Personally I would reformat, Identity theft is just to hard to fix. I would also take a hard look at the passwords used, make sure all passwords have 8-10 random characters no dictionary words and include some caps and numbers as well as symbols whenever possible. Is there any one else that may of had unattended access to his computer, service person, housekeeper, other family member, friend?
Amos