Jump to content

I am in dire straits, computer lock out


Go to solution Solved by AdvancedSetup,

Recommended Posts

I am stuck locked out, a virus has taken over the administrator account booted my guest and user account, which deleted my password. I have tried the command promoting don't have a password, I need to save family memories. What do it do?

Link to post
Share on other sites
  • Replies 62
  • Created
  • Last Reply

Top Posters In This Topic

Top Posters In This Topic

Popular Posts

Hello @Allenmrrill Sorry for the delay, I was caught up in another project.   Please go ahead and create a bootable USB thumb drive with Windows 10 to boot from Use the Media Creat

Create the Windows 10 USB thumb drive with the Window Media tool. I think you have already done that. Then download the FRST program onto the good computer Then insert the USB thumb drive in

Posted Images

  • Root Admin

Hello @Allenmrrill

Do you have access to another working computer?

It depends on what has happened to the computer.

We can help you build a USB boot disk if you have a 4GB or larger thumb drive to access the system.

If the computer has been infected with a recent encryption ransomware the chance are low of being able to recover your data if it's not been backed up but we won't know until we look.

 

 

Link to post
Share on other sites
  • Root Admin
Posted (edited)

Hello @Allenmrrill

Sorry for the delay, I was caught up in another project.

 

Please go ahead and create a bootable USB thumb drive with Windows 10 to boot from

Use the Media Creation Tool

https://www.microsoft.com/en-us/software-download/windows10

Have it burn the image to the USB thumb drive. It will need to be empty as Windows will format it to install the image.

Then place the final USB Windows installer into the affected computer and boot from it. Depending on what the system is it may have a hot key such as F2, F11, F12 etc to boot from the USB disk. If not then you may need to go in to the BIOS / UEFI settings and set it to boot from that disk.

Once there then Windows should be running enough to look around and we can run a scan to see what we can find with FRST

 

 

Please download Farbar Recovery Scan Tool and save it to a USB flash drive.

Note: You need to run the version compatible with your system.

You can check here if you're not sure if your computer is 32-bit or 64-bit

Plug the flash drive into the infected PC and start the computer into the Recovery Options for Command Prompt.

 

Windows 10
Please see
How to Start Windows 10 in Safe Mode with Command Prompt

How to Boot to Advanced Startup Options in Windows 10

 

Once in the Command Prompt:

  • In the command window type in notepad and press Enter.
  • Notepad opens. Under File menu select Open.
  • Select "Computer" and find your flash drive letter and close notepad.
  • In the command window type e:\frst (for x64 bit version type e:\frst64) and press Enter
  • Note: Replace letter e with the drive letter of your flash drive.
  • The tool will start to run.
  • When the tool opens click Yes to the disclaimer.
  • Place a check mark on Addition.txt
  • Press the Scan button.
  • It will make a log (FRST.txt) and (Addition.txt) on the flash drive. Please attach those to your reply.

 

Please be careful switching the USB to the other computer. From the Recovery / Safe Mode it should be very difficult to infect the thumb drive but better safe than sorry.
Make sure the other computer is running up-to-date antivirus software and real-time protection.

 

Thanks

 

 

 

 

Edited by AdvancedSetup
updated information
  • Thanks 1
Link to post
Share on other sites
  • Root Admin

Not if you can't login.

If you open Notepad to view where your have the USB thumb drive and where you copied it to you should be able to find it.

Open notepad and File Open then My Computer and show me a screen shot of that

 

Link to post
Share on other sites
  • Root Admin

Please try the following

In the X:\Sources>  type in the following and press the Enter key

DIR  D:\*.EXE  /S

 

Show me the results.

By the way. Your E: drive is almost certainly your Windows installation based on the size of the disk.

 

Link to post
Share on other sites
  • Root Admin

Pull the D: drive out of the Bad computer.

Place it into the Good computer

Copy the FRST64.exe program to the USB thumb drive on the good computer.

Pull it out of the good computer and place it back into the bad computer

Then run the FRST64.exe program and click on the SCAN button

 

Link to post
Share on other sites
  • Root Admin

Okay, as I mentioned earlier. I've been off work now for over 7 hours. I'm going to bed.

Will check back on you tomorrow.

Run the FRST scan and get me these logs please.

 

  • FRST.TXT
  • ADDITION.TXT

 

Thanks

 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.


Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.