1.    15 Jan 2017 #1
    Join Date : Aug 2015
    Posts : 75
    Windows 10

    Neighbor got siskeyed


    My neighbour fell for the Microsoft repair scam. When he wouldn't give the guy any money, he got zapped. Now when you try to boot you are stopped by a System Password window. He has W10 and I am trying to do the startup repair where you keep files intact. It's at 12% so far. Is the system likely to boot when the repair is done.
    My second thought was to try and open with Linux Live and retrieve files, will I be able to do that? Then, hopefully, I will use the media creation tool to reload W10. Can I do that?
    Len
      My ComputerSystem Spec
  2.    15 Jan 2017 #2
    Join Date : Jun 2016
    Los Angeles
    Posts : 1,043
    Windows 10 Pro

    Ransomware encrypts data and the malcontent wants you to pay them to decrypt the drive with a password. Restoring the computer may still not allow you to access the files. Booting from a Linux Live CD should allow you to find and copy the files to an external HDD, then on another computer, use the Media Creation Tool to make a USB or DVD Installer for Windows 10 then boot off of that and wipe the drive and reinstall Windows.
      My ComputerSystem Spec
  3.    15 Jan 2017 #3
    Join Date : Jul 2016
    Crewe Cheshire
    Posts : 1,466
    windows 10

    If it is ransom ware some can be decrpted but we need to know hat type it is a screenshot of the system password screen may help do you mean the normal login or something else like a bios password?
      My ComputerSystem Spec
  4.    15 Jan 2017 #4
    Join Date : Jul 2014
    San Jose, California
    Posts : 2,155
    Ubuntu14.04x64 MintMate17x64 Win10Prox64

    If you wish, you can try:

    1. Boot up with Windows Recovery disk or even with Linux.
    2. Navigate to: C:\Windows\System32\config\RegBack. All the files under this folder are the backup registry files.
    3. Copy them back to: C:\Windows\System32\config
    4. Reboot the PC
      My ComputerSystem Spec
  5.    15 Jan 2017 #5
    Join Date : Oct 2013
    NW Florida
    Posts : 9,490
    Windows 10 Enterprise and Pro/Windows 7 Enterprise/Linux Mint

    Try booting into the installation USB created on another computer. Use the Repair my computer option and see if you have any restore points. DO NOT try to boot to the OS again. If you do not have recovery points or it does not work here's something else to try. Assuming they didn't also delete the backup registry or the attempted reboots did not overwrite it. You can try this, with a Linux live distro or with the Windows 10 recovery ISO (Windows 10 Recovery Tools - Bootable Rescue Disk)

    1.POWER OFF your PC immediately.
    2.Boot to external media of some sort (NOT your Windows installation) and navigate to the %SYSTEMROOT%\system32\config folder.
    3.Backup the registry hives in this folder to a temporary location. The files are:
    A.SOFTWARE
    B.SYSTEM
    C.SAM
    D.SECURITYE.DEFAULT

    4.Navigate to %SYSTEMROOT%\system32\config\RegBack as mentioned earlier.
    5.Copy all registry hives from this folder (the same files as listed above) into the %SYSTEMROOT%\system32\config folder.
    6.Reboot the PC.
      My ComputersSystem Spec
  6.    16 Jan 2017 #6
    Join Date : Aug 2015
    Posts : 75
    Windows 10
    Thread Starter

    I re-formatted my neighbor's ruined hard drive on my W7 machine and I downloaded the Media creation tool. Is there a way to make a W10 rescue disk from my W7 computer? I tried making a rescue USB stick but it doesn't seem to work and it only takes me on a long trip around and around the Acer software but never gets to the USB with the creation tool.
    Len
    Last edited by lenberman; 16 Jan 2017 at 15:38.
      My ComputerSystem Spec

 


Similar Threads
Thread Forum
Solved Win10 tries to install update to my neighbor's printer
Hi All! When I look at update history I see *my* computer is failing an update to my neighbor's wi-fi printer. I can "see" his printer, but don't have authority to use it. Error: HP driver update for HP LaserJet Professional CP1520 Series PCL 6...
Windows Updates and Activation
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 10:03.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums