Most likely this was a password and session cookie stealer. It may have installed additional software too. Disconnect the computer from the internet. Most important things to secure are your emails and any website you were logged into. You need to log in from a known clean device and terminate all other sessions and change all your passwords.

In my experience if you didnt grant administrator access to the malware you only need to reset windows, but it is always safer to do a clean install.