The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.
Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Sat Aug 13 22:52:27 2016 from 10
root@rescue:~# mkdir /media/windows
root@rescue:~# sudo mount /dev/sda2 /media/windows
The disk contains an unclean file system (0, 0).
The file system wasn't safely closed on Windows. Fixing.
root@rescue:~# chntpw -l /media/windows/Windows/system32/config/software
chntpw version 1.00 140201, (c) Petter N Hagen
openHive(/media/windows/Windows/system32/config/software) failed: No such file or directory, trying read-only
openHive(/media/windows/Windows/system32/config/software) in fallback RO-mode failed: No such file or directory
chntpw: Unable to open/read a hive, exiting..
root@rescue:~# umount /dev/sda2
able to locate package ntfs-progs
root@rescue:~# sudo ntfs-3g -o rw /dev/sda2 /media/windows/
root@rescue:~# chntpw -l /media/windows/Windows/system32/config/software
chntpw version 1.00 140201, (c) Petter N Hagen
openHive(/media/windows/Windows/system32/config/software) failed: No such file or directory, trying read-only
openHive(/media/windows/Windows/system32/config/software) in fallback RO-mode failed: No such file or directory
chntpw: Unable to open/read a hive, exiting..
root@rescue:~# cd /media/
root@rescue:/media# cd windows/
root@rescue:/media/windows# la
-bash: la: command not found
root@rescue:/media/windows# ls
Documents and Settings PerfLogs Program Files Recovery System Volume Information Windows
pagefile.sys ProgramData Program Files (x86) $Recycle.Bin Users
root@rescue:/media/windows# cd Windows/
root@rescue:/media/windows/Windows# ls
addins explorer.exe ModemLogs ServiceProfiles tracing
AppCompat Fonts msdfmap.ini servicing twain_32
AppPatch fppset.inf notepad.exe Setup twain_32.dll
assembly fveupdate.exe Offline Web Pages setupact.log twain.dll
bfsvc.exe Globalization Panther setuperr.log twunk_16.exe
BitLockerDiscoveryVolumeContents Help Performance ShellNew twunk_32.exe
Boot HelpPane.exe PLA SoftwareDistribution Ultimate.xml
bootstat.dat hh.exe PolicyDefinitions Speech Vss
Branding IME Prefetch splwow64.exe Web
CSC inf regedit.exe Starter.xml WindowsShell.Manifest
Cursors Installer Registration system WindowsUpdate.log
debug L2Schemas RemotePackages System32 winhlp32.exe
diagnostics LiveKernelReports rescache system.ini win.ini
DigitalLocker Logs Resources SysWOW64 winsxs
Downloaded Program Files Media SchCache TAPI WMSysPr9.prx
ehome mib.bin schemas Tasks write.exe
en-US Microsoft.N作者: funders 时间: 2016-8-14 11:46
只是忘掉密码的话 参考sethc后门作者: 月痕 时间: 2016-8-14 11:48
传个1.exe 多省事作者: bigexiu 时间: 2016-8-14 11:51