Windows XP hacking help

[blkmtrfan]

So my mother-in-law gave her old laptop to my teenage daughter, before I even got to see it work, the teenager set it up with her being the only one on the XP welcome page, then she proceeded to forget her password, DOOH! :o :rolleyes:

So how do I get around her password and access the puter again :confused:

[STV_Keith]

Check out this video:

http://www.youtube.com/watch?v=O7B_5J5wAmI

[Largemouthlou]

Run it in safe mode and change or disable passwords..:)

[blkmtrfan]

Thanks guys, but I did the safe mode thing and the "administrator" has a pass word too :mad:

Any other options?

[79Jcraft]

do a google search on hacking admin password i think it is there..I had to do it on my laptop and forgot all the passwords and on admin the password was admin or it let me in anyway from that but that wasnt the original password

[j_martin]

PM me with your e-mail and I'll send you an ISO file from which you can make a boot CD that will enable you to replace the passwords with null. (no passwords). It's about 3mb.

Then you can just boot up WinDoze and do what you will.

Use it about once per month at the factory. Engineers can't remember their paswords either.

hope it helps
John

[STV_Keith]

Hell, send that to me too John. :) keith@_remove_stvboats.com

[blkmtrfan]

PM sent :)

If you don't get it my e-mail is

sfrolich@msn.com

Thanks

Scott

[hsbob]

ther's alos several Sw programs that do it and other function as well. usually under 59.

[blkmtrfan]

ther's alos several Sw programs that do it and other function as well. usually under 59.

What is "Sw"

[STV_Keith]

SoftWare

[blkmtrfan]

SoftWare

DOOH! :o

Went right over my head

[j_martin]

ther's alos several Sw programs that do it and other function as well. usually under 59.


I use Bart's PE (pre-install environment) to rescue systems that have blown the registry so bad they won't boot, or have a disk error that blows the boot sequence.

I also have a CD I've packed with a password viewer, a memory tester image file, hijack this (startup scanner/repair tool) a raw data file viewer, and other tools.

I used to really hate Windoze XP, but I've since come to recognize it as job security.

John

[blkmtrfan]

Update

I got the link from John (thanks)

I downloaded the file and I needed to go find another program to burn the ISO to a CD, did that and have tried a couple of times (unsuccessfully so far :o ) to get the puter to boot up on the new disk.

I really need to get back to work so I will have to try more a bit later :o

[pyro]

how about a nasty set of adware trojan viruses? I can't figure this one out. Mcafee has been permanently diabled by the malware. It exists as several DLL files that are executed by system processes like WINLOGON, and hence they are "embedded" and cannot be deleted be conventional means.

A search for XXYYYXY.DLL offers some suggestions, but it sounds like doom.

AAAARRRGGHHH!!! this sux....

[flabum1017]

I used to really hate Windoze XP, but I've since come to recognize it as job security.

John


Who are you kidding? All Windoze Op's are the mainstay of job security....... because there is no security in Windoze

[blkmtrfan]

how about a nasty set of adware trojan viruses? I can't figure this one out. Mcafee has been permanently diabled by the malware. It exists as several DLL files that are executed by system processes like WINLOGON, and hence they are "embedded" and cannot be deleted be conventional means.

A search for XXYYYXY.DLL offers some suggestions, but it sounds like doom.

AAAARRRGGHHH!!! this sux....


Chad I can help with that one, I tried everything and this is what finally worked for me:

http://onecare.live.com/standard/en-us/default_onecare.htm?s_cid=ext_pdsch

And it's free for the first 90 days and even after that it is cheap

[JohnBoy]

Download and use use the Linux password hash executable. Boot the computer on the Linux disk and wipe the passwords. Do it all the time

[j_martin]

Update

I got the link from John (thanks)

I downloaded the file and I needed to go find another program to burn the ISO to a CD, did that and have tried a couple of times (unsuccessfully so far :o ) to get the puter to boot up on the new disk.

I really need to get back to work so I will have to try more a bit later :o

You may have to go into the motherboard setup and set the boot order so the CD reader is before the hard drive.

hope it helps
John

[j_martin]

how about a nasty set of adware trojan viruses? I can't figure this one out. Mcafee has been permanently diabled by the malware. It exists as several DLL files that are executed by system processes like WINLOGON, and hence they are "embedded" and cannot be deleted be conventional means.

A search for XXYYYXY.DLL offers some suggestions, but it sounds like doom.

AAAARRRGGHHH!!! this sux....

I use KasPersky a lot. It has a feature that builds a rescue disk from Bart's PE builder, with the scanner and the latest signatures in it. Barts also has disk editing and repair facilities in it. Usually does the trick.

Another trick is to install HiJack This, which is a boot sequence editor. That's professional stuff, and it displays all boot operations, including all legitimate ones. You can phuck up the system real quick if you don't know what you're doing, but you can easily see the multi step loaders like you describe and remove them.

HiJack this will run in safe mode, and the loaders don't, so that is your ambush point.

Some of the newer trojans are so damned smart you have to boot up a pre-install environment, remove the chit, and then manually replace the registry hives from backups so the system will even boot.

It's common enough that Microsoft has a written up procedure to do it.

hope it helps
John