Re: EFS files

IF you have some sort of image backup from the past of
the C drive so you could restore and get the keys again,
you could recover them. You can also crack the files ... the
bad news is you probably don't have the time or computing
horsepower to do that (the files are encrypted with the DES
process which is not trivial to crack). Hope you had a
backup image of the drive ... sorry ' bout that ;-(

mikey

"christian strevel" <cs@xxxxxxxxxxxxxxxxxxx> wrote in message
news:e7JDvLs9FHA.4004@xxxxxxxxxxxxxxxxxxxxxxx
>
> Thanks for answering me. So there is no possible way to recover those
> files by any way? Absolutely no WAY? omg ... :(
>
> Are you really-really sure?
>
>
>
> Steven L Umbach wrote:
> > The problem for you is that the EFS certificate/private key that you
used to
> > encrypt your files was stored in your user profile. Since you
reformatted
> > your hard drive you destroyed your user profile and the EFS
> > certificate/private key and without such there is no way to access
your EFS
> > files unless you are in an Active Directory domain that had a
Recovery Agent
> > configured for EFS or you had previously backed up your EFS
> > certificate/private key to a password protected .pfx file in
external media
> > to use in situations like you are in now to access your files. I
wish I had
> > better news but there are no backdoors to EFS without the existence
of any
> > EFS certificate/privates keys that are able to decrypt the
iles. --- Steve
> >
> >
> >
http://support.microsoft.com/default.aspx?scid=kb;en-us;223316&sd=tech
---
> > EFS best practices.
> >
> > "christian strevel" <cs@xxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:eFe$7dj9FHA.600@xxxxxxxxxxxxxxxxxxxxxxx
> >
> >>Hello
> >>
> >>I have some files that I encrypted with EFS on drive D:, but due to
a
> >>hardware crash I had to reformat my harddrive on drive C: and
reinstalled
> >>Windows XP.
> >>
> >>I have the same username and password, but now I cant see the files.
I
> >>know the password and the username that was there but I'm unable to
see
> >>them... is there any way to recover those files?
> >>
> >>I tried Advanced EFS recovery and other program but had no luck with
> >>them... any suggestions?
> >>
> >>Thanks in advance
> >
> >
> >

.

Relevant Pages

  • Re: EFS + unbootable HDD help ...
    ... EFS would not be secure. ... You will still need access to the ORIGINAL keys. ... I did make weekly backups and thus have the encrypted files ... Using Stellar's recovery tool I was able to recover ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: EFS with no Administrator Certificate
    ... > We a have a standalone system that multiple people use; ... we implemented EFS to allow users A and B to work on ... > when I tried to log into the administrator account I could not ... it would be nice to recover some of the original files. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS file recovery on Win2k
    ... destroyed - so I must be able to recover the information. ... > Win2000 EFS works a little differently but also allows you to set up other ... > You definitely want to back up the encryption keys, ... > Since EFS is tied to the user account, EFS is compromised if the account ...
    (microsoft.public.win2000.security)
  • Re: EFS file recovery without the exported cert
    ... I use efs on a few folders that resides on a w2k ... > I there a way to recover my certs and my EFS files? ... you can try again to get the previous version of Windows to boot... ...
    (microsoft.public.win2000.security)
  • Re: Decrypting Files
    ... Well I hate to tell you this but unless you had backed up for EFS ... certificate/private key to a password protected .pfx file for safe keeping ... it may be possible to recover it by a specialist skilled at recovering ... the FEK [file encryption key] used to encrypt the data. ...
    (microsoft.public.windowsxp.security_admin)