Windows 7 Locked after scam call - SYSKEY

Anonymous
2014-07-09T06:15:35+00:00

I have had a couple for customers fall for the "This is So and So from Windows 7 Tech support, we have detected malicious software on you PC. The customers have given the scamers access to the PC and its now locked with What looks like the XP Syskey lock screen. There are reports the Password are 123 or 1234 or abcd. But that all failed. If you have this problem:

THIS IS FOR WINDOWS 7 ONLY, MAY WORK ON OTHER OS!!!!

I have repaired the syskey issue when created by scam call from “Windows 7 Tech Support” in windows 7. I repaired customers computers (1 32-bit and 1 64-bit) successfully, To remove following the steps below:

1.     Boot from windows 7 install cd.

2.     When the Install Windows page appears, click Repair your computer to access system recovery options.

3.     Run System Restore to last point before syskey password blocked access. (This will fail, but must be done). Click run system restore again (this will take you back to the options list)

4.     Open Command Prompt from the options list.

5.     Open Regedit (Type regedit into the command prompt). Regedit will open.

6.     Navigate to: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa, and change 'SecureBoot' value to 0.

7.     HKEY_LOCAL_MACHINE \SAM\SAM\Domains\Account Change F value to 0000

8.     Reboot and Login

This has worked for me on two machines. After reboot I ran Super-anti Spyware, Ad-Aware and Hitman Pro to confirm, found 68 items on Super-Anti Spyware, 5 more on ad aware and no further detection's on Hitman Pro. The PC now runs fine with not Lockouts or Passwords.

Hope this helps everyone with this problem.

MICROSOFT / WINDOWS 7 SUPPORT WILL NEVER RING YOU UNLESS YOU HAVE REQUESTED THEM TO DO SO!!!!!!!!!!!!!!!!

Windows for home | Previous Windows versions | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

64 answers

Sort by: Most helpful
  1. Monkey57 3,535 Reputation points
    2017-02-21T01:27:12+00:00

    Sorry, you did not understand my post.

    Other quicker alternatives may be available to copy your data.  And then clean install the device;  to return it to - a safe, secure, stable state; or properly destroy the drive, afterwards, without clean installing.

    Please consider taking the device to a local technician.

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2017-02-21T01:15:45+00:00

    "We have a computer club"-> get to know Linux and become active in the computer forensics/security community.

    My question is, why remove the hard-drive and attempt to change the SAM, when other quicker alternatives may be available to copy your data, and clean install the device;  to return it to a safe, secure, stable state.  (Including a local technician) 

    One of the most common SysKey codes, scammers use, is in a video on the referenced link (maybe ask on his youtube-site the common codes).  Unfortunately, at this time I can not name it, and it may not work anyway.

    The system is not trustable, once you make the modification or guess the code, without a clean install.

    See Don's post regarding how to remove stubborn screws ("Vise grips.... bit is the proper size..."), check the laptop MFG website on what is required, to replace the Hard-drive.

    Can't do a clean install or get into the SAM as we can't even get into Safe Mode.  I downloaded and burned 2 ISO programs, made the CD's and neither would work. She doesn't want the computer, it's older, she's getting a desktop and wants her personal files.  I would've loved to put Linux on and get into something like that, but my husband had been seriously ill for over 10 years, passed 4.5 years ago and I am now in my 70's and trying to cut down on work. I do have several disk for Linux systems, but just never had the time to get into it. We just closed the club because no one would volunteer for positions.

    Thank you for trying to help!

    Was this answer helpful?

    0 comments No comments
  3. Anonymous
    2017-02-20T22:15:17+00:00

       I want to stop scammers/blackmailers access to users computers and users data, and passwords from a Tech Support scam.... see my many posts in answers....

    Consider going to the youtube link i posted, and look for some of the common syskey codes scammers use today.  

    I am not wanting to mess with the Sam, I want files she wants saved off. Don't even need it, I'm just taking her Documents and if it's in my external drive I don't need to have any codes. The components are going to a local company that takes them and recycles what they can for schools! I will keep the hard drive or wipe it before I take it up.

    As for the site, I went there, wasted my time watching two videos about messing up a scammer. That did not apply to what I'm doing and went to the blogs and nothing that would help me get these screws loose.  I think it's great what you guys are doing against the scammers, but that's not what my question was about and I get calls everyday about scammers and what should they do, most are smart enough to call me and ask me what to do before they do anything. We have a computer club here and I teach and that's one thing I'm always harping on to them to avoid! This person was not a club member.

    Was this answer helpful?

    0 comments No comments
  4. Don Varnau 19,930 Reputation points Volunteer Moderator
    2017-02-20T22:13:22+00:00

    All I want to know is a way to get 4 really tight screws on the laptop case out. I don't normally do laptops!

    I've opened up numerous Acer laptops. A screwdriver with the correct bit and a sufficiently large handle always did the trick.


    I'm looking for one with a larger handle.

    Vise grips clamped to the shaft or handle of a screwdriver whose bit is the proper size. If it's a small screwdriver I'd look for smallish vice grips.

    Don

    Was this answer helpful?

    0 comments No comments
  5. Anonymous
    2017-02-20T22:03:08+00:00

    All I want to know is a way to get 4 really tight screws on the laptop case out. I don't normally do laptops!

    I've opened up numerous Acer laptops. A screwdriver with the correct bit and a sufficiently large handle always did the trick.

    I'm looking for one with a larger handle. After my Hubby pasted I had the son come and get all the stuff out of his shop and kept only what I thought I needed. Got the little bits but if I can't find a bigger handle by this evening will go bug some neighbors and see if they have anything, Maybe their stronger muscle will do it too!

    Thanks for the idea.

    Was this answer helpful?

    0 comments No comments