Waraxe IT Security Portal

helloworld45321 · Beginner

Hi Guys,

Here is the story. My Uncle has died over the weekend and my Aunt needs his computer login to access certain information. I tried to reset it myself without any luck. I have the NT hash, but am unsure on how to decode it.

How do i even begin to do this? Can I contact Microsoft?

The computer is windows Vista.

Thanks for any help

waraxe · Site admin

NT hash can be cracked, if original password was weak enough. Microsoft is not able to help you in this.
What kind of information it is, that you want to retrieve? Files?
Your best option is to remove cover from computer and take out hard drive. After that use external HDD case or connect it directly into the other computer. In this way you can access all the files, that are not encrypted with EFS.

helloworld45321 · Beginner

Thanks so much for the reply waraxe.

Yes, she basically wants access to the account, some spreadsheets and word docs, but pictures and videos too.

I tried that a few years back with an xp drive (used as a secondary drive) and it didn't work because of the password. Everytime I tried to access the password protected login user's folder, it wouldn't allow me.
How would i go about decoding the NT Hash, we think it might be weak as we think it was a bike he used to own.

sk8er · Advanced user

and if you use :
http://ophcrack.sourceforge.net/ ?????