Windows 10: "Start up Password Required" Solved

Page 1 of 2 12 LastLast
  1.    02 Sep 2016 #1

    "Start up Password Required"


    My father is running a 23 inch H-P All-In-One computer running Windows 10, with 8 GB of RAM memory and a 1TB hard drive.
    Today he called me and told me that he turned on his computer, and a black screen is displayed with a WHITE message box in the middle of the screen. The message in the box is titled START UP PASSWORD. The text of the message says "This computer is configured for a Start Up Password " Then it has a blank spot to type in the password.

    Yesterday, he received the message that the computer was infected and NOT to turn it off. He was supposed to call a number listed on the screen. The phone number, and a mailing address are in Las Vegas. The guy he spoke with wanted money, so my father told him to "F.U." and hung up. Then he turned off the computer.

    My father is 10 hours away, and is thinking of mailing the computer to me to fix.
    Any ideas on how to get around this error message?

    Mountain Geek
      My ComputerSystem Spec

  2.    02 Sep 2016 #2

    Welcome to the forum. Its hard to say not seeing it it could be ransom ware that could encrypt all the hd or it could be a trick. On the password screen try pressing cntl and c a few times if that doesnt work try cntl alt and del see if you can bring up taskamanger which you may then be able to kill the software thats asking for password.

    It is a scam and giving access to the pc will result in stealing passwords etc.
      My ComputerSystem Spec

  3.    02 Sep 2016 #3

    teamviewer


    popups out of the blue..never take it for granted disconnect the internet .Make following changes
    In the web browsers delete all history list.
    in browser "options" remove all search engines not used..
    reset the home page..
    in "add ons" install adblock plus and adblock popup
    clean out all temporary internet files
    check in control panel "programs and features" uninstall any programs that relate to the intruder site.
    You still want to access your dads pc use the great program "Teamviewer" its safe and easy to setup
    you click the main "green tab" and get your dad to download "join remote control session" He sends you id and pass code and you login
    Last edited by johnebadbak; 02 Sep 2016 at 22:57. Reason: more info
      My ComputerSystem Spec

  4.    03 Sep 2016 #4

    Thanks SAMURIA. The "CTRL + C" didn't do anything. The CTRL-ALT-DEL didn't allow him to do anything either. He took it to Mailboxes, Etc and had them pack it up and mailed to me. Hope to get it by Wednesday or Thursday.

    Thanks for the reply JOHNEBADBAK. I have him set up running VIPRE Internet Security 2016, Malwarebytes (paid version), and CCleaner. He is familiar with these programs, and he doesn't know what he downloaded or accessed to infect his computer. We both have I.T. backgrounds, but your suggestions are duly noted.

    I had just upgraded that machine from Windows7 Pro to Windows 10, last month, before I drove all the way across the state of NC to deliver and install it for him. I made sure all his data was transferred to this computer when I replaced his older computer, so I know it was working fine for the past month.

    I smiled at your suggestion to use TEAM VIEWER. I agree that it is a wonderful program for viewing another computer, however, He powers on his computer and gets to a LOGIN screen that he did not install. He doesn't have the ability to login to TEAM VIEWER. In my business, most of my customers call me after they lose their ability to connect to the internet, or login, so TEAM VIEWER, and all these TV ads for "Tech Assist" are all B.S. since the end-user can't even get logged in , or onto the internet. LOL.
    Last edited by Mountain Geek; 03 Sep 2016 at 18:27.
      My ComputerSystem Spec

  5.    03 Sep 2016 #5

    Your best bet may be to get a bootable AV cd and run that as you cant load windows 15 Free Bootable Antivirus Tools (September 2016)
      My ComputerSystem Spec

  6.    03 Sep 2016 #6

    Thank you. I'll just pull the hard drive out of his All-In-One, and connect it as a "slave drive" to one of my stand-alone computers, scan it, as well as check for any RKILLS, and TDSSKILLS. Worse case, I'll just backup his entire profile and save it, then wipe and re-image the hard drive. Then I can reinstall all his data. I just hate that i have to download/reload VIPRE and OFFICE2016. I was just hoping someone had run across this recently, and had a faster answer. I'll take care of it, though. Thanks.
      My ComputerSystem Spec


  7. Posts : 64
    Multiple systems on multiple computer
       03 Sep 2016 #7

    Does the computer even boot into windows or does the message comes up right after the computer is turned on?? if so, than there is a problem with the BIOS (UEFI). The "virus" might have installed a password in the BIOS....

    Just a thought though..
      My ComputerSystem Spec


  8. Posts : 14,969
    Win 7 32, Win 7 64 Pro, Win 8.1 64 Pro, Win 10 64 Education Edition
       04 Sep 2016 #8

    These articles sound like what you are currently experiencing.

    Found them doing a search and the procedure for removing this is pretty much the same on other posts relating to this problem. There is a tool you can use to help make removal a bit easier mentioned in this post.

    http://triplescomputers.com/blog/cas...ansom-lockout/

    Can you go into safe mode & do a system restore to an earlier time? Preferably the 2nd or 3rd restore point past the time of the incident.

    This scammer proceeded to actually follow through on his promise of the PC “not working” if they don’t agree to have him fix it, and so in a few quick steps, behind the user’s back, he enacted what is known as SysKey encryption on the SAM registry hive.

    SysKey encryption is a little-known feature of Windows which allows administrators to lock out access to the Security Accounts Manager (SAM) registry hive so that login specifics cannot be stolen and the PC cannot be accessed without knowing the proper credentials. The problem is, unlike other scams, there is no way around the problem; you can’t simply remove the password, as the actual SAM hive has been encrypted entirely by the process.
    Other articles on this:

    BEST FIX: Remove Start Up Password in Windows 7/8 and 10

    Remove a startup password before account screen - General Security
    Last edited by Borg 386; 04 Sep 2016 at 19:37.
      My ComputerSystem Spec


  9. Posts : 12,192
    W10Prox64
       04 Sep 2016 #9

    Mountain Geek said: View Post
    My father is running a 23 inch H-P All-In-One computer running Windows 10, with 8 GB of RAM memory and a 1TB hard drive.
    Today he called me and told me that he turned on his computer, and a black screen is displayed with a WHITE message box in the middle of the screen. The message in the box is titled START UP PASSWORD. The text of the message says "This computer is configured for a Start Up Password " Then it has a blank spot to type in the password.

    Yesterday, he received the message that the computer was infected and NOT to turn it off. He was supposed to call a number listed on the screen. The phone number, and a mailing address are in Las Vegas. The guy he spoke with wanted money, so my father told him to "F.U." and hung up. Then he turned off the computer.

    My father is 10 hours away, and is thinking of mailing the computer to me to fix.
    Any ideas on how to get around this error message?

    Mountain Geek
    Hi.
    I fixed this for someone recently. It's the SysKey password, which is required before booting into Windows. These scammers usually put it on your system after you've let them login to "fix" things, but refused to pay them. If the computer has not been turned on too many times since the infection, it can be fixed. Once you get the computer, please post a message here.
      My ComputerSystem Spec

  10.    08 Sep 2016 #10

    Thank you


    simrick said: View Post
    Hi.
    I fixed this for someone recently. It's the SysKey password, which is required before booting into Windows. These scammers usually put it on your system after you've let them login to "fix" things, but refused to pay them. If the computer has not been turned on too many times since the infection, it can be fixed. Once you get the computer, please post a message here.
    THANK YOU SIMRICK, and BORG 386. I received the computer today, and (after having read your post and checking into some of the hyperlinks and other posts, from BORG 386) I tried "123" as the password, and it worked. Naturally, I did update and scan the computer, as well as going into Control Panel and seeing if it had "SysKey" settings. I rebooted, and everything seems to be working well, once more. THANK YOU. I hope others are able to use this info. Mountain Geek Computers
      My ComputerSystem Spec


 
Page 1 of 2 12 LastLast

Related Threads
Today, 25 Aug 2016, my Windows 10 PC loaded Outlook 2013 and at the same time I received the following message: http://fud.community.services.support.microsoft.com/Fud/FileDownloadHandler.ashx?fid=b960dbbe-3771-4f4b-ae4d-4f19fc6c2ca5 Thinking the...
So I have this weird thing happening in my relatively fresh install of Windows 10. Whenever I search for "Check for Updates" or "Windows Update settings" on the search box of the start menu, I get the results that I want but if I press enter or...
Anyone knows why when i remove "Send To" & "Pin To Start" context menu entries from registry, windows automatically creates new one's after restart. Never had such problem in 8, and it's driving me nuts!!!!! Thanks for help!
Hello how can I delete "saved password" and "form data" of microsoft edge manually ?! after too much search in google .... I trid to delete some value of the following registry address HKEY_CURRENT_USER\SOFTWARE\Classes\Local...
Here's a screenshot of "Taskbar and Start Menu Properties" dialog from a fresh clean install of Windows 10 Pro x64 27606 As you can see, despite its name, it does not have a tab for "Start Menu". I remember that Preview versions of Windows 10...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 12:03.
Find Us