This is completely inconsistent. If your hard drive was really erased, then you would:
1. Not have access to your Bitcoin client to take a screenshot of your address list.
2. Not have access to your operating system to determine how the Trojan horse was inserted.
3. Not have access to your wallet.dat file to determine how the electronic coins were redeemed.
How do you explain this?
Poor guy. Lost his coins now this....