Re: Hex editor with word password

Tech-Archive recommends: Fix windows errors by optimizing your registry



This newsgroup is for questions about security in Access, the database
product that's part of Office Professional.

You'd be better off reposting your question to a newsgroup related to Word.

--
Doug Steele, Microsoft Access MVP
http://I.Am/DougSteele
(no private e-mails, please)


"kevo" <kbieri@xxxxxxxxxxxxxxx> wrote in message
news:MKJTg.3678$DU3.3458@xxxxxxxxxxxxxxxxxxxxxxx
I recently lost a password to a MSword document i had saved and while
trying to figure out a way to recover the password i came across these
instructions on numerous websites:

1.) Open a protected document in MS Word
2.) Save as "Web Page (*.htm; *.html)", close Word
3.) Open html-document in any Text-Editor
4.) Search "<w:UnprotectPassword>" tag, the line reads something like
that: <w:UnprotectPassword>ABCDEF01</w:UnprotectPassword>
5.) Keep the "password" in mind
6.) Open original document (.doc) with any hex-editor
7.) Search for hex-values of the password (reverse order!)
8.) Overwrite all 4 double-bytes with 0x00, Save, Close
9.) Open document with MS Word, Select "Tools / Unprotect Document"
(password is blank)


Apperently this is a loophole someone discovered that allows anybody to
gain access to a protected word or excel document.
But why the hell would you be hacking into a protected document to change
the password if you can already open it to begin with??
This is so stupid.
If anybody can help me with this, i would be greatly appreciated. I need a
way to regain access to a document and these instructions are not making
sense to me.

kevin


.



Relevant Pages

  • Re: spell checker on form
    ... >Those instructions are as clear as it gets. ... >requires a complex macro. ... >This message is posted to a newsgroup. ... >> protected document" at: ...
    (microsoft.public.word.spelling.grammar)
  • Re: explorer module SHPRRPRT.DLL
    ... If you can't access the Internet from your machine, print out the information list and download them from the Internet on another machine and burn them to a CD or floppy, then copy them to the hard drive of the infected machine. ... Please follow all the instructions carefully, and post back if you have any ... Replies are posted only to the newsgroup for the benefit or other readers. ... to one of the HiJackThis Support Forums below and allow the experts ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • RE: Public Folder in Exchange - SSL certificate server name incorr
    ... Your latest instructions have fixed the problem. ... > This newsgroup only focuses on SBS technical issues. ... we should run CEICW to generate a certificate to ... Restart the IIS Admin service in the services mmc. ...
    (microsoft.public.windows.server.sbs)
  • Re: Spyware damaged IE6
    ... Dealing with Unwanted Spyware and Parasites: ... Also be sure to use the HijackThis. ... Follows the instructions for the HiJackThis log carefully. ... post your log to this newsgroup, but, to the forums as instructed for the ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Internet Explorer breaks my Internet connection
    ... AumHa HiJackThis Forum ... follow all posting instructions carefully to avoid having your log deleted ... Replies are posted only to the newsgroup for the benefit or other readers. ... When this happens I lose my cable Internet connection. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)