recover password of a microsoft word document.

You could try PRTK.

Did you extract all text from the source image and feed that to PKE as a dictionary?
What is the Word document version?

microsoft word 2003, i dont have PRTK

You didn't answer jhup's first question. Did you extract all the keywords from the hard drive image and feed that to Passware? The password is usually on the computer somewhere. Passware can try an entire index of keywords as passwords much quicker than any brute force attack. I don't remember how to do this at the moment, but I know EnCase 7 integrates with Passware–maybe through an EnScript. I've done it once, with success.

Do you need the password, or just the unlocked file? With your Passware Enterprise you should have received a few free Decryptum attacks. http//www.lostpassword.com/online-mode.htm I think that will just remove the password for you but won't actually find the password, but I haven't tried it myself yet, so if you do let us know how it works.

no i didnt, the file is just a .doc file, and I dont need the password i just wanna be able to view the file i dont need edit neither.
i will try ur tips and see how i get along with them, I also change the file permissions of the file and try to open with other applications rtf, txt, but it encrypts the file, the txt doesn't look nothing readable.

The Word 2003 document is the "old" ".doc" format, maybe the file still has the 40 bit encryption.
If this is the case, this approach may be faster than password cracking/finding
http//www.password-crackers.com/crack/guaword.html

jaclaz

I haven't used guaword, but had success using guaexcel to decrypt Excel files with the old 40-bit encryption. It doesn't provide you the password entered by the user, but it can be configured to provide a file-independent key that will work with any file encrypted using the same original password.

When throwing multiple processors (including some compatible GPUs) at the problem guaexcel flew through the keyspace. I'd presume guaword works in a similar way.

I'm trying to use winhex to see if I can find the password,what u Guys think