Regaining Logon Access |
Opening Password Protected Documents |
||
|
98% |
95% |

| Step 1 | Send an Email to
recovery@rhebus.com giving details of the problem. Answer these questions:- |
We always reply to password recovery request emails. If you haven't received a reply after 8 hrs then either your email or our reply may have got lost or trapped by a spam filter. Try again, phone us or see if we're logged on to Instant Messaging |
|
|
|
Is your computer a workstation/laptop/home computer, a normal server or an Active Directory Domain Controller? |
||
|
|
What operating system is it running? (NT, 2000, XP or 2003) | ||
|
|
Is the boot drive IDE or SCSI? (If it's not a server it's most likely IDE.) | ||
|
|
Does your computer have a floppy disk drive? |
We charge £39 for:
Payment can be made using Creditcard, Debitcard or PayPal
|
|
| Step 2 | We'll then email you back with instructions on how to pay us
by creditcard, debitcard or Paypal using a secure on-line payment systems.(If you're a UK registered company or institution we'll accept purchase orders and company cheaues - details here.)At this point we may also require some assurances that you are legitimately entitled to access the computer such as a fax on company paper or a phone number where we can actually contact you. We charge a fee of £39, £59 or £79 depending on the operating system, as detailed opposite. You pay the fee up front before we start and we promise to make a full and prompt refund if we fail to get you Administrator-level access to your computer or Windows Domain. Given Human Nature and the anonymity of the Internet, we believe that paying upfront is the only way the scheme will work. |
||
| Step 3 | When your payment has been confirmed we'll
send you the following by email:- 1 - Details of the files you need to download. 2 - Instructions on how to perform the password recovery procedure.3 - Our phone number, in case you need help.
It's entirely up to you whether you want to attempt the recovery process yourself or have us guide you through it over the phone. If things go smoothly you should be logged back into your computer in around 30 minutes. Server computers can take a little longer as the initial attempt may run into hardware-related problems such as no floppy disk drive, a missing SCSI driver, the wrong boot-device order, a password-protected CMOS setup etc. On rare occasions the recovery process can extend over several days to allow for adjournments for you to obtain any tools or equipment required, for us do some research or analysis of the problem or for both of us to just fit the time required into our schedules. |
||
| Step 4 | Once you've regained access to your
computer, your Desktop may not look the same as it did the last time you saw
it and your files
and email may not be in their usual places. This will be because you've
logged on using a different account and perhaps, if you've just disconnected
from a network, the username you previously used may not exist anymore. As part of our service we'll guide you through restoring your previous Desktop. |
||
| If you're happy with our charges and just want to get back into your computer
as soon as possible then call 07876 616685 from within the UK. (+44 7876 616685 from outside the UK where "+" represents the code needed to access international numbers.) If the call goes to VoiceMail, leave your number and email address. Check that it's not between midnight and 7.30am in the UK and then try another call after 5 minutes.
Also send an email, as soon as you can, to recovery@rhebus.com because time can be lost if your email address or details of files you need to download are misheard over the phone. |
07876 616685 is a
standard UK mobile/cell phone number.
|
||
|
You can see if we're on-line with Instant Messaging. If we are, you're welcome to discuss your problem or start the recovery process. |
|||
|
AIM: |
rhebushelp
|
||
|
MSN: |
helpdesk@rhebus.com |
||
|
Yahoo: |
rhebushelp |
||
|
ICQ: |
230710786 |
||
| When you've spoken to us (or right now
if you're desperate) you can pay the
workstation/laptop/home computer fee of £39 by clicking on the PayPal button opposite. (PayPal now accept creditcard payments from non-members.) |
| Don't use these links if you have a
server computer - we'll send you a different one. Making a payment reserves your place in the queue and we promise to refund any payments made in error.
When things go smoothly it can take as little as 30 minutes from initially contacting us to you getting logged back in.
If you're not ready to start straightaway, you don't have access to the Internet from another computer or you need further information then please don't telephone, start with an email as outlined in Steps 1,2 and 3 above. |
| Our customers generally fall into 2 categories:- | ||||
| 1 - | Those who urgently need to regain access to their computer. | |||
| 2 - | Those who desperately need to regain access to their computer, like right now! | |||
| We appreciate your situation and
try our best to minimise any delays. The Password Recovery Service is open for business:- |
Rhebus Networks is based in south-central England. The times shown on the left are UK times. The UK is on GMT (Greenwich Mean Time) from October to March and GMT +1 from March to October.
These times are: 5 hours ahead of New York, 8 hours ahead of California and 10 hours behind Sydney, Australia. |
|||
Weekdays: |
08.00am to 11.00pm |
|||
Weekends: |
10.00am to 10.00pm |
|||
| This is when a real
person will answer the phone and when we're regularly checking email. Outside of these times you might get lucky but don't expect a response between midnight and 07.30am. During our operating hours your call can still go to VoiceMail (maybe we're out-of-range, on another call, or any one of the other reasons calls to mobile phones fail). We normally hear VoiceMail messages within an hour, but maybe wait 5 minutes and try a second call. |
||||
| Some commonly used passwords: | ||
|
|
password | |
|
|
(blank) | A blank password for the administrator account is not unusual |
|
|
(same as username) | |
|
|
secret | |
|
|
default | |
|
|
abcdefg | Try abc, then abcd etc |
|
|
12345678 | Try 123, then 1234 etc |
|
|
(the name of your company or organisation) | |
|
|
A detail about the person who chose the password: their pet, spouse or
children's names, a sporting interest, hobby or obsession. |
|
| More Things | ||
|
|
If it's a Windows 95, 98, or ME computer demanding a
password to log-on, just press ESC to dismiss the logon screen and gain local access. To avoid this happening again delete all files with the filename extension PWL in the c:\windows folder. |
|
|
|
If you have Windows XP Home try restarting in Safe Mode by pressing the F8 key early in the boot process. In Safe Mode, at the Welcome Screen you should see a new user icon called Administrator. See if you can log on with no password. Then go to Control Panel - User Accounts and either change or remove the password for your regular user account. | |
|
|
Do you have an Emergency Repair Disk or System State Backup that contains a known administrator password that's not too out-of-date to be useful? | |
|
|
If you have a password that you're sure should work, is the Domain Name spelt correctly in the logon box? Did you spell "administrator" correctly? | |
|
|
If you're at the Windows XP Welcome Screen, wondering how you log on as Administrator, there's no need to boot into Safe mode, just press Ctrl+Alt+Del twice. | |
| Our basic method is to send you, over the Internet, 1 or 2
self-extracting floppy disk image files which you use to make bootable
floppy disks and then use these disks to boot your computer. This allows
password-related files on your computer to be accessed and edited "off-line"
- even on NTFS partitions. Many newer computer don't have a floppy drive. No problem, we'll send you an ISO CD Image file from which you can make a bootable CD. We'll also send you a set of instructions so you can decide to:- Either:- Carry out the procedure yourself and, if necessary, exchange emails to sort out any difficulties or misunderstandings, Or:-
The choice is yours. We're in the UK and if you are too then phone call costs are negligible, so you'll probably want to phone us. If you're outside the UK the cost of international phone calls becomes a factor as does the number of hours time difference between us. If it's not urgent that you regain access to your computer you'll probably try the email route - you can still phone us if you get stuck or things are progressing too slowly. Instant Messaging is a free alternative to a phone call - see above for our account details.
We have several different procedures for password recovery, each suited to different circumstances and none of which works in all cases, so if "Plan A" fails we've usually got a "Plan B" or even "Plan C" to try. We can handle all flavours of Windows - workstation and server - and we're used to dealing with obstacles such as SCSI drives, RAID arrays, password-protected CMOS or no floppy drive. Although you pay us the recovery fee before we start: We guarantee success or your money back. |
Points To Note
| As a precaution, where possible, we first make backups of any files we're going to edit. | |
| For Server
computers we include a 14 day warranty in case, after an apparently successful
password recovery, you experience problems or unexpected consequences resulting from
the password recovery process. If any such problems arise we'll help you sort them out for no extra charge. |
|
| How safe is it? Our methods
involve gaining off-line access to the hard disk and then editing a few files.
There are no intrinsically risky procedures - such as editing the
partition table - and, although we can't quite claim a 100% success record, we've never caused any data loss. If you've lost access to a computer, you're already looking at a reinstallation of the operating system with many additional hours to set-up all the programs you use - how much of a risk of data loss is that? (Do you know where all the installation discs are?) The good news is that your data is still intact on the hard drive - you just can't get at it at the moment. If this data is so important you can't bear the thought of life without it then seek a second opinion before going ahead with our recovery service and perhaps try connecting the hard disk to another PC, as a secondary drive, and make a copy of the data first. Read our Disclaimer here. |
|
If your
organisation has a strong emphasis on security you might be worried about
involving an outside company, who you only know from this website, with
something as central to your security as passwords. Is it a sensible thing to do? Will you get into trouble with your boss? What
secrets must you reveal to us? Here's a guide:-Risk 1 - Revealing your passwords to usMost of the time we're replacing a lost password and when it comes to the part where you enter the new password we don't need to know what you choose and we can't see what you type in. Sometimes we do need to know the new password in order for us to insert it into a registry file which we then send you to copy to your computer. However, as soon as you're logged in as the administrator you can change it again from within Windows. Risk 2 - Revealing other details about your organisationSometimes the only solution is to discover the lost password and this involves you sending us some registry files or maybe just reading some long number over the phone. Either way we'll end up knowing what the original password was. You will, of course, change it straight away but the original password may reveal more than you'd like about your password choosing strategy. For an extra fee, and a longer and more involved process, we can get you to find the lost password without sending us anything or revealing any of your secrets. Risk 3 - Downloading our softwareYou may be worried that the files we send you contain a virus, a trojan, spyware, a key logger or other assorted evils. They don't, of course, but to play safe you might want to isolate the computer we're working on from your network and the Internet and, after you're logged back in, scan it with everything you've got before allowing it to be reconnected. |
In case you missed it before here it is again, a bit louder:-
We guarantee success or your money back!
If a lost password is preventing you from accessing one of your computers and you're still puzzling over that question:-"Is regaining access to my computer worth £39?" or perhaps you've moved on to:-"Can I trust this mob?" then the following Frequently Asked Questions section is included as an encouragement to you.Here's a summary of your situation: - |
|
|
|
You can't use your computer until the problem's fixed. |
|
|
You're cut off from your email and important personal data and worrying if you'll ever see it again. |
|
|
If you ask Microsoft, their only solution is for you to remember the password (this really is the best advice if you can manage it!). Sometimes they whisper "Look on the Internet". You have, and here we are! |
|
|
You have to find someone else who knows how to recover passwords or re-install the operating system for which you'll need to organise a site visit or take the computer round to a repair shop and leave it with them. |
|
|
You might have to admit to your boss or colleagues you've lost the password. |
|
|
If the computer's a Domain Controller you might have to rebuild the entire Windows Domain. |
Q1 - I've heard that it's impossible to access Windows NT/2000/XP/2003 systems when all logon passwords have been lost, giving no choice except to re-install the operating system from scratch - I even think it was someone from Microsoft who said it! Yet you claim to be able to do it. What's the catch?
A1 - No catch. You don't need to have made any backups of your system, have an Emergency Repair Disk, Password Disk or any account that can still log on. Our techniques work with NTFS and FAT32 partitions and, only in extreme cases, involve a second installation of the operating system on the same drive. The most accurate statement we've heard from Microsoft on the subject is their law number 3 of "The Ten Immutable Laws of Security" which states:- "If a bad guy has unrestricted physical access to your computer, it's not your computer anymore". Read the other 9 laws here. With our service it's you who has the unrestricted physical access and we're not the bad guys, we're the cavalry! It's prudent that Microsoft should remain tight-lipped about the existence of ways to defeat its security systems - even to members of its own staff.
Q2 - Microsoft are quick to remove any weaknesses that are discovered in the security components of their products by producing software patches and service packs. Why haven't they defeated the techniques you use?
A2 - They might do at any time. The emphasis, with the security vulnerabilities we hear about, is remote attacks on computers coming from over the Internet, a LAN or phone line and not people breaking into the computer they're sat right in front of. All our techniques require at least 15 minutes of unrestricted access to the computer itself. Perhaps the methods we use are too difficult to defeat or perhaps Microsoft accepts that, as long as people forget passwords, all security systems need a backdoor means of access. Over time we expect some of our techniques will cease to work - XP and 2003 have already closed a few doors - however as recently as February 2003 a new method of password recovery was uncovered for Windows XP which we've added to our arsenal. If security systems were invulnerable we'd find people living in their gardens because their house keys were lost and cars, with their keys locked inside, would have to be scrapped.
Q3 - Do you always succeed in regaining access to computers?
A3 - No but our success rate is well over 90%. The main reasons for failing are:- a) SCSI Hard Drives. We have drivers for most SCSI adaptors but sometimes it's difficult to identify the correct model. If your computer isn't a server it's unlikely to have SCSI drives. b) Communication Difficulties. Occasionally we fail and the reason's unclear but the likely cause is the difficulty of communicating instructions and observations via email and over the phone.
Q4 - Should you be doing this? Is it moral?
A4 - Real-life locksmiths practise a trade considered worthwhile and honourable in our society. In some areas they need to be licensed or police-checked but are not considered to be the allies of criminals. While not yet regulated, we strive to operate a confidential yet responsible service and check, as best we can, the validity of people wanting to use it. The biggest disincentives against us being exploited for dishonest ends are:- a) You have to pay to use us. b) You have to provide a valid email address and use a credit card. More organised or professional criminals, not worried about a) or b) would already know the methods we use. This page gets 7 times more hits than any other on this website, indicating that there are plenty of people out there suffering password problems.
Q5 - My company takes computer security very seriously. Should we be concerned that there are people out there who can get round all our security measures?
A5 - Not if you have good physical security. If your Domain Controllers are in a locked room or inside a locked (and well ventilated!) cabinet with, perhaps, intrusion alarms and video monitoring, it's going to make it hard for someone to get time alone with your servers. Other, simpler precautions you can take are to disable, or better still remove, the floppy and CDROM drives and use a couple of security screws, that need a special tool to remove them, to stop the case being opened. All of these things will at least delay any would-be intruder.
Q6 - What do you mean, exactly, by Password Recovery?
A6 - When you're locked out from your computer there are 3 things we can achieve to get you back in. These are summarised in the following table:-
|
Method of Access |
Difficulty |
Consequences of Procedure |
|
1 |
Discover the current password for the administrator account and/or passwords of all other accounts. |
Hardest, sometimes impossible. A password can be 127 characters long and contain special unprintable characters. All the computers in the world labouring for the age of the universe wouldn't find such a password. |
None |
2 |
Set a known, new password for the administrator account. Leave all other accounts unchanged. |
This is what we normally aim for. |
The administrator will lose Recovery Agent status for any users already making use of Microsoft's Encrypting File System (EFS). Digital certificates associated with the account will be invalidated. These things are hardly ever important. |
3 |
Set a blank password for the administrator account and delete all other accounts. | We attempt this when all else has failed. | Same as 2 plus:- All existing users, except the administrator, will lose their "profile" (personal software settings such as desktop appearance and Favourites). No data is lost, but it can be tricky to put everything back to normal. If, previously, you always logged on using the administrator account then there'll be no problem. |
Q7 - Why do you charge extra to gain access to servers?
A7 - Servers often have SCSI hard drives and other factors which take longer to deal with. Server passwords are more valuable than workstation ones. |
| If you're a UK registered company or institution you can fax
us a purchase order on your company's headed paper and we'll then invoice you for the fee after password recovery has
been successful. Send the fax to :- Password Recovery, Rhebus Networks on 0870 0940102 and include something like the following (omitting the parts that don't apply):- "I hereby request to use your Password Recovery Service to regain access to my Windows NT/2000/XP/2003 Workstation/Server/Active Directory Domain Controller. I understand this costs £39/£59/£79 + VAT which is only payable when a username and password combination has been obtained which gives me Administrator-level access to the local computer or Windows Domain." |
| We always try to take appropriate precautions and make backups where possible but, with computers, no procedure is 100% safe and so by applying to Rhebus Networks for this Password Recovery service and consenting to follow any advice or instructions given or use any software supplied, you thereby confirm that you accept full responsibility for any damage to equipment or loss of data or other information that might result, whatever the cause. |
| Microsoft Office documents, PDFs , Zip files and many other commonly used file
formats can be saved so that a password is required to re-open or make changes
to them. This is fine until you forget it, or the person who chose it has left your company - maybe on unfriendly terms. We have a collection of techniques for discovering lost passwords that work in the majority of cases. You don't pay anything until we've sent you proof that we've successfully opened your file. |
| Step 1 | Send an Email to recovery@rhebus.com
with the file as an attachment.
There's no need to check with us beforehand, unless the file size is greater than 5 megabytes. |
We charge £35 to open a Password-Protected
Document
Payment can be made using Visa or MasterCard or PayPal |
|
| Step 2 | When we've unlocked the file we'll email you
back to let you know. We'll include a short extract from the file or a brief
description of its contents. We'll also send you instructions on how to pay us. |
||
| Step 3 | You use your creditcard to make a payment of £35 using a secure on-line payment system. | ||
| Step 4 | As soon as your payment is confirmed we'll email the password to you. | ||
|
|
|||
Points To Note
| On average the process takes 24 hours. If you send your initial email during normal UK business hours (5hrs ahead of New York, 10hrs behind Sydney) and luck's on your side, the whole procedure could take just a few hours. | "Thanks for cracking this file for me. Nice
to know that you guys are as good as you are."
|
||
| We don't always succeed in recovering a password and, if we've had no success after 24 hours, we'll email you with the status of the recovery attempt and whether there are any further prospects of success. | |||
| Tell us, in
your initial email, any information about the password - even if it's only
speculation such as "I think it might begin with an R", "it's 7 letters long", "it's a French word". For ZIP files, if you happen to have one of the files which are trapped in the ZIP archive also available in unzipped form then please send this file as well, as it can help to unlock the whole ZIP archive. |
|||
| Read what Microsoft have to say about lost file passwords here. |
| If we don't succeed in obtaining the password you don't pay anything. If you have paid us and for some reason the password doesn't work and we can't subsequently supply you with the correct password or send you the file itself with password protection removed, we promise to give you a full and prompt refund. |
|
| Within 24 hours of completing the recovery process we will permanently delete all copies of your file from our systems. | |
| If you don't want us to email you the password you can specify some alternate method in your original email - such as phoning or text-messaging to a UK mobile phone. | |
| We promise not to disclose any details about you, the file or its contents to any third party. | |
| If the document turns out to be blank there's no charge. | |
| If the document appears to be gobbledygook we'll warn you before taking your payment. (Maybe that's what you're expecting.) | |
| If you send us multiple files and one file has the same password as another then you don't pay a fee for that file. It's one fee per different password. | |
| If you don't want the file to leave your premises or don't
want anyone outside your company to see its contents, this is possible too
for an extra fee and a more involved process. If you have any of these special requirements, email us and we can negotiate terms. |
|
| We won't pass your email address on to any third parties or ever send you follow up emails such as newsletters or promotional material. |
| This service is designed for genuine cases where a lost password is
preventing you accessing data which you own or have a legal and moral right to use. We will need to open each file in the course of confirming the password and will briefly examine its contents. If the contents appear suspicious we may need some further assurances from you before revealing the password.
Some Other Password Problem?If you have a password-related problem, not specifically mentioned on this page, send an email explaining the problem to recovery@rhebus.com and we'll see if we can help. We can't recover lost Web Mail or Instant Messenger passwords and, in general, we can only help when the object or resource needing a password is located on your local machine or network. |