First of all, I greatly recommend this article, which provides knowledge about the basics of some of the more common attacks, but also covers the pass-the-hash attack quite admirably. Now, it sounds to me like you are afraid that someone will (remotely) obtain administrator access to your computer and dump your hashes into their Lsass. You do not need to worry about this. If an attacker has admin. access to your computer, he could (and probably would prefer to) employ a keylogger or another such program to not only find out that password, but all of your other usernames and passwords. This could be mitigated to a process (a favorite seems to be explorer.exe) and run directly from your physical memory, thus making it undetectable to AV. Really, the most plausible way to stop someone from gaining any sort of remote access to your computer is to keep all of your programs up-to-date and to get a good AV program (Kaspersky, Avast, and AVG have good reputations). If I misinterpreted your statement, please respond and I will try to get back to you.