any chance you can boot to safe mode? it may still ask for a password, but its worth a shot.
short of trying password recovery, my next move would be to boot to a disc like this:
http://www.nu2.nu/pebuilder/
live cd's like this become soooo useful. I have a ISO image of one i customized, if you're interested.