Have you researched the issue before?: yes i have been looking for days ( i have no where to ask there tech wont talk to me )What is the Issue?: ok i am working at a tech shop for a while i have a person who has come in with a locked laptop from everest university they HAVE paid for the laptop however everest will not "unlock it" with out them finishing school... so my issue is does anybody know if this is a bios issue or if this is a windows issue ? please hit me up asap (( i have formated the drive 3 times )) i have heard it has some sort of bios thing but i cannot tell if somebody has info pls help me right away we are getting a lot of this and i have heard there is a pawn shop selling defective laptops with this issue so if i can fix it we will clean up.... Operating System: Windows
Sounds like computrace bios this is written to your mbr from the bios in windows look for rpcnet.exe. You might be better looking in the lowjack or bios-mods forums. But yes if you ask questions you probably get a lot of don't steal laptops replies.
Give is some screenshots and model numbers to give us a better idea. Also the title has nothing to do with the question
its not a password though the computer itself boots into windows man after it boots you get a error msg If you are unlawfully in posession of this device, you must return it immediately to Everest University Online. To do so, contact the Support Services Department at 1-888-321-0021 ext 723. If not returned to the owner (Everest University Online), legal action may be taken to rectify this issue. Your prompt response is required and appreciated. Everest University Online Support Services Department Phone: 1-888-321-0021 ext 723 "" and NOTHING works you cannot even shut it off with out a hard shut down
i did that already ( i even did a full sanitation of the drive ) when you update windows it seems to reinstall computrace and locks right up again soooooooo i was thinking somebody here had a idea if it works i will make it a auto boot bat file so if it comes back it will just remove itself again. this is not my pc its belongs to a clien.. i am working on this >>> Code: Select All @ echo off SETLOCAL enableextensions enabledelayedexpansion timeout /t 5 cls goto :a :A echo Hello this is a program from vampiricbunny1800 echo this program will remove computrace from a computer echo ---------------------------------- set a=y set b=e set c=s set /p password=would you like to :censored over computrace?: if "%password%%" == "%a%%b%%c%" goto yespls exit :yespls TASKKILL /F /IM "rpcnetp.exe" TASKKILL /F /IM "rpcnet.exe" TASKKILL /F /IM "upgrd.exe" del "C:\Windows\System32\UPGRD.exe" /y del "C:\Windows\System32\rpcnetp.exe" /y del "C:\Windows\System32\rpcnetp.exe" /y del "C:\Windows\System32\rpcnetp.dll" /y del "C:\Windows\System32\rpcnet.dll" /y go to :b pause exit :b cd C:\Users\admin\Desktop md "C:\Windows\System32\UPGRD.exe" /y md "C:\Windows\System32\rpcnetp.exe" /y md "C:\Windows\System32\rpcnetp.exe" /y md "C:\Windows\System32\rpcnetp.dll" /y md "C:\Windows\System32\rpcnet.dll" /y attrib -R "C:\Windows\System32\UPGRD.exe" /y attrib -R "C:\Windows\System32\rpcnetp.exe" /y attrib -R "C:\Windows\System32\rpcnetp.exe" /y attrib -R "C:\Windows\System32\rpcnetp.dll" /y attrib -R "C:\Windows\System32\rpcnet.dll" /y ::still working on this par >>>>>>>> cd C:\Users\admin\Desktop echo >test.txt attrib +r -a C:\Users\admin\Desktop\test.txt pause go to exit ::<<<<<<<<<<<<<<<still working on this part go to exit :exit exit
Maybe take the HDD out Plug it into an external drive Wipe it NTFS in your main computer via USB (maybe a partition issue) Re install Windows 8 Update / Flash BIOS Seems like you are not the only one trying
Are you sure you did a full wipe and install and not an install from a hidden recovery partition, make sure to delete all partitions.
You can swap hard drive it will still install itself it's in the bios reflash bios will not touch computrace, the only way is replace bios chip "there cheap enough" or just run linux on the laptop don't think computrace works on linux
the laptop is a peace of :censored and not worth getting a new chip for i have 2 hacks to fix it my virus will work because it makes 0 bite none writeable files that computrace needs to make the pc lock @ mr p the other thing is i have done all that though its windows 7 not 8 new hdd new formats i did a WIPE not format of the drive its in the bios but when you update windows it redownloads the stuff it needs i know there is a way to stop it other than the virus i hope to try the bios flash + a diff version of windows and see if that fix's it i'll let you know tomarrow when i get home if it works or not =) i will try the bios flash first then the virus if that does not work install unbuntu because it does work i can stop computrace on a pc its just when you update windows it comes back !!! freaking program... its annoying as hell --- Double Post Merged, 2 Oct 2013, Original Post Date: 30 Sep 2013 --- *UPDATE* ok this is how the files work this works like the fbi virus however there is something in the bios as well on the actual board i have done the following>> i WIPED not format the hdd (the whole thing) even re did the drive type twice i re-flashed the bios i did 2 versions of windows with DIFFERENT keys and i got windows to work however when you update the damn thing takes over again... so it comes in on a windows update and then installs when you reboot it activates .... VERY annoying anybody got any new ideas ?? the person wants windows but linux works on it just fine so we may have to put that there if i cannot work a program fix or virus to stop computrace any idea's post here or PM me sooner is better .... --- Double Post Merged, 3 Oct 2013 --- new post >>>>> ========================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================== ok can i get a little help this is what i got i need this to auto boot off a cd or usb but i cannot get it to run somebody check my code ? batch 1 (this batch copys 2nd batch to hdd and runs it as well as adds it to start up ) HTML: Select All @[USER=14493]echo[/USER] off reg add HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run /v bunny /t reg_sz /d C:\Program Files\bunny.bat xcopy /y bunny.bat "C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup" call bunny.bat call bunny.exe exit ============================================================================== this is batch 2 and this batch should del the files listed add new files listed then make them read only system files that cannot be deleted i hope HTML: Select All @[USER=14493]echo[/USER] off SETLOCAL enableextensions enabledelayedexpansion goto :yespls :: vampiricbunny1800 wrote this to kill the computrace stuff in windows :: your welcome (^..^)/ :: this program will remove computrace files from a computer it then infects the computer with the "bunny" virus :: this "virus" is harmless to everything and everyone BUT computrace on the computer it was installed on. :yespls TASKKILL /F /IM "rpcnetp.exe" TASKKILL /F /IM "rpcnet.exe" TASKKILL /F /IM "upgrd.exe" del "C:\Windows\System32\UPGRD.exe" /y del "C:\Windows\System32\rpcnetp.exe" /y del "C:\Windows\System32\rpcnetp.exe" /y del "C:\Windows\System32\rpcnetp.dll" /y del "C:\Windows\System32\rpcnet.dll" /y go to :b :b cd C:\Windows\System32\ echo C:\Windows\System32\UPGRD.exe echo C:\Windows\System32\rpcnetp.exe echo C:\Windows\System32\rpcnetp.exe echo C:\Windows\System32\rpcnetp.dll echo C:\Windows\System32\rpcnet.dll attrib -R -s -h "C:\Windows\System32\UPGRD.exe" /y attrib -R -s -h "C:\Windows\System32\rpcnetp.exe" /y attrib -R -s -h "C:\Windows\System32\rpcnetp.exe" /y attrib -R -s -h "C:\Windows\System32\rpcnetp.dll" /y attrib -R -s -h "C:\Windows\System32\rpcnet.dll" /y cls echo thanks for useing my program, echo You are now clean have a nice day...... (^.^)v timeout /t 3 go to :exit :exit exit this is the inf file [AutoRun] open=2.bat icon=bunny.ico label=vampiricbunny --- Double Post Merged, 3 Oct 2013, Original Post Date: 3 Oct 2013 --- if anybody can help with this i would really be thankful
Here's a few ideas: 1) Install BlueRidge MBR Guard on the system. 2) Set a local security policy under "Software Restriction Policies" on the system to deny execution of the program (Start > Run: secpol.msc) 3) After your script removes the files. I would replace those files with a dummy and set deny to Everyone using icacls. So if you run updates, it can't reinstall is the goal. Might need some tweaking but something like this: Code: Select All copy /y NUL C:\Windows\System32\UPGRD.exe >NUL copy /y NUL C:\Windows\System32\rpcnetp.exe >NUL copy /y NUL C:\Windows\System32\rpcnetp.dll >NUL copy /y NUL C:\Windows\System32\rpcnet.dll >NUL icacls “C:\Windows\System32\UPGRD.exe” /deny Everyone:(D,X,RA,WA,WD,AD,REA,WEA,) icacls “C:\Windows\System32\rpcnetp.exe” /deny Everyone:(D,X,RA,WA,WD,AD,REA,WEA) icacls “C:\Windows\System32\rpcnetp.dll” /deny Everyone:(D,X,RA,WA,WD,AD,REA,WEA) icacls “C:\Windows\System32\rpcnet.dll” /deny Everyone:(D,X,RA,WA,WD,AD,REA,WEA) Neal --- Double Post Merged, 9 Oct 2013 --- Another method would to lock each file completely at startup. This can be accomplished simply by using notepad or excel.. There is a simple program called "Quiet.exe" also that can launch an exe as a background proccess that could be used in conjunction with this. Lock a file with notepad: Code: Select All Notepad >FileName Until Notepad process is killed, no program can modify/delete it etc...
thanks neal bob thats a good idea ya this is a computrace thing so its in the bios chip on the board and even if you del it it comes back my issues is i cannot figure out how to make the files copy to the system32 folder ( when it locks NOTHING works it boots and freezes right away with a "this laptop is locked msg* even if you format change tables hdd whatever wont matter as soon as you boot it writes to the hdd again and next time u boot it locks very annoying
Also, Might want to fire up wireshark on another system and sniff out what ip addresses it phones home to and blacklist them via hosts file.
good idea though i had to give up for time and just install Ubuntu i know its really annoying though my little bug didnt work the start menu does not run just computrace it locks up even in safe mode after like 10 seconds if your lucky mostly its 3 or less but it does have to phone home great idea neal bob !!
ya but that only removes it if its not active this one has been turned "on" so it keeps rewriting itself >..> also if you read the bat i made i had made part of that file however computrace stops it before it can run so the task kill never gets to run (( also my issue is its a hp )) this sounds good for dell tho Code: Select All How to quickly and easily get rid of computrace FOREVER on a dell laptop, and simultaneously reset all bios passwords and security settings: 1. Download the latest version of the DST disk iso, from any of the various sources online (google it). 2. Burn the iso to a disk. 3. Boot from the disk. 4. Change the service tag to something new. 5. Reboot and hold F2 to get into bios to verify results. 6. You're done. At this point the bios passwords and security settings should be reset to empty, and computrace set to "deactivated". You can now change the computrace setting from "deactivated" to "disabled" which will permanently disable it with no option of ever re-enabling it. If you can not boot from a cd because the boot sequence is locked and password restricted, no problem, just do this first: 1. Unplug the power cord 2. Remove the laptop battery 3. Remove memory cover from bottom of laptop. 4. Remove cmos battery. 5. Wait a couple of minutes 6. Plug the power cord in 7. Reboot At this point some of the bios settings such as boot sequence have been reset to default settings allowing you to hold F12 while booting, to select the boot device. now you can boot from your DST cd and knock out the security settings above.
hi all,sorry if my english is not good, i have sucess dissabling computrace from a dell xps new laptop,from a client,already hdd ormat and still get lock it format hdd helps,but if its still activated in bios,any time the computer is conected to internet will lock it again,computrace send report and no matter even if you replace hdd for a new one, my solution was, download a older version of the laptop bios firmware,(same model,older version) format hdd in case already get the lock screen do not conect to internet (important) the bios firmware can be loaded from windows or even from DOS,depends on each brand and firmware install,i did it from windows afther install a fresh windows ,dont need any drivers,or updates, if you have lucky,for me works, afher the bios "downgrade" ,not all bios let you install older firmware versions i think,it was an H2O bios,dont remember the version (of the bios,not firmware) then i get inside bois setup and the computrace option was able to change it,before the firmware downgrade was just reading ,cant chnage any stuff in the security bios values,now i can switch it to dissabled.....done i test conecting the laptop to internet and surf almost 2 hours, still fine,then i begin to search about rpcnetp and block in firewall,then remove security permissions from all users (admin,system,etc) ,i read this can help to block in case computrace re activate from bios cant change any permission to rpcnetp,also do it whit dlls and any file named like that,that was in safe mode maybe wasnt the best way to fix it,i already know many bios updates fix bugs ,but i dont care to much,the laptop have like 6 months working and the only thing i ask to client is to avoid updates from dell,and of course for bios cheers
thanks for the info i was told by computrace the version of computrace they put on motherboards is in a ROM portion of the bios well this was in a HP, thanks for the info though. ( i also hear replacing the files with junk files works but when i tryed nothing happened)
