Page 1 of 2 12 LastLast
  1.    02 Sep 2016 #1
    Join Date : Sep 2016
    Posts : 5
    Windows 10

    "Start up Password Required"


    My father is running a 23 inch H-P All-In-One computer running Windows 10, with 8 GB of RAM memory and a 1TB hard drive.
    Today he called me and told me that he turned on his computer, and a black screen is displayed with a WHITE message box in the middle of the screen. The message in the box is titled START UP PASSWORD. The text of the message says "This computer is configured for a Start Up Password " Then it has a blank spot to type in the password.

    Yesterday, he received the message that the computer was infected and NOT to turn it off. He was supposed to call a number listed on the screen. The phone number, and a mailing address are in Las Vegas. The guy he spoke with wanted money, so my father told him to "F.U." and hung up. Then he turned off the computer.

    My father is 10 hours away, and is thinking of mailing the computer to me to fix.
    Any ideas on how to get around this error message?

    Mountain Geek
      My ComputerSystem Spec
  2.    02 Sep 2016 #2
    Join Date : Jul 2016
    Crewe Cheshire
    Posts : 1,389
    windows 10

    Welcome to the forum. Its hard to say not seeing it it could be ransom ware that could encrypt all the hd or it could be a trick. On the password screen try pressing cntl and c a few times if that doesnt work try cntl alt and del see if you can bring up taskamanger which you may then be able to kill the software thats asking for password.

    It is a scam and giving access to the pc will result in stealing passwords etc.
      My ComputerSystem Spec
  3.    02 Sep 2016 #3
    Join Date : Dec 2015
    Mount gambier S.A
    Posts : 2
    win10 pro 32bit

    teamviewer


    popups out of the blue..never take it for granted disconnect the internet .Make following changes
    In the web browsers delete all history list.
    in browser "options" remove all search engines not used..
    reset the home page..
    in "add ons" install adblock plus and adblock popup
    clean out all temporary internet files
    check in control panel "programs and features" uninstall any programs that relate to the intruder site.
    You still want to access your dads pc use the great program "Teamviewer" its safe and easy to setup
    you click the main "green tab" and get your dad to download "join remote control session" He sends you id and pass code and you login
    Last edited by johnebadbak; 02 Sep 2016 at 22:57. Reason: more info
      My ComputerSystem Spec
  4.    03 Sep 2016 #4
    Join Date : Sep 2016
    Posts : 5
    Windows 10
    Thread Starter

    Thanks SAMURIA. The "CTRL + C" didn't do anything. The CTRL-ALT-DEL didn't allow him to do anything either. He took it to Mailboxes, Etc and had them pack it up and mailed to me. Hope to get it by Wednesday or Thursday.

    Thanks for the reply JOHNEBADBAK. I have him set up running VIPRE Internet Security 2016, Malwarebytes (paid version), and CCleaner. He is familiar with these programs, and he doesn't know what he downloaded or accessed to infect his computer. We both have I.T. backgrounds, but your suggestions are duly noted.

    I had just upgraded that machine from Windows7 Pro to Windows 10, last month, before I drove all the way across the state of NC to deliver and install it for him. I made sure all his data was transferred to this computer when I replaced his older computer, so I know it was working fine for the past month.

    I smiled at your suggestion to use TEAM VIEWER. I agree that it is a wonderful program for viewing another computer, however, He powers on his computer and gets to a LOGIN screen that he did not install. He doesn't have the ability to login to TEAM VIEWER. In my business, most of my customers call me after they lose their ability to connect to the internet, or login, so TEAM VIEWER, and all these TV ads for "Tech Assist" are all B.S. since the end-user can't even get logged in , or onto the internet. LOL.
    Last edited by Mountain Geek; 03 Sep 2016 at 18:27.
      My ComputerSystem Spec
  5.    03 Sep 2016 #5
    Join Date : Jul 2016
    Crewe Cheshire
    Posts : 1,389
    windows 10

    Your best bet may be to get a bootable AV cd and run that as you cant load windows 15 Free Bootable Antivirus Tools (September 2016)
      My ComputerSystem Spec
  6.    03 Sep 2016 #6
    Join Date : Sep 2016
    Posts : 5
    Windows 10
    Thread Starter

    Thank you. I'll just pull the hard drive out of his All-In-One, and connect it as a "slave drive" to one of my stand-alone computers, scan it, as well as check for any RKILLS, and TDSSKILLS. Worse case, I'll just backup his entire profile and save it, then wipe and re-image the hard drive. Then I can reinstall all his data. I just hate that i have to download/reload VIPRE and OFFICE2016. I was just hoping someone had run across this recently, and had a faster answer. I'll take care of it, though. Thanks.
      My ComputerSystem Spec
  7.    03 Sep 2016 #7
    Join Date : Jun 2016
    North Carolina
    Posts : 64
    Multiple systems on multiple computer

    Does the computer even boot into windows or does the message comes up right after the computer is turned on?? if so, than there is a problem with the BIOS (UEFI). The "virus" might have installed a password in the BIOS....

    Just a thought though..
      My ComputerSystem Spec
  8.    04 Sep 2016 #8
    Join Date : Oct 2014
    In a house with a crazy cat trying to kill me
    Posts : 16,268
    Win 7 32, Win 7 64 Pro, Win 8.1 64 Pro, Win 10 64 Education Edition

    These articles sound like what you are currently experiencing.

    Found them doing a search and the procedure for removing this is pretty much the same on other posts relating to this problem. There is a tool you can use to help make removal a bit easier mentioned in this post.

    http://triplescomputers.com/blog/cas...ansom-lockout/

    Can you go into safe mode & do a system restore to an earlier time? Preferably the 2nd or 3rd restore point past the time of the incident.

    This scammer proceeded to actually follow through on his promise of the PC “not working” if they don’t agree to have him fix it, and so in a few quick steps, behind the user’s back, he enacted what is known as SysKey encryption on the SAM registry hive.

    SysKey encryption is a little-known feature of Windows which allows administrators to lock out access to the Security Accounts Manager (SAM) registry hive so that login specifics cannot be stolen and the PC cannot be accessed without knowing the proper credentials. The problem is, unlike other scams, there is no way around the problem; you can’t simply remove the password, as the actual SAM hive has been encrypted entirely by the process.
    Other articles on this:

    BEST FIX: Remove Start Up Password in Windows 7/8 and 10

    Remove a startup password before account screen - General Security
    Last edited by Borg 386; 04 Sep 2016 at 19:37.
      My ComputerSystem Spec
  9.    04 Sep 2016 #9
    Join Date : Apr 2015
    Posts : 12,592
    W10Prox64

    Quote Originally Posted by Mountain Geek View Post
    My father is running a 23 inch H-P All-In-One computer running Windows 10, with 8 GB of RAM memory and a 1TB hard drive.
    Today he called me and told me that he turned on his computer, and a black screen is displayed with a WHITE message box in the middle of the screen. The message in the box is titled START UP PASSWORD. The text of the message says "This computer is configured for a Start Up Password " Then it has a blank spot to type in the password.

    Yesterday, he received the message that the computer was infected and NOT to turn it off. He was supposed to call a number listed on the screen. The phone number, and a mailing address are in Las Vegas. The guy he spoke with wanted money, so my father told him to "F.U." and hung up. Then he turned off the computer.

    My father is 10 hours away, and is thinking of mailing the computer to me to fix.
    Any ideas on how to get around this error message?

    Mountain Geek
    Hi.
    I fixed this for someone recently. It's the SysKey password, which is required before booting into Windows. These scammers usually put it on your system after you've let them login to "fix" things, but refused to pay them. If the computer has not been turned on too many times since the infection, it can be fixed. Once you get the computer, please post a message here.
      My ComputerSystem Spec
  10.    08 Sep 2016 #10
    Join Date : Sep 2016
    Posts : 5
    Windows 10
    Thread Starter

    Thank you


    Quote Originally Posted by simrick View Post
    Hi.
    I fixed this for someone recently. It's the SysKey password, which is required before booting into Windows. These scammers usually put it on your system after you've let them login to "fix" things, but refused to pay them. If the computer has not been turned on too many times since the infection, it can be fixed. Once you get the computer, please post a message here.
    THANK YOU SIMRICK, and BORG 386. I received the computer today, and (after having read your post and checking into some of the hyperlinks and other posts, from BORG 386) I tried "123" as the password, and it worked. Naturally, I did update and scan the computer, as well as going into Control Panel and seeing if it had "SysKey" settings. I rebooted, and everything seems to be working well, once more. THANK YOU. I hope others are able to use this info. Mountain Geek Computers
      My ComputerSystem Spec

 
Page 1 of 2 12 LastLast


Similar Threads
Thread Forum
Starting Outlook 2013 message: OneDrive "An update is required"
Today, 25 Aug 2016, my Windows 10 PC loaded Outlook 2013 and at the same time I received the following message: http://fud.community.services.support.microsoft.com/Fud/FileDownloadHandler.ashx?fid=b960dbbe-3771-4f4b-ae4d-4f19fc6c2ca5 Thinking the...
Software and Apps
Can't click on "Check for Updates" "Windows Update settings" on Start
So I have this weird thing happening in my relatively fresh install of Windows 10. Whenever I search for "Check for Updates" or "Windows Update settings" on the search box of the start menu, I get the results that I want but if I press enter or...
Windows Updates and Activation
Can't Remove "Send To" & "Pin To Start" From Context Menu
Anyone knows why when i remove "Send To" & "Pin To Start" context menu entries from registry, windows automatically creates new one's after restart. Never had such problem in 8, and it's driving me nuts!!!!! Thanks for help!
Customization
Solved delete "saved password" and "form data" from microsoft edge manually
Hello how can I delete "saved password" and "form data" of microsoft edge manually ?! after too much search in google .... I trid to delete some value of the following registry address HKEY_CURRENT_USER\SOFTWARE\Classes\Local...
Browsers and Email
"Taskbar and Start Menu Properties" have no "Start Menu" tab anymore??
Here's a screenshot of "Taskbar and Start Menu Properties" dialog from a fresh clean install of Windows 10 Pro x64 27606 As you can see, despite its name, it does not have a tab for "Start Menu". I remember that Preview versions of Windows 10...
General Support
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 16:20.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums