recovering protected files

From: Robb (derivat_at_orangmail.sk)
Date: 09/30/03


Date: Tue, 30 Sep 2003 00:49:25 -0700


OK KO ...

I tried almost everything:

none of the available programs can help you if you can't
recover your previous installation of Windows in case it
was deleted or formatted.

My problem was, when my Win XP crashed and there was no
way to repair it becasue of damaged registry I decided to
make a new installation without exporting a private key
first for ntfs encrypted files,
The another problem is that I made a new installation on
the same disk where was the previous and this
consequently caused that some files were overwritten and
it simply means there's no way to recover it,
I used NTFS R-Studio2 and Ontrack recovery Professional
to recover almost 800 MB of privious installation but
with no success,

all of my encrypted files was not in My documents folder,

Private key for encrypted files is stored in My documents
folder so if you have an access to this folder and there
is everything like it was when windows was running you
can use advanced EFS recovery to search for Private Keys
first, than to search for encrypted files and matched
them together, you will see 3 windows in program, it's
very easy process with that program:

1. encrypted files
2. decrypted files
3. files which can't be decrypted

decrypted files than you can copy to some safe disk,

if you have no key no data can be retrieved !!, and I can
repeat it againg NO kEY - NO dATA

there is chance to use some cracking program using brute
force maybe with some mask to break the cipher,
but it's 128 bit long and that's no fun,

however I have heard that there are some companies which
are able to do it in short time, but I am not sure about
the price,

I appreciate any other suggestion which I may missed,
I repeat I have no key to decrypt my files and it can't
be recovered becase they were overwritten with new
installation, all encrypted files weren't stored in My
documents folder

does anybody know some program, free to download .. with
a good algorithm to break 128 EFS cipher?,

thanx
Robb

>-----Original Message-----
>My windows install recently crashed and I can't seem to
>get it back. I'm preparing for a reinstall and
attempting
>to copy my files onto a friends computer. He has my hard
>drive set as a slave in his pc. We have managed to copy
>some files but we can't get the My Documents folder
>because I have a password on my windows account so we
get
>a message saying that we don't have access to those
>files. Is there any way I can recover these files?
>.
>



Relevant Pages

  • RE: [SLE] Urgent! Need help!
    ... Anders just pointed out I should have gone into the installation ... I've been trying to recover my Windows machine from a backup. ... LAST THING I WANT TO DO AT THIS POINT IS MESS UP MY LINUX PARTITION!! ...
    (SuSE)
  • recovering protected files
    ... >recover your previous installation of Windows in case it ... >all of my encrypted files was not in My documents folder, ... >Private key for encrypted files is stored in My ...
    (microsoft.public.windowsxp.security_admin)
  • recovering protected files
    ... Seeing that a proven cipher of around 128 bits is plenty ... In Windows XP, ... >>make a new installation without exporting a private key ... >>all of my encrypted files was not in My documents ...
    (microsoft.public.windowsxp.security_admin)
  • Re: XP hangs/freezes before my accounts and the MS sound "appear"
    ... I should have told you also, first thing to do before anything else, boot to ... windows installation, select it and login with the administrator password ... > is called a parallel installation. ... and recover ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: XP hangs/freezes before my accounts and the MS sound "appear"
    ... I should have told you also, first thing to do before anything else, boot to ... windows installation, select it and login with the administrator password ... > is called a parallel installation. ... and recover ...
    (microsoft.public.windowsxp.help_and_support)