system restore now locked

ryanhariiscf

I used system restore to restore a friend’s computer to an earlier point. But when he tries to login on the blue screen it keeps on saying incorrect password.
He claims that he is typing the right password.
Is there any software I can use to remove the password?
Is it possible that system restore can change your password?
he is using vista premium

-TangleFoot-

This might help you with that.

ryanhariiscf

I copied ophcrack to cd how do i us it? Just place it in the cd drive when i power up PC

-TangleFoot-

Assuming it's been burned correctly and that the BIOS is set to boot from your CD drive first, yes. Refer to this if you have any trouble.

kippen_noedel

tanglefoots suggestion should work, if it doesn't try this instead

• cd080802.zip (~3MB) - Bootable CD image. (md5sum: 33ecd38263f935b82e7b2e3e9f5de563)

ryanhariiscf

I downloaded Bootable CD image and ran it a black screen came up with lots of options which ones do i pick?

-TangleFoot-

What options do you have?

ryanhariiscf

-TangleFoot- wrote: »

What options do you have?

This is what i done truned on PC with disk loaded change password/registry.
Told to press enter to Boot
Took me to step one
asked me select disk where windows is installed.
I selected 1 and Pushed enter
Step Two
Path to registey files
I clicked enter next select which part of registry to locate. I selected one which is Password reset
the it said loaded hives
I selected 1 which is edit user data and password. i typed in the username then i selected 2 which is edit and set new password. i then entered my new password click enter password changed came up
Something came up which i dont understand
select!-quit list user ox,rid3> then i say Failed login count 0 while max tries is 0 total login !!!! 271

-TangleFoot-

Have you tried using Ophcrack instead?

ryanhariiscf

I downloaded Ophcrack i ran it in text mode at the end it said this
The password have been save in/tmp/opncrsck.txt.
But where is this file?

-TangleFoot-

It's in a temporary file system created when the live CD is run. If you restart the computer, that information is lost. You need to navigate to the /tmp directory and open opncrsck.txt (sic) using whatever application is provided for the purpose.

Unfortunately, I can't tell you exactly how to do this because I've never used Ophcrack in text mode.