Here's the quick way to run SAMInside:
Once booted into the CD, go to Programs -> System Tools -> InsidePro Tools -> SAMInside. Once it's loaded, go to File -> Import SAM-file... Then you can either browse to your HD and go to C:\Windows\system32\config and click and open the SAM file or just type it in and click open, such as (if C: was your main HD)
CODE
C:\Windows\system32\config\SAM
NOTE: You may need to change Windows to WINNT, depending on your installation.
Then it might say the SAM file is additionally encrypted with the SYSKEY algorithm. So now you need to open the SYSTEM file located in the same place.
Once you do that, it should now show all of the user (or maybe just Admins) on that computer with checkboxes next to each. You can uncheck the Guest, SUPPORT, and HelpAssistant ones as those aren't needed. The main one you want is the Administrator one if you want to access the Recovery Console but you can also do other ones as well.
Now comes the fun part. There are three different ways of "cracking" the password---either by brute force, masking, or by dictionary. If you absolutely know part of the password already, then type it into the little password text box at the bottom of the window and go to Search -> Mask attack -> Start on LM Hashes... Then just give it lots of time to try and find the password. If you don't know it at all, you can either try the dictionary approach or the brute-force. Dictionary may not take as long as brute-force, but you're not likely to get the password. I would suggest doing them on the LM Hashes first and if it finds nothing after a long time, then try the NT Hashes (though usually they are in the LM Hashes.
Depending on your system, it could take a long time to find/crack the password. I know that on my Athlon FX-53 system, it said it was going at 3 x 10,000,000 p/s (passwords per second and 5 being the number of users I was trying to crack), but every system will differ. It will take lots of time, so just sit back and do something else while it goes. The stronger the password, the longer it takes. The passwords will probably start showing themselves in bits and pieces until it finds the whole thing.
Anyway, I hope that helps. It's a great program, even though it's time consuming. I'm disappointed that the Password Renew didn't work at all. Oh well...
