I'm looking for some advice because my mom recently had a bad experience with a scam. She accidentally let someone remote into her computer, and thankfully, my sister walked in about an hour later and they turned it off. They took it to a local tech store, and thankfully they wiped it clean. Now, however, I noticed that when I check for user accounts in computer management, I can't find the option to look at accounts. Also, there are two unusual shared folders: one named 'Remote Admin' labeled ADMIN$ and another called IPC$ tagged Remote IPC. Are these concerning? Should I delete them? Thanks for any help you can provide!
2 Answers
Make sure you checked that all her important info, like financial accounts, is safe. It sounds like she may have divulged personal details to the scammer. I’d recommend posting in a scams-focused forum for more specific advice because securing her accounts is critical. Hopefully, her laptop just got erased without leaving anything behind.
If there's nothing left on her laptop after the wipe, the best move might be to reinstall Windows 11 fresh from a USB drive. It's actually pretty straightforward, and there are tons of tutorials out there to help you through it!

Yes, she has already contacted the credit bureaus and changed all her passwords. Her bank is also monitoring for suspicious activity.