Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.



Windows 7: Encrypted files

06 Aug 2010   #1

Windows 7 Ultimate x64
 
 
Encrypted files

Recently some damage happened to a user account with lots of encrypted files (virus or something), and now the files aren't accessible, even with that account (which is the original account that encrypted the files in the first place). When trying to decrypt the files, all I get is 'access denied'.

There is a program, 'Advanced EFS data recovery' by Elcomsoft, which can recover the files, however it costs an arm and a leg and I'm wondering, if that program can recover the files then surely why can't I?

The program searched for a 'certificate' (it scanned the whole drive) with which to decrypt the data, I'm wondering, once I have this certificate to hand how I can decrypt the data manually with it?

This data is very important so any help is much appreciated.

Thanks in advance

My System SpecsSystem Spec
.

07 Aug 2010   #2
NoN

Windows 7 Professional SP1 - x64
 
 

You mean you'd created a 'certificate' to encrypt your files, then never backed it up on a usb stick drive...

On the first crash/damage, you couldn't recover those files unless taking back the certificate.

If you are on 7 Ultimate you can use that EFS Application Tab:

-Encrypt or Decrypt a Folder or File - Vista Forums

-Encrypted File System (EFS) Certificate Backup - Vista Forums

-Encrypted File System (EFS) Certificate Restore - Vista Forums

Those tutorials might give you an hand...
My System SpecsSystem Spec
07 Aug 2010   #3

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by NoN View Post
You mean you'd created a 'certificate' to encrypt your files, then never backed it up on a usb stick drive...

On the first crash/damage, you couldn't recover those files unless taking back the certificate.

If you are on 7 Ultimate you can use that EFS Application Tab:

-Encrypt or Decrypt a Folder or File - Vista Forums

-Encrypted File System (EFS) Certificate Backup - Vista Forums

-Encrypted File System (EFS) Certificate Restore - Vista Forums

Those tutorials might give you an hand...
Thanks, yeah it's 7 Ultimate, I'll have a look at those links, cheers

EDIT: No, had a look at those links, didn't help

Basically this is the situation: the files are encrypted and the only user that can decrypt them has an SID that doesn't match any SID of any user on the system, for an unknown reason - I know which account encrypted them, it still exists, yet seems to have a different SID now :/

There must be a way of decrypting them, seeing as the program can do it. The certificate for the lost account must exist somewhere on the hard drive.

cheers
My System SpecsSystem Spec
.


08 Aug 2010   #4
NoN

Windows 7 Professional SP1 - x64
 
 

Quote   Quote: Originally Posted by srynznfyra View Post
Quote   Quote: Originally Posted by NoN View Post
You mean you'd created a 'certificate' to encrypt your files, then never backed it up on a usb stick drive...

On the first crash/damage, you couldn't recover those files unless taking back the certificate.

If you are on 7 Ultimate you can use that EFS Application Tab:

-Encrypt or Decrypt a Folder or File - Vista Forums

-Encrypted File System (EFS) Certificate Backup - Vista Forums

-Encrypted File System (EFS) Certificate Restore - Vista Forums

Those tutorials might give you an hand...
Thanks, yeah it's 7 Ultimate, I'll have a look at those links, cheers

EDIT: No, had a look at those links, didn't help

Basically this is the situation: the files are encrypted and the only user that can decrypt them has an SID that doesn't match any SID of any user on the system, for an unknown reason - I know which account encrypted them, it still exists, yet seems to have a different SID now :/

There must be a way of decrypting them, seeing as the program can do it. The certificate for the lost account must exist somewhere on the hard drive.

cheers
This what i found here:
5-Minute Security Advisor - Recovering Encrypted Data Using EFS
My System SpecsSystem Spec
09 Aug 2010   #5

XP & Vista
 
 

Quote   Quote: Originally Posted by srynznfyra View Post
Recently some damage happened to a user account with lots of encrypted files (virus or something), and now the files aren't accessible, even with that account (which is the original account that encrypted the files in the first place). When trying to decrypt the files, all I get is 'access denied'.

There is a program, 'Advanced EFS data recovery' by Elcomsoft, which can recover the files, however it costs an arm and a leg and I'm wondering, if that program can recover the files then surely why can't I?

The program searched for a 'certificate' (it scanned the whole drive) with which to decrypt the data, I'm wondering, once I have this certificate to hand how I can decrypt the data manually with it?

This data is very important so any help is much appreciated.

Thanks in advance
Errr. Is this what you are talking about? Crack password : Download fastest password recovery, forensic and system security software. Forgot your password? Lost passwords recovery tools, passwords crackers, system security and forensic software. Advanced EFS Data Recovery

It says there is a 30 day trial. UNless one of the restrictions is you can't restore use it and uninstall it.
My System SpecsSystem Spec
Reply

 Encrypted files





Thread Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 11:18 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33