{"id":37,"date":"2006-08-22T23:10:38","date_gmt":"2006-08-23T03:10:38","guid":{"rendered":"http:\/\/andyanglea.com\/blog\/?p=37"},"modified":"2006-08-22T23:10:38","modified_gmt":"2006-08-23T03:10:38","slug":"thank-goodness-for-windows-security-holes","status":"publish","type":"post","link":"https:\/\/andyanglea.com\/?p=37","title":{"rendered":"Thank goodness for Windows security holes"},"content":{"rendered":"<p>I woke up Saturday morning to a very bad sound\u2026 **Click\u2026. Whirrrrr\u2026. Whirrrrr\u2026 Click, Click** By the time I was cognizant to what it was (the harddrive of my laptop, which sit by my bed), and attempted to save and close programs and shut it down, it blue screened.<\/p>\n<p>\u201cWell,\u201d I thought, \u201cit\u2019s windows, BSOD is pretty common.\u201d I do a force power down (hold in button for 5 secs), reboot, and wait.<\/p>\n<p>**Windows\/System32\/Config\/System file missing or corrupt**<\/p>\n<p>Great\u2026 A registry hive error. Pretty much irrepairable with an OEM XP installation. Oh well, I\u2019ve been wanting to do a clean install of Windows anyway. Nevermind the fact that today is day we\u2019re supposed to upload all the content for our <a href=\"http:\/\/www.ebc-ebca.org\/\">client\u2019s new site<\/a>. Oh well, how long can this take? Probably not past lunch, No biggie.<\/p>\n<p>So I attach my external hard drive, and boot into Ubuntu to recover my data in case I have to wipe the drive. (Unfortunately I forgot to get my 3+ years of email\u2026 too late now.) That done, I attempted Windows recovery console. No dice there either. Well, I\u2019ve got my IBM recovery partition, let\u2019s try that\u2026 Good, that\u2019s working. Let that run for 30-40 odd minutes. During the process it asked me to set an administrator password, which I did. It finishes, reboots and presents me with the login screen, and the user name of Administrator. I enter the password I chose earlier and wait.<\/p>\n<p>**Bong** Password incorrect. Please retype your password. Passwords must be typed in the correct case.<\/p>\n<p>Oops, my bad, try again. **Bong** Stupid me.. **Bong** What! **Bong** Good grief **Bong** Try blank\u2026 **Bong** **Bong** **Freeze** **Bong** **Bong** (you get the idea\u2026)<\/p>\n<p>Not good, I must have mistyped it. How could I have made the same typo twice??? Wrong home keys? Oh well, it\u2019s only 10 o\u2019clock or so, I\u2019ll reinstall again.<\/p>\n<p>This time I set the password to something really easy: abc. How could I mistype that? Reboot, and login screen.<\/p>\n<p>**abc** **Bong** Ai yi yi **Bong** Ok, the Admistrator account has a problem\u2026 Let me try some other things\u2026 **Bong** An old account name? **Bong**<\/p>\n<p>I should probably explain that because I bought my laptop from the <a href=\"http:\/\/www.bju.edu\/\">school<\/a>, the recovery partion I\u2019m using has a custom image on it with school software. So I thought, \u201cIt must have a custom Administrator account too.\u201d<\/p>\n<p>Well, I have another option. Because I was an IT minor last year, I was able to take advantage of Microsoft\u2019s Academic Alliance program which allows computer science students to download free M$ software including Visual Studio, VPC, and XP. I downloaded an iso of the XP install CD complete with academic license and authentication code. This disk image was on my harddrive and part of the files I had recovered. So I used another computer to burn it to a CD, and as Nero, for some reason wouldn\u2019t recognize the .img file type of the iso, I used a free program called <a href=\"http:\/\/www.burn4free.com\/\">Burn 4 Free<\/a>. Once that was done, I put my new XP install CD in my laptop and waited. After another 40 mins or so, I was able to log in. Yea!! But I had absolutely nothing. No OEM drivers, no internet, zip, zero, nada. So I decided to try the IBM thing again, just to get that. I had an Administrator account now that worked, after all.<\/p>\n<p>Same as before, installed, rebooted, login screen\u2026 **Bong** AAAAAAARRRRRRRRRRRRRGGGGHHHHHHHHHH!<\/p>\n<p>How can i reset this Administrator password? So a googling we go. <a href=\"http:\/\/news.com.com\/Google+wants+people+to+stop+googling\/2100-1030_3-6106479.html?tag=alert\">Oops, sorry<\/a>! I mean, I did an internet search using google.com. Much info abounds on how to attempt, both legally and illegally to get around the Administrator password. But the article i found most useful was this one\u2026 <a href=\"http:\/\/pubs.logicalexpressions.com\/pub0009\/LPMArticle.asp?ID=305\">I Forgot My Administrator Password!!<\/a>. It informs the reader of a (may I say) scary access hole during the install process. At one point you can hit SHIFT+F10 and bring up the windows command line, from which you full access to the system. Simply call up <strong>nusrmgr.cpl<\/strong> and you get the familiar windows gui for changing passwords. You can wipe out the admin password, or create a new admin account. I assume you could use this access hole to retrieve data using notepad.exe \u201c&lt;<em>file name<\/em>&gt;\u201d, and who knows what else. And as this can be done during a XP repair install, it could give you full access to all the data on the computer as Administrator once the repair is done running.<\/p>\n<p>As it turned out, there was no Administrator account, just one called dormsupport (still on my computer and with no idea as to the password for it). So I created one, saved, closed and exited the command line and continued the reinstall.<\/p>\n<p>Finally, after 13 hours, I was back in. Next to install XP SP2, and <em><strong>62<\/strong><\/em> other <em>critical<\/em> updates, and I was back in business around midnight. Meanwhile, we got the content for EBC-EBCA\u2019s site uploaded, and began the process of domain registration transfer and DNS propigation.<\/p>\n<p>So that was my weekend. How was yours?<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I woke up Saturday morning to a very bad sound\u2026 **Click\u2026. Whirrrrr\u2026. Whirrrrr\u2026 Click, Click** By the time I was cognizant to what it was (the harddrive of my laptop, which sit by my bed), and attempted to save and close programs and shut it down, it blue screened. \u201cWell,\u201d I thought, \u201cit\u2019s windows, BSOD [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,7],"tags":[9,23,30,37,41,46,60,72,83,90,95,101,104,107],"class_list":["post-37","post","type-post","status-publish","format-standard","hentry","category-my-life","category-technology","tag-administrator","tag-bsod","tag-computer","tag-error","tag-geek","tag-hack","tag-linus","tag-password","tag-registry","tag-tech","tag-ubuntu","tag-weekend","tag-windows","tag-xp"],"_links":{"self":[{"href":"https:\/\/andyanglea.com\/index.php?rest_route=\/wp\/v2\/posts\/37","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/andyanglea.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/andyanglea.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/andyanglea.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/andyanglea.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=37"}],"version-history":[{"count":0,"href":"https:\/\/andyanglea.com\/index.php?rest_route=\/wp\/v2\/posts\/37\/revisions"}],"wp:attachment":[{"href":"https:\/\/andyanglea.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=37"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/andyanglea.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=37"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/andyanglea.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=37"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}