Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Encrypted files

06 Aug 2010   #1
srynznfyra

Windows 7 Ultimate x64
 
 
Encrypted files

Recently some damage happened to a user account with lots of encrypted files (virus or something), and now the files aren't accessible, even with that account (which is the original account that encrypted the files in the first place). When trying to decrypt the files, all I get is 'access denied'.

There is a program, 'Advanced EFS data recovery' by Elcomsoft, which can recover the files, however it costs an arm and a leg and I'm wondering, if that program can recover the files then surely why can't I?

The program searched for a 'certificate' (it scanned the whole drive) with which to decrypt the data, I'm wondering, once I have this certificate to hand how I can decrypt the data manually with it?

This data is very important so any help is much appreciated.

Thanks in advance


My System SpecsSystem Spec
.

07 Aug 2010   #2
NoN

Windows 7 Professional SP1 - x64 [Non-UEFI Boot]
 
 

You mean you'd created a 'certificate' to encrypt your files, then never backed it up on a usb stick drive...

On the first crash/damage, you couldn't recover those files unless taking back the certificate.

If you are on 7 Ultimate you can use that EFS Application Tab:

-Encrypt or Decrypt a Folder or File - Vista Forums

-Encrypted File System (EFS) Certificate Backup - Vista Forums

-Encrypted File System (EFS) Certificate Restore - Vista Forums

Those tutorials might give you an hand...
My System SpecsSystem Spec
07 Aug 2010   #3
srynznfyra

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by NoN View Post
You mean you'd created a 'certificate' to encrypt your files, then never backed it up on a usb stick drive...

On the first crash/damage, you couldn't recover those files unless taking back the certificate.

If you are on 7 Ultimate you can use that EFS Application Tab:

-Encrypt or Decrypt a Folder or File - Vista Forums

-Encrypted File System (EFS) Certificate Backup - Vista Forums

-Encrypted File System (EFS) Certificate Restore - Vista Forums

Those tutorials might give you an hand...
Thanks, yeah it's 7 Ultimate, I'll have a look at those links, cheers

EDIT: No, had a look at those links, didn't help

Basically this is the situation: the files are encrypted and the only user that can decrypt them has an SID that doesn't match any SID of any user on the system, for an unknown reason - I know which account encrypted them, it still exists, yet seems to have a different SID now :/

There must be a way of decrypting them, seeing as the program can do it. The certificate for the lost account must exist somewhere on the hard drive.

cheers
My System SpecsSystem Spec
.


08 Aug 2010   #4
NoN

Windows 7 Professional SP1 - x64 [Non-UEFI Boot]
 
 

Quote   Quote: Originally Posted by srynznfyra View Post
Quote   Quote: Originally Posted by NoN View Post
You mean you'd created a 'certificate' to encrypt your files, then never backed it up on a usb stick drive...

On the first crash/damage, you couldn't recover those files unless taking back the certificate.

If you are on 7 Ultimate you can use that EFS Application Tab:

-Encrypt or Decrypt a Folder or File - Vista Forums

-Encrypted File System (EFS) Certificate Backup - Vista Forums

-Encrypted File System (EFS) Certificate Restore - Vista Forums

Those tutorials might give you an hand...
Thanks, yeah it's 7 Ultimate, I'll have a look at those links, cheers

EDIT: No, had a look at those links, didn't help

Basically this is the situation: the files are encrypted and the only user that can decrypt them has an SID that doesn't match any SID of any user on the system, for an unknown reason - I know which account encrypted them, it still exists, yet seems to have a different SID now :/

There must be a way of decrypting them, seeing as the program can do it. The certificate for the lost account must exist somewhere on the hard drive.

cheers
This what i found here:
5-Minute Security Advisor - Recovering Encrypted Data Using EFS
My System SpecsSystem Spec
09 Aug 2010   #5
SiliconAddict

XP & Vista
 
 

Quote   Quote: Originally Posted by srynznfyra View Post
Recently some damage happened to a user account with lots of encrypted files (virus or something), and now the files aren't accessible, even with that account (which is the original account that encrypted the files in the first place). When trying to decrypt the files, all I get is 'access denied'.

There is a program, 'Advanced EFS data recovery' by Elcomsoft, which can recover the files, however it costs an arm and a leg and I'm wondering, if that program can recover the files then surely why can't I?

The program searched for a 'certificate' (it scanned the whole drive) with which to decrypt the data, I'm wondering, once I have this certificate to hand how I can decrypt the data manually with it?

This data is very important so any help is much appreciated.

Thanks in advance
Errr. Is this what you are talking about? Crack password : Download fastest password recovery, forensic and system security software. Forgot your password? Lost passwords recovery tools, passwords crackers, system security and forensic software. Advanced EFS Data Recovery

It says there is a 30 day trial. UNless one of the restrictions is you can't restore use it and uninstall it.
My System SpecsSystem Spec
Reply

 Encrypted files




Thread Tools





Similar help and support threads
Thread Forum
Can't access the encrypted files after the format
Hello This problem with my friend PC, he was using winXP, there was plenty of encrypted files in his D drive, now he formatted his PC to win7 ultimate, all the encrypted files are unaccessible, he don't don't know whether he backup the certificate or not, he know nothing about this, is there a way...
General Discussion
All files encrypted without me encrypting them.
OK, yesterday, a random .exe was found on my desktop (that i never downloaded) and it opened automatically saying that all of my files were encrypted and i needed to click something to remove encryption... Sensing an obvious trojan I decided to shred the file with iobit and everything was fine....
System Security
Encrypted Files
I have a top level folder where all folders, subfolders and files are encrypted. I purchased these Adobe Lightroom tutorials which are mainly Quicktime formatted. The folders also contain several PDF files. These files where received as Zip files and extracted by me. The folder and file names...
General Discussion
help virus 50$ all files encrypted
i have windows 7 all files ( music photo dada ........all) encrypted this warning in folders File Decryption costs ~ $ 50 In order to decrypt the files, you need to perform the following steps: 1. You should download and install this browser
System Security
Ransomware encrypted my files. All files have .html extension
Hello, System is a Toshiba Satellite L755-S5353 Windows 7 Home Premium 64-bit. Intel Pentium CPU B950 @ 2.10GHz 4GB RAM. This laptop came into my shop with the FBI screen. After making full backup and scanning with Malwarebytes, Superantispyware, and Symantec Endpoint Protection on my...
System Security
Cannot access encrypted files even though I never encrypted them
I have a 1TB external USB drive (M: for my entire music collection (all legitimately purchased!) It has always been connected to my desktop. Up until a few weeks ago, my desktop was Win7 32bit Ultimate. A few weeks ago my system died so I got a new one and I installed Win7 64bit Ultimate this...
Music, Pictures & Video

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 21:24.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App