1
00:00:01,180 --> 00:00:07,240
In this lecture, we are going to see how we can remove passwords from very old word files from word

2
00:00:07,240 --> 00:00:08,020
97 to.

3
00:00:10,850 --> 00:00:16,560
This lecture is for forensic investigators who happen to find very old files or you have very old word

4
00:00:16,610 --> 00:00:19,100
documents that you want to crack the password.

5
00:00:19,130 --> 00:00:26,480
This method can be used, but this lesson we are going to use a tool called go over what word is an

6
00:00:26,480 --> 00:00:30,590
old utility to remove passwords from very old Microsoft Word documents?

7
00:00:31,340 --> 00:00:37,070
It does not run on Windows ten or 11, so we will be running it on Windows XP Virtual Machine.

8
00:00:38,750 --> 00:00:42,260
First of all, go to offshore, go our website and download the tool.

9
00:00:45,510 --> 00:00:46,470
Don't expect it.

10
00:00:46,470 --> 00:00:49,590
And copy the folder to Windows XP Virtual Machine.

11
00:00:52,840 --> 00:00:56,770
Open the command terminal and use the following command to remove encryption.

12
00:00:58,530 --> 00:01:01,250
Just give the name of the tool and the file name.

13
00:01:01,730 --> 00:01:04,610
The tool will automatically remove the password from file.

14
00:01:07,850 --> 00:01:09,230
Was the password is removed.

15
00:01:09,260 --> 00:01:13,940
You can copy the file back to the machine and you can see the password has been removed.

16
00:01:17,090 --> 00:01:19,010
Let's move to the demonstration.

17
00:01:21,850 --> 00:01:26,080
So I have Windows XP virtual machine installed on VMware.

18
00:01:26,740 --> 00:01:33,130
You can get an XP ISO from Internet Archive dot org and install it on your be aware.

19
00:01:35,640 --> 00:01:37,020
Go to the official website.

20
00:01:42,190 --> 00:01:44,350
Download the free version of Google Work.

21
00:01:55,160 --> 00:01:57,590
So once downloaded, extract the folder.

22
00:02:07,310 --> 00:02:10,789
And here we have desktop, which is already encrypted.

23
00:02:21,400 --> 00:02:21,580
Look.

24
00:02:21,580 --> 00:02:23,770
Copy the holder to Windows XP machine.

25
00:02:30,140 --> 00:02:32,840
Click on Start run then type CMD.

26
00:02:37,380 --> 00:02:39,210
You'll never get to go over Florida.

27
00:02:48,750 --> 00:02:50,940
And use the command to remove the password.

28
00:03:02,870 --> 00:03:07,790
Once it asks whether you want to decrypt this file, you need to type.

29
00:03:07,790 --> 00:03:08,390
Yes.

30
00:03:11,620 --> 00:03:16,060
And you can see that it has given the notification that the password has been removed.

31
00:03:17,350 --> 00:03:21,580
Close it and copy the file back the Windows ten or 11 machine.

32
00:03:28,490 --> 00:03:32,420
Open the document and you can see that password has been removed.