Ransomed PC User allowed remote access.

[Jonathan_60]

I have a computer that the user gave someone remote access to and he proceeded to do the following. SYSKEY turn on. Write protection on a partition of the drive that he created after formating the partition is still there.

 

[Ralston18]

If I understand your post correctly you should be able to copy off the data from the other partition(s).

Verify that files copied correctly and are readable via another computer.

Then use DBAN (Darik's Boot and Nuke) to wipe the drive clean.


After DBAN is finished just reformat the entire drive and re-use as you wish.