Windows 10: popup asking me to call windows? now asking me to restore computer

i don't know how to format the drive. can i click restore

 

btw if there was personal documents or if you had a text file with passwords to different site on the hd yea some write there passwords into notepad and saves it on the hd well he has that info so if thats the case you need to change passwords for your email or what ever. *Sad

 

The problem with restore is this, if your HD is partitioned into several bits say a C: and a D: drive i will bet my last dollar any backdoors or loggers will not be on C: which gets restored but as to restoring or not i will not tell you what to do someone else might be better at helping with that decision but as i said if you have a C: and a D: the loggers sniffers what ever will not be on C: only

 

You can download the lates windows from Download Windows 10 put it on dvd boot from it delete all paritions and let it do a clean install

 

tx all. might just go to staples and have them do it. these hackers are horrible

 

If it is a Syskey, it is not a Virus. Syskey is a 'feature' in Windows dating back to before Windows XP. If you have a Windows 10 USB, you should try a System Restore to a time before this happened. If you don't have one, use the link @Samuria provided. If you have no restore points or it does not complete, try this:

For this procedure I would try downloading Kyhi's boot ISO file and burn it to a CD or USB and use it to complete the following:

1.POWER OFF your PC.
2.Boot the CD/USB created from Kyhi's ISO from the link above (NOT your Windows installation) and navigate to the %SYSTEMROOT%\system32\config folder.
3.Backup the registry hives in this folder to a temporary location. The files are:
A.SOFTWARE
B.SYSTEM
C.SAM
D.SECURITY
E.DEFAULT
4.Navigate to %SYSTEMROOT%\system32\config\RegBack as mentioned earlier.
5.Copy all registry hives from this folder (the same files as listed above) into the %SYSTEMROOT%\system32\config folder.
6.Reboot the PC.

 

err sorry *Sad still 2 complicated 4 me. i can't just click restore?

 

You can try this from the installation USB/DVD System Restore Windows 10
but, none of this is really complicated. You are just replacing one file with another. The only thing is doing it from outside the Operating system, which is easy.

 

i can't just click on restore? went to advanced startup options and chose option 6. the screen that shows looks different than the screenshot provided. is that ok?

 

ok i keep trying 2 upload the pic but it's not working

 

it says automatic repair. ur pc didn't start correctly. press restart 2 restart ur pc, which can sometimes fix the problem. yo ucan also press advanced options 2 try other options to repair your pc. restart on left, advanced options on right

 

This older link (with a more recent addendum) describes your problem EXACTLY- http://triplescomputers.com/blog/cas...ansom-lockout/

he enacted what is known as SysKey encryption on the SAM registry hive.
SysKey encryption is a little-known feature of Windows which allows administrators to lock out access to the Security Accounts Manager (SAM) registry hive so that login specifics cannot be stolen and the PC cannot be accessed without knowing the proper credentials. The problem is, unlike other scams, there is no way around the problem; you can’t simply remove the password, as the actual SAM hive has been encrypted entirely by the process. If your Windows installation has had SysKey activated, you’ll see the following message - Startup Password
This computer is configured to require a password in order to start up. Please enter the Startup Password below.
The window which appears looks like this (your EXACT screenshot)::
ATTACH=CONFIG]136077[/ATTACH]

The ONLY solution is to find a clean copy of the registry hives from before this occurred. This scammer knew this, however, and as such, he took an extra step to block any repair or recovery attempts: he*deleted all System Restore points on the machine, which normally house backup copies of the registry hives.
Here’s how I fixed the problem without having to reinstall Windows. {cont'd in article}

 

thank you! how do i do this? "Check to ensure that the folder %SYSTEMROOT%\system32\config\RegBack exists. This is the folder which contains the last known good backup of the hives following a boot. "

 

I would try the SAM reset file linked in the addendum which will operate independently to reset the SAM password-
Addendum A (update 6/26/2015):
Thanks to FUScammers for pointing out this more involved, alternate method of actually*removing*the SAM encryption.
Download this file (click link) and burn the .iso to a CD.
Boot to the CD on the affected system.
Follow the instructions to select the proper system drive and partition (NTFS is the partition type you are looking for).
Type the path to the registry files (it’s most likely Windows/system32/config).
Choose option 1 for Password reset (sam system security).
Choose option 2 for Syskey status &*change.
Confirm that you wish to disable Syskey, then quit and confirm writing the new changes to the hive.
Reboot the PC and check.

 

is a memorex dvd+R sufficient for the CD?