find ./Windows -name \*registry\*
./Windows/SysWOW64/api-ms-win-core-localregistry-l1-1-0.dll

I think I have bothered you folks too much already.

I just hate having to shell hundreds of bucks to reinstall win7
in order to run a very expensive 3rd party SW which is hard coded
to be sure that it is being run on win7, else it bails out.



On 01/18/2019 01:44 PM, Nikolay Ivanets wrote:
I gave you a link to MS article. Registry is a one of possible location of a product key.

--
  Mykola Ivanets

пт, 18 січ. 2019, 22:38 JD користувач jd1...@gmail.com <mailto:jd1...@gmail.com> пише:


    I retried like this (because Syste32 is empty  :(  ):

    # hivexregedit --export --prefix 'HKEY_LOCAL_MACHINE\SOFTWARE' \
    /sdb3/backups/win7/Windows/SysWOW64/config/SOFTWARE \
    '\Microsoft\Windows NT\CurrentVersion\DigitalProductId'
    Windows Registry Editor Version 5.00

    \Microsoft\Windows NT\CurrentVersion\DigitalProductId: path not
    found in this hive at /bin/hivexregedit line 319.

    If it is not this hive, then I guess all is lost ???




    On 01/18/2019 12:59 PM, Nikolay Ivanets wrote:
    And command line should look like this:

    hivexregedit --export --prefix 'HKEY_LOCAL_MACHINE\SOFTWARE'
    /sdb3/backups/win7/Windows/System32/cofig/SOFTWARE
    '\Microsoft\Windows NT\CurrentVersion\DigitalProductId'

    --
    Mykola Ivanets


    пт, 18 січ. 2019, 21:53 Nikolay Ivanets користувач
    stena...@gmail.com <mailto:stena...@gmail.com> пише:

        You need /sdb3/backups/win7/Windows/System32/config/SOFTWARE

        I believe it is Software registry hive.

        --
          Mykola Ivanets

        пт, 18 січ. 2019, 21:11 JD користувач jd1...@gmail.com
        <mailto:jd1...@gmail.com> пише:


            In the directory
            /sdb3/backups/win7/Windows/SysWOW64/config
            I see:

            RegBack/
            SOFTWARE
            SOFTWARE{95a67f3f-59d1-11e3-9e59-a0b3cc79c3dc}.TM.blf
            
SOFTWARE{95a67f3f-59d1-11e3-9e59-a0b3cc79c3dc}.TMContainer00000000000000000001.regtrans-ms
            
SOFTWARE{95a67f3f-59d1-11e3-9e59-a0b3cc79c3dc}.TMContainer00000000000000000002.regtrans-ms
            SOFTWARE{fa9dd771-5b7b-11e3-ac53-c305c0b6ada2}.TM.blf
            
SOFTWARE{fa9dd771-5b7b-11e3-ac53-c305c0b6ada2}.TMContainer00000000000000000001.regtrans-ms
            
SOFTWARE{fa9dd771-5b7b-11e3-ac53-c305c0b6ada2}.TMContainer00000000000000000002.regtrans-ms
            SOFTWARE.LOG1
            SOFTWARE.LOG2
            SYSTEM
            SYSTEM{95a67f43-59d1-11e3-9e59-a0b3cc79c3dc}.TM.blf
            
SYSTEM{95a67f43-59d1-11e3-9e59-a0b3cc79c3dc}.TMContainer00000000000000000001.regtrans-ms
            
SYSTEM{95a67f43-59d1-11e3-9e59-a0b3cc79c3dc}.TMContainer00000000000000000002.regtrans-ms
            SYSTEM{fa9dd775-5b7b-11e3-ac53-c305c0b6ada2}.TM.blf
            
SYSTEM{fa9dd775-5b7b-11e3-ac53-c305c0b6ada2}.TMContainer00000000000000000001.regtrans-ms
            
SYSTEM{fa9dd775-5b7b-11e3-ac53-c305c0b6ada2}.TMContainer00000000000000000002.regtrans-ms
            SYSTEM.LOG1
            SYSTEM.LOG2
            systemprofile/

            The incantation:
            /usr/bin/hivexregedit --export
            /sdb3/backups/win7/Windows/SysWOW64/config/SOFTWARE
            'HKLM\SOFTWARE\Microsoft\Windows
            NT\CurrentVersion\DigitalProductId'
            Windows Registry Editor Version 5.00

            HKLM\SOFTWARE\Microsoft\Windows
            NT\CurrentVersion\DigitalProductId: path not found in
            this hive at /usr/bin/hivexregedit line 319.




            On 01/18/2019 11:55 AM, Nikolay Ivanets wrote:
            Windows registry file(s) are located here:
            %SystemRoot%\System32\Config\.

            %SystemRoot%\System32\Config\Softwate - is what you
            need. And encoded key might be here:
            HKLM\SOFTWARE\Microsoft\Windows
            NT\CurrentVersion\DigitalProductId.

            And here is deciding algorithm:
            
https://answers.microsoft.com/en-us/windows/forum/windows_7-windows_install/how-to-recover-your-windows-product-key/f032f08f-f114-46f6-ab81-b28004dd43a0

            --
              Mykola Ivanets

            пт, 18 січ. 2019, 20:22 JD користувач jd1...@gmail.com
            <mailto:jd1...@gmail.com> пише:

                Turns out that testdisk was not able to extract the
                files in
                .../Windows/registration directory :( :( :(



                On 01/18/2019 10:45 AM, Nikolay Ivanets wrote:
                You don't need boot or mount partition to read
                registry. hivexregedit can manipulate windows
                registry files directly.

                --
                  Mykola Ivanets

                пт, 18 січ. 2019, 01:32 JD користувач
                jd1...@gmail.com <mailto:jd1...@gmail.com> пише:



                    On 01/17/2019 03:41 PM, Nikolay Ivanets wrote:
                    Let me ask the question again: is COA product
                    key? Is it in the registry?

                    I would assume so, since the laptop was used
                    without any problems
                    and received updates normally without any
                    banners coming up.

                    
https://answers.microsoft.com/en-us/windows/forum/windows_7-windows_install/how-to-recover-your-windows-product-key/f032f08f-f114-46f6-ab81-b28004dd43a0

                    You can easily extract product key if it is in
                    the registry as the link above promises. I
                    have pointed to a Linux tool which can
                    read/modify Windows Registry in precious email.

                    --
                      Mykola Ivanets
                    But the disk is not bootable :( :(
I was just fortunate that "testdisk" (linux) was able to extract the user's directory
                    and the windows directory.
                    The script you show assumes that the HD is
                    mountable.
                    It is not, and a 2nd computer with win7 refuses
                    to "see" it when attached
                    via USB. So I would not be able to use 3rd
                    party SW to talk
                    to the unmountable disk.
                    Only "testdisk" on Linux has been able to read
                    the undamaged parts.

                    Thank you very much for your response.
                    I do indeed appreciate it.



                    чт, 17 січ. 2019, 20:17 JD користувач
                    jd1...@gmail.com <mailto:jd1...@gmail.com> пише:

                        OK, so I called MS as you had suggested,
                        and they will no longer support win7 in
                        2020, which is under 2 year away.
                        I get a voice menu from hell, non of the
                        options of which address my issue
                        at hand, namely extracting the windows
                        installation key from the windows
                        directory, which I was able to save to my
                        linux HD.
                        They automated responder finally hung up.

                        So, of all the linux freeware that deals
                        with windows,
                        is there one that CAN extract the key from
                        the  backup windows dir on Linux?



                        address my problem of extracting the

                        > On 01/09/2019 10:28 AM, Ulf Zibis wrote:
                        >>
                        >> You could try testdisk and/or photorec.
                        >>
                        >> Good luck,
                        >>
                        >> -Ulf
                        >>
                        >>
                        >>
                        >>
                        _______________________________________________
                        >> ntfs-3g-devel mailing list
                        >> ntfs-3g-devel@lists.sourceforge.net
                        <mailto:ntfs-3g-devel@lists.sourceforge.net>
                        >>
                        
https://lists.sourceforge.net/lists/listinfo/ntfs-3g-devel
                        >>
                        >



                        _______________________________________________
                        ntfs-3g-devel mailing list
                        ntfs-3g-devel@lists.sourceforge.net
                        <mailto:ntfs-3g-devel@lists.sourceforge.net>
                        
https://lists.sourceforge.net/lists/listinfo/ntfs-3g-devel




            _______________________________________________
            ntfs-3g-devel mailing list
            ntfs-3g-devel@lists.sourceforge.net
            <mailto:ntfs-3g-devel@lists.sourceforge.net>
            https://lists.sourceforge.net/lists/listinfo/ntfs-3g-devel



_______________________________________________
ntfs-3g-devel mailing list
ntfs-3g-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ntfs-3g-devel

Reply via email to