So last night I get a call from my sister telling me when she got home she went to her room where my dad has his desk and PC he works at. Well when she walked in she said she noticed the screen was black and said screen sharing. When they tried to shut down the computer the mouse was being controlled by someone and kept clicking cancel. They were finally able to force shut it down. I told them to unplug the computer from the internet and keep it off until I can come over tomorrow. Apparently this happened in a 30min period and although they couldnt see what this person did or was doing my sister randomly had a feeling she should check her amazon and when she did she noticed the person placed an order for $900 for I believe it was uber eats gift cards. This morning they also found out the guy logged onto my parents chase account and attempted to add himself as a recipient on their zelle quickpay. He also used my sisters cred card points to make the amazon purchase. Fortunately, he wasnt able to do anything with zelle/QP, and my sister cancelled the amazon on time and got all her credit card points back.
What should I do when I get there tomorrow? Aside from checking for any newly installed programs like any screen sharing programs, what else should I check for? Also my sister saved the name and address of where the delivery was being sent to(although I assume it was a fake name, and the address was probably a neighbors or something to not use his own). This is a very scary close call, but we've also never seen or heard of something like this. typically for screen share you have to accept a screen share. Didn't know someone could just remotely activate screen sharing on someone computer.
What should I do now? should I take the computer in to a computer tech, like geek squad? restore the computer to its last saved point? Is there a way they can use our wifi to do the same to one of our other computers or phones? or is this souly on that PC? would getting my parents an antivirus like McCafee be smart?
Please guys I could really use some help. This was extremely scary.