Solved: fake caller scam messed up passwords

hi guys,

a fake caller from "microsoft" phoned my mom and tried to scam her.
she brought the machine running xp to me
it was asking for a password before even getting to the user accounts
after watching a you tube video i used the off line password re-setter and disabled syskey
i was then able to get to the user accounts, but its asking for a password i dont know
despite blanking the passwords with the same tool

can anything be done? the administrator account in safe mode is also locked
any tips/ideas please