Results 1 to 6 of 6

Thread: Accessing Windows Registry Through Knoppix

  1. #1
    Junior Member
    Join Date
    Feb 2005
    Posts
    5

    Accessing Windows Registry Through Knoppix

    I am running Knoppix 3.7 to recover from a damaged Windows installation and I need to access the Windows Registry. Does Knoppix have a way to access and modify the Registry? Thanks.

  2. #2
    Member registered user
    Join Date
    Apr 2004
    Posts
    50
    Yes it's possible to edit the windows registry from within Knoppix using a tool called "chntpw". I go over this in detail in Knoppix Hacks, but here's the gist of it:

    Download the chntpw deb from http://packages.debian.org/unstable/admin/chntpw

    Extract the chntpw binary by turning the deb into a tarball:
    Code:
    alien --to-tgz chntpw_0.99.2-1_i386.deb
    Then untar it. Make sure the windows partition is mounted read/write (if it's NTFS you'll need to make sure you have already set up captive-ntfs). Then you can use the chntpw utility to access a specific hive (usually you'll want something like the SAM or SOFTWARE hive under winnt\system32\config):

    Code:
    /home/knoppix/chntpw SAM
    As you can see I just left the chntpw utility in my home directory. The chntpw tool has an integrated help you can use to get a handle on how to use it, but basically it's like navigating a filesystem. Once you are finished editing the registry, sync, and unmount your partition to make sure the changes stuck (extra important if you are using captive-ntfs). Also make a backup copy of the registry hive you are editing just in case.

  3. #3
    Junior Member
    Join Date
    Feb 2005
    Posts
    3
    hey, great tool, provided it works as one might expect.

    however, concerning conversion to *.tar:
    isn't it already a compressed *.tar if downloaded using this link:
    http://ftp.debian.org/debian/pool/no....2.orig.tar.gz
    ?

    have a nice day,
    ulrich

  4. #4
    Member registered user
    Join Date
    Apr 2004
    Posts
    50
    Quote Originally Posted by ulrich
    hey, great tool, provided it works as one might expect.

    however, concerning conversion to *.tar:
    isn't it already a compressed *.tar if downloaded using this link:
    http://ftp.debian.org/debian/pool/no....2.orig.tar.gz
    ?

    have a nice day,
    ulrich
    Unfortunately, that is just a link to the original source in tarball form. There isn't a precompiled binary to be found there like with the .deb, so you would have to add a step of compiling chntpw.

  5. #5
    Senior Member registered user
    Join Date
    Jan 2005
    Posts
    200
    Just wondering, why do we need to turn it into a tarball? Can't we just install using dpkg?

  6. #6
    Member registered user
    Join Date
    Apr 2004
    Posts
    50
    Quote Originally Posted by foamrotreturns
    Just wondering, why do we need to turn it into a tarball? Can't we just install using dpkg?
    You can if you are installed to a hard drive, but if you are running off of a Knoppix CD most Debian packages won't directly install, as all of /usr is read-only. I turn it into a tarball so I can just extract the binary I need into the home directory (which I can write to).

Similar Threads

  1. Windows 2000 Registry & Restoring it with Knoppix
    By skronrod in forum MS Windows & New to Linux
    Replies: 5
    Last Post: 04-03-2006, 05:14 AM
  2. windows wont boot, trying to fix registry from knoppix
    By jl in forum MS Windows & New to Linux
    Replies: 6
    Last Post: 12-21-2005, 06:10 PM
  3. Possible to remove spyware Windows registry files w/Knoppix?
    By adkmom in forum MS Windows & New to Linux
    Replies: 11
    Last Post: 01-30-2005, 04:34 PM
  4. Windows registry lost after running Knoppix
    By viggooo in forum General Support
    Replies: 10
    Last Post: 01-15-2004, 03:51 PM
  5. windows registry
    By punk000 in forum General Support
    Replies: 6
    Last Post: 08-26-2003, 02:55 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


A-Tech 8GB DDR3 1600 PC3-12800 Laptop SODIMM 204-Pin Memory RAM PC3L DDR3L 1x 8G picture

A-Tech 8GB DDR3 1600 PC3-12800 Laptop SODIMM 204-Pin Memory RAM PC3L DDR3L 1x 8G

$13.99



HyperX FURY RAM DDR4 16GB 8GB 32GB 4GB 3200 2666 2400 2133 Desktop Memory DIMM picture

HyperX FURY RAM DDR4 16GB 8GB 32GB 4GB 3200 2666 2400 2133 Desktop Memory DIMM

$9.64



CRUCIAL DDR3L 8GB 16GB 32GB 1600 MHz PC3-12800 Laptop Memory RAM SODIMM 204-Pin picture

CRUCIAL DDR3L 8GB 16GB 32GB 1600 MHz PC3-12800 Laptop Memory RAM SODIMM 204-Pin

$14.35



A-Tech 8GB PC3-12800 Desktop DDR3 1600 MHz Non ECC 240-Pin DIMM Memory RAM 1x 8G picture

A-Tech 8GB PC3-12800 Desktop DDR3 1600 MHz Non ECC 240-Pin DIMM Memory RAM 1x 8G

$13.99



A-Tech 16GB 2 x 8GB PC3-12800 Laptop SODIMM DDR3 1600 Memory RAM PC3L 16G DDR3L picture

A-Tech 16GB 2 x 8GB PC3-12800 Laptop SODIMM DDR3 1600 Memory RAM PC3L 16G DDR3L

$27.98



Team T-FORCE VULCAN Z 16GB (2 x 8GB) 288-Pin PC RAM DDR4 3200 (PC4 25600) Intel picture

Team T-FORCE VULCAN Z 16GB (2 x 8GB) 288-Pin PC RAM DDR4 3200 (PC4 25600) Intel

$35.99



HMT84GL7AMR4C-RD 32GB DDR3 Server Memory RAM 14900L ECC REG 4Rx4 SK Hynix Cisco picture

HMT84GL7AMR4C-RD 32GB DDR3 Server Memory RAM 14900L ECC REG 4Rx4 SK Hynix Cisco

$13.99



HyperX FURY DDR4 4GB 8GB 16GB 32GB 3200 2400 2666 Desktop RAM Memory DIMM 288pin picture

HyperX FURY DDR4 4GB 8GB 16GB 32GB 3200 2400 2666 Desktop RAM Memory DIMM 288pin

$23.15



Hynix 64GB 4Rx4 PC4-2133P-L LRDIMM DDR4-17000 ECC Load Reduced Server Memory RAM picture

Hynix 64GB 4Rx4 PC4-2133P-L LRDIMM DDR4-17000 ECC Load Reduced Server Memory RAM

$64.99



Kingston HyperX FURY DDR3 8GB 16GB 32G 1600 1866 1333 Desktop Memory RAM DIMM picture

Kingston HyperX FURY DDR3 8GB 16GB 32G 1600 1866 1333 Desktop Memory RAM DIMM

$39.95