Password Restore Software?
 

Does anyone have or know of a way to get back your passwords you've forgotten. I just went thru MS removing a piece of Ransomware. Once I got my PC back I couldn't remember my email password, nor find it anywhere where it was stored. Now I'm in a pissing contest with MS about get them to let me reset my password for my Hotmail account.

I've found several but I've no idea on how they work. It says you can get your IE email passwords back but I've no idea how to work it, or them.

Ugh..i know this feeling too well! Worst case scenario is when it happened to me when i was super desperate. I would suggest that you go for Stellar-Phoenix Password Recovery software. You can access it easily on their website. It's actually quite user friendly, and it doesn't format your system. Losing passwords is a real pain in the wrong place, i know this because i have had to format so many times until i stumbled upon this amazing software.

Apart from how storing passwords anywhere outside of your head is a debatable idea, don't you have back ups?

I have no idea how a password recovery service/system could work, Gary. Are they guaranteed? My suggestion is keep at it with MS support, be polite and persistent and eventually someone will have the sense to help.

So, what's the story with the ransomware? Was it the same as the Wannacry episode? How did you get around it, did you have to pay to get your system unlocked? Any idea how you got it?

Ditto on Neal's questions.

Prevention is worth a pound of cure. So this time, follow Neal's advice and be nice to Microsloth, trying as that may be.

I use a program called KeePass2, which is free and multiplatform--works in Windows and Linux with the SAME DATABASE! That way I don't have two databases fighting each other all the time. Just do a Google search for KeePass.

The KeePass database of passwords is password protected, unlike your "secure" Internet Exploder or Chrome. Firefox does have a password protected password database, but it isn't as secure as KeePass by a long shot. KeePass not only saves all your passwords by website, but it has the ability to generate random passwords to rules that you specify, at will. I recommend keeping the KeePass password file on a flash drive and removing the flash drive when you're not using your computer. That way ransomware can't lock up your passwords.

Now, as to ransomware itself. We can't assume that ANY form of protection is adequate. There are mighty expensive "anti-ransomware" snake oils out there and I believe they're all exactly worthless.

They're worthless because these ransomware attacks typically use you as the trojan force, voluntarily installing the slimeware on your machine. These social engineering guys are good. You can be alert, but you CANNOT be alert enough. If ransomware wants on your machine, it will find a way to get there.

First of all the ransomware attacks are directed toward older, un-updated machines, usually Windows 7 or XP. Second, they are directed toward public institutions and financial institutions. As a place without deep pockets, we are collateral damage, not really targets of ransomware. But your experience shows that we are not immune.

Properly managed, ransomware is completely harmless: a nuisance, not a show stopper. You never need to pay the ransom, even $300. The solution is less than $100.

First, buy an external hard drive the same capacity as your computer's hard drive, or the combined capacity of all drives permanently attached to your computer. Ransomware seeks out all connected drives and locks up all of them, so you must protect all of them. Therefore your procedure is back up, then disconnect the external drive until your next backup. This is crucial or your backup will also get locked.

Now download a free piece of software called Veeam Endpoint Backup. You can use commercial software, like Acronis True Image, but I've found that since Acronis went all gaga over cloud backup their software has gotten unnecessarily complex and difficult to use. Veeam Endpoint Backup is simple and does the same thing.

Let me talk about backups. What you're familiar with is file backup systems. They back up all your data files only. When disaster strikes you have to wipe out your hard drive, reinstall Windows, go through the activation process, install each and every program you've lost (you DO have the installation files, don't you? You DO have a written list of all passwords, favorites, settings, e-mail addresses.....CRAP! NOBODY can have all that!) But you have to restore all that. Where'd you find that wallpaper you loved so much? Damn!

The second, and the only backup scheme that makes sense is drive image backup. It is a file that contains your entire hard drive, Windows, programs, data, settings, favorites, e-mail addresses, passwords........the whole kit and kaboodle. When you restore a drive image, your entire hard drive as it existed when you made the backup is restored. You boot your system and it is as if NOTHING HAD EVER HAPPENED. It just works.

Remember, that when your computer is backed up, you can't run Acronis True Image or Veeam Endpoint Backup. You have to make a system recovery disk. Just like Subsim, Acronis and Veeam realize that they should use a secure and superior operating system, so they use Linux. When you boot the rescue disk you will be using Linux to recover your Windows installation.

The backup disk will safely delete and wipe everything off your primary hard drive and restore the image without the ransomware. A couple of hours later it will be done, you will reboot your main hard drive and it will be as if the ransomware never existed.

Which brings up the REAL defense to ransomware. Switch to Linux and just laugh at all the foolish Windows people. Even THEY have to depend on Linux to get their systems back IF they properly defend themselves. Hey, you're working on a Linux system right now if you're reading this post. Subsim is hosted on a Linux server.

Yea, KeePass(2) is pretty much standard nowadays as are full back ups.

Another idea that comes to my mind is using either a virtualisation layer or separate protected machines.