Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Question

Asks for password when there is none

Apr 11, 2017 3:05PM PDT

I'm working with my neighbor's 10-year old Dell Optiplex desktop. Just 2 weeks ago I formatted & re-installed XP-Pro & everything was fine. Yesterday, he tells me he's infected with ransomware, but seeing as he doesn't have a thing on the computer (and no money), refused to pay anything. I take it, start it up and it wants a the "Windows XP Start Up Password". After 2 tries I get an error message referring to trying to change my password. He says he never put in a password. I've used Hirem's Boot Disk and Ophcrack, and neither one found any passwords. All clear in BIOS, too. Same thing in safe mode. I have removed the HD and scanned it from another computer with 3 different anti-virus programs via a USB adapter. One found a "severe" problem and removed it (so it said). Could this password thing be related to the ransomware? If I can't get by this password puzzle, I'll have to format it again and reinstall, again. Any ideas?http://i843.photobucket.com/albums/zz355/rje49/Startup%20password.jpg

Discussion is locked

- Collapse -
Answer
Malware be like that.
Apr 11, 2017 3:46PM PDT

To reset the Windows password is a five (5) minute job with my NTPASSWD CD. It's free and too many tutorials on the web.

- Collapse -
Actually,
Apr 11, 2017 3:57PM PDT

After realizing that just one single incorrect password try is all you get, I went back into BIOS and see that Drive 0 is "in a frozen state". No other passwords are set, but Drive 0 has one that is set. I guess it's possible that the previous user, the State Dept. of Education, set this password and forgot about it when they got rid of the machine. So despite asking for "Windows XP Startup" password, this may be a BIOS Drive 0 password work around?

- Collapse -
Not a Windows password.
Apr 11, 2017 4:00PM PDT

Then I have to check for the machine's make and model. My old Dell's had a jumper called Password Reset.

Look for that.

- Collapse -
Dell Optiplex GX620
Apr 11, 2017 4:06PM PDT

Dell service tag # BNH46C1
I'm vaguely familiar with the jumper. I see what looks like a jumper, but no their connectors nearby. Maybe simply turn it 180?

Post was last edited on April 11, 2017 4:12 PM PDT

- Collapse -
No, that's not it
Apr 11, 2017 4:36PM PDT

I removed the jumper. There are no passwords required now - except for Drive 0.
Haven't found info that works to remove the HD password - when you don't know what the set PW is.

- Collapse -
I'd use Dell Docs on this one.
Apr 11, 2017 4:37PM PDT
- Collapse -
(NT) Been there too
Apr 11, 2017 4:53PM PDT
- Collapse -
Continued...
Apr 11, 2017 4:56PM PDT

I hit enter by mistake. Yeah, I read that same page. Nothing there worked. I'm not feeling very confident about this now. The guy told me he could take the computer back and maybe get another one instead. I don't give up easily though...

- Collapse -
Did you try a new HDD?
Apr 11, 2017 5:06PM PDT
- Collapse -
That crossed my mind
Apr 11, 2017 5:11PM PDT

I do have a few extra HDs, but was thinking the password was an onboard thing which would block access to any HD plugged into it.
I'll keep that in mind.

- Collapse -
Dban
Apr 11, 2017 7:45PM PDT

Grab a copy of dban and wipe the hdd.

Reload xp and test.

That should tell you if the password was on the hdd or it's some other place.

- Collapse -
Got it.
Apr 12, 2017 5:54PM PDT

I did try a different HD, and installed XP on it. That went fine, but even with the PSWD jumper removed, Drive 0 still showed an unknown password set and the drive "frozen". I went back inside and put the jumper on RTCRST (for a minute), and that removed the Drive Password. Just to check it, I put the original drive back in, but it wouldn't do anything without a password- black message screen instead of a small window on start-up. So it seems the blocking password was both onboard and on the HD!
Before giving the computer back, with the jumper back on PSWD, I set an Administrator Password, which prevents BIOS changes. I wonder if it would prevent ransomware from putting a password on the Drive? Could it be that simple? I doubt it, or I would have heard about it before.

- Collapse -
Answer
PS. In the future.
Apr 11, 2017 3:47PM PDT

Make a backup spare Admin account. On newer Windows make 2 Admin accounts that are local logins.

These spare accounts make the issue you are asking about a trivial problem to solve.