decrypting files without the sam db

From: J. Yoon (supercool9000_at_hotmail.com)
Date: 01/29/04

  • Next message: Jeff Lewis: "Re: READ RECIEPTS automatically generated"
    To: security-basics@securityfocus.com
    Date: Thu, 29 Jan 2004 11:23:10 -0500
    
    

    Is there any way to decrypt the encrypted files if I no longer have the same
    sam database in the computer?
    Many of the xp bruteforce crackers seem to rely on the key/database file,
    but is there a cracker that can decrypt the file itself simply based on my
    admin password,
    without relying on any other file?

    I have reinstalled XP and have the same username/computer name/passwords,
    and as I was about to move over the files from the key recovery disk,
    the disk been damaged. now my encrypted files are no longer accessible.

    I've tried EFS key from lostpassword.com
    but it keeps saying that the password i entered is incorrect
    when infact it IS the correct passwd.

    _________________________________________________________________
    Scope out the new MSN Plus Internet Software — optimizes dial-up to the max!
       http://join.msn.com/?pgmarket=en-us&page=byoa/plus&ST=1

    ---------------------------------------------------------------------------
    Ethical Hacking at InfoSec Institute. Mention this ad and get $720 off any
    course! All of our class sizes are guaranteed to be 10 students or less.
    We provide Ethical Hacking, Advanced Ethical Hacking, Intrusion Prevention,
    and many other technical hands on courses.
    Visit us at http://www.infosecinstitute.com/securityfocus to get $720 off
    any course!
    ----------------------------------------------------------------------------


  • Next message: Jeff Lewis: "Re: READ RECIEPTS automatically generated"

    Relevant Pages

    • cant copy encrypted files
      ... Is there any way to copy or decrypt encrypted files if I've got the ... another machine running XP. ... either in ubuntu or through the network from the client machine running XP. ... I can't run the cipher command to decrypt the files since I can't log on to ...
      (microsoft.public.windowsxp.general)
    • Re: lsass.exe in CPU loop when logging in
      ... This will identify all encrypted files on your local drive. ... GUID for a name under the Protect directory). ... cannot decrypt files that were encrypted earlier. ... lsass.exe to take over the system for several minutes after logon. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Format and Reinstall
      ... Do you have a backup copy of the C: ... may be possible to decrypt the files, based on a KB article on the MS site. ... > access the encrypted files. ...
      (microsoft.public.windowsxp.security_admin)
    • A different kind of EFS problem
      ... I'm having problems getting access to my EFS encrypted files. ... Documents) will decrypt. ... my Admin SID didn't change during the reinstall. ... I did notice that there are two Admin certificates for File Recovery ...
      (microsoft.public.win2000.security)