A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Security and Administration with Windows XP
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

EFS files



 
 
Thread Tools Display Modes
  #1  
Old December 1st 05, 06:24 AM posted to microsoft.public.windowsxp.security_admin
external usenet poster
 
Posts: n/a
Default EFS files

Hello

I have some files that I encrypted with EFS on drive D:, but due to a
hardware crash I had to reformat my harddrive on drive C: and
reinstalled Windows XP.

I have the same username and password, but now I cant see the files. I
know the password and the username that was there but I'm unable to see
them... is there any way to recover those files?

I tried Advanced EFS recovery and other program but had no luck with
them... any suggestions?

Thanks in advance
Ads
  #2  
Old December 1st 05, 09:06 AM posted to microsoft.public.windowsxp.security_admin
external usenet poster
 
Posts: n/a
Default EFS files

The problem for you is that the EFS certificate/private key that you used to
encrypt your files was stored in your user profile. Since you reformatted
your hard drive you destroyed your user profile and the EFS
certificate/private key and without such there is no way to access your EFS
files unless you are in an Active Directory domain that had a Recovery Agent
configured for EFS or you had previously backed up your EFS
certificate/private key to a password protected .pfx file in external media
to use in situations like you are in now to access your files. I wish I had
better news but there are no backdoors to EFS without the existence of any
EFS certificate/privates keys that are able to decrypt the files. --- Steve


http://support.microsoft.com/default...223316&sd=tech ---
EFS best practices.

"christian strevel" wrote in message
...
Hello

I have some files that I encrypted with EFS on drive D:, but due to a
hardware crash I had to reformat my harddrive on drive C: and reinstalled
Windows XP.

I have the same username and password, but now I cant see the files. I
know the password and the username that was there but I'm unable to see
them... is there any way to recover those files?

I tried Advanced EFS recovery and other program but had no luck with
them... any suggestions?

Thanks in advance



  #3  
Old December 1st 05, 11:02 PM posted to microsoft.public.windowsxp.security_admin
external usenet poster
 
Posts: n/a
Default EFS files


Thanks for answering me. So there is no possible way to recover those
files by any way? Absolutely no WAY? omg ...

Are you really-really sure?



Steven L Umbach wrote:
The problem for you is that the EFS certificate/private key that you used to
encrypt your files was stored in your user profile. Since you reformatted
your hard drive you destroyed your user profile and the EFS
certificate/private key and without such there is no way to access your EFS
files unless you are in an Active Directory domain that had a Recovery Agent
configured for EFS or you had previously backed up your EFS
certificate/private key to a password protected .pfx file in external media
to use in situations like you are in now to access your files. I wish I had
better news but there are no backdoors to EFS without the existence of any
EFS certificate/privates keys that are able to decrypt the files. --- Steve


http://support.microsoft.com/default...223316&sd=tech ---
EFS best practices.

"christian strevel" wrote in message
...

Hello

I have some files that I encrypted with EFS on drive D:, but due to a
hardware crash I had to reformat my harddrive on drive C: and reinstalled
Windows XP.

I have the same username and password, but now I cant see the files. I
know the password and the username that was there but I'm unable to see
them... is there any way to recover those files?

I tried Advanced EFS recovery and other program but had no luck with
them... any suggestions?

Thanks in advance




  #4  
Old December 2nd 05, 01:12 AM posted to microsoft.public.windowsxp.security_admin
external usenet poster
 
Posts: n/a
Default EFS files

IF you have some sort of image backup from the past of
the C drive so you could restore and get the keys again,
you could recover them. You can also crack the files ... the
bad news is you probably don't have the time or computing
horsepower to do that (the files are encrypted with the DES
process which is not trivial to crack). Hope you had a
backup image of the drive ... sorry ' bout that ;-(

mikey

"christian strevel" wrote in message
...

Thanks for answering me. So there is no possible way to recover those
files by any way? Absolutely no WAY? omg ...

Are you really-really sure?



Steven L Umbach wrote:
The problem for you is that the EFS certificate/private key that you

used to
encrypt your files was stored in your user profile. Since you

reformatted
your hard drive you destroyed your user profile and the EFS
certificate/private key and without such there is no way to access

your EFS
files unless you are in an Active Directory domain that had a

Recovery Agent
configured for EFS or you had previously backed up your EFS
certificate/private key to a password protected .pfx file in

external media
to use in situations like you are in now to access your files. I

wish I had
better news but there are no backdoors to EFS without the existence

of any
EFS certificate/privates keys that are able to decrypt the

iles. --- Steve



http://support.microsoft.com/default...223316&sd=tech
---
EFS best practices.

"christian strevel" wrote in message
...

Hello

I have some files that I encrypted with EFS on drive D:, but due to

a
hardware crash I had to reformat my harddrive on drive C: and

reinstalled
Windows XP.

I have the same username and password, but now I cant see the files.

I
know the password and the username that was there but I'm unable to

see
them... is there any way to recover those files?

I tried Advanced EFS recovery and other program but had no luck with
them... any suggestions?

Thanks in advance





  #5  
Old December 2nd 05, 01:31 AM posted to microsoft.public.windowsxp.security_admin
external usenet poster
 
Posts: n/a
Default EFS files

Technically it may be possible for a data recovery expert to examine your
hard drive to see if the needed files are recoverable to reconstruct your
EFS certificate/private key if they were not overridden during the
format/reinstall. My guess that could probably cost at least a few thousand
dollars with NO guarantee of results. Otherwise brute force cracking could
be attempted if you could perhaps lease all of NSA computers for at least a
decade or so. --- Steve


"christian strevel" wrote in message
...

Thanks for answering me. So there is no possible way to recover those
files by any way? Absolutely no WAY? omg ...

Are you really-really sure?



Steven L Umbach wrote:
The problem for you is that the EFS certificate/private key that you used
to encrypt your files was stored in your user profile. Since you
reformatted your hard drive you destroyed your user profile and the EFS
certificate/private key and without such there is no way to access your
EFS files unless you are in an Active Directory domain that had a
Recovery Agent configured for EFS or you had previously backed up your
EFS certificate/private key to a password protected .pfx file in external
media to use in situations like you are in now to access your files. I
wish I had better news but there are no backdoors to EFS without the
existence of any EFS certificate/privates keys that are able to decrypt
the files. --- Steve



p://support.microsoft.com/default.aspx?scid=kb;en-us;223316&sd=tech ---
EFS best practices.

"christian strevel" wrote in message
...

Hello

I have some files that I encrypted with EFS on drive D:, but due to a
hardware crash I had to reformat my harddrive on drive C: and
reinstalled Windows XP.

I have the same username and password, but now I cant see the files. I
know the password and the username that was there but I'm unable to see
them... is there any way to recover those files?

I tried Advanced EFS recovery and other program but had no luck with
them... any suggestions?

Thanks in advance




 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
scan for file corruption ms. greenhorn New Users to Windows XP 10 July 7th 10 08:11 PM
NTFS - CHKDSK - Corrupt Files - Large Drives Ted Windows XP Help and Support 0 March 26th 05 07:43 PM
How to recover offline syncronized files Fazgood General XP issues or comments 6 November 25th 04 04:32 PM
SP2 and RAID Johannes Kantelberg Windows Service Pack 2 6 September 3rd 04 07:57 PM
The plot thickens - 51,000 files missing Ron Patterson The Basics 4 July 29th 04 07:13 PM






All times are GMT +1. The time now is 09:08 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.