Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

SysKey Password Screen Removal (Have Password)


  • Please log in to reply
2 replies to this topic

#1 Mikesp03

Mikesp03

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:59 AM

Posted 24 October 2017 - 04:36 PM

This is a tough one, I have been looking online for a little while on how to remove this.  I have the password to the syskey box.  I know what the password is, I can get passed this screen and log in.  However I can not find instructions to disable this password screen from coming up being as I know the password for it.  Anyone able to help on this issue? Only things I can find are to restore the registry using a command prompt, however this computer has had the password applied a while ago, how the user got the code I am not sure, but since we have the password is there a way to disable the pop up each boot? Any help would be greatly appreciated.

Mike



BC AdBot (Login to Remove)

 


#2 JohnC_21

JohnC_21

  • Members
  • 24,657 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:59 AM

Posted 24 October 2017 - 04:52 PM

I'm not sure but I believe that entering a password for Syskey has now encrypted the SAM hive. See the below link on setting it up where the password window is no longer shown at startup. From step 4 go to step 6.

 

https://www.sevenforums.com/tutorials/243880-syskey-set-startup-password-lock-unlock-windows.html



#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,937 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:59 AM

Posted 25 October 2017 - 05:56 AM

Does the password box look like this?

syskey.png

If so, see these related topics for solution suggestions:Windows 8/8.1 users can refer to the instructions (methods 4-6 or Shift+F8) in How To Access Advanced Startup Options in Windows 8 or 8.1

Windows 10 users can refer to the instructions from Security Colleague Demonslay335 in this topic.

You can either boot the system to an external OS, or connect the drive to another computer, and use the trick with restoring the registry SAM from the REGBAK folder. We've done it successfully a dozen times on customer's machines.


Some types of malware will modify the Master Boot Record (MBR) so that it displays a message indicating your computer has been encrypted and that you will be unable to access your data unless you pay a ransom to get a password. If the password box looks similar to those below, then refer to the Encrypted Boot Ransomware Support Topic.

ransomware.jpg
.
the-nastiest-of-all-ransomware-mamba-enc
.
bios-pass.jpg
.
C8hC4oWXkAA-Rxg.jpg
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users