cancel
Showing results for 
Search instead for 
Did you mean: 
HeatherJordan1
Level 1
9 8 0 1
Message 1 of 20
514
Flag Post
HP Recommended

Solved!

Scam lockout

HP Stream laptop 14ax
Microsoft Windows 7 (64-bit)
Someone posing as Microsoft has remotely entered my laptop and put a startup password on it. Saying I had to pay $ to get the password. Is there anything I can do about this?
19 REPLIES 19
RA864
Level 2
16 14 0 1
Message 2 of 20
498
Flag Post
HP Recommended

Solved!

Scam lockout

Possibly, there are a couple of ways and it depends on if the scammer deleted your restore points or not. If they didn't try this.

 

  1. Reboot the PC and repeatedly press F8 to reach the Advanced Startup Options menu.
  2. Choose Repair your Computer from the menu.
  3. Cancel the automatic repair attempt and instead instruct the system to perform a System Restore to a date prior to the incident occurring.

 

0 Kudos
HeatherJordan1
Level 1
9 8 0 1
Message 3 of 20
475
Flag Post
HP Recommended

Solved!

Scam lockout

Nope that didn't work the apparently deleted the restore points
0 Kudos
Level 11
Level 11
2,487 2,428 301 922
Message 4 of 20
467
Flag Post
HP Recommended

Solved!

Scam lockout

Hi HeatherJordan1,

 

This is very unfortunate. You should never trust anybody who calls you first and tells you there is an issue with the computer. Many scammers delete restore points so yes, they won't work.

 

I do know lots of these cases happen and perhaps the only thing I can do is present you other forums dedicated to solving the "startup password" issue.

 

https://www.bleepingcomputer.com/forums/t/470753/remove-a-startup-password-before-account-screen/

 

http://triplescomputers.com/blog/casestudies/solution-this-is-microsoft-support-telephone-scam-compu...

 

Good luck,

kem579

0 Kudos
RA864
Level 2
16 14 0 1
Message 5 of 20
461
Flag Post
HP Recommended

Solved!

Scam lockout


@HeatherJordan1 wrote:
Nope that didn't work the apparently deleted the restore points

There are still several more ways to get in. The easiest is the program PCUnlocker. I haven't used it in ages but I guess it's still around. There were 2 or 3 versions and one of those was a free version so do a search for PCUnlocker download and try that. At this point there's not much to lose.

0 Kudos
HeatherJordan1
Level 1
9 8 0 1
Message 6 of 20
455
Flag Post
HP Recommended

Solved!

Scam lockout

Download it to where, since i can't get on that computer?
0 Kudos
RA864
Level 2
16 14 0 1
Message 7 of 20
449
Flag Post
HP Recommended

Solved!

Scam lockout

Sorry, I thought maybe you would have access to another computer so you could make a boot CD/DVD or USB.  Your best bet is to find someone willing to help you make a bootable drive.

0 Kudos
Level 11
Level 11
2,487 2,428 301 922
Message 8 of 20
434
Flag Post
HP Recommended

Solved!

Scam lockout

Hi HeatherJordan1 and RA864,

 

Unfortunately PC login bypass tools and password recovery tools will not work from my understanding of this issue. If I am correct this is a syskey encryption that requires either a system restore or a registry replacement.

 

I was hoping that there would be an HP Expert with experience of this kind, but I'm just going to have to resort to forums on registry fixes. Fixing the registry is risky.

 

I'm going to try and find a good article or step-by-step procedure.

 

In the meantime, please take a picture of what the password login looks like. I can then confirm if it is syskey encryption. Also try simple passwords like 1111, 0000, 1234, 12345, 123456. There are many people who are reporting that simply trying to guess the password works. 

 

This is why Microsoft removed syskey entirely in the latest Windows 10 update (Version 1709) because it is quite unsecure. 

 

Regards,

kem579

 

0 Kudos
Highlighted
RA864
Level 2
16 14 0 1
Message 9 of 20
423
Flag Post
HP Recommended

Solved!

Scam lockout

Maybe so but I've found that many of these Microsoft scams are amateurish and can be fixed. I would bet that it could be fixed with a Ubuntu disk and a few registry changes. Yes registry changes can be dangerous but I'll take a hosed disk any day over paying those bastards.
0 Kudos
HeatherJordan1
Level 1
9 8 0 1
Message 10 of 20
391
Flag Post
HP Recommended

Solved!

Scam lockout

Well currently nothing I have tried has worked so i let a friend with a little more knowledge of these things take it home for the night. We will see if he had any luck.
Thanks for all of the ideas, i appreciate the help immensely!
0 Kudos
† The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation