Neighbor got siskeyed

  1.    15 Jan 2017 #1

    Neighbor got siskeyed

    My neighbour fell for the Microsoft repair scam. When he wouldn't give the guy any money, he got zapped. Now when you try to boot you are stopped by a System Password window. He has W10 and I am trying to do the startup repair where you keep files intact. It's at 12% so far. Is the system likely to boot when the repair is done.
    My second thought was to try and open with Linux Live and retrieve files, will I be able to do that? Then, hopefully, I will use the media creation tool to reload W10. Can I do that?
      My ComputerSystem Spec

  2.    15 Jan 2017 #2

    Ransomware encrypts data and the malcontent wants you to pay them to decrypt the drive with a password. Restoring the computer may still not allow you to access the files. Booting from a Linux Live CD should allow you to find and copy the files to an external HDD, then on another computer, use the Media Creation Tool to make a USB or DVD Installer for Windows 10 then boot off of that and wipe the drive and reinstall Windows.
      My ComputerSystem Spec

  3.    15 Jan 2017 #3

    If it is ransom ware some can be decrpted but we need to know hat type it is a screenshot of the system password screen may help do you mean the normal login or something else like a bios password?
      My ComputerSystem Spec

  4. topgundcp's Avatar
    Posts : 2,438
    Ubuntu14.04x64 MintMate17x64 Win10Prox64
       15 Jan 2017 #4

    If you wish, you can try:

    1. Boot up with Windows Recovery disk or even with Linux.
    2. Navigate to: C:\Windows\System32\config\RegBack. All the files under this folder are the backup registry files.
    3. Copy them back to: C:\Windows\System32\config
    4. Reboot the PC
      My ComputerSystem Spec

  5. essenbe's Avatar
    Posts : 11,485
    Windows 10 Pro and Windows 10 Pro Insider
       15 Jan 2017 #5

    Try booting into the installation USB created on another computer. Use the Repair my computer option and see if you have any restore points. DO NOT try to boot to the OS again. If you do not have recovery points or it does not work here's something else to try. Assuming they didn't also delete the backup registry or the attempted reboots did not overwrite it. You can try this, with a Linux live distro or with the Windows 10 recovery ISO (Windows 10 Recovery Tools - Bootable Rescue Disk)

    1.POWER OFF your PC immediately.
    2.Boot to external media of some sort (NOT your Windows installation) and navigate to the %SYSTEMROOT%\system32\config folder.
    3.Backup the registry hives in this folder to a temporary location. The files are:

    4.Navigate to %SYSTEMROOT%\system32\config\RegBack as mentioned earlier.
    5.Copy all registry hives from this folder (the same files as listed above) into the %SYSTEMROOT%\system32\config folder.
    6.Reboot the PC.
      My ComputersSystem Spec

  6.    16 Jan 2017 #6

    I re-formatted my neighbor's ruined hard drive on my W7 machine and I downloaded the Media creation tool. Is there a way to make a W10 rescue disk from my W7 computer? I tried making a rescue USB stick but it doesn't seem to work and it only takes me on a long trip around and around the Acer software but never gets to the USB with the creation tool.
    Last edited by lenberman; 16 Jan 2017 at 15:38.
      My ComputerSystem Spec


Related Threads
Hi All! When I look at update history I see *my* computer is failing an update to my neighbor's wi-fi printer. I can "see" his printer, but don't have authority to use it. Error: HP driver update for HP LaserJet Professional CP1520 Series PCL 6...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 00:56.
Find Us