Raymond.CC Blog

Yesterday I talked about how to retrieve serial numbers or CD keys from your computer using KeyFinder Thing.
Today, I will show you on how to recover PASSWORD that’s saved in your computer.

Multi Password Recovery (MPR) – multifunctional password decryption solution for Win95/98/W2K/XP/2K3. MPR instantly finds and recovers passwords from more than 60 popular applications (FTP, E-mail clients, IM, Browsers and so on). It also shows passwords hidden under asterisks, copies SAM file, can generate new passwords. Under W2K/XP/2K3 MPR is able to process blocked for reading files.



Multi Password Recovery can recovery saved password from:

FTP clients
==========================================
Windows/Total Commander 4.x, 6.x
FAR Manager 1.6x, 1.7x
WS_FTP 5, 6, 7, 8, 9 Home/Pro
CuteFTP v. 1.4, 1.6, 1.7, 1.8, 2.0, 2.5, 2.6, 2.8, 4.0, 4.2, 1.0 pro, 2.0 pro, 3.0 pro, 6.0, 7 home/pro
FlashFXP 1.x-3.x
FileZilla 2.x
FTP Commander Pro/Deluxe (mostly all versions)
FTP Navigator (mostly all versions)
BulletProof FTP Client 1.x, 2.x
SmartFTP 1.x, 2.x

E-mail clients
==========================================
Outlook Express 6.0
Outlook 2000 (MSO 2000), 2002 (MSO XP), 2003 (MSO .NET)
Mozilla Thunderbird 1.0
The Bat! v. 1.x, 2.x, 3.x
Becky 2.x
Eudora/Eudora Light (mostly all versions)
Gmail Notifier (mostly all versions)
Mail.Ru Agent 4.x
Opera Email Client
IncrediMail (mostly all versions)
Group Mail Free (mostly all versions)
Vypress Auvis 2.x
PocoMail 3.x, 4.x
Forte Agent 3.x

Browsers
==========================================
Opera 6.x, 7.x, 8.x, 9.x
Mozilla Browser 1.7.x
Internet Explorer 4, 5, 6, 7
Mozilla Firefox (mostly all versions)

Dialers
==========================================
Windows Remote Access Service (RAS), VPN and Dial-up passwords
EType Dialer 1.x
MuxaSoft Dialer 3.0, 4.0, 4.1
FlexibleSoft Dialer 2.x-4.x
Advanced Dialer 2.x
Dialer Queen 1.x
VDialer 3

Download managers
==========================================
Download Master 4, 5
GetRight 5
FlashGet (JetCar) 1.6, 1.71
Internet Download Accelerator 5

Instant messengers
==========================================
QIP 2005a
Miranda IM 0.2.x, 0.3.x, 0.4.x
ICQ 99b-2003b, Lite 4, Lite 5
MSN Messenger 1.x-7.x
Windows Messenger
Yahoo! Messenger 3.x-6.x
&RQ 0.9
R&Q 10xx
Trillian 0.x, 2, 3
AOL Instant Messenger (older versions)
GAIM 1.x
Odigo 4
IM2 (Messenger 2) 1.5.x
SIM 0.9
Google Talk (mostly all versions)
PSI (mostly all versions)
Faim 0.1
Windows Live Messenger

Other
==========================================
Registration key from Win2k & XP
ClubTimer 2.2-2.7
Punto Switcher 2.5-2.9
WinVNC 3.x
Screen Saver password in Win9x
ASP.NET Account
Remote Desktop Connection

This software is as useful as KeyFinder Thing as it is able to recover password from MULTIPLE software in just seconds. No bruteforce needed. Just simply decryption. Only 1 drawback about this software and that is it is NOT free to use.

Multi Password Recovery is a try-before-you-buy program, without registration key MPR will show you just the first character of the decrypted password. Registered users get access to the extended features of MPR (saving reports, copying SAM files, password generator, etc), a possibility to completely recover passwords and the right for the user support. Registration key price is USD 30.00 and it’s valid for a period of 18 months, the key is valid for all future versions.

I don’t understand why the registration key is only valid for 18 months. Anyway, cracking this piece of software is fairly easy. I will show you the offsets to patch to make this software registered.

THIS INFO IS FOR EDUCATIONAL PURPOSES ONLY and it’s being tested on previous version! Please BUY this software if you really need to use it.
1. Download Multi Password Recovery v0.2.6

2. Use any Hex Editor such as WinHex.

2. Locate the offset 000CE480
- It should display A0 30 86 53 00

- Change the offset to B0 01 90 90 90

3. Save it, run MPR. If you click on Help -> Registration, it will show you that it’s Registered.

The above cracking method is only for version 0.2.6. The latest version of MPR 0.2.7 is not vulnerable to the cracking method above. The author of this software has a 5 digit ICQ UIN. It’s impossible to register a 5 digit ICQ UIN as it started with 6 digit many years ago. I believe that the author named Demchenko Alex might be an elite hacker :)

[ Download Latest MPR 0.2.7 | MPR Official Website ]