If you forget Windows user account password, especially administrator password which once lost together with user account passwords, will make you unable to logon and access to Windows desktop, you can crack the user account passwords, guess the password by brute force, reset the password via backdoor, or some other methods. Another method to solve the forgotten or lost Windows login account password problem is by using DreamPackPL which allows users to login to a password protected Windows and have full access to Windows XP or Windows 2000 without the need of a valid password or the need to change or replace the existing (old) password.

DreamPackPL allows any user to bypass Windows login security and logon to Windows XP or Windows 2000 computer even though the user have forgotten or lost the valid password, and without the need to reset or modify or change the existing passwords that are currently set with the accounts. DreamPackPL (version 2oo4.o6.1o or v2.30) is actually built on DreamPack which consists only the hacked and patched sfcfiles.dll, but with graphical user interface (GUI) and built-in function to create an ISO image that can be burnt to CD. DreamPackPL is available as free download. When executing, DreamPackPL has 3 options:

DreamPackPL

The first option, Install (need administrative rights) will install DreamPack and automatically replace original sfcfiles.dll with patched version of sfcfiles.dll. After reboot, DreamPack will turn off Windows logon password check so that user can virtually access to every local account without knowing the password and modifying the password.

The second option, Create CD will create a new bootable CD with DreamPackPL by using original Windows (Windows XP or Windows 2000, both will work to get access to Windows XP or Windows 2K) installation CD. The CD ISO image creation process with DremPackPL can only be done in Windows 2000/XP, and free space of at least 400-600MB is needed. After the ISO image file is created, it has to be burnt to CD by using any CD burning or writing program such as Ahead Nero. Alternatively, simply download the pre-created bootable dreampackpl_iso.zip (download link below) which pre-loaded with patched sfcfiles.dll to bypass the Windows logon security check. Extract the zip file to get the ISO image and then burn the image to a CD.

Option 3 will extract SFCFILES.DLL file to selected path, which can be used to manually replace the original SFCFILES.DLL on the target system’s \Windows\System32 folder if user can boot the system using other software such as bootable DOS, BartPE, PE or XPE and the system uses FAT partition.

For the following hack into Windows XP and Windows 2000 machine without valid password yet not reset any password tutorial, we’ll follow option 2.

  1. Physical access to the target destination PC is a must.
  2. Download DreamPack PL:

    Executable: dreampackpl20040610.zip
    Patched ISO: dreampackpl_iso.zip

    If you’re downloading the DreamPackPL executable, create a patched bootable ISO image.

  3. Burn or write the ISO image to CD / DVD / USB flash drive.
  4. After the boot CD disc is created, restart the PC, and boot from the CD/DVD drive or USB.
  5. User will come to Windows 2000 (or Windows XP) Setup screen.

    DreamPackPL Tutorial

  6. User must load system in Recovery Console, so press R to continue and install DreamPackPL.
  7. Press C to install DreamPackPL by using Recovery Console.

    DreamPackPL Tutorial

  8. Then select which Windows (Windows XP or Windows 2000) installation that want to log onto by keying in appropriate number (normally 1 for system with only 1 Windows installation).

    DreamPackPL Tutorial

  9. Key in any password when prompt for Administrator password.
  10. Make a backup of the original sfcfiles.dll by using the following command:

    For Windows XP:

    ren C:\Windows\System32\sfcfiles.dll sfcfiles.lld

    or

    For Windows 2000:

    ren C:\Winnt\System32\sfcfiles.dll sfcfiles.lld
  11. Copy the patched sfcfiles.dll file from the CD to \Windows\System32 (or \WinNT\System32 depending on your Windows installation) folder by using following command (CD drive in this example is D, change according to your CD drive letter. You can use “map” command to display all drive letters):

    For Windows XP:

    copy D:\i386\pinball.ex_ C:\Windows\System32\sfcfiles.dll

    For Windows 2000:

    copy D:\i386\pinball.ex_ C:\Winnt\System32\sfcfiles.dll

    DreamPackPL Tutorial

  12. Type “Exit” and press Enter to exit from Recovery Console, and restart the PC, and let the Windows boot normally.
  13. Once Windows display Windows Logon prompt, key in “dreamon” DreamPackPL command (without quotes) in the user name or password field to display the DreamPackPL menu.

    DreamPackPL Tutorial

  14. Click on the top graphic on the DreamPackPL menu to display the commands options and configuration menu.
  15. Navigate to Command and click on Command Setting options.
  16. Enable the God-Password setting by selecting (check) the tick box at the end.

    DreamPackPL Tutorial

  17. Exit from all DreamPackPL and type “god” in the user name or password field on Windows Logon screen to log on into Windows, bypassing all users or administrator account password.
  18. Another option is to navigate to Password at DreamPackPL commands settings menu and select (check) the “Logon with wrong password and hash” option, which allows user to log-in into Windows using any administrator or user account with any correct or wrong password.

DreamPack or DreamPackPL has the following features:

  • Configurable command interpreter in logon window (DreamOn, PassOn, PassOff, LogonLoggerOn, LogonLoggerOn, LogonLoggerOff, DreamDesktop, God-Password)
  • Three logon modes: standard with password, with wrong password and wrong hash (LM+NT), with given hash (LM+NT)
  • Hash Audit (show hashes of all users) and Hash Calculator
  • Executing programs at the logon desktop with system privileges
  • Loading Explorer shell at new desktop and work with system privileges
  • Logon Logger (date and time, user name, password, character codes in password)
  • Disabling Windows File Protection (always when using DreamPack).

Note: You may need to disable the anti-virus protection software in order to use DreamPackPL to bypass Windows password logon security check to login into Windows system without any password modification or reset to existing accounts’ passwords, nor leave any trace of logging on. DreamPackPL can be easily uninstall by choosing Uninstall from commands menu, and the original sfcfiles.dll will be automatically recovered from sfcfiles.lld backup file.

Update: Ways to reset or recover your lost password

You May Also Interested In: