I retried like this (because Syste32 is empty :(  ):

# hivexregedit --export --prefix 'HKEY_LOCAL_MACHINE\SOFTWARE' \
/sdb3/backups/win7/Windows/SysWOW64/config/SOFTWARE \
'\Microsoft\Windows NT\CurrentVersion\DigitalProductId'
Windows Registry Editor Version 5.00

\Microsoft\Windows NT\CurrentVersion\DigitalProductId: path not found in this hive at /bin/hivexregedit line 319.

If it is not this hive, then I guess all is lost ???




On 01/18/2019 12:59 PM, Nikolay Ivanets wrote:
And command line should look like this:

hivexregedit --export --prefix 'HKEY_LOCAL_MACHINE\SOFTWARE' /sdb3/backups/win7/Windows/System32/cofig/SOFTWARE '\Microsoft\Windows NT\CurrentVersion\DigitalProductId'

--
  Mykola Ivanets


пт, 18 січ. 2019, 21:53 Nikolay Ivanets користувач stena...@gmail.com <mailto:stena...@gmail.com> пише:

    You need /sdb3/backups/win7/Windows/System32/config/SOFTWARE

    I believe it is Software registry hive.

    --
      Mykola Ivanets

    пт, 18 січ. 2019, 21:11 JD користувач jd1...@gmail.com
    <mailto:jd1...@gmail.com> пише:


        In the directory
        /sdb3/backups/win7/Windows/SysWOW64/config
        I see:

        RegBack/
        SOFTWARE
        SOFTWARE{95a67f3f-59d1-11e3-9e59-a0b3cc79c3dc}.TM.blf
        
SOFTWARE{95a67f3f-59d1-11e3-9e59-a0b3cc79c3dc}.TMContainer00000000000000000001.regtrans-ms
        
SOFTWARE{95a67f3f-59d1-11e3-9e59-a0b3cc79c3dc}.TMContainer00000000000000000002.regtrans-ms
        SOFTWARE{fa9dd771-5b7b-11e3-ac53-c305c0b6ada2}.TM.blf
        
SOFTWARE{fa9dd771-5b7b-11e3-ac53-c305c0b6ada2}.TMContainer00000000000000000001.regtrans-ms
        
SOFTWARE{fa9dd771-5b7b-11e3-ac53-c305c0b6ada2}.TMContainer00000000000000000002.regtrans-ms
        SOFTWARE.LOG1
        SOFTWARE.LOG2
        SYSTEM
        SYSTEM{95a67f43-59d1-11e3-9e59-a0b3cc79c3dc}.TM.blf
        
SYSTEM{95a67f43-59d1-11e3-9e59-a0b3cc79c3dc}.TMContainer00000000000000000001.regtrans-ms
        
SYSTEM{95a67f43-59d1-11e3-9e59-a0b3cc79c3dc}.TMContainer00000000000000000002.regtrans-ms
        SYSTEM{fa9dd775-5b7b-11e3-ac53-c305c0b6ada2}.TM.blf
        
SYSTEM{fa9dd775-5b7b-11e3-ac53-c305c0b6ada2}.TMContainer00000000000000000001.regtrans-ms
        
SYSTEM{fa9dd775-5b7b-11e3-ac53-c305c0b6ada2}.TMContainer00000000000000000002.regtrans-ms
        SYSTEM.LOG1
        SYSTEM.LOG2
        systemprofile/

        The incantation:
        /usr/bin/hivexregedit --export
        /sdb3/backups/win7/Windows/SysWOW64/config/SOFTWARE
        'HKLM\SOFTWARE\Microsoft\Windows
        NT\CurrentVersion\DigitalProductId'
        Windows Registry Editor Version 5.00

        HKLM\SOFTWARE\Microsoft\Windows
        NT\CurrentVersion\DigitalProductId: path not found in this
        hive at /usr/bin/hivexregedit line 319.




        On 01/18/2019 11:55 AM, Nikolay Ivanets wrote:
        Windows registry file(s) are located here:
        %SystemRoot%\System32\Config\.

        %SystemRoot%\System32\Config\Softwate - is what you need. And
        encoded key might be here: HKLM\SOFTWARE\Microsoft\Windows
        NT\CurrentVersion\DigitalProductId.

        And here is deciding algorithm:
        
https://answers.microsoft.com/en-us/windows/forum/windows_7-windows_install/how-to-recover-your-windows-product-key/f032f08f-f114-46f6-ab81-b28004dd43a0

        --
          Mykola Ivanets

        пт, 18 січ. 2019, 20:22 JD користувач jd1...@gmail.com
        <mailto:jd1...@gmail.com> пише:

            Turns out that testdisk was not able to extract the files in
            .../Windows/registration   directory :( :( :(



            On 01/18/2019 10:45 AM, Nikolay Ivanets wrote:
            You don't need boot or mount partition to read
            registry. hivexregedit can manipulate windows registry
            files directly.

            --
              Mykola Ivanets

            пт, 18 січ. 2019, 01:32 JD користувач jd1...@gmail.com
            <mailto:jd1...@gmail.com> пише:



                On 01/17/2019 03:41 PM, Nikolay Ivanets wrote:
                Let me ask the question again: is COA product key?
                Is it in the registry?

                I would assume so, since the laptop was used without
                any problems
                and received updates normally without any banners
                coming up.

                
https://answers.microsoft.com/en-us/windows/forum/windows_7-windows_install/how-to-recover-your-windows-product-key/f032f08f-f114-46f6-ab81-b28004dd43a0

                You can easily extract product key if it is in the
                registry as the link above promises. I have pointed
                to a Linux tool which can read/modify Windows
                Registry in precious email.

                --
                  Mykola Ivanets
                But the disk is not bootable :( :(
                I was just fortunate that "testdisk" (linux)  was
                able to extract the user's directory
                and the windows directory.
                The script you show assumes that the HD is mountable.
                It is not, and a 2nd computer with win7 refuses to
                "see" it when attached
                via USB. So I would not be able to use 3rd party SW
                to talk
                to the unmountable disk.
                Only "testdisk" on Linux has been able to read the
                undamaged parts.

                Thank you very much for your response.
                I do indeed appreciate it.



                чт, 17 січ. 2019, 20:17 JD користувач
                jd1...@gmail.com <mailto:jd1...@gmail.com> пише:

                    OK, so I called MS as you had suggested,
                    and they will no longer support win7 in 2020,
                    which is under 2 year away.
                    I get a voice menu from hell, non of the
                    options of which address my issue
                    at hand, namely extracting the windows
                    installation key from the windows
                    directory, which I was able to save to my linux HD.
                    They automated responder finally hung up.

                    So, of all the linux freeware that deals with
                    windows,
is there one that CAN extract the key from the backup windows dir on Linux?



                    address my problem of extracting the

                    > On 01/09/2019 10:28 AM, Ulf Zibis wrote:
                    >>
                    >> You could try testdisk and/or photorec.
                    >>
                    >> Good luck,
                    >>
                    >> -Ulf
                    >>
                    >>
                    >>
                    >> _______________________________________________
                    >> ntfs-3g-devel mailing list
                    >> ntfs-3g-devel@lists.sourceforge.net
                    <mailto:ntfs-3g-devel@lists.sourceforge.net>
                    >>
                    https://lists.sourceforge.net/lists/listinfo/ntfs-3g-devel
                    >>
                    >



                    _______________________________________________
                    ntfs-3g-devel mailing list
                    ntfs-3g-devel@lists.sourceforge.net
                    <mailto:ntfs-3g-devel@lists.sourceforge.net>
                    https://lists.sourceforge.net/lists/listinfo/ntfs-3g-devel




        _______________________________________________
        ntfs-3g-devel mailing list
        ntfs-3g-devel@lists.sourceforge.net
        <mailto:ntfs-3g-devel@lists.sourceforge.net>
        https://lists.sourceforge.net/lists/listinfo/ntfs-3g-devel


_______________________________________________
ntfs-3g-devel mailing list
ntfs-3g-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ntfs-3g-devel

Reply via email to