-
Accessing Windows Registry Through Knoppix
I am running Knoppix 3.7 to recover from a damaged Windows installation and I need to access the Windows Registry. Does Knoppix have a way to access and modify the Registry? Thanks.
-
Yes it's possible to edit the windows registry from within Knoppix using a tool called "chntpw". I go over this in detail in Knoppix Hacks, but here's the gist of it:
Download the chntpw deb from http://packages.debian.org/unstable/admin/chntpw
Extract the chntpw binary by turning the deb into a tarball:
Code:
alien --to-tgz chntpw_0.99.2-1_i386.deb
Then untar it. Make sure the windows partition is mounted read/write (if it's NTFS you'll need to make sure you have already set up captive-ntfs). Then you can use the chntpw utility to access a specific hive (usually you'll want something like the SAM or SOFTWARE hive under winnt\system32\config):
Code:
/home/knoppix/chntpw SAM
As you can see I just left the chntpw utility in my home directory. The chntpw tool has an integrated help you can use to get a handle on how to use it, but basically it's like navigating a filesystem. Once you are finished editing the registry, sync, and unmount your partition to make sure the changes stuck (extra important if you are using captive-ntfs). Also make a backup copy of the registry hive you are editing just in case.
-
hey, great tool, provided it works as one might expect.
however, concerning conversion to *.tar:
isn't it already a compressed *.tar if downloaded using this link:
http://ftp.debian.org/debian/pool/no....2.orig.tar.gz
?
have a nice day,
ulrich
-
Originally Posted by
ulrich
Unfortunately, that is just a link to the original source in tarball form. There isn't a precompiled binary to be found there like with the .deb, so you would have to add a step of compiling chntpw.
-
Senior Member
registered user
Just wondering, why do we need to turn it into a tarball? Can't we just install using dpkg?
-
Originally Posted by
foamrotreturns
Just wondering, why do we need to turn it into a tarball? Can't we just install using dpkg?
You can if you are installed to a hard drive, but if you are running off of a Knoppix CD most Debian packages won't directly install, as all of /usr is read-only. I turn it into a tarball so I can just extract the binary I need into the home directory (which I can write to).
Similar Threads
-
By skronrod in forum MS Windows & New to Linux
Replies: 5
Last Post: 04-03-2006, 05:14 AM
-
By jl in forum MS Windows & New to Linux
Replies: 6
Last Post: 12-21-2005, 06:10 PM
-
By adkmom in forum MS Windows & New to Linux
Replies: 11
Last Post: 01-30-2005, 04:34 PM
-
By viggooo in forum General Support
Replies: 10
Last Post: 01-15-2004, 03:51 PM
-
By punk000 in forum General Support
Replies: 6
Last Post: 08-26-2003, 02:55 PM
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
A-Tech 8GB DDR3 1600 PC3-12800 Laptop SODIMM 204-Pin Memory RAM PC3L DDR3L 1x 8G
$13.99
Samsung 16GB 2Rx4 PC4-2133P DDR4-17000 1.2V RDIMM ECC Registered Server Memory
$16.29
Samsung 16GB (2x8GB) DDR4 2400MHz PC4-19200 Desktop RAM Memory M378A1K43CB2-CRC
$19.95
HyperX FURY DDR3 8GB 16GB 32GB 1600 MHz PC3-12800 Desktop RAM Memory DIMM 240pin
$12.90
A-Tech 8GB PC3-12800 Desktop DDR3 1600 MHz Non ECC 240-Pin DIMM Memory RAM 1x 8G
$13.99
Corsair Vengeance LPX 32GB PC4-25600 (DDR4-3200) Memory NEVER USED LOOSE STICKS
$40.00
Kingston HyperX FURY DDR3 8GB 16GB 32G 1600 1866 1333 Desktop Memory RAM DIMM
$13.25
TeamGroup 16GB PC4 2666 PC4 21300 DDR4 2666MHz 1.2V CL19 Desktop RAM Memory
$27.95
A-Tech 256GB 4x 64GB 4Rx4 PC4-19200 ECC Load Reduced LRDIMM Server Memory RAM
$287.96
A-Tech 64GB 4x 16GB 2Rx4 PC4-17000R DDR4 2133MHz ECC REG RDIMM Server Memory RAM
$87.96