yeah that was my thought. I don't have a sata, but I do have a compatible HD with a windows install laying around, so I put as much of her data as I could into

yeah that was my thought. I don't have a sata, but I do have a compatible HD with a windows install laying around, so I put as much of her data as I could into the cloud and maxed out a MS OneCloud 5gb for backup, then swapped drives. she couldn't handles the windows 10 upgrade, so I had to swap back, but I was thinking that keeping the drive as a backup/diagnostics would be best bet. Also, I wanted to replace the ram chips incase they persisted malware to them, but I was holding off to see how serious everyone on here thought it was. What is the windows equiv of stuff like: $ tcpdump $ ps aux ect. and the system level process directories like /Library/PrivilegedHelperTools /Library/LaunchDaemons ect. I guess, i'll just take a peak now. It would be worth spending an hour or so if I could know without a reasonable doubt that they did install malware. If I can't find something obvious, I'll still do clean install.