You can try this from the installation USB/DVD System Restore Windows 10
but, none of this is really complicated. You are just replacing one file with another. The only thing is doing it from outside the Operating system, which is easy.
i can't just click on restore? went to advanced startup options and chose option 6. the screen that shows looks different than the screenshot provided. is that ok?
pic
ok i keep trying 2 upload the pic but it's not working
it says automatic repair. ur pc didn't start correctly. press restart 2 restart ur pc, which can sometimes fix the problem. yo ucan also press advanced options 2 try other options to repair your pc. restart on left, advanced options on right
This older link (with a more recent addendum) describes your problem EXACTLY- http://triplescomputers.com/blog/cas...ansom-lockout/
he enacted what is known as SysKey encryption on the SAM registry hive.
SysKey encryption is a little-known feature of Windows which allows administrators to lock out access to the Security Accounts Manager (SAM) registry hive so that login specifics cannot be stolen and the PC cannot be accessed without knowing the proper credentials. The problem is, unlike other scams, there is no way around the problem; you can’t simply remove the password, as the actual SAM hive has been encrypted entirely by the process. If your Windows installation has had SysKey activated, you’ll see the following message - Startup Password
This computer is configured to require a password in order to start up. Please enter the Startup Password below.
The window which appears looks like this (your EXACT screenshot)::
ATTACH=CONFIG]136077[/ATTACH]
The ONLY solution is to find a clean copy of the registry hives from before this occurred. This scammer knew this, however, and as such, he took an extra step to block any repair or recovery attempts: he*deleted all System Restore points on the machine, which normally house backup copies of the registry hives.
Here’s how I fixed the problem without having to reinstall Windows. {cont'd in article}
thank you! how do i do this? "Check to ensure that the folder %SYSTEMROOT%\system32\config\RegBack exists. This is the folder which contains the last known good backup of the hives following a boot. "
I would try the SAM reset file linked in the addendum which will operate independently to reset the SAM password-
Addendum A (update 6/26/2015):
Thanks to FUScammers for pointing out this more involved, alternate method of actually*removing*the SAM encryption.
Download this file (click link) and burn the .iso to a CD.
Boot to the CD on the affected system.
Follow the instructions to select the proper system drive and partition (NTFS is the partition type you are looking for).
Type the path to the registry files (it’s most likely Windows/system32/config).
Choose option 1 for Password reset (sam system security).
Choose option 2 for Syskey status &*change.
Confirm that you wish to disable Syskey, then quit and confirm writing the new changes to the hive.
Reboot the PC and check.
is a memorex dvd+R sufficient for the CD?
It also says about that download
If he has a UEFI file system, it is GPT system as well.In Windows 8, the GPT partition type makes the use of this utility impossible. However, you can still manually copy the hives to a supported filesystem (NTFS or FAT32), mount that filesystem instead, and follow the steps from there, then copy the hives back over the originals. I can confirm that this method does work and that even in Windows 8.1 recovery is possible using it.
I would be reluctant to download a file from a web site I know nothing about. Especially an article written for Windows XP. Most XP files do not run on Windows 10.
Quote