I lost admin password and couldn't fix, now both gone

[beachinmoney]

Okay, I am listing this first. I got excellent instructions the problem is that when I try to follow the directions from Bob, well, my computer is in a Workgroup and at the step to "Load Hives" it is not black, it is not available to choose. So, just looking around I see CertificateAuthority.config.1, the certificateAuthority.Get Config, then 7 othere's. One says CertificateeAuthority.ServerPolicy. Each one of those has like a ServerPolicy and then it says the same thing with a 1 after it. That would kind of make sense since I was trying to make myself have admin authority to change settings and things that got messed up..... Any further help from here? I also have SQL Server 2008 but it's new, or a re-install from two years ago. I am just going to wait so I don't mess anything else up.....


Well, now I've really done it. I was just getting everything running good but along the way I had added an Admin account and for the life of me could not remember the password or where I put it.... Lots going on. Anyways, so I went in to the C prompt as admin and did something in reverse and lost my other password now too. I can't log in. Isn't there a way to boot up to the last good configuration or even a restore without having a systems disc and or my passwords? My DVD/CD driver does not work. I have a Gateway it's Windows 7 Home Premium 64 bit. I had to do the upgrade, they sent me the software after I bought it cause it was right before the change if that helps!!!

I almost had everything fixed. I have to go out to a Drs. Appointment and I am praying someone tells me an easy fix today!!! I have a million things to do and getting work is one of them so I need to have access to it. Wanted to add, I have a backup and a Systems image on an external hard drive. Are there any specific files I can load that will just give me my user password back???????

Thanks!!

 

[seavixen32]

Welcome to Windows Seven Forums.

7 Free Windows Password Recovery Tools

If successful, your first task should be to create a password recovery disk.

http://www.sevenforums.com/tutorials/64742-password-reset-disk-windows-7-vista.html

 

[Bill2]

Well, if you had searched the tuts here you'd already have found this.

http://www.sevenforums.com/tutorials/85657-password-reset.html

If your dvd drive doesnt work, you'll need to use either a usb win7 installer (theres a tut on how to make one) or get hold of an external dvd drive.

I hope this is your own computer and you're not into hacking and similar wretched things.

 

[beachinmoney]

Of course not, if I was hacking I wouldn't be desperate for help. I would just move on. I had lived in Mexico, big mistake, and a copy of people were on my computer and really messed stuff up. Microsoft treated me different too, different downloads etc.... So when I got here, to AZ someone stayed with us for 5 days and I didn't want him to have any access so I set up the Admin quickly before he knew it and between unpacking, walking dogs, job hunting, getting car tabs etc, etc.... I forgot and lost my passwords. Then when someone tried to help me he erased all my history and messed things up more. So, I will check these out. Thanks for the quick response!

I was getting ready to go and didn't know that I could then choose command prompt so when I got back it had done the recovery and I still could not get in. So, now I will sit and watch. Can I just put it back, mine, not the admin one to what it was. I read that if changed you will loose all passwords etc....????? I luckily have an external drive. I had a Dell Mini 1010 that I bought it for and it just died on me about three months ago!!!

I am still working on fixing this but I wanted to list everything and see if any of you can pin point exactly what is going wrong. I updated my profile to give more systems information. I tried the logging via c prompt and was able to get into the administrator without needing a password, then I went to myself who had full control. And I had inherited controls everywhere without really understanding them or even knowing I had put them there. I was in the middle of trying to create a password restore disk for myself and can't. My internal cd/dvd player doesn't work. Now I can't get my external to work either. So I starting trying to diagnose that. Through the process I kept getting errors like this: See the first uploaded document.

external cddvderror.docx (73.0 KB)

So, I went in and tried to re-assign it to another driver thinking maybe that since I had so many things plugged into my computer and two different cd/dvd players, that it might help. Also, they are all Microsoft drivers, very old. Then I got error messages like the 2nd up load.

typical error's I get.docx (29.6 KB)

I re-assigned it to F and then I went and took it off the network. Now I noticed that it did open up and I was able to format a disk with it. But, when I go to create a password reset disk it will not allow me to go to that drive letter. Now I am trying to change it back and it doesn't offer that option. Any help there? I have listed things in the event loggs, to try and help.

event logs.docx (645.9 KB) And here are all the things that the guy who was supposedly helping me did, not all but some anyways....

Adminevents.docx (1.02 MB)

I am also getting many other errors and two or three that just scared me were about low memory.

moreerrormemorymessages.docx (136.9 KB)

All of this happened because I moved back to the US from Mexico and I had not gotten a lot of the Microsoft auto updates because the internet was up and down and there was someone on my computer who I didn't trust but didn't know it til later, that I didn't trust him that is.... So, I started resetting passwords and changing my WEP key etc. Meanwhile I was unable to do backups because my computer wasn't recognizing my external WD drives.

To make a long story short, although not possible now, I got back to the states and I need my computer so I have gone to work trying to fix things. Someone logged on and put a lot of programs on it and deleted a lot of my app/data/roaming and temp files and it caused more things not to work. Then he had told me that there were 9811 trojan's, virus's, etc. Then I got really paranoid and started trying to figure out how to keep everyone out of my system and that is how I ended up locking myself out and forgetting my passwords and now I have locks on my files because of too many attempts at wrong things

I have become obsessed. I need to get to work now that I am back in the states and my phone is through the computer and my work is on the computer so I have done things with not enough sleep. I will stop that. Can some one please diagnose some of this and tell me what, where it all started. One thing I saw was all of microsofts log on's as administrator and I thought it was the guy who had worked on my machine. I will post those and event logs too. And to sum it up here's where I got really paranoid when I saw all these people listed as users and they had changed things in my system and now it looks like it was Microsoft???

What started it all.docx (63.4 KB)

Anyone help, I know it's a lot of issues!

 

[karlsnooks]

You have listed an entire litany of problems.

If you make a system repair disc,
then boot form the system repair disc,
can you accdess your files.

go to a firend's computer who also has a 32 bit win 7 if you have 32 bit If you have 64 bti then go to a friend with a 64 bit win 7.

Make a system repair disk.

Boot from the system repair disc.

Choose Command prompt and see what you can see.

​

CREATE A SYSTEM REPAIR DISC

START | type System Repair | Enter key | Create Disc button

​

​

GO TO A COMMAND PROMPT USING A SYSTEM REPAIR DISC

1) Insert System Repair Disc into optical reader.
2) Shutdown your computer.
3) Boot up your computer from the System Repair Disc
If your computer doesn’t boot from the optical drive, then
Immediately after pushing your Power ON button,
start tapping the F2 key to get to the BIOS to change the boot order

On some computers, Immediately after pushing the Power ON button, start tapping the F12 key and choose CD/DVD to change the boot order only for this time.
4) Wait while a mini-version of Windows is loaded and finally the SYSTEM RECOVERY OPTIONS dialog appears.
5) NEXT
6) SYSTEM RECOVERY OPTIONS dialog
will search your system for installed versions of Windows.
7) select the Use recovery tools that can help fix problems starting Windows radio button |
NEXT
8) Choose command prompt from the list shown

Run any desired commands and type EXIT when finished.
Remove the System Repair Disc.
Shutdown your computer.
Power on your computer.

​

 

[beachinmoney]

thanks so much for responding. I have already gotten into it changed both the admin password and my user password and done a password reset disc for both. Now I am trying to fix the other errors that seem to be occuring, the memory issue and the active x controls not wanting to work. I am going to go and read about updating drivers.

One big problem still though is that when I boot up using the repair and then the magnifier option to get the the c prompt it wants some password. It used to take my old one that I seemed to be locked out of except via that method. Now that I have changed my account password the only way I was able to get in was by using the Admin that I made active that I will make disappear soon should I ever need him again.
The problem is, where did this other password that it wants when I try to go in and boot from repair???? I need to get that fixed.

I also have to try and fix my dell mini 1010 so I will post there. This forum has so much great information. I would say that you solved my problem but I am past the password lock out at this point. If you looked at my uploads you will see that. I now am concerned about the other errors and the things that made this start. If it is memory. I am going to delete un-necessary files and then load eauses back in to do a backup. The person that helped me told me to delete it that Microsofts was the best. Well, I did and then when I did the backup Microsoft did not complete it and it only had the systems image not the full back up. That's what I get for listening to a young kid. I researched quit a bit before going with Eausus! Please if you have any input on the other!!!!

 

[karlsnooks]

Beachinmoney,

The Win 7 Backup and Restore is excellent.
If you still have the win 7 system image backup then we even have a tutorial to help you retrieve your data from the system image.

Disregarding that, let's treat this at first like a normal troubled computer.

Download, install and run MalwareBytes (link in my sig). From the history that you've related then a FULL SCAN will be needed.

Get back after the full scan, which depending upon size and speed can take several hours. However, that full scan is mandantory so that we can be sure that your entire system is clean.

 

[beachinmoney]

thanks so much for getting back to me...

I will do all of that. I just got up because I was up so late working on this and I just set it to back up before anything else happens.

In the meantime, maybe, hopefully you can answer this. When I first began the process of getting in without my password I must have set something up because now I have changed my password but it lets me log in but it says on the screen afterwards that I supplied the password, lkmbeachinmoney. It has been a long long time since I used that password. Why is it saying that and why is it still letting me in do you think.

I will probably check this and hope for an answer when I get home then run the scans and then upload them. Just would like to figure that out....?????

 

[karlsnooks]

Let's await the results of the full scan by malwarebytes.

We must be 100% sure that there is no more malware left on your computer before we even begin to research further.

 

[beachinmoney]

Hello Karlsnooks, I finally figured it out I think. I couldn't back up because my user account was locked. It got that way I think when I started changing things incorrectly and when I lost my password....? I think. But I just went into it and set it to show also the hidden attributes as well. I couldn't backup to my hard drive or anything because it kept telling me that I needed write credentials to do this... I finally got both computers on a network and I think I have all security in place. Before I update drivers and do the malware etc. I had to get it backup up after what has happened. I need a systems image too by the way. Oh, a tip, if you care. EaesUS is giving away free software if you upload or email them a picture with their logo on it. It's for marketing promotions. Anyone who does it gets their choice of three different ones. Let me know what you think about them. Now that I think about it maybe Windows didn't do the systems image correctly because my account had the lock on it. Anyways this will take hours about 7 and I have been working on it since about 2pm once again. Thanks for your help and I will post the information probably tomorrow sometime. I am going to spend some time at the pool. I have not relaxed in over a week with these computer problems. But this forum is the best. I am learning so much!!!! Next I will be upgrading my HDX to Windows 7 Professional. Maybe even do a clean install of Windows 7 Professional to my Gateway desktop. Seems like the drivers are starting to upgrade here and there. Do you think Microsoft will pull it off and make this operating system work. Vista was such a nightmare!!!

 

[karlsnooks]

Win 7 is Microsoft's best os.

I'm a great fan of Win 7.

AFter relaxing at the pool and contemplating your navel, let us know how things are.

A carriage return, line feed in your posts would help. In other words, hit the Enter key occasionally.

thanks, karl

 

[beachinmoney]

You think??? That's how my adrenaline is right now! I will try and take it easy. I found this post on how to get rid of the locks but I can't do it all now, there are too many files that are connected because I kept trying different things before finding your forum. This is what It, think it will work?

 

[beachinmoney]

I have to do this in two separate posts as my user account is locked. So here is the health report....

Then the other one from John. Things look like they will take forever to fix. Do you think I should re-install Windows? If so how do I make sure not to loose everything and or if I back up a snap shot or image or what ever it is, an exact copy??? I have the Easeus Todo Wordstation backup.

I'm just so frustrated and don't want to mess things up any further. I think I will try and all John too. He's just so busy and it's hard to reach him. You have been such a big help. Please don't stop!!!

 

[beachinmoney]

BSOD after running MBAM first step attached eset

Well, I am posting the results from the Eset scan. I hope that someone will tell me what to do next... I have searched through all the previous posts and saved alot of stuff last night but I was up too long and slept most of today and now my other computer that I had all the taps open on did a Windows upgrade and shut down!

 

[karlsnooks]

beachinmoney,

Must pay for food and beer and then go to my normal internet coffee shop for the next couple of hours. Will review thread and see what strokes of genius I have.

 

[beachinmoney]

couldn't finish MBAM, screem froze on reboot

Here all the event log messages I got.

 

[beachinmoney]

beachinmoney,

Must pay for food and beer and then go to my normal internet coffee shop for the next couple of hours. Will review thread and see what strokes of genius I have.

If only I looked human enough to go and get beer and food!!! Think it's time to sit in the massage chair. See you when you return. I have to go to sleep tonight by around 2am or so as I have to take my husband to get license to get a job!!!

 

[karlsnooks]

Beachinmoney,

Eset will not catch some root-kit viruses.

What I'd like for you to do is to when you get ready to go call it quits for the night, to run a full scan with the Microsoft Standalone System Sweeper.

Here's my write-up on doing this which I use.

PUT SYSTEM SWEEPER ON A USB STICK


System Sweeper, https://connect.microsoft.com/systemsweeper, allows you to start an infected PC and perform an offline scan to identify and remove viruses, rootkits and other advanced malware. System Sweeper is a free standalone, bootable malware and virus remover from Microsoft.

Safety Scanner, Microsoft Safety Scanner - Remove Spyware, Malware, Viruses Free, is free, downloadable, provides on-demand scanning and helps remove viruses, spyware, and other malicious software. It works with your existing antivirus software.

If the target computer has a working internet connection, then you may prefer to use the Safety Scanner.


Download System Sweeper (about 576 kB):
https://connect.microsoft.com/systemsweeper

Insert 256 MB or larger USB stick into a usb port.

Run the downloaded program--mssstool64.exe or mssstool32.exe

Choose the option to install to USB.
Caution: The install program will format the usb stick.

The install program will download about 200 mB more.

After the install is finished, leave the stick in the usb slot.

Run the program you downloaded once again.

This 2nd run, and any subsequent runs, will download the very latest anti-virus definitions (about 60 mB).

To keep System Sweeper up-to-date, simply reinsert the usb stick and run the installation program again.

The initial, full scan by System Sweeper can easily take a couple of hours, but subsequent quick scans will take only a few minutes.

Remember, your computer is being very thoroughly checked for all types of malware.

The results of System Sweeper will be in:
\Windows\Standalone System Sweeper\Support as a file with a LOG extension. You can view this file with Notepad.

===========================================

To help me get a grasp of your present configuration, would you:
1. download, install and run the Cleaner and the Registry portions of CCleaner (don't worry, your system won't crash and burn- I run CCleaner about 5 times a day due to the various testing).
2. Use CCleaner for the following--I'll need both the Startup.Txt and the Install.TXT files.
LIST OF STARTUP AND INSTALLED PROGRAMS USING CCLEANER


STARTUP PROGRAMS
CCleaner | Tools icon | Startup button | click on Save to text file button (bottom right side)

Using the PAPER CLIP icon in the top panel of a Message Reply window, attach the startup.txt file generated by CCleaner.

INSTALLED PROGRAMS
CCleaner | Tools icon | Uninstall button | click on Save to text file button (bottom right side)

Using the PAPER CLIP icon in the top panel of a Message Reply window, attach the install.txt file generated by CCleaner.

 

[beachinmoney]

Here's the problem I am having right now. I was trying to download Siw to see everything that is going on with my network because I have some VPN's and they are causing problems. I tried to uninstall one and it caused more problems. It is Hot Spot. So I did some research on your site and this looked good. Then I saw that you have to have Windows SQL installed. Well, I used to. The guy who was "so kind as to help me out" seems to have gotten all my files and setting deleted. I reformated my WD hard drive where those backups were. I had all my business data bases set up and programmed to do searches for candidates on there. Through a program called CBizONe. It's a Database that is very expensive and allows setup and storing of candidates for Execuitve Search Recruiters and also searches of for them on all the major job sites.

I am desperately trying to find it on my older Passport. I seem to have all the setup files stored but the program files are gone. I have access to MSDNAA software and had downloaded that software amoung other's VB, C+ and Windows Professional 7 32 bit and Windows Professional 7 64 bit. I have the licenses for the Windows but the other programs I can't find in my systems where the licenses went. I contacted them. They changed who they download through. My membership is through ACM.ORG. There is no access to get my old licenses from 2009. I have been trying. I tried to download some newer app's and they keep giving me error that they won't install.

I am afraid that if I do all these system cleans that what ever was there or may still be someowhere on my hard drive or in my temp roaming will then too be gone. I have to find those apps'. Especially if I am going to have to do a full system reinstall. And, now I am seeing that my ISO copy's of disks for operating systems don't want to work.

It's a mess. So, also, I only have two USB sticks. One has advanced restore on it to try and fix my Dell mini, where probably most of my licenses are, on documents in there. Any idea how to get to them. That would save time. I have a USB to USB device. It will act like it is booting up but no screen. I had someone look at it and she said that the wire got loosened and she tried sodering it. It may be memery or who knows what. I need that computer desperately too! So, I have to move my USB info off one stick onto another before doing anything with that. But I don't want all my old approaming or anything gone that might help me find my files and settings for my SQL.

Then I will be happy to do that. Any suggestions there?????

 

[beachinmoney]

Found files from SQL on WD Passport....

They are under Zipapps. But the files say that they are empty. Doesn't that still mean that they are zipped somewhere? How do I find and launch them? That would save a ton of time.