Terryl

Ransomware

7 posts in this topic

ID: 1   Posted (edited)

OK, I have a customer that was hit by some nasty ransomware, I have tried every known scan I can think of and also several sites to try and ID this one, but nothing has helped, anyone have an idea on this one?

All I get when booting up in to Windows 10 is this.

58cf6f28ba4ad_Ransom002A.jpg.4336a2d640aa6a8961394eea6497fba3.jpg

 

Have tied every password known for this PC and zip, after 3 tries it re-boots.

 

I'm just about to dump this one in the river, any help would be appreciated.

Edited by Terryl

Share this post


Link to post
Share on other sites

So no one has any ideas on how to fix this one???

Share this post


Link to post
Share on other sites

Hi Terryl,

This is not a ransomware, but a Syskey scam. Was your customer called by some "technical support" and/or did he give remote access to anyone for support purposes?

Share this post


Link to post
Share on other sites

Nope, no one asked for any remote connection, but he did see a message that popped up saying his PC was infected and to call a number.

 

So this may not be ransomware, if so how to fix it?

Share this post


Link to post
Share on other sites

He failed for a technical support scam from what I can see. I've never tried to remove Syskey to be honest. If you boot into the Advanced Boot Options, select "Repair Your Computer" and then "Restore to a previous point", can you do a system restore to an earlier date?

Share this post


Link to post
Share on other sites

I can't get past the password screen, all it does is reboot the PC, but I can run the hard drive on my test PC and see if I can fix the SAM, if this is related to that.

Share this post


Link to post
Share on other sites

Sorry for the late reply. Even when you boot in the "Repair your computer" mode, you're still prompted the Syskey login?

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.