Security Basics mailing list archives

RE: locked out of XP, need file access


From: "David" <David () cawdgw net>
Date: Mon, 29 Dec 2003 20:28:41 +0100

You haven't stated:

1. if it's a 2.5 inch or 3.5 inch drive (usually difference between a laptop
and a desktop
2. if you had used any type of disk or file encryption and if you did,
whether or not you still have the key

When folks bring me virus damaged machines, I normally just pull the drive
and insert it as a secondary slave or master off my own, using w2k or w2k3,
virus clean it, then if it's too trashed, try to recover their files.

You should be able to do the same with a desktop drive. You'd need a 2.5 to
3.5 adapter to do it with a laptop, unless you have a laptop that'll take a
second drive.

If you used efs or some such and don't have the key, yer hosed pretty much.

I'm locked out of my own Windows XP box.
Being a paranoid,
I have not provided myself with any password hints
even for the administrator mode.

I do remember about 2 characters from it though
but there's just too many combinations.

There are personal files in there that I need to access.

I remember that with the old Win98,
it was possible to do something with the .pwd file
(not that we needed it,
since all the files are accessible anyway)
but I'm sure things have changed significantly since.

I did infact try using a XP password recovery tool kit
and global-resetter thing I got from the net...
but the software asks me to enter root password
and then tells me to get lost.
It's strange and ironic,
because the passwd is precisely what I'm trying to figure out.

I don't wanna read a 1,000 page book just yet
cuz I need access to my files asap.

What would be some of the necessary simple steps to take at this time?
Thanks in advance...




---------------------------------------------------------------------------
----------------------------------------------------------------------------




---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: