Link to home
Start Free TrialLog in
Avatar of Dan Eckert
Dan EckertFlag for United States of America

asked on

Windows 8 hacked.

PC laptop with Windows 8 hacked by a foreign "faux help service" left the machine locked.  Will only start to safe mode, has no system restore settings available, will not go online.

Any solutions to fix problems or best just do a factory restore?
Avatar of John
John
Flag of Canada image

If you can get to Metro and then PC Settings, you can "Refresh your PC" . This will keep your documents but will remove Applications that did not come with Windows 8. This should work, but you will have to reinstall some things.

.... Thinkpads_User
SOLUTION
Avatar of Dan Craciun
Dan Craciun
Flag of Romania image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
When you say "locked";  you mean the computer won't boot -- they have reconfigured the machine to deny access, or they are presenting some custom software that refuses entry?

My suggestion would be to copy any important documents or other materials off the machine and do the factory restore.

It may be possible to defeat the lockout, if you can run tools to analyze the startup settings.
However,  it will always be doubtful whether the machine is clean  and can be trusted anymore, or  whether a configuration with covert persisting  custom malware  has been setup.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Please save your data and files from the safe mode, Just in case. Then, as Thinkpads_User advises: perform a Windows 8 refresh install.
Avatar of Dan Eckert

ASKER

thinkpads_user.

Can get to the Metro screen.  The click on Desktop goes to safe mode.  Tried Metro to PC Settings to "Refresh Your PC without effecting your files".  The first message said there was a problem refreshing your PC, no changes were made, check for solutions to the problem which takes it back to safe mode with no more answers.

Mysidia,  The computer will turn on & off, but only comes to safe mode.  No custom software that I can find to block entry.

There is no internet connection, either wifi or Ethernet.
It doesn't really matter if "Refresh" is working or not.

The machine was compromised and cannot be trusted anymore.
Do a hard reset (factory restore), preferably with a format first.
Any solutions to fix problems or best just do a factory restore?

Since you can get to Metro but Windows 8 Refresh will not work, then at this point, you need to back up and do a factory restore. Refresh is pretty much the last hope in a Windows 8 system.

Assuming you do this:

1. Do the factory restore.
2. Update all Drivers.
3. Update all Windows 8 updates.
4. Now go to Metro Windows Store and Update to Windows 8.1. Do this before installing applications.
5. Now Install Applications.
6. Now do all final updates and you should be done.

.... Thinkpads_User
I fixed it.

In metro went to msconfig.  The settings had been changed to "selective startup".  Changed back to normal and rebooted.

Came on in to Metro, went to the full desktop.  Got on line with wifi.

Now I will do a full cleaning and update to 8.1.

Darn foreign help desk, scammers going after little grandmothers.  They should be shot.
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I fixed it. ~DwEckert.

Great. You did it. :-)
Good help, as always.  Good suggestions got me thinking about other possibilities which lead to the solution.

Thanks.
@DwEckert - Thank you very much and I was happy to help.

.... Thinkpads_User