I lost admin password and couldn't fix, now both gone

[beachinmoney]

I couldn't sleep. I finally figured out what I did wrong when I got into my system and reset the passwords. I guess I kind of always do learn the hard way. I have printed up so many instructions and I was just straightening up and under my printer desk I found the rest of the directions on changing your password. I went through the boot from cd and cmd prompt to enable the System Administrator route. It would have worked properly I am sure if I hadn't skipped a major step in the middle of the process, the 2nd page that fell between the crack. I knew I hadn't done it the first time because of the errors but I didn't understand the meaning behind and the process that it flowed through. Before I changed the passwords I was suppose to rename the system32 file. It doesn't explain why, someone should update that with an idea or suggestion as to why and what to just so that it is clear that you are doing this so that you don't lock your files. Then you are suppose to rename the magnigy.exe to cmd.exe adn then rename oldmagnify.exe back to magnify.exe. I tried to do this somehow some way or I must have because I have about three different magnify.exe accounts. UNLESS, that someone who got into my account. Let's just call him Josh for now, used that method and he had created the magnify.exe extra accounts?????

Okay, now that I figured it out, how do I get out of this one????

 

[beachinmoney]

Just wanted to give you another little update. I backtracked enough to go in and backwards write it so that at least one of the magnify.exe is now a cmd.exe. There still shows to be four of them. I didn't want to do anything further. Just get out and very that I could actually get to cmd.exe from my desktop and I can. I will await further instructions. The interview is a long way aways tomorrow so I won't be on too much. If you want screen uploads let me know.

 

[karlsnooks]

Now to further help me understand, would you please use the Snipping Tool to make a snippet of the output of that screen which shows the user accounts? Attach the snippet to your next post.

After, and only after that snippet, can I proceed. When I ask for something I'm not just blowing in the wind.

 

[beachinmoney]

I did post it. Twice. In fact the post I just read didn't have alot of stuff I typed. I think it was because I couldn't get the computer back online and then I first went to post it and it turned up as a weird file type, a m... something. So I tried to get a shot of the file ext again to tell you and this time I uploaded it a 2nd time and missed the previous file extension it said it was. It uploaded normally. I watched it.

 

[beachinmoney]

Wow, you are not in a good mood.

Now to further help me understand, would you please use the Snipping Tool to make a snippet of the output of that screen which shows the user accounts? Attach the snippet to your next post.

After, and only after that snippet, can I proceed. When I ask for something I'm not just blowing in the wind.

See below: copied from above,

​

beachinmoney​

Member​

Join Date: Mar 2010

Windows 7 x64 Home Premium
54 posts
Arizona

​

​

No, I'm not trying to get the other computer fixed at this time. I simply didn't want to be in a position again where I couldn't get into it and I was also and have been having problems with my wireless printer on my desktop. So, when I was doing the settings the same on it as what is on the Vista, the printer and scanner and everything works on Vista, I thought that I should also make a user with the same names on both computers because you can't do a workgroup and communicate with each other unless their both Windows 7.... My mind is always going a mile a minute. Luckily people who know me will tell you I don't talk their heads off like I do type yours off. Sorry!

And, this one the HP has no real issues because I hardly ever used it in Mexico because it's so huge. It's 18 plus inches. I used my desktop or my mini 10! But now I am paranoid and never want this to happen to any of them again.

I just had to restart after checking what can and can start up at the start menu. There are two programs that I am not sure of. One is Log me in. I thought that was something I used to use for work that allowed me to see the other computers in my house. Is it that or something having to do with my network or Windows 7.



Okay, I saved this word file my desktop like always. Tried to upload it and it said invalid file that it is a shoot tried to get the error again, it started with an M. I didn't change the file or anything, Just re-attached and it worked just fine. I'm beginning to think that the man that used to live here at this townhouse and died here is haunting my computer!

Oh, got to eat dinner and go to bed. Have to be up at 6am for my BF's interview.

Attached Files

useraccountforkarl.docx (127.6 KB, 2 views)
Last edited by beachinmoney; 10 Hours Ago at 09:44 PM.. Reason: add snippit


I didn't have to drive him to the interview. I am home. I will keep my answers as short and simple as you like.

 

[karlsnooks]

I do not want and I'm not looking for a .docx file.

I need the .png file created using the Snipping Tool.

Please post a .png file created by the Snipping Tool.

Do NOT include the .png file inside any other file.

 

[beachinmoney]

didn't know what a PNG was or why it made a difference. I googled it. View attachment 169371

 

[karlsnooks]

From post #80:

​

karlsnooks​

Senior Member​

Join Date: May 2009

MS Windows 7 Ultimate SP1 64-bit
4,534 posts
Austin, Texas

​

​

A snippet is a .PNG file created by using the Snipping Tool.

rb: | type SNIPP | ENTER

follow the directions shown and take a "snip" of the area showing the accounts.

When you save the snip, the snip will be saved in the .PNG format.

Attach that file to your next post.

=============================================
===============================================
How to Use the Snipping Tool in Vista - Vista Forums

http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html#post93869

http://www.sevenforums.com/tutorials/9733-how-post-screenshot-seven-forums.html

 

[beachinmoney]

Karl, I am not kidding you. I did that. I saw the image in the post before I hit the final submit button. It finally showed up exactly like the other peoples posts. I did exactly what the directions said. I did it from the desk top. Windows 7. I saw it with my own two eyes. I will try it once again.

 

[beachinmoney]

here I go again

trying Okay, I see it, however I do not see the go advanced button anywhere. Do you have it or not?

 

[beachinmoney]

No, idea why that worked and it didn't last time. I did the exact same thing. I am doing it again and if I come back and don't see that image I am just going to stop driving you crazy for the day.

 

[karlsnooks]

beachinmoney,

To make your system secure and safe from changes by others:

1. Disable the built-in administrator account:
http://www.sevenforums.com/tutorials/507-built-administrator-account-enable-disable.html

2. Change the password for your account

3. Delete the "Jack" account

4. Set the UAC slider to very top or one step down:
Control Panel | User Accounts | click on Change User Account control settings | slide to top or next to top. Attached snippet shows at next to top. Do NOT slide below this point.


After carrying this out, please send a snippet showing the User Accounts.

 

[beachinmoney]

I know you said one computer at a time. I just have two questions as I now have BSOD on Vista HDX 18T100c. It all started after Windows Auto Update. It updated my NVIDIA card and took out some Cisco device with this error message. UFDM Host Driver shut down {1AE2C946-8C04-471E-A23C-BE190521C101}

I'm gonna take it one system at a time but I just don't understand why this is happening. Could it be the magicJack? I ran MBAM after the error log reports to make sure I didn't have a transferred virus somehow. Nothing showed. No viruses. And this time having just done it I followed the procedures to the T. Tried everything. I had MSE installed on there. Had removed all other Anti-virus software after realizing that that could have been a problem on the desk top.

Anyways. I will just be patient. There is nothing else I can do.

 

[karlsnooks]

Please reply to post #92.

Blue screens are handled in the Crashes and Debugging Forum.

Post your BSOD question. State only the the computer with the BSOD. Any other information about other computers will not be beneficial and, in fact, will be counter-productive. Remember the bsod forum is for bsod problems only.

 

[beachinmoney]

Okay on both, first off though. Before I go and get rid of the systems Administrator don't I need to delete his password from my user account. When and if will that lock his files too? I can create a password reset disk but I am out of usb's and memory cards. Can I put more then one password reset on the same memory card?

 

[beachinmoney]

In regards to post # 92. I already have the UAC above the medium that you showed. I also already changed my account password yesterday again. However, I'm sure you are dealing with a lot of things. I am still getting the message after I log in that I logged in under a different password. I tried to get the command prompt in elevated and did in fact see that it, at least in the systems administrator account is still really the magnify.exe . So I went into another that was not directly connected to windows/system32. put in the commands to get to the windows/system32 and then stopped before moving forward due to my questions about the password for the systems default admin and the putting the recovery on a memory that already has another password reset on it for another user. Or is that even important if the account documents and files and logins are locked at this point since I'm probably going to have to perform the "Take Ownership" procedure to get the locks off of them all anyways?

 

[karlsnooks]

Let's do this one step at a time:

1. Disable the built-in administrator account:
Built-in Administrator Account - Enable or Disable

Notice:
a. The name of the account is Built-In Administrator Account.
b. read the tutorial at the link given.
c. read the tutorial at the link given.
d. perform the disabling of the built-in administrator account using ONE OF THE PROCEDURES GIVEN IN THE TUTORIAL.

After completion,
post a fresh snippet showing the User Accounts.

 

[beachinmoney]

Well that took a lot longer then it should have because when I try to go into the cmd it is the magnify.exe. I am uploading a snipping of that so you can tell me which one to change. Also, I was suppose to change the oldmagnify.exe back to magnify.exe. I don't find "oldmagnify.exe anywhere on the system. So I was denied access quite a bit but fixed that here are snipping's. OKAY, HERE IS SOMETHING REALLY WEIRD. PROOF POSITIVE THAT SOMEONE HAS BEEN INTO MY ACCOUNT. I USE LASTPASS. When I went to upload the snippit's I got a little script from them saying login via.... and it showed my user name here and then someone called JDoggy. I have never ever, ever used that in my lastpass account?????? I just went and looked at it and it shows that it hasn't been used for a year though. That is odd. It is not a password that I would ever use. It says it hasn't been accessed from my computer since 1 year ago. But, a year ago now is when my computer was supposedly being stored by the Mexican's in Mazatlan! The only computer that I had with me was my Dell Mini. Both my desktop and my laptop were being held hostage by them because they wanted more money from us.

 

[beachinmoney]

Also, please note, the computer that shows at the left is the laptop. I started updating that to the BSOD while I was waiting for a reply. I lost everything. This computer is the Gateway SX200. Windows 7 Home Premium.

 

[beachinmoney]

Thank you so much for your help today. I am done. I have been up now for about 48 hours. My feet are swollen like watermelons! My laptop seems to have bricked my WD external HD. I had everything on there. I am gong to bed. I think this think is winning. I don't think anyone wants to help me. Look at how many people have read this post. They must all think I'm a stark raving lunatic.