once someone gains access, they can hide all kind of stuff that you would not find no matter how hard you look -- which means, they can even had hidden it inside your personal data.

If I were you, I would do the following:

1) insert a USB stick and save off all my files

2) Use this information from the Win10 forums to save off my current Win10 drivers and copy them to a USB stick: https://www.tenforums.com/tutorials/68426-backup-restore-device-drivers-windows-10-a.html

3) Download and install CloneApp and use it to save my settings.

4)  Use this link to download and create Win10 install media on a USB stick: https://www.microsoft.com/en-us/software-download/windows10

5) Boot your PC from the Win10 media and do a clean install.  When you get the screen to enter the product code, look down near the bottom of the window for the link you can check to skip that

6) Once you're up and running in Win10 again, insert your USB stick of saved drivers and restore those.  Those will include HP drivers that MS is not going to install

7) Insert the USB stick containing your settings and use CloneApp to restore them

😎 Insert the USB stick containing your files and run an antivirus check on it before you copy those files back onto your PC

Good Luck