remove windows 7 start up password

[pcpete]

We have a windows 7 computer with a start up password that was added by a scammer. All of the restore points are broken. Do we have any other avenues of removing it?

 

[Mainstay]

Hiren's boot CD >> offline password changer

 

[pcpete]

Thanks. I will check that out.

Something just came to mind. I wonder if you could use the sticky keys method, but instead of running the "net user" command, in its place run syskey.exe. I am making a clone of the drive to test on.

sticky key reference
http://lifehacker.com/5612487/hack-the-sticky-keys-feature-to-reset-a-forgotten-windows-password

 

[citizensmith]

You need the actual syskey password to type into the "syskey" prompt - Some are 1234, 12345 etc. Just hit it with a password reset cd -
Try searching the forum - there have beeen several good posts on this

 

['putertutor]

Is there something more going on here? Can't you just run ophcrack or offline nt at it?

 

[citizensmith]

Ophcrack will not help if its' syskey OP could clarify the situ

 

[alluseridsrejected]

You need the actual syskey password to type into the "syskey" prompt - Some are 1234, 12345 etc. Just hit it with a password reset cd -
Try searching the forum - there have beeen several good posts on this

Yes, try this and hope you get lucky. Syskey passwords are much more difficult to break, maybe just about impossible. The last couple I saw I was lucky and the password was 12

 

[citizensmith]

Elcomsoft is my goto here.If its simple enough It wont take to long.
Shoot I dont know how to break em. I can fly Cain n Abel but that just gives a whole bunch of hex numbers. You'll need the original ASCII.
- Unless the TN ghost has a hacked up version of syskey handy or whatever this post was all abouts https://www.technibble.com/forums/threads/recover-efs-files-from-syskey-at-startup-pc.57319/

 

[Tech_Explorer]

Hiren's boot CD

 

[SpaceSquad]

Offline NT Password Reset http://pogostick.net/~pnh/ntpasswd/

 

[phaZed]

Here is the direct link to the Offline NT Password & Registry Changer that is included in Hiren's
http://pogostick.net/~pnh/ntpasswd/
EDIT: Ah, beat me to it!

Here is the Text writeup about Syskey and NT Password and what is happening..
http://pogostick.net/~pnh/ntpasswd/syskey.txt

 

[pcpete]

Ophcrack will not help if its' syskey OP could clarify the situ

yes it is a syskey password

 

[pcpete]

has anyone actually successfully removed it with windows 7? The tutorials I see for hirens seem to be for xp only.

 

[phaZed]

has anyone actually successfully removed it with windows 7? The tutorials I see for hirens seem to be for xp only.

Pretty much a "final" kind of thing, I have found. If you can't guess the password it's fairly permanent it would seem.

 

[JustInspired]

My last one was '12345'

If you can't suss it, probably best to back it all up and reinstall Windows... I would.

 

[pcpete]

Thanks guys. Next time we will try all the combinations all the way to 1,2,3,4,5,6,7,8,9,0. then plan to nuke and pave.

 

[citizensmith]

Some would say there is another way - https://www.technibble.com/forums/threads/recover-efs-files-from-syskey-at-startup-pc.57319/ but she's not here or anywhere to ask
Mean while LifeLineIT suggested this - https://www.technibble.com/forums/t...s-in-with-syskey-passwords.59145/#post-457637 seems legit

 

[cypress]

Hirens Boot CD for the win. Also Kon Boot?

 

[gikstar]

Kon Boot will get you onto the computer and then you could probably remove all the users passwords...
I usually just use a password remover

 

[Markverhyden]

Some would say there is another way - https://www.technibble.com/forums/threads/recover-efs-files-from-syskey-at-startup-pc.57319/ but she's not here or anywhere to ask
Mean while LifeLineIT suggested this - https://www.technibble.com/forums/t...s-in-with-syskey-passwords.59145/#post-457637 seems legit

AK initially had a lengthy writeup about what to do but was deleted shortly after and I never made a copy when I initially saw it.