F5F Stay Refreshed Software Operating Systems Microsoft contacted...

Microsoft contacted...

Microsoft contacted...

Pages (2): 1 2 Next
G
GavCrafters
Member
68
11-16-2020, 07:21 PM
#1
Yes indeed... the well-known "Microsoft" reached out. My family computer had been receiving users who struggled with basic operations. One day, they received a scam call from someone with a thick Indian accent. They claimed the system was compromised or infected. Their goal was to intimidate the user into giving access, then lock the machine and demand payment via credit card or PayPal for unlocking. I had the device in hand and was asked to repair it. Fortunately, I received permission to perform a full format. The drive showed no files—just Skype, Firefox, Flash plugin, and bookmarks. It functioned solely as an internet tool. When I connected it to my system, scanned for viruses, spyware, or malware, nothing was detected. Since no charges were made, the locking mechanism remained intact. Upon restarting, the screen displayed a message I’d never seen before—Windows-style but with odd spacing around "Password." This hinted at a possible error from Microsoft. When I pressed Ctrl+Alt+Delete, it didn’t work. The account wasn’t blocked, and Safe Mode revealed no issues. The registry showed a locked-out SAM (Security Accounts Manager) entry. There was no way to bypass it without the password. I couldn’t reset it with standard tools. Accessing files required plugging another system’s drive, assuming it wasn’t encrypted. I also didn’t have a decryption certificate. The situation was serious, but I managed to restore the system using System Restore. Everything functioned afterward. Now I’m investigating further. I didn’t notice any remote software installed or System Restore removed. What caught my attention was the presence of Microsoft Readiness App—an older version displayed on my desktop. It might have been used to trigger the lockout. It seems this tool could be part of a corporate setup, possibly for enterprise users. The fact that it required admin privileges suggests it was meant for business accounts. It’s possible an account was compromised or stolen from a company, with the information sold on the black market. Either way, I’m relieved the system is operational now. In case things get worse, I could recreate Vista from scratch.
G
GavCrafters
11-16-2020, 07:21 PM #1

Yes indeed... the well-known "Microsoft" reached out. My family computer had been receiving users who struggled with basic operations. One day, they received a scam call from someone with a thick Indian accent. They claimed the system was compromised or infected. Their goal was to intimidate the user into giving access, then lock the machine and demand payment via credit card or PayPal for unlocking. I had the device in hand and was asked to repair it. Fortunately, I received permission to perform a full format. The drive showed no files—just Skype, Firefox, Flash plugin, and bookmarks. It functioned solely as an internet tool. When I connected it to my system, scanned for viruses, spyware, or malware, nothing was detected. Since no charges were made, the locking mechanism remained intact. Upon restarting, the screen displayed a message I’d never seen before—Windows-style but with odd spacing around "Password." This hinted at a possible error from Microsoft. When I pressed Ctrl+Alt+Delete, it didn’t work. The account wasn’t blocked, and Safe Mode revealed no issues. The registry showed a locked-out SAM (Security Accounts Manager) entry. There was no way to bypass it without the password. I couldn’t reset it with standard tools. Accessing files required plugging another system’s drive, assuming it wasn’t encrypted. I also didn’t have a decryption certificate. The situation was serious, but I managed to restore the system using System Restore. Everything functioned afterward. Now I’m investigating further. I didn’t notice any remote software installed or System Restore removed. What caught my attention was the presence of Microsoft Readiness App—an older version displayed on my desktop. It might have been used to trigger the lockout. It seems this tool could be part of a corporate setup, possibly for enterprise users. The fact that it required admin privileges suggests it was meant for business accounts. It’s possible an account was compromised or stolen from a company, with the information sold on the black market. Either way, I’m relieved the system is operational now. In case things get worse, I could recreate Vista from scratch.

K
koolkittyLR
Member
172
11-17-2020, 01:37 AM
#2
Thank you for helping me rescue one of my Vista friends. I'm really thankful. Talking about similar issues, I once had a virus on my netbook using Vista that attempted to launch every Adobe Reader file without installation. The strange thing was, Adobe Reader was actually loading.
K
koolkittyLR
11-17-2020, 01:37 AM #2

Thank you for helping me rescue one of my Vista friends. I'm really thankful. Talking about similar issues, I once had a virus on my netbook using Vista that attempted to launch every Adobe Reader file without installation. The strange thing was, Adobe Reader was actually loading.

P
Pokebuzz123
Junior Member
35
11-19-2020, 01:05 AM
#3
You were unable to access the system and needed to revert it back. Your mother contacted support, but they ended up calling you back and reprimanded you for hanging up.
P
Pokebuzz123
11-19-2020, 01:05 AM #3

You were unable to access the system and needed to revert it back. Your mother contacted support, but they ended up calling you back and reprimanded you for hanging up.

L
LumpVersusMC
Junior Member
26
11-25-2020, 04:00 PM
#4
I receive 7-8 units weekly at my business, but outcomes differ widely. Occasionally they get a call, someone connects remotely to view the registry and labels it as an infection, demanding $150 for resolution—this succeeds about 70% of the time. In other cases, the same process installs scanning tools and displays a severe malware presence, locking the system and requesting $300. Usually, the latter forces a full restore, wiping all restore points.
L
LumpVersusMC
11-25-2020, 04:00 PM #4

I receive 7-8 units weekly at my business, but outcomes differ widely. Occasionally they get a call, someone connects remotely to view the registry and labels it as an infection, demanding $150 for resolution—this succeeds about 70% of the time. In other cases, the same process installs scanning tools and displays a severe malware presence, locking the system and requesting $300. Usually, the latter forces a full restore, wiping all restore points.

C
CrushJPO
Member
170
12-03-2020, 02:03 AM
#5
They keep calling her often. Also, @Imabigmac you can use a disc for system restore.
C
CrushJPO
12-03-2020, 02:03 AM #5

They keep calling her often. Also, @Imabigmac you can use a disc for system restore.

E
EugeneMagoggle
Junior Member
43
12-03-2020, 02:14 AM
#6
Windows has some odd features regarding file formats. The .exe extension is stored in the registry, similar to other file types like .jpg or .png. You can modify which application opens these files by editing the registry under HKEY_CLASSES_ROOT\.exe. Ensure the 'Content Type' is set to application/x-msdownload and the 'PersistentHandler' defaults to a specific value for Windows 8 and 8.1. For older versions like Windows 7, the settings might differ.
E
EugeneMagoggle
12-03-2020, 02:14 AM #6

Windows has some odd features regarding file formats. The .exe extension is stored in the registry, similar to other file types like .jpg or .png. You can modify which application opens these files by editing the registry under HKEY_CLASSES_ROOT\.exe. Ensure the 'Content Type' is set to application/x-msdownload and the 'PersistentHandler' defaults to a specific value for Windows 8 and 8.1. For older versions like Windows 7, the settings might differ.

D
DDotty2
Member
223
12-05-2020, 02:15 AM
#7
Begin by booting from any Vista disk and adjusting the language on the screen. You'll see a prominent "Install" button to start the installation process. Notice the bottom text that reads: "Repair your computer." When prompted, choose the repair option. Vista will launch its Startup repair automatically; you can ignore it since it works correctly. After cancellation, you'll be taken to a screen labeled (Sorry, can't find a better shot quickly). Click the highlighted "System Restore" button and wait a few seconds to a few minutes for the process to complete, depending on your drive speed. No further action is needed once you click—just patience is required. When the restore completes, select a previous point in time, and the system will revert accordingly.
D
DDotty2
12-05-2020, 02:15 AM #7

Begin by booting from any Vista disk and adjusting the language on the screen. You'll see a prominent "Install" button to start the installation process. Notice the bottom text that reads: "Repair your computer." When prompted, choose the repair option. Vista will launch its Startup repair automatically; you can ignore it since it works correctly. After cancellation, you'll be taken to a screen labeled (Sorry, can't find a better shot quickly). Click the highlighted "System Restore" button and wait a few seconds to a few minutes for the process to complete, depending on your drive speed. No further action is needed once you click—just patience is required. When the restore completes, select a previous point in time, and the system will revert accordingly.

V
Velizar06
Posting Freak
865
12-05-2020, 03:45 AM
#8
I never realized there was a way to utilize a disk.
V
Velizar06
12-05-2020, 03:45 AM #8

I never realized there was a way to utilize a disk.

V
Velizar06
Posting Freak
865
12-05-2020, 04:41 AM
#9
It worked with regedit but not with Adobe Reader. Even Adobe Reader attempted to launch itself...
V
Velizar06
12-05-2020, 04:41 AM #9

It worked with regedit but not with Adobe Reader. Even Adobe Reader attempted to launch itself...

J
JR_GAMER07
Posting Freak
915
12-12-2020, 03:37 AM
#10
J
JR_GAMER07
12-12-2020, 03:37 AM #10

Pages (2): 1 2 Next