Decrypt windows files

Decrypt windows files
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Decrypt windows files Fares Atallah 01-17-2008
Posted by =?Utf-8?B?RmFyZXMgQXRhbGxhaA== on January 17, 2008, 5:14 am
If you were  Registered and logged in, you could reply and use other advanced thread options
My problem is that I have encrypted some folders and files under D drive and
then formatted my PC, I forgot to decrypt the fiels or backup my certificate
so that till now I can't access my files.
Iam using Windows XP joined to a Windows 2000 Domain, I encrypted the files
using my domain user account so I need a help in decrypting my files.

Thank you very much.
--
Fares Atallah


Posted by Malke on January 17, 2008, 9:24 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Fares Atallah wrote:
> My problem is that I have encrypted some folders and files under D drive and
> then formatted my PC, I forgot to decrypt the fiels or backup my certificate
> so that till now I can't access my files.
> Iam using Windows XP joined to a Windows 2000 Domain, I encrypted the files
> using my domain user account so I need a help in decrypting my files.
>
> Thank you very much.

Since you forget to back up your certificate, unless you set a recovery
agent you are most probably out of luck. You can contact Elcomsoft to
see if their program can help you, but otherwise it is unlikely you'll
recover those files. There is no backdoor to encryption.

http://www.elcomsoft.com/aefsdr.html

http://www3.telus.net/dandemar/encrypt.htm - encryption info
http://www.beginningtoseethelight.org/efsrecovery/ - more encryption info

To add a recovery agent for the local computer -
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/encrypt_to_add_recovery_agent.mspx

To change the recovery policy for the local computer -
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/encrypt_to_change_policy.mspx

How to add an EFS recovery agent in Windows XP Professional -
http://support.microsoft.com/default.aspx?scid=kb;en-us;887414

Best practices for the Encrypting File System -
http://support.microsoft.com/default.aspx?scid=kb;en-us;223316

EFS, Credentials, and Private Keys from Certificates Are Unavailable
After a Password Is Reset - http://support.microsoft.com/?kbid=290260


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Posted by =?Utf-8?B?RmFyZXMgQXRhbGxhaA== on January 19, 2008, 5:57 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Dear Malke,
I've tried AEFSDR but it doesn't decrypt the files.
I don't know if its useful to say that i have encrypt them with my domain
user account so is there any chance to decrypt them using active directory or
to find my old SID and replace the new with the old?
--
Fares Atallah



"Malke" wrote:

> Fares Atallah wrote:
> > My problem is that I have encrypted some folders and files under D drive and
> > then formatted my PC, I forgot to decrypt the fiels or backup my certificate
> > so that till now I can't access my files.
> > Iam using Windows XP joined to a Windows 2000 Domain, I encrypted the files
> > using my domain user account so I need a help in decrypting my files.
> >
> > Thank you very much.
>
> Since you forget to back up your certificate, unless you set a recovery
> agent you are most probably out of luck. You can contact Elcomsoft to
> see if their program can help you, but otherwise it is unlikely you'll
> recover those files. There is no backdoor to encryption.
>
> http://www.elcomsoft.com/aefsdr.html
>
> http://www3.telus.net/dandemar/encrypt.htm - encryption info
> http://www.beginningtoseethelight.org/efsrecovery/ - more encryption info
>
> To add a recovery agent for the local computer -
>
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/encrypt_to_add_recovery_agent.mspx
>
> To change the recovery policy for the local computer -
>
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/encrypt_to_change_policy.mspx
>
> How to add an EFS recovery agent in Windows XP Professional -
> http://support.microsoft.com/default.aspx?scid=kb;en-us;887414
>
> Best practices for the Encrypting File System -
> http://support.microsoft.com/default.aspx?scid=kb;en-us;223316
>
> EFS, Credentials, and Private Keys from Certificates Are Unavailable
> After a Password Is Reset - http://support.microsoft.com/?kbid=290260
>
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User
>

Posted by Paul Adare on January 19, 2008, 6:13 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Sat, 19 Jan 2008 02:57:00 -0800, Fares Atallah wrote:

> I've tried AEFSDR but it doesn't decrypt the files.
> I don't know if its useful to say that i have encrypt them with my domain
> user account so is there any chance to decrypt them using active directory or
> to find my old SID and replace the new with the old?

Your only possible hope here is that you still have access to the default
domain recovery agent certificate which is issued to the local
Administrator account on the first domain controller installed in the
domain.
Use the built-in backup program to backup and restore the files to your
Windows 2000 domain controller (if you have more than 1 DC then copy it to
the first one you installed) and log on as Administrator. If the recovery
agent certificate still exists and if it was the one used when encrypting
the files you'll be able to open them. If not then all of your files are
gone.
--
Paul Adare
MVP - Virtual Machines
http://www.identit.ca
Your password is pitifully obvious.

Posted by Ozan Ozkara on January 18, 2008, 12:50 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
If you forgot backed up PKI keys before, There is noway to decrypting your
files.


> My problem is that I have encrypted some folders and files under D drive
> and
> then formatted my PC, I forgot to decrypt the fiels or backup my
> certificate
> so that till now I can't access my files.
> Iam using Windows XP joined to a Windows 2000 Domain, I encrypted the
> files
> using my domain user account so I need a help in decrypting my files.
>
> Thank you very much.
> --
> Fares Atallah
>


Similar ThreadsPosted
Cannot decrypt about 5% of encrypted files March 29, 2007, 10:22 am
Lose ability to decrypt EFS files after reboot February 27, 2007, 8:22 am
Unable to decrypt folders on windows vista September 1, 2008, 1:03 pm
How to decrypt dotNet from ATL. December 5, 2005, 9:58 am
Re: CAPICOM.EnvelopedData decrypt: where to put certificate? June 22, 2005, 3:24 pm
How can I decrypt a Microsoft Word document for which I have the key? March 19, 2006, 3:13 am
RSA frustrations - encrypt with private, decrypt with public - possible? October 24, 2005, 9:03 pm
Windows ME securing files with a password July 8, 2007, 3:48 am
Re: Set all files on Windows XP to a specified create & access date October 7, 2005, 9:43 pm
Recovering encrypted files after reinstalling Windows August 19, 2006, 1:44 am

The site map in XML format XML site map

Contact Us | Privacy Policy