Re: Unable to Decrypt Encrypted files

If you do not have at least one of the keys these services will not work.
Again if efs was easy to crack what would be the point of it? The only
conceivable methods the OP could use to decrypt his data would be if he had
a full backup with his old user profile which it sounds like he doesn't, or
sending both hard drives to a data recovery specialist who could try to
recover the user profile from the formatted hard drive. The second option
would be expensive and unlikely to succeed as he has already installed
Windows on the drive and continues to use it. Without at least one of the
keys his data is gone. If you Google for efs data recovery most the links
will point you here:

http://www.elcomsoft.com/aefsdr.html

This is an excellent program but if you read the documentation you do need
the original key used to encrypt the files. The program will scan disks
looking for it, will find partial keys and sometimes recover them, recover
keys where the password has been changed, etc., etc.. What it can't do is
decrypt files if the keys are not available in some shape or form.

--
Kerry
MS-MVP Windows - Shell/User

Doug Knox MS-MVP wrote:
Actually, there are services that will attempt to do this for you,
with varying degrees of expense and success. Google for "data
recovery services"


"Kerry Brown" <kerry@xxxxxxxxxxxxxxxxxxx*a*m> wrote in message
news:OWEOU6ZnGHA.2264@xxxxxxxxxxxxxxxxxxxxxxx
If they were encrypted with efs and you do not have a copy of the
keys then no, there is not a program that will decrypt the files.
What would be the point of encryption if there was?

--
Kerry
MS-MVP Windows - Shell/User

Roger Payne wrote:
ok is there a program that will decrypt the files

"Mike Fields" wrote:


"Roger Payne" <rpayne@xxxxxxxxxxxxxxx> wrote in message
news:024D8398-FD21-41E4-981A-C6FCDC630192@xxxxxxxxxxxxxxxx
unfortunately i have done a format and install clean operating
system again(xp)! And i am unable to decrypt my originally
encrypted files for my
seccond HDD. Is there any possible way to decrypt ??? If it does
help I did
a full format on my C:

C: = Windows XP Pro
D: = BAck up drive

i have all updates for windows

If you really mean they were encrypted (using EFS) and
you did not export a key and/or have a backup of the
previous install, you are basically "up the creek sans paddle"
If you mean they were "protected" as in set to read only
for you, then you can take ownership of the files. Windows
2000 used to force you to have a DRA (Designated Recovery
Agent) that could also decrypt files that were EFS
encrypted, however, XP does not force you to do that
and if you re-install XP Pro (even using the same account
names), the keys will be different and without a copy of the
key, there is not much hope of decrypting the files.

mikey


.

Relevant Pages

  • RE: Protecting sensitive files on a Windows file server
    ... In EFS, it takes me 5 minutes to remove the recovery key from the ... Protecting sensitive files on a Windows file server ... You have to have backup keys in case the original ...
    (Security-Basics)
  • Re: ciphered files
    ... > If you are not in a domin, and you did not export your encryption keys ... > My view on EFS: ... as well not having created a Recovery Agent (with backup of the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Unable to Decrypt Encrypted files
    ... it keeps asking for a account name and password ... conceivable methods the OP could use to decrypt his data would be if he had ... keys his data is gone. ... If you Google for efs data recovery most the links ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS
    ... I agree that Microsoft did a poor job informing users of the risks of EFS by ... not prompting to backup the EFS keys like Vista does. ... includes a notification to remind users to backup their private keys. ... links below are for EFS Recovery form Elcomsoft and links to Data ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS encrypt files: Changed PW now cant access... :-(
    ... .xls files and accidentally used XPpro's EFS. ... account they couldn't figure out. ... SYS-startup keys, provided that you have the original ... decrypt the files etc. ...
    (microsoft.public.windowsxp.security_admin)