Win 10 won't boot and now requires a password

The customer gave the scamers access to the PC and its now locked with What looks like the XP Syskey lock screen. There are reports the Password are 123 or 1234 or abcd. But that all failed. If you have this problem:


THIS IS FOR WINDOWS 7 ONLY, MAY WORK ON OTHER OS!!!!
I have repaired the syskey issue when created by scam call from “Windows 7 Tech Support” in windows 7. I repaired customers computers (1 32-bit and 1 64-bit) successfully, To remove following the steps below:
1.     Boot from windows 7 install cd.
2.     When the Install Windows page appears, click Repair your computer to access system recovery options.
3.     Run System Restore to last point before syskey password blocked access. (This will fail, but must be done). Click run system restore again (this will take you back to the options list)
4.     Open Command Prompt from the options list.
5.     Open Regedit (Type regedit into the command prompt). Regedit will open.
6.     Navigate to: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa, and change 'SecureBoot' value to 0.
7.     HKEY_LOCAL_MACHINE \SAM\SAM\Domains\Account Change F value to 0000
8.     Reboot and Login
This has worked for me on two machines. After reboot I ran anti Spyware, Ad-Aware and Hitman to confirm, found 68 items on Super-Anti Spyware, 5 more on ad aware and no further detection's on Hitman. The PC now runs fine with not Lockouts or Passwords.

If you cannot log on normally, press and hold Shift and then restart to get into safe Mode. Run the Repair from Safe Mode

I turned legacy boot on...tried to boot into safe mode...no joy...
Then turned legacy boot off...back into secure boot...

Now I get a screen...no boot device...I go into system diagnostics and I'm not seeing any options to re-image back to factory settings...

Did you try Safe Mode?

Going from bad to worse...this is a new HP all in one...I cracked open the case to pull the HD out so I could image it (Macrium)...
And in the process I cracked the glass screen....now I got to send it to HP to repair...

But I still cannot boot....

Jason...thanks...but I cannot boot far enough to get to this password screen to try the passwords you suggest...

Experienced...Shift and power on won;t work as I get a screen says...Boot device not found....But BIOS...(sorry that's what I call it)
recognizes the HD...

Thanks for the update. Recover the documents and then ask HP to reimage when they repair the screen.

Experienced....I got a good image of this HD...
HD back in the PC now...

Will try Media Creation...

Since you have a backup, you can reimage with the Media Creation link.

Follow these steps in order to change or disable your computer's password:

1. Download Hiren Boot CD and burn it to a DVD or put it on a USB drive
2. Restart and boot from either the DVD or USB drive. It's CLI and not GUI so, just go through it.
3. Follow the guide from Hiren's website.

Jason....this is the problem I got...
http://triplescomputers.com/blog/casestudies/solution-this-is-microsoft-support-telephone-scam-computer-ransom-lockout/

Syskey password...

Introducing Malwarebytes Anti-Ransomware Beta
https://forums.malwarebytes.com/topic/177751-introducing-malwarebytes-anti-ransomware-beta/

Thanks and I trust HP was able to help you.

Only thing HP is doing is replacing the screen I cracked...$325.00...but I got everything working again just fine...

Thanks for the update.