Once a remote-access scammer has had administrator control, no scan can guarantee removal.
What to do
- Disconnect from the internet and unplug peripherals you don't trust
- Back up only documents and photos (no executables) to an external drive
- Factory-reset the device or do a clean OS reinstall from official media
- Change every saved password from a different, known-clean device before signing back in
Was this guide helpful?
Know someone who needs this? Send them the guide.
JD
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers