Gray box appears asking for a password before login

[johnrobert]

Client opened a web page that could not be closed down with a number to call for help
she called but did not give them her credit card seems like they remoted in
Now when Windows turns on just before login a gray box appears asking for a password
it's not a bios password
they did this and we do not know the password I guess you have to call them with a credit card for that

I tried system restore a couple of times

This is it I will look for regback

http://triplescomputers.com/blog/ca...pport-telephone-scam-computer-ransom-lockout/

 

[Markverhyden]

Picture? Is it syskey?

 

[GTP]

Have you tried Offline NT Password reset?

 

[NviGate Systems]

More than likely syskey.

Regback is located in c:\windows\system32\config\regback

Or in shadow copies/system volume info if they are still intact.

 

[johnrobert]

Thanks will try password reset tonight and then regback

 

[johnrobert]

tried the reset password did not work
copied files from Regback into config folder with Linux boot disk and now able to login and it is fixed