Windows Scam - now locked by Startup password

[scud]

Hi
I have a client laptop, who was caught by a telephone scam. They logged into his pc with Teamviewer, eventual he smelled a rat and shutdown the pc, now it asks for a Startup password.
System is Windows 10.
Had tried googling, but nothing for Win10
Any ideas, or know of a company in Cape Town who can reset the password ?

thanks

 

[dj_jyno]

Colleague's wife was caught by the same scam. Use a startup disc and roll back to a system restore point that was created before the syskey password was enabled.

 

[scud]

shot , fingers crossed , restoring now

 

[Beachless]

I used to use OPHCrack for this sort of thing but it hasn't been updated recently, there are however others around if you search. I'm just not sure which work for win10.

 

[TheJman]

Oh did I have fun with these guys... kept one of the phone for about an hour (it was a lazy sunday!)... let's just say it started off with me not knowing how to turn on a computer..

 

[scud]

Shoo, managed to restore Ok
Apparently these guys delete all restore points, given enough time

 

[dj_jyno]

Shoo, managed to restore Ok
Apparently these guys delete all restore points, given enough time

Whew - your client dodged a bullet there. I was also lucky enough that they didn't have time to delete the restore points.

 

[AstroTurf]

I got a laptop 2 years back some of these guys got hold of. Would not even boot (she shut it down while they were doing something to the bios I think).

 

[killerbyte]

How to change a Windows 7/8/8.1/10 password in 5 minutes

1. Grab a Windows 7/8/8.1/10 DVD or USB
2. Boot from the disc/USB and go to recovery options
3. Open up Command Prompt (If you use the wrong Windows disc you can still get to command even though it will bitch at you)
4. Navigate to C:\Windows\System32
5. Now we want to backup utilman; so use this command: copy utilman.exe utilman.exe.bak
6. Now we want to replace utilman; use this command: copy cmd.exe utilman.exe
7. Now reboot into Windows
8. Click the Ease of Access icon on the login screen
9. Now we use the "net user" command to change the user's password. For this I will use the username "bob" and I will use the password "builder"
So the command will be: net user bob builder
Hit enter, close the cmd window and then login with the new password.

 

[SYNERGISED]

How to change a Windows 7/8/8.1/10 password in 5 minutes

1. Grab a Windows 7/8/8.1/10 DVD or USB
2. Boot from the disc/USB and go to recovery options
3. Open up Command Prompt (If you use the wrong Windows disc you can still get to command even though it will bitch at you)
4. Navigate to C:\Windows\System32
5. Now we want to backup utilman; so use this command: copy utilman.exe utilman.exe.bak
6. Now we want to replace utilman; use this command: copy cmd.exe utilman.exe
7. Now reboot into Windows
8. Click the Ease of Access icon on the login screen
9. Now we use the "net user" command to change the user's password. For this I will use the username "bob" and I will use the password "builder"
So the command will be: net user bob builder
Hit enter, close the cmd window and then login with the new password.

Yup, I'ved used this method many times. Thou I usually replace one of the Accessibility tools.

 

[dj_jyno]

Yup, I'ved used this method many times. Thou I usually replace one of the Accessibility tools.

Won't work in this case. Syskey locks you out at a point before you can select Ease of Access options.