EFS Question about Restoring Prior Windows Installation (windows.old)

Kokuyo

New member
Local time
1:26 PM
Messages
2
I'm planning to restore my previous windows installation using the windows.old folder because I lost access to a LOT of files after I clean-installed windows (Win7 64 -> Legit Win7 64) because I (foolishly) encrypted using the built in Windows EFS instead of TrueCrypt for some reason I can't remember :sarc: I -think- I have tried everything with regards to finding the old keys in my windows.old folder, but no luck. As such...

If I restore the previous installation via windows.old (the version that I encrypted the files with), would that allow me to regain access to the files I encrypted with EFS? After I unencrypt my hundreds of files, I am planning to go back to my current installation of windows, if possible. I'd ideally not want to reinstall everything all over again, but if that's what it takes to unencrypt my files I will do it.


In case it's a bit confusingly worded, my process is:

  1. On current installation(legit) without access to EFS encrypted files
  2. Restore using windows.old, installation that initially encrypted files using EFS
  3. Unencrypt my files
  4. Restore to the current installation(legit) I was on (from step 1)
  5. Be happy, hopefully not lose any files in the process
  6. Be smart and use TrueCrypt
EDIT: The EFS encrypted files are all in different drives, none in the boot drive.

EDIT2: I have the stuff from
Code:
C:\Windows.old\Users\Kokuyo\AppData\Roaming\Microsoft\SystemCertificates
C:\Windows.old\Users\Kokuyo\AppData\Roaming\Microsoft\Crypto
 
Last edited:

My Computer My Computer

Computer type
PC/Desktop
OS
Win 7 Ultimate - 64bit
CPU
i7-4790k
Motherboard
MSI Z97-GD65
Memory
8GB @1333MHz
Graphics Card(s)
GTX 660
Sound Card
Xonar Essence STX
Monitor(s) Displays
2
Screen Resolution
1920x1080, 1440x900
PSU
750W
Cooling
Corsair H50
Keyboard
Logitech G15

My Computer My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Self built using existing case
OS
Windows 7 Home Premium 64 bit sp1
CPU
Intel i5 3570 3.4Ghz Ivy Bridge SKT 1155 quad core
Motherboard
Gigabyte Z77-HD3 SKT 1155 2xSata 3, 4x USB 3.0
Memory
G-Skill Rip Jaws 16Gb (8x2) DDR3 -1600 PC3 12800 CL 10 red
Graphics Card(s)
Gigabyte NVIDIA GT610 1Gb DDR3 810/1200 PCI-E 2.0 Silent
Sound Card
NVIDIA High Definition & Realtech High Definition Audio
Monitor(s) Displays
2 x Philips 226V4L 16:9 aspect ratio
Screen Resolution
1920 x 1080 HD
Hard Drives
Samsung 840 Pro 256gb SSD, SATA 3.
Hitachi Touro Portable 1tb, USB 3.0 HDD used for image b/ups.
PSU
Corsair VS450
Case
Codeng
Cooling
PSU fan & CPU fan
Keyboard
Logitech
Mouse
Logitech Wireless trackball M570
Internet Speed
Wireless 3G. 3mg down & 550kb up.
Antivirus
Bitdefender Internet Security 2020
Browser
Opera (Current Version) & Firefox
Other Info
MS Office 2013 Pro. Davis weather station software. MGE Nova 600 avr UPS.
Be sure to read it right through. You should back up your existing Windows Old beforehand.
Bear in mind it will not be a perfect install but it might get you out of trouble.

Definitely, was planning to use that guide. Backing up my only -potential- key to my files is a very good idea, doing that now. Do you know if it will work to recover my EFS encrypted files?
 

My Computer My Computer

Computer type
PC/Desktop
OS
Win 7 Ultimate - 64bit
CPU
i7-4790k
Motherboard
MSI Z97-GD65
Memory
8GB @1333MHz
Graphics Card(s)
GTX 660
Sound Card
Xonar Essence STX
Monitor(s) Displays
2
Screen Resolution
1920x1080, 1440x900
PSU
750W
Cooling
Corsair H50
Keyboard
Logitech G15
As long as you exported your EFS key/certificate beforehand, you will have no problem accessing your files.

Backing up the Encrypting File System (EFS) certificate - Windows Help

If you didn't do that, I'm not sure there is a way of recovering them except with expensive paid software.

Decrypt and recover files protected with the Encrypting File System (EFS)

Restoring the previous installation "should" work but I'm not 100% sure.

Also, truecrypt is a little outdated now and no longer updated, you might want to look into Veracrypt which is a fork of truecrypt and is being updated:

https://veracrypt.codeplex.com
 

My Computer My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Build
OS
Win 7 Ultimate, Win 8.1 Pro, Linux Mint 19 Cinnamon (All 64-Bit)
CPU
Intel i5 4690K
Motherboard
Gigabyte Z97X-UD3H
Memory
Corsair Vengeance LP 32GB DDR3
Graphics Card(s)
MSI GTX 1060 GAMING X 6GB
Sound Card
Onboard
Hard Drives
Samsung 850 EVO 250GB SSD (x2)
Samsung 860 EVO 1TB SSD (x2)
Crucial MX300 525GB SSD
WD Blue 2TB 5400rpm Intellipark Disabled (x2)
PSU
Corsair HX750i
Case
Phanteks Enthoo Pro
Cooling
CM Hyper 212 EVO on CPU, Noctua Redux NF-P14S 1500rpm (x6)
Keyboard
Corsair K70 RGB LUX
Mouse
Corsair Sabre RGB
Antivirus
Avast Free, MalwareBytes, SAS & CryptoPrevent
Browser
Chrome
Other Info
StarTech PEXESAT322I 2 Port PCI-E SATA Card
ASUS PCE-AC56 Dual-band AC1300 Wireless Card
Akasa FC.Six Manual Fan Controller
And a Partridge in a Pear Tree!
Back
Top