Windows 10: Tech scam hit neighbor

Here is the picture, thanks. Len

 

Well, here's what the manual for that service tag shows:



Should be able to locate the jumper by opening the case and using dead reckoning and this write-up.

 

Is this the very first screen that shows when you boot up?
--- If it isn't what is the very screen that shows up?




I'm wondering if the core issue is a BIOS password. Opinions please.
The password being requested is an administrative password and it's possible the issue is based on how the system has been configured using an administrator password.
I just checked my Dell BIOS and there is an entry for a Supervisor Password, not an administrator password.
--- Even if Dell's default's BIOS password could work, it won't in your case if the issue is entering the proper administrative password.
In essence the issue could amount to an unknown administrator account password vs. an unknown BIOS password.

 

Hi,
Not any bios shot I've ever seen
Please read the tutorial

Remove the hdd and see if the message appears.
You will be directed directly to the bios.

 

It appears to be solely down to the bios password, as here.....

https://www.dell.com/community/Deskt...de/m-p/4506716

 

It's called "admin password" on my Dell:

 

Hi Bree, I agree "It appears to be solely down to the bios password"
I must have missed it but I wasn't aware that there was a BIOS upgrade involved.

I did go into my DELL BIOS and created a Supervisor password. Saved the changes and booted into Windows.
Went back into my DELL BIOS and entered a wrong password: the only thing that happened was the Supervisor password was requested: entered the correct password and all went well.

Is it possible for that scumbag to update and enter the BIOS and create an administrator password w/o having to restart the computer remotely?

 

I posted earlier that Dell has a utility (CCTK) that can set the admin password from Windows. Since the attacker had remote access to Windows then they could set the password without restarting the computer.

 

Have a look at the article here and hope it helps

How to Remove Syskey in Windows Explained with Examples

 

Yes you did. Thanks for that reminder.

 

Doesn't have to be a bios upgrade, just setting a bios password would be sufficient.

The example I found happened to run into that screen because they a) had an automated script to update the bios for their corporate PCs, b) had previously set a bios password and c) wanted to find a way to run their script without having to visit each PC and type the password.

 

Hi,
Should still be able to remove the hard drive and then clear cmos as been described that should remove any password
Do not reinstall the hdd until it has been cleaned *Smile

 

Is this why Dell's default password didn't work: because there are 2 passwords involved?
The normally created BIOS administrator password which is probably the one the default password would fix but then an additional password to lock the BIOS in which case there isn't a recovery procedure?
To me there should be a way to deal with a Setup Unlock setup issue even if the computer needs professional help.

In my Dell BIOS, setting up passwords is in the Security category if I remember correctly.
But I didn't see a method to lock the BIOS: that's ok with me as it's something an average user shouldn't get involved in: that should be at a professional person's level.

 

The option to lock the BIOS with the admin password is called the "setup lockout" and is present in my Dell BIOS under the Security tab.

The "master password" that Dell provides is independent of the admin/system password and should be able to bypass any user-set password.

It's not clear to me exactly what Dell provided or what the OP did. But the procedure to input the master password - Dell System prompts for a Hard Drive (HDD) or BIOS password | Dell US
- isn't exactly obvious.

 

Thank you for that information.