Method 1:
Boot up with DOS (for this you need to make bootdisk ) and delete the sam.exe and sam.log files from Windows\system32\config in your hard drive. (You can also use any live disk like OPH crack)
(ADCET students might have gt OPH Crack CD in Ethical hacking workshop held in Aug 2012).
Now when you boot up in pc the password on your built-in administrator account which will be blank (i.e No password).
(This solution works only if your hard drive is FAT kind)
Method 2
Step 1. Put your hard disk of your computer in any other pc .Step 2. Boot that computer and use your hard disk as a secondary hard disk (D'nt boot as primary hard disk ).Step 3. Then open that drive in which the victim’s window(or your window) is installed.Step 4. Go to location windows->system32->configStep 5. And delete SAM.exe and SAM.log
Step 6. Now remove hard disk and put in your computer.
Step 7. And boot your computer :-)
Note that this folder is locked to all accounts, even if you are an administrator becoz it is in runnning mode . it can be accessed by booting using a bootable CD or other OS.
Lets have a look
Where Is the SAM Security Account Manager in Windows 7?
Windows 7's Security Account Manager, also known as SAM, is a
database that stores user account and security information for users
accessing your office computer. The database runs automatically as a
process when you start your computer. SAM is within the Windows folder
inside the System 32 folder and works hand-in-hand with other processes
on your computer.
Complete Path
To open the folder containing SAM, click "Start | Computer | C:\ |
Windows | System32." Scroll down to “lsass.exe” to view the file's
size. Since SAM is always running on your computer, double-clicking the
file causes an error stating that the process is already running on your
computer. Also, do not delete SAM; removing it corrupts your user
account and security information resulting in Windows not being able to
boot or load your user-account profiles.
Disabling
Do not disable SAM; killing it prevents other services and
processes on your computer from functioning properly. SAM also gives
clearance to services including the Internet and email functions as well
as other processes and services that require administrator-level user
accounts. Disabling SAM also causes other services and processes to fail
to start or to not be notified when SAM is ready to provide security
information to running services and processes.
Windows Versions
SAM is present in all versions of the Windows 7 operating system
as well as Windows 8, Vista and XP. The database is also present in
Windows Server versions. The database runs as a background process and
doesn't require any user interaction.
Restoring SAM
If SAM is missing from your office computer or you receive a
message stating SAM is corrupt, you can restore the database file from
your Windows 7 installation directory or CD-ROM. Open the directory
“i386” on your “C:\” drive, or insert the Windows 7 CD-ROM, and search
for “lsass.exe.” Right-click the file's name and click “Copy.” Open the
System32 directory within your computer's Windows folder. Right-click in
any blank area within the directory's pane and click “Paste.” Restart
your computer to complete the database installation.....!!!
Ejoy
Computer Tricks & Tips
-= MinD_FreaK=-
Ejoy
Computer Tricks & Tips
-= MinD_FreaK=-