Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How to decrypt EFS files, with key, that win7 thinks are unencrypted

15 Feb 2018   #1
MikeE6410

W7U 32b
 
 
How to decrypt EFS files, with key, that win7 thinks are unencrypted

Hi Folks,
Problem as per title.
I got here as follows:
1) fatal hardware disk crash, killing part of one partition.
2) Acronis disk image of the partition remnants to freeze conditiion (mostly good files)
3) Unloaded image onto sound hard disk. Plan was to get good + bad files onto a stable disk.

What I actually got was a raw disk. So I ran GetDataBack to see what was there, and it does contain a bunch of my files. However, I can't open them, because the originals were encrypted with EFS. I have the keys. I have the original laptop up and running on a new disk. I can get to all the encrypted files on the new disk.

But GetDataBack just did a raw file recovery, so I have the files, sized, extensions and name. However, windows sees them as unencrypted, and thus won't decrypt them.
cipher /d won't touch them either.
So I need a means to force the Encrypted flag, without actually (double) encrypting the files.

Any suggestions?
Thanks!


My System SpecsSystem Spec
.
15 Feb 2018   #2
mrjimphelps

Linux Mint 18.2 xfce 64-bit (VMWare host) / Windows 8.1 Pro 32-bit (VMWare guest)
 
 

Perhaps you could install the disk containing the files in a different computer, as the secondary drive. Since you would be running a good install of Windows on a good disk, you might be able to unencrypt them.

Do you log in with a Microsoft account or a local account? If you log in to Windows with a Microsoft account, then maybe the needed user information will be available on the computer you try this on, because the encryption is tied to the user account.

Here is some helpful information:
https://www.howtogeek.com/236719/wha...em-on-windows/
My System SpecsSystem Spec
15 Feb 2018   #3
MikeE6410

W7U 32b
 
 

Thanks, but I have access to the files. I can see them; I can send them to a text reader, and see the content. I can do this locally, or an external drive. But because they are encrypted, I can't decode the content: it's just 'random' ASCII. I'm the owner, they are in my key, and I also have the recovery agent key. I can still decrypt and encrypt files from other partitions. But because Windows doesn't see the recovered files as encrypted, it doesn't try to decrypt them.
My System SpecsSystem Spec
.

Reply

 How to decrypt EFS files, with key, that win7 thinks are unencrypted




Thread Tools




Similar help and support threads
Thread Forum
TeslaCrypt ransomware victims can now decrypt their files for free
TeslaCrypt ransomware victims can now decrypt their files for free | PCWorld
System Security
CryptoWall Ransomware, Please Help To Decrypt Files.
Hello There, I am not sure if this is the right section to Post my problem, I Got a CryptoWall Virus, So they Encrypted all my files and blackmail me to Decrypt them back, So Does anyone knows any way to Decrypt this ? Please anyone can help, It's Excel and Word Work Files. Once they do this...
System Security
decrypt encrypted files error
ok sir, i seriously need help or information regarding my situation so plzz plzz help. i had some files colored green for 1-2 years but i ignored it as i didnt knew what it meant. i thought it was jst a random thing like changing icon or something. now that i ve realized that it is encyrpted and...
General Discussion
decrypt files files that I didn't encrypt
A few days ago, I noticed a popup saying computer wanted to reboot and would if I didn't postpone it. I wasn't doing anything, so I went ahead and did it. The windows updates (running Windows 7 Professional 64-bit) applied and I got back to the desktop. Adobe put up a box saying there was an...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 12:10.
Twitter Facebook Google+