Home Ed, OphCrack did not work, lost password, what next?

Hi All,

Help!

Vista Home Edition

I have a customer that decided to put a password on her
computer. So she would not forget, she used her last
name as the password. Whatever she put in, it was not
her last name. All upper case and lower case derivatives
of both her first and last name did not work.

So, I fired up Oph Crack (ophcrack-vista-livecd-2.3.1.iso).
No joy. Oph Crack did say that the Administrator password
was blank, but Administrator is not enabled.

She currently is sitting with a Linux Live CD, so
she can read her eMail etc.

I have Bart PE, so I can edit registry and files
on her hard drive.

What next?

Many thanks,
-T

On 02/12/2010 10:20 AM, ToddAndMargo wrote:
> Hi All,
>
> Help!
>
> Vista Home Edition
>
> I have a customer that decided to put a password on her
> computer. So she would not forget, she used her last
> name as the password. Whatever she put in, it was not
> her last name. All upper case and lower case derivatives
> of both her first and last name did not work.
>
> So, I fired up Oph Crack (ophcrack-vista-livecd-2.3.1.iso).
> No joy. Oph Crack did say that the Administrator password
> was blank, but Administrator is not enabled.
>
> She currently is sitting with a Linux Live CD, so
> she can read her eMail etc.
>
> I have Bart PE, so I can edit registry and files
> on her hard drive.
>
> What next?
>
> Many thanks,
> -T


Okay, got it figured out. What is next:

1) you can post you "hatches" over on

http://sourceforge.net/apps/phpbb/op...=6&t=1&start=0

Hashes can be found in: /tmp/ophcrack.txt
and hope someone else can crack them for you

Or, what I did,

2) download (iso) and cut a CD of "Offline NT Password & Registry
Editor".

http://pogostick.net/~pnh/ntpasswd/

This is a Linux boot CD that allows you to both
enable user accounts and erase user passwords, including
the Administrator's account.

And, it worked perfectly on my customer machine. She now
has an Administrator's icon and she can now log into
both her own account and the Administrator's account
without a password. Happy camping has returned.

I hope this helps others,
-T