REGISTRY-гээд хэрхэн орох вэ ??

1. Start Menu ор.

2. Run дар.

3. regedit гэж бичээд ENTER дар.

Гэхдээ доор заасан аргаар үзэхэд зөвхөн encrypt хийгдсэн пасс-уудл хараглах болно. Нэтэд бэлэн байдаг decrypt ашиглаад задалж болно.

Яг хаана хадгалагддаг вэ!

# Internet Explorer 4.00 - 6.00:

"HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider".

# Internet Explorer 7.00 - 8.00:

1. AutoComplete passwords are stored in the Registry under

 HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2.

 2. HTTP Authentication passwords are stored in the Credentials file under

 Documents and Settings\Application Data\Microsoft\Credentials

 , together with login passwords of LAN computers and other passwords.

# Firefox:

Firefox version-гоосоо хамаарч signons.txt, signons2.txt, signons3.txt гэсэн 3-н файл байна. Мэдээж та Firefox3 ашигладаг бол signons3.txt болно

[Windows Profile]\Application Data\Mozilla\Firefox\Profiles\[Profile Name]

# Google Chrome Web browser:

Пассууд доорх замд байрлана.

[Windows Profile]\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data

# Opera:

Пассууд доорх замд байрлана.

[Windows Profile]\Application Data\Opera\Opera\profile

# Outlook 2002-2008:

Пассууд доорх замд байрлана. 

HKEY_CURRENT_USER\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\[Profile Name]\9375CFF0413111d3B88A00104B2A6676\[Account Index]

# Windows Live Mail:

Пассууд доорх замд байрлана.

[Windows Profile]\Local Settings\Application Data\Microsoft\Windows Live Mail\[Account Name]

 The account filename is an xml file with .oeaccount extension.

# ThunderBird:

Пассууд доорх замд байрлана.

 [Windows Profile]\Application Data\Thunderbird\Profiles\[Profile Name]

 You should search a filename with .s extension.

# Google Talk:

All account settings, including the encrypted passwords, are stored in the Registry under

 HKEY_CURRENT_USER\Software\Google\Google Talk\Accounts\[Account Name]

# Google Desktop:

Пассууд доорх замд байрлана.

 HKEY_CURRENT_USER\Software\Google\Google Desktop\

Mailboxes

\[Account Name]

# MSN/Windows Messenger version 6.x and below:

The passwords are stored in one of the following locations:

1. Registry Key: HKEY_CURRENT_USER\Software\Microsoft\MSNMessenger

2. Registry Key: HKEY_CURRENT_USER\Software\Microsoft\MessengerService

3. In the Credentials file, with entry named as "Passport.Net\\*". (Only when the OS is XP or more)

# MSN Messenger version 7.x:

Пассууд доорх замд байрлана.

HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Creds\[Account Name]

# Yahoo Messenger 6.x:

Пассууд доорх замд байрлана.

HKEY_CURRENT_USER\Software\Yahoo\Pager

("EOptions string" value)

# Yahoo Messenger 7.5 or later:

Пассууд доорх замд байрлана.

HKEY_CURRENT_USER\Software\Yahoo\Pager - "ETS" value.

The value stored in "ETS" value cannot be recovered

back to

the original password.

# AIM Pro:

Пассууд доорх замд байрлана.

HKEY_CURRENT_USER\Software\AIM\AIMPRO\[Account Name]

# AIM 6.x:

Пассууд доорх замд байрлана.

HKEY_CURRENT_USER\Software\America Online\AIM6\Passwords

# ICQ Lite 4.x/5.x/2003:

Пассууд доорх замд байрлана.

 HKEY_CURRENT_USER\Software\Mirabilis\ICQ\NewOwners\[ICQ Number]

# ICQ 6.x:

Пассууд доорх замд байрлана.

[Windows Profile]\Application Data\ICQ\[User Name]\Owner.mdb (Access Database)

# Digsby:

Пассууд доорх замд байрлана.

[Windows Profile]\Application Data\Digsby\digsby.dat

All other passwords are stored in Digsby servers.

# PaltalkScene:

Пассууд доорх замд байрлана.

HKEY_CURRENT_USER\Software\Paltalk\[Account Name].