Re: Re: How to Decrypt EFS Files in Win XP Pro when OS is lost.

From: andivijay (UseLinkToEmail_at_WindowsForumz.com)
Date: 09/25/05 

Date: 25 Sep 2005 13:35:45 -0400

"" wrote:
> Hi,
>
> Note that without the encryption keys, AEFSDR will not be able
> to
> decrypt the files.
>
> From AEFSDR's "Known problems and limitations" list at
> http://www.elcomsoft.com/help/aefsdr/index.html?page=requirements.htm
>
> <quote>
> The program can decrypt protected files only if encryption
> keys
> (at least, some of them) are still exist in the system and
> have
> not been tampered.
> </quote>
>
> As the user formatted the C: drive that contained the
> encryption keys,
> AEFSDR will not be able to help him.
>
> Regards,
> Torgeir
>
>
> Lazarus wrote:
>
> > Vijay, ignore the naysayers. EFS encryption can be bypassed
> with this
> > software:
> >
> > try http://www.elcomsoft.com/aefsdr.html
> >
> > Advanced EFS Data Recovery
> >
> >
> > Advanced EFS Data Recovery (or AEFSDR) is a program to
> recover (decrypt)
> > files encrypted on NTFS (EFS) partitions created in Windows
> 2000, Windows XP
> > and Windows Server 2003. Files are being decrypted even in a
> case when the
> > system is not bootable and so you cannot log on, and/or some
> encryption keys
> > have been tampered. Besides, decryption is possible even
> when Windows is
> > protected using SYSKEY. AEFSDR effectively (and instantly)
> decrypts the files
> > protected under all versions Windows Server 2003 (Standard
> and Enterprise),
> > Windows XP (including Service Packs 1 and 2) and Windows
> 2000 (including
> > Service Packs 1, 2, 3 and 4).
> >
> >
> >
> > New in version 3.0:
> > Wizard has been implemented
> > seriously improved key decryption speed
> > improved file decryption speed: in 60 times for AES, in 11
> times for DESX
> > decrypting files that are larger than 4Gb
> > added support for NTFS disks with MFT size other than 1024
> bytes
> > complete support for UNICODE systems (like Chinese and
> Japanese)
> >
> > They even have a free trial download (with obviously some
> limitations).
> > Let us know how it works out for you. Thanks.
> >
> > "andivijay" wrote:
> >
> >
> >>Hi there,
> >>
> >>Well my problem is, one of my user have formated the win XP
> m/c
> >>without knowing that he had Encrypted folder with files
> encryped in
> >>it. Now my problem is, he has formated his C: drive and the
> files are
> >>in D: drive, and after the reinstallation of the M/c none of
> his files
> >>are opening, worst case, this M/c is a standalone m/c and I
> dont have
> >>a solution where i can decrypt his files for him. Please
> suggest me
> >>for the action.
> >>
> >>Vijay A
> >>
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scriptcenter/default.mspx

Hi all,

Great thinkers around, nice to hear ya all, but as mentioned by our
good friend Torgeir Bakken, the AEFSDR 3.0 didnt work, truly for the
reasons mentioned below, and ohh i m searching the net like anything
for pulling this thing on...

Thanks for the replies guys, do write up if ya guys can pull on a
solution for this one...

Vijay A 

-- 
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Security-Admin-Decrypt-EFS-Files-Win-XP-Pro-OS-lost-ftopict424267.html 
Visit Topic URL to contact author (reg. req'd).  Report abuse: http://www.windowsforumz.com/eform.php?p=1421635