"Start up Password Required"

popups out of the blue..never take it for granted disconnect the internet .Make following changes
In the web browsers delete all history list.
in browser "options" remove all search engines not used..
reset the home page..
in "add ons" install adblock plus and adblock popup
clean out all temporary internet files
check in control panel "programs and features" uninstall any programs that relate to the intruder site.
You still want to access your dads pc use the great program "Teamviewer" its safe and easy to setup
you click the main "green tab" and get your dad to download "join remote control session" He sends you id and pass code and you login

Thanks SAMURIA. The "CTRL + C" didn't do anything. The CTRL-ALT-DEL didn't allow him to do anything either. He took it to Mailboxes, Etc and had them pack it up and mailed to me. Hope to get it by Wednesday or Thursday.

Thanks for the reply JOHNEBADBAK. I have him set up running VIPRE Internet Security 2016, Malwarebytes (paid version), and CCleaner. He is familiar with these programs, and he doesn't know what he downloaded or accessed to infect his computer. We both have I.T. backgrounds, but your suggestions are duly noted.

I had just upgraded that machine from Windows7 Pro to Windows 10, last month, before I drove all the way across the state of NC to deliver and install it for him. I made sure all his data was transferred to this computer when I replaced his older computer, so I know it was working fine for the past month.

I smiled at your suggestion to use TEAM VIEWER. I agree that it is a wonderful program for viewing another computer, however, He powers on his computer and gets to a LOGIN screen that he did not install. He doesn't have the ability to login to TEAM VIEWER. In my business, most of my customers call me after they lose their ability to connect to the internet, or login, so TEAM VIEWER, and all these TV ads for "Tech Assist" are all B.S. since the end-user can't even get logged in , or onto the internet. LOL. :)

These articles sound like what you are currently experiencing.

Found them doing a search and the procedure for removing this is pretty much the same on other posts relating to this problem. There is a tool you can use to help make removal a bit easier mentioned in this post.

http://triplescomputers.com/blog/cas...ansom-lockout/

Can you go into safe mode & do a system restore to an earlier time? Preferably the 2nd or 3rd restore point past the time of the incident.

This scammer proceeded to actually follow through on his promise of the PC “not working” if they don’t agree to have him fix it, and so in a few quick steps, behind the user’s back, he enacted what is known as SysKey encryption on the SAM registry hive.

SysKey encryption is a little-known feature of Windows which allows administrators to lock out access to the Security Accounts Manager (SAM) registry hive so that login specifics cannot be stolen and the PC cannot be accessed without knowing the proper credentials. The problem is, unlike other scams, there is no way around the problem; you can’t simply remove the password, as the actual SAM hive has been encrypted entirely by the process.

Other articles on this:

BEST FIX: Remove Start Up Password in Windows 7/8 and 10

Remove a startup password before account screen - General Security

Mountain Geek said:

My father is running a 23 inch H-P All-In-One computer running Windows 10, with 8 GB of RAM memory and a 1TB hard drive.
Today he called me and told me that he turned on his computer, and a black screen is displayed with a WHITE message box in the middle of the screen. The message in the box is titled START UP PASSWORD. The text of the message says "This computer is configured for a Start Up Password " Then it has a blank spot to type in the password.

Yesterday, he received the message that the computer was infected and NOT to turn it off. He was supposed to call a number listed on the screen. The phone number, and a mailing address are in Las Vegas. The guy he spoke with wanted money, so my father told him to "F.U." and hung up. Then he turned off the computer.

My father is 10 hours away, and is thinking of mailing the computer to me to fix.
Any ideas on how to get around this error message?

Mountain Geek

Hi.
I fixed this for someone recently. It's the SysKey password, which is required before booting into Windows. These scammers usually put it on your system after you've let them login to "fix" things, but refused to pay them. If the computer has not been turned on too many times since the infection, it can be fixed. Once you get the computer, please post a message here. :)