New
#11
Can you zip the Software hive and upload it somewhee I can grab it from?
Look under the sources folder for an OEM folder.
Can you zip the Software hive and upload it somewhee I can grab it from?
Look under the sources folder for an OEM folder.
Interesting, I had a look at that app. and checked it on Virustotal - it came up with PUP detections:
Code:SHA256: da90af24398a12d6fb20215b0219d1f6383ae032576da6067cff35cb7a2326e8 File name: ProduKey.exe Detection ratio: 3 / 57 Analysis date: 2015-04-18 12:14:41 UTC ( 0 minutes ago ) SHA256: 080cb46952b5fbce885f8645e406d28d0e813ecfbfc2aeb8c07a071ed4daebe0 File name: ShowKeyPlus.exe Detection ratio: 0 / 57 Analysis date: 2015-04-18 12:12:46 UTC ( 0 minutes ago )
The recovery image you posted has a sources folder....
Upload the hive to Onedrive or somthing and share - PM me the link.
BTW: I think the dot in windows.old is what's causing the error - remove that and try again.
This?
I'll see if I can upload the SOFTWARE hive.
EDIT: FYI the windows.old is default, I didn't change that but i'll try.
Also, I tried straight up uploading it but it says the file is in use for some reason, I'll try again by copying it.
EDIT 2: I can't copy it either. For some reason "C:\Windows.old\WINDOWS\System32\config\SOFTWARE" is being used. Obviously this will prevent me from renaming Windows.old as well.
Seems you will have to copy it offline - i.e from a USB boot Windows or Linux ... If you can't find an OEM folder I'll PM you instructions - which edition of Windows 7 did you have?
- but let's see if what we can extract from the hive first.
I do have this laptop dual booted with Mint, so that won't be a problem. Sadly I do not know which edition of Windows 7 I had. Its been a pretty long time ago since I used it. Also, I do have a "C:\Windows.old\WINDOWS\System32\config\RegBack" but I'm not sure if they would have the files needed. Should I get into mint & upload the file?
Interesting note, so I have the windows 8 bootloader set up so that if I hit Mint it restarts & boots into grub, but grub displays mint and Windows 7 + Windows 7 Recovery. I'll try to upload at the moment. Also, In HDDRECOVERY\BIN\ there is a file called GETKEYSTATE.EXE. It is unable to be opened though, as it crashes upon trying to open it. I'm guessing you have to boot the recovery, which I don't know how.
What are you trying to find in the hive? Also, it is 100MB. I have awful internet speed, it'll take awhile.
I found this folder, maybe this is what you were talking about.
Windows 10\RecoveryImage\OEMInformation
Windows 10 represents the C drive if I were in windows. I as unable to open this file in windows (access is denied) even in elevated cmd.
Err... I have SOFTWARE uploading in mediafire (via mint) and it was at two percent.. now its at zero. I'll try and copy it and then upload it, but likely tomorrow because it is late where I live.
Last edited by sniper; 18 Apr 2015 at 08:46.
Then don't worry about the full file... load the hive in regedit (select HKEY_CURRENT_USER first - then select file->load hive) give it a name like backup - export backup\Microsoft\Windows NT and upload just that.