And command line should look like this:
hivexregedit --export --prefix 'HKEY_LOCAL_MACHINE\SOFTWARE'
/sdb3/backups/win7/Windows/System32/cofig/SOFTWARE '\Microsoft\Windows
NT\CurrentVersion\DigitalProductId'
--
Mykola Ivanets
пт, 18 січ. 2019, 21:53 Nikolay Ivanets користувач stena...@gmail.com пише:
> You need /sdb3/backups/win7/Windows/System32/config/SOFTWARE
>
> I believe it is Software registry hive.
>
> --
> Mykola Ivanets
>
> пт, 18 січ. 2019, 21:11 JD користувач jd1...@gmail.com пише:
>
>>
>> In the directory
>> /sdb3/backups/win7/Windows/SysWOW64/config
>> I see:
>>
>> RegBack/
>> SOFTWARE
>> SOFTWARE{95a67f3f-59d1-11e3-9e59-a0b3cc79c3dc}.TM.blf
>>
>> SOFTWARE{95a67f3f-59d1-11e3-9e59-a0b3cc79c3dc}.TMContainer00000000000000000001.regtrans-ms
>>
>> SOFTWARE{95a67f3f-59d1-11e3-9e59-a0b3cc79c3dc}.TMContainer00000000000000000002.regtrans-ms
>> SOFTWARE{fa9dd771-5b7b-11e3-ac53-c305c0b6ada2}.TM.blf
>>
>> SOFTWARE{fa9dd771-5b7b-11e3-ac53-c305c0b6ada2}.TMContainer00000000000000000001.regtrans-ms
>>
>> SOFTWARE{fa9dd771-5b7b-11e3-ac53-c305c0b6ada2}.TMContainer00000000000000000002.regtrans-ms
>> SOFTWARE.LOG1
>> SOFTWARE.LOG2
>> SYSTEM
>> SYSTEM{95a67f43-59d1-11e3-9e59-a0b3cc79c3dc}.TM.blf
>>
>> SYSTEM{95a67f43-59d1-11e3-9e59-a0b3cc79c3dc}.TMContainer00000000000000000001.regtrans-ms
>>
>> SYSTEM{95a67f43-59d1-11e3-9e59-a0b3cc79c3dc}.TMContainer00000000000000000002.regtrans-ms
>> SYSTEM{fa9dd775-5b7b-11e3-ac53-c305c0b6ada2}.TM.blf
>>
>> SYSTEM{fa9dd775-5b7b-11e3-ac53-c305c0b6ada2}.TMContainer00000000000000000001.regtrans-ms
>>
>> SYSTEM{fa9dd775-5b7b-11e3-ac53-c305c0b6ada2}.TMContainer00000000000000000002.regtrans-ms
>> SYSTEM.LOG1
>> SYSTEM.LOG2
>> systemprofile/
>>
>> The incantation:
>> /usr/bin/hivexregedit --export
>> /sdb3/backups/win7/Windows/SysWOW64/config/SOFTWARE
>> 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DigitalProductId'
>> Windows Registry Editor Version 5.00
>>
>> HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DigitalProductId: path
>> not found in this hive at /usr/bin/hivexregedit line 319.
>>
>>
>>
>>
>> On 01/18/2019 11:55 AM, Nikolay Ivanets wrote:
>>
>> Windows registry file(s) are located here: %SystemRoot%\System32\Config\.
>>
>> %SystemRoot%\System32\Config\Softwate - is what you need. And encoded key
>> might be here: HKLM\SOFTWARE\Microsoft\Windows
>> NT\CurrentVersion\DigitalProductId.
>>
>> And here is deciding algorithm:
>> https://answers.microsoft.com/en-us/windows/forum/windows_7-windows_install/how-to-recover-your-windows-product-key/f032f08f-f114-46f6-ab81-b28004dd43a0
>>
>> --
>> Mykola Ivanets
>>
>> пт, 18 січ. 2019, 20:22 JD користувач jd1...@gmail.com пише:
>>
>>> Turns out that testdisk was not able to extract the files in
>>> .../Windows/registration directory :( :( :(
>>>
>>>
>>>
>>> On 01/18/2019 10:45 AM, Nikolay Ivanets wrote:
>>>
>>> You don't need boot or mount partition to read registry. hivexregedit
>>> can manipulate windows registry files directly.
>>>
>>> --
>>> Mykola Ivanets
>>>
>>> пт, 18 січ. 2019, 01:32 JD користувач jd1...@gmail.com пише:
>>>
>>>>
>>>>
>>>> On 01/17/2019 03:41 PM, Nikolay Ivanets wrote:
>>>>
>>>> Let me ask the question again: is COA product key? Is it in the
>>>> registry?
>>>>
>>>> I would assume so, since the laptop was used without any problems
>>>> and received updates normally without any banners coming up.
>>>>
>>>>
>>>> https://answers.microsoft.com/en-us/windows/forum/windows_7-windows_install/how-to-recover-your-windows-product-key/f032f08f-f114-46f6-ab81-b28004dd43a0
>>>>
>>>> You can easily extract product key if it is in the registry as the link
>>>> above promises. I have pointed to a Linux tool which can read/modify
>>>> Windows Registry in precious email.
>>>>
>>>> --
>>>> Mykola Ivanets
>>>>
>>>> But the disk is not bootable :( :(
>>>> I was just fortunate that "testdisk" (linux) was able to extract the
>>>> user's directory
>>>> and the windows directory.
>>>> The script you show assumes that the HD is mountable.
>>>> It is not, and a 2nd computer with win7 refuses to "see" it when
>>>> attached
>>>> via USB. So I would not be able to use 3rd party SW to talk
>>>> to the unmountable disk.
>>>> Only "testdisk" on Linux has been able to read the undamaged parts.
>>>>
>>>> Thank you very much for your response.
>>>> I do indeed appreciate it.
>>>>
>>>>
>>>>
>>>> чт, 17 січ. 2019, 20:17 JD користувач jd1...@gmail.com пише:
>>>>
>>>>> OK, so I called MS as you had suggested,
>>>>> and they will no longer support win7 in 2020, which is under 2 year
>>>>> away.
>>>>> I get a voice menu from hell, non of the options of which address my
>>>>> issue
>>>>> at hand, namely extracting the windows installation key from the
>>>>> windows
>>>>> directory, which I was able to save to my linux HD.
>>>>> They automated responder finally hung up.
>>>>>
>>>>> So, of all the linux freeware that deals with windows,
>>>>> is there one that CAN extract the key from the backup windows dir on
>>>>> Linux?
>>>>>
>>>>>
>>>>>
>>>>> address my problem of extracting the
>>>>>
>>>>> > On 01/09/2019 10:28 AM, Ulf Zibis wrote:
>>>>> >>
>>>>> >> You could try testdisk and/or photorec.
>>>>> >>
>>>>> >> Good luck,
>>>>> >>
>>>>> >> -Ulf
>>>>> >>
>>>>> >>
>>>>> >>
>>>>> >> _______________________________________________
>>>>> >> ntfs-3g-devel mailing list
>>>>> >> ntfs-3g-devel@lists.sourceforge.net
>>>>> >> https://lists.sourceforge.net/lists/listinfo/ntfs-3g-devel
>>>>> >>
>>>>> >
>>>>>
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> ntfs-3g-devel mailing list
>>>>> ntfs-3g-devel@lists.sourceforge.net
>>>>> https://lists.sourceforge.net/lists/listinfo/ntfs-3g-devel
>>>>>
>>>>
>>>>
>>>
>> _______________________________________________
>> ntfs-3g-devel mailing list
>> ntfs-3g-devel@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/ntfs-3g-devel
>>
>>
_______________________________________________
ntfs-3g-devel mailing list
ntfs-3g-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ntfs-3g-devel
