Hacking Acer System Recovery password

27 Jan

The Windows Vista harddisk partition on my niece Acer Travelmate 6291 went corrupt. Since the dvd drive is having problem with the backup recovery disks, I decided to load the Acer System Recovery partition by holding the Alt key and press the F10 key simultaneously at the white ACER BIOS screen.

To my surprise, the computer prompt me to enter a password string when I clicked on the “Restore to Factory Default Settings” option after the eRecovery has loaded.

Did some googling on the net and found that the password was stored in the “aimdrs.dat” file located at PQSERVICE hidden partition.

Using Ubuntu 9.10 Linux Live CD, I unhidden the PQSERVICE partition by changing the partition type to “HPFS/NTFS (0x07)” from the Paimpset Disk Utility. The original value was “Unknown (0x27)”.

Found the “aimsdrs.dat” file from the root folder of the PQSERVICE partition. Using the Ubuntu ptedit to open the “aimsdrs.dat” file, I recovered the password.

I hidden back the PQSERVICE partition using the Paimpset Disk Utility to “Empty (0x00)”

Using Ubuntu GParted, I recreated the “C:\” partition. Then I did a reboot and entered the eRecovery menu.

Clicked on the “Restore to Factory Default Settings” option and entered the recovered password, the eRecovery process restored a fully functional factory image in approximately 10 minutes.

Reboot the computer after the eRecovery and voila, I have a new Windows Vista.

More reading here:


2 Responses to “Hacking Acer System Recovery password”

  1. Fadzil February 3, 2010 at 8:19 pm #

    So bro, what is the password? I’ve been trying to crack it but unsuccessful. Is ACER using the same password? I’m using the Acer Aspire 5583WXMi laptop. Thanks in advance.

    • admin February 3, 2010 at 11:22 pm #

      I’m not sure about your model. You can try the default password “000000” (6 zeros).

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: