Resolved Friend Hit by "Drive By" IT Opportunists

Helping a friend - Toshiba Laptop with Windows 7 - who got a call from an "IT Consultant" and agreed to pay their fee. They said they were going to clean her computer and get it running top notch. She gave them access to her computer through Screen.Connect.WindowsClient.exe. It appears that they downloaded "caffeine.exe" that simutlates keystrokes every so often to keep the computer active. Also found mozybackup.exe which they may have downloaded - I'm not familiar with that app.

The computer appears to be running OK now but it seems to be filled with junk they installed. She would now like to get her computer back to where it was before they got hold of it. My first thought was to try a System Restore to a time before they started. My other thought was just to run it through Broni's shop and let him clean it up. Any thoughts?

 

Will go there shortly. Thanks Pete.