
Is there a way to somehow go into the computer's recent history and see exactly what was done, what was accessed? For example, is there a way to see whether certain personal files were copied or if any tracking software was installed?

I am also having him save his personal files to a hard drive and change some of his major passwords. I have a rudimentary understanding of this stuff so I remotely uninstalled Ultraviewer and ran malwarebytes and ccleaner. However, he can't say for sure that they didn't download anything. After about 15 minutes he figured something was up, disconnected the call, and turned off his computer.


As he describes it, the guy stayed on the phone with him talking about files that had been installed, problems with the network, and so forth. My dad tried to reach customer support for his printer and ended up calling a scam artist who convinced him to install Ultraviewer.
