techian.com

A Blog With No Limits

Advertisement

Archive for the ‘ Tips ’ Category

Make Your Notepad a Diary

Posted on August 7, 2008 by admin | No Comments

A very simple trick

Sometimes we want to insert current data and time, whenever we open the file in the notepad.

it can be done by just pressing “F5″ key

If you are a lazy person like me, who don’t like to press F5 whenever you open a notepad. Then here is a trick to avoid this.

Just add a .LOG in the first line of your text file and close it.

Whenever you open the file with that text in the first line in the notepad, it will insert the current date and time at the end of the file. You can start entering your text after that.

This article has every possible method on how you can reset an XP password.

Recovering lost administrator windows N4/XP/Vista isn’t a complicated task and I know several easy ways to do so. Which method you’d use it’s up to you, but I usually try ERD first. But first things first – let’s present the options:

Option #1

ERD – Emergency recovery disk. Using this method you need to prepare ahead, by downloading one of FREE ERD tools and burning it onto CD.

ERDs are Free Windows password-cracking tools are usually Linux boot disks that have NT file system (NTFS) drivers and software that will read the registry and rewrite the password hashes for any account including the Administrators. This process requires physical access to the console but it works like a charm! I’ve done it myself several times with no glitch or problem whatsoever.

Caution: If used on users that have EFS encrypted files, and the system is XP or later service packs on W2K, all encrypted files for that user will be UNREADABLE! And cannot be recovered unless you remember the old password again!

Pros: Quick, Works in 99% of cases.

Cons: Might seem complicated for notice user, doesn’t work with certain SATA disk and/or Raid controllers

Here are my favorite tools:

Petter Nordahl-Hagen’s Offline NT Password & Registry Editor
– A great boot CD/Floppy that can reset the local administrator’s password. (The only tool for Windows VISTA)

EBCD – Emergency Boot CD – Bootable CD, intended for system recovery in the case of software or hardware faults.

Offline NT Password & Registry Editor (v060213 – February 2006)

Petter Nordahl-Hagen has written a Windows NT/2000/XP/Vista offline password editor:

http://home.eunet.no/~pnordahl/ntpasswd

· This is a utility to (re)set the password of any user that has a valid (local) account on your Windows NT/2000/XP/2003/Vista system, by modifying the encrypted password in the registry’s SAM file.

· You do not need to know the old password to set a new one.

· It works offline, that is, you have to shutdown your computer and boot off a floppy disk or CD. The boot-disk includes stuff to access NTFS partitions and scripts to glue the whole thing together.

· Works with syskey (no need to turn it off, but you can if you have lost the key)

· Will detect and offer to unlock locked or disabled out user accounts!

Download links:

· cd060213.zip (~3MB) – Bootable CD image with newer drivers

· bd050303.zip (~1.1MB) – Bootdisk image, date 050303.

· sc050303.zip(~1.4MB) – SCSI-drivers (050303) (only use newest drivers with newest bootdisk, this one works with bd050303)

To write these images to a floppy disk you’ll need RawWrite2 which is included in the Bootdisk image download. To create the CD you just need to use your favorite CD burning program and burn the .ISO file to CD. I personally prefer CD option since I don’t have to fiddle around with antique technology like floppy drives, besides most of new pc don’t have floppy drive at all.

Support and Problems? Good FAQ set up covering most of the day-to-day questions. Read it right HERE

Author claims that this tool was successfully tested on NT 3.51, NT 4, Windows 2000 (except datacenter), Windows XP (all versions) and Window Server 2003. Notice that it is NOT compatible with Active Directory. To work around this limitations please read the Forgot the Administrator’s Password? – Reset Domain Admin Password in Windows Server 2003 AD page.

EBCD – Emergency Boot CD (v0.61 – October 2004)

EBCD is a bootable CD, intended for system recovery in the case of software or hardware faults. It is able to create backup copies of normally working system and restore system to saved state. It contains the best system software ever created, properly compiled and configured for the maximum efficient use.

EBCD will be very useful when you need to:

· Copy/move files (with long names, not necessary in CP437 encoding) from/to the disk but OS which can handle them (windows, Linux…) cannot boot. In particular, you may create a backup copy of normally installed and configured Windows and later restore Windows from such backup copy. So, in the case of fault OS itself and all software and its settings can be restored in 5-10 minutes.

· Perform emergency boot of Windows NT / 2000 / XP. When the loader of this OS on the hard disk is damaged or misconfigured, you are able to load OS using another, standalone loader from this CD.

· Recover master boot record of HDD. This allows to boot OS after incorrect uninstallation of custom loader (LILO, for example), which made all OS on your PC not bootable.

· Delete, move, copy to file (image) and re-create partition from file. Image transfer over network is also supported: so you may configure one PC and then make contents of hard disks of other PCs same as contents of the hard disk of the first one.

· Change password of any user, including administrator of Windows NT/2000/XP OS. You do not need to know the old password.

· Recover deleted file, even file re-deleted from Windows Recycle Bin, and, in contrast, wipe single file or a whole disk so that it will be impossible to recover it in any way.

· Recover data from accidentally formatted disk. Sometimes it helps to recover data from the disk, damaged by a virus.

· Recover data from a floppy disk, which is not readable by OS. Format 3.5″ disk for 1.7 Mb size.

Also the disk includes full set of external DOS commands, console versions of the most popular archivers/compressors.

Moreover, emergency boot CD includes minimal Linux distribution (Rescue Linux distribution) which may be very useful to a professional user.

Download links:

EBCD Pro distribution (18mb)

Option #2

Lets say, worst happened – its past 11pm, you are still at work, accidentally forgot admin password and ALL ERD tools don’t work, since the pc you are working on have non-standard disk controller. What to do???

Luckily for us, Microsoft left loophole, big enough to do the task relatively easy:

1. Place in windows XP CD and start your computer (it’s assumed here that your XP CD is bootable – as it should be – and that you have your bios set to boot from CD)

2. Keep your eye on the screen messages for booting to your cd usually it will be “Press any key to boot from cd”

3. Begin windows Repair process.

4. During the reboot, do not make the mistake of “pressing any key” to boot from the CD again!

5. Keep your eye on the lower left hand side of the screen and when you see the Installing Devices progress bar, press SHIFT + F10. This is the security hole! A command console will now open up giving you the potential for wide access to your system.

>From here you can run any windows command and you’ll have full administrator access. To reset password you can use ether of two ways:

1) Run NUSRMGR.CPL to get graphical interface

2) Run Compmgmt.msc to get Computer Management console. From there use Local User and Groups->Users

http://www.rarlab.com/rar/wrar370.exehttp://www.uploading.com/files/IZOOGVQZ/WinRar_Cracking_Kit.rar.html

..:: Intro ::…
Since winrar has updated twice, I will call this version 2 of the tutorial.
I will expand a little on modding the default installer.

…:: $tart ::…
Open up WinRAR.exe in W32Dasm (I use W32Dism, patched with extra features)
and search the ‘str ref’s’ for anything that looks suspicious…..
I found ‘evaluation copy’ first, but there are loads of references that lead to the same cmp
cmp byte ptr [004b2124], 00
‘rarreg.key’
‘rarkey’
‘Registered to’
‘Evaluation copy’
‘Correct registration’
‘Thank you for your support’ etc etc..

The fist thing I did was patch the ‘Evaluation Copy’ value in hex
from 803D24214B0000
to 803D24214B0001…….
The 01 on the end is the variable for the compare,
So changing this will make the compare using the wrong condition.
It worked but still says ’40 Day Trial Copy’ in the about box. There must be more cmp’s
So I decided to search for the compare in W32Dasm instead of a reference (cmp byte ptr [004b2124], 00)
There were loads,……. Why have the same compare for every one of the above??
They all seem related to the registration process.
So, maybe if I patch the whole lot it may make a difference.

…:: $earch the file ::…
Open up your favourite Patch creator, I use CodeFusion v3.0
The first page can be filled how you want, don’t forget to ‘Edit About Dialog’.
Then……

…:: Patching ::…
Click the + & add WinRAR.exe
Click the + & Enter the info….
Find – 803D24214B0000
Replace – 803D24214B0001
Make sure you select ‘Replace All’ from the dropdown box.
And click OK.

Run the patch on WinRAR.exe
It works*!
All references to the trial are removed & all features are enabled ^_^
Some times it pays to look for similar calls to different references.

…:: Cleaning up ::…
Now, if you want to remove the CodeFusion credits from your patch….

Before compiling the patch, Turn OFF
‘Encrypt Executable Data’ &
‘Pack Executable File’
or the data your looking for will be scrambled & dangerous to change.
Make the patch.
Open WinRAR.exe in a hex editor & search for…
-={ CodeFusion Runtime }=-

And replace, I use (same length)….
-={ Patch Presented By }=-

Then I used ResourceHacker to replace the icons & edit the text.
I use ResourceHacker ALOT. It’s good when used with CodeFusion.
You can add extra pictures, move the boxes around, chaange box names etc, etc.
Finaly, pack the finished Patch with a compression program. (Upx, AsPack, ARMProtector etc)

You should experiment with ResourceHacker it’s a great reversing program and has more uses than you may think.

…:: Changing the name in ‘About’ box ::…
I wanted to add my name in the about box, but couldnt find it in the .exe so I tried other options……….

I used FileMon to see if it checked for a keyfile by setting ‘key’ to highlight.
It showed 15 results pointing to ‘rarreg.key’

So I decided to put some text in the file it’s checking…..
Make a file called ‘rarreg.txt’
First I just entered…
I win
Cracked by Abe+!
And changed it to ‘rarreg.key’

But in the about box, it still said…..
Registered to
Cracked by Abe+!

So now I know the ‘Registered to’ will stay there, I have to add that first………
Registered to
Å߀±!_Ð_©mñí
¤ Tëàm -> DTA ¤

It works, time to roll a fat one*!
Well thats it. I have included all the programs needed to complete the tutorial.
I have used this method on the past four versions of WinRAR. And if it’s like WinZip, following versions
will probaly use the same method. (same idea, different addresses)

..:: Make It A Corporate Edition (no serial needed & extra programs) ::…
Copy the cracked WinRAR folder to a new location.
You can now add programs here, but you will need to make reg file changes manually.
Also add any files and folders you added to Uninstall.lst or they wont get deleted when uninstalling.

Highlight all the files in the new folder (not the folder its self or it will cause errors due to an extra folder in program files/winrar/*your folder*)
Add them to an archive and set these options…
Compression = Best
Create SFX archive
Put recovery record (i always set recover to 3% in advanced tab)
Lock archive

Click the advanced tab then SFX options.
All these options are listed below – took me fukin ages to figure this out, so I wont go into too much detail. Just be carefull with the shortcuts.
To call the installer use…
Setup=uninstall.exe /setup

Dont worry about the icons etc, thats next.

Lets Mod the WinRar Installer
open Resource Hacker and load winrar.

Click action and change bitmap then icons. I usually use the icons from the original winrar.exe as people trust them (I mimic the whole installer page really )

Then click ‘STARTDLG’ in the left panel. In there you can drag and drop the installers window contents. Right click to edit or add an item.
To save any changes there you will need to click ‘compile script’ then save th file (save to a new file again because it freezes sometimes)

Thats about it, roll another fattie and get wasted ;P

Encrypt a text file in a JPG file

Posted on July 14, 2008 by admin | No Comments

Here is a tutorial on how to hide files in Jpg’s. Please note it isn’t the most secure method, because the information is stored in plain text but it’s still cool to play with. A simple solution to make this more secure, is to use encryption on the RAR file when your create it, but thats not the point of this tutorial The idea is to show how files can be ’slammed’ together, to stop the average PC user from finding them.

Step by Step Instructions
You will need the following..

-Windows 2000 / XP (probably Vista, too!)
-Basic Knowledge of the Command Prompt
-WinRar

1. Gather your jpg file and the text files you wish to lodge into it. Here I have a black.txt which which I will slap inside my rider.jpg

2. Add both these files into a new RAR archive.Here the archive is black.rar

3. Open Command Prompt.

4. Go to the folder where your files are located, in this case ‘C:\hidden’

5. Type copy /b rider.jpg + black.rar blackrider.jpg where rider.jpg is the original picture, black.rar is the file to be hidden, and blackrider.jpg is the file which contains both.

6. Test the resulted JPG by opening it with winrar!

7. Enjoy the trick

8. Here is the image I created when making this tutorial! (Obviously rider.jpg and blackrider.jpg are the same image.)





If you own a branded computer or laptop such as Acer, Dell or HP, chances are they only provide you with recovery partition or a recovery DVD without Windows Vista DVD.

There are 2 ways of doing it. The easy way and also the hard way.

Easy way is to download a 120MB ISO file from EasyBCD website. They’ve uploaded a copy of a CD that contains the contents of the “Repair your computer” section of the Windows Vista DVD.
You can download Windows Vista Recovery Disc from here:

Once you’ve finished downloading, burn Vista_Recovery_Disc.iso with Nero or your favorite disc burning software and boot up your computer with the CD.

The hard way is to build a VistaPE environment using the free WAIK download from Microsoft. The Windows Automated Installation Kit (Windows AIK) helps you to install, customize, and deploy the Microsoft Windows Vista family of operating systems. The WAIK is a whopping 992.2 MB in size.

Which method would you use to repair Windows Vista if you don’t have a Vista DVD? I’d definitely go for the easy way. It’s 120MB but at least it’s much smaller compared to 992MB! Moreover, I don’t need to manually build the
VistaPE.
WAIK :

There are so many different ways to turn off your Windows XP computer, let’s look at some of them:

1. The standard approach – click the Start Button with your mouse, then select the Turn Off menu and finally click the Turn Off icon on the Turn Off computer dialog. blink.gif

2. Press Ctrl+Esc key or the Win key and press u two times – the fastest approach.

3. Get the Shutdown utility from Download.com – it add the shut down shortcuts for you. Else create them yourself using approach 4.

4. Create a shutdown shortcut on your desktop. Right click on the desktop, choose New Shortcut and type shutdown -s -t 00 in the area where you are asked to specify the location of the program file. Now you can just double click this icon to turn off the computer. The best location would be your quick launch bar.

5. Press the Win key + R key to open the run window. Type shutdown -s -t 00. [s means shutdown while t means the duration after which you want to initiate the shutdown process].

If some open processes or application won’t let you turn off, append a -f switch to force a shut down by closing all active processes.

6. Win+M to minimize all windows and then Alt+F4 to bring the Turn Off computer dialog.

7. Open Windows Task manager (by right clicking the Windows Task bar or Alt+Ctrl+Del) and choose Shut down from the menu. Useful when the Windows are not responding.

8. open task manager—>click on shutdown—>hold the ctrl key and click on Turn off::::::: pc will be turned off in 3 secs.. fastest method other than hard shutdown

Windows search optimization

Posted on July 10, 2008 by admin | No Comments

Within Windows XP you are able to search your computer for files (Start, Search), but takes some clicking to get what you want! To optimize the search function, you have to make some registry changes. To make changes, navigate to the following key:
HKEY_CURRENT_USER\Software\ Microsoft\Windows\CurrentVersion\Explorer
where you will find some important DWORD-values. Change these values to optimize your Windows search:
SearchSystemDirs=1
SearchHidden=1
IncludeSubFolders=1
CaseSensitive=0
SearchSlowFiles=1 (if you have a tape drive, else: 0)

1. Go to the installation folder of acrobat reader
(C:\program files\adobe\acrobat\reader\.. whatever)
2. Move all the files and folders from the “plugins” directory to the “Optional” directory. (I repeat.. cut and paste the files NOT copy & paste).
Also make sure that acrobat reader is not open else it will lock the files and not allow you to move the files).
Now your acrobat reader will load very fas
t and almost as good as notepad

[but sometimes some pages will be failed while loading then u need to revert back the process]