• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1064
  • Last Modified:

Excel File Password Forget

Dear All,

I have protected on of my files created in MS Office with a password but unfortunately forget that password.
Is there any way to recover the files without knowing the password????

If any please help

Regards,
Qaiser Nadeem
0
kaliabutt
Asked:
kaliabutt
  • 4
  • 2
  • 2
  • +4
2 Solutions
 
Rich RumbleSecurity SamuraiCommented:
Try the ElComSoft programs available here: http://www.crackpassword.com/
If it's the password to open, you'll need to use brute-force, if it is anyother password from M$ office, you can recover that instantly.
-rich
0
 
r-kCommented:
0
 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

 
Dushan De SilvaCommented:
0
 
Dushan De SilvaCommented:
Sorry I think its a illegal site. Don't use it. Please you can try with others comments.

BR Dushan
0
 
Keith AlabasterCommented:
If you can post the file on an ftp server, I can tell you the password.
0
 
SPHCommented:
Download and install OpenOffice.org on your machine. Use OpenOffice.org to open the Excel file, then save the file with another file name. Unless the behaviour has changed in the recent version, OpenOffice.org does not understand MS Office passwords and bypasses them when converting the document.
0
 
Rich RumbleSecurity SamuraiCommented:
The password to open cannot be thwarted in this way (openoffice) the document will be uninteligiable as the file is truely encrypted, if the password to open is used.
-rich
0
 
SPHCommented:
My mistake...I remember now that this bypasses the protection password, not the file open password.
0
 
MalleusMaleficarumCommented:
These days, there is no way to recover the file without knowing the password, however if you positively need to have the data, there is a quick option you can use.

I have encountered this issue many times while doing computer forensics, and this is by far the best solution I've found.

I would recommend you try this site:  http://www.decryptum.com/  This works for both MS Word Document and MS Excel files.  To fully decrypt your document will cost you money, but the do have a FREE preview feature.

You can actually submit your file to them via a secure SSL tunnel and see if they were able to successfully decrypt the file.  If they find the password, then you will see a preview of your document in the Preview window.  (and as I said, this feature is free.)


Below are two blurbs from their site:

What is Decryptum?
Decryptumtm is the first instant online Word and Excel password removal service. Decryption time is under 3 minutes, regardless of password length: you don't have to wait days for the file to be unprotected (all other services offer 2 to 14 days turnaround time). You don't have to download and install any software or spend your CPU time running a password recovery tool.

How to proceed?
Try it now and upload Word or Excel password protected file using secure SSL protocol. Decryptum will show a short online preview of decrypted file content. If you need the whole file unprotected, purchase decryption credits and download unprotected file. It typically takes just a few minutes to restore your data. See About Decryptum for a complete list of features and limitations.
0
 
Keith AlabasterCommented:
www.passware.com. We use it all the time; also recovers users passwords for .pst files, word, and many other things.
0
 
Rich RumbleSecurity SamuraiCommented:
Decryptum has it's limitations for the full pass's too, it cannot open files that do not use the standard/default M$ cipher, RC4. If you save a doc with the password to open, and select an alternate cipher, DeCryptum will not find it, and they will tell you so. ElComSoft can work on a few more than just the default cipher, but it's pretty slow after all it is brute-force. DeCryptum is using a rainbow-table style attack for the default RC4 stream cipher, ElComSoft also has such a tool, however it generates all possible keys as opposed to having xyz-pass= aserua39df;af0adf;0oi9 in a large table. Any other pass, can be found instantly using a varity of software out there, but the password to open is the "strongest"
-rich
0
 
MalleusMaleficarumCommented:
@richrumble What you've stated regarding Decryptum and the RC4 cipher is true.  However my reason for suggesting Decryptum was due to my believe in "low hanging fruit."

Most people would never pick a different cipher, and if  Decryptum can't decrypt the software using their rainbow tables, you will know instantly and without spending a single cent.  To brute force the document, kaliabutt would need to likely download and pay for software from Elcomsoft, as the trial-ware version has limitations (copied from the Help file for Elcomsoft's Advanced Office Password Recovery)
-------------
The Trial version of Advanced Office Password Recovery has the following Limitations:

· The maximal length of passwords which are recovered by Brute-Force Attack is limited to 4 symbols  
 
· Passwords recovered by Dictionary Attack, which are longer than 4 symbols, are not displaying  
 
· The maximal length of passwords, which are recovered instantly, is limited to 3 symbols  
 
· Some Dictionary Attack Options are disabled  
 
· Log File is not created  
 
· VBA Backdoor feature is not available  
 
· VBA Passwords cannot be changed or removed  
 
· Excel® Add-Ins (XLA) cannot be unlocked  
 
· Access® Database Owner Information is not shown  
 
----------------------------------

It also depends on how  quickly the  user needs the contents of the file.  Even using the standard RC4 cipher, brute-forcing could take longer than a credit card. :)  

I would certainly try Decryptum first.  It is free to try and could yield you the file in minutes.  If it doesn't, well, then perhaps it is time to find a very fast machine, pay for the brute-force software and  cross your fingers.
0
 
Rich RumbleSecurity SamuraiCommented:
Understood, and agreed, I didn't mean to sound as if it'd never work- I do tend to look at the "yeah, but..." side of things ;) At any rate, the whole picture is now laid out for one and all .
-rich
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 4
  • 2
  • 2
  • +4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now