• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

dammit! just got fvcked by Windows' file encryption

Page 2 - Seeking answers? Join the AnandTech community: where nearly half-a-million members share solutions and discuss the latest tech.
Originally posted by: stash
If he tried to recover his original windows folder which he did not say was encrypted then he could get the key if successful. Once he has his original windows folder he could use the software I posted to extract the key then un-encrypt the folders.

The key info is not stored in the Windows directory, it's stored in the profile and protected by the account password and SID.

It is possible to recover the profile after a reinstall, but not without data recovery tools that are typically not cheap. And you would also need to make a $245 call to PSS for them to recover the key info from the profile (provided you know the password).

I may have been wrong about it being in the windows directory but he could still recover the data on that drive if the important files aren't overwritten. Once that data is recovered he could scan for the key with the software I posted. It works, I've done it.
 
Originally posted by: cessation
Originally posted by: stash
If he tried to recover his original windows folder which he did not say was encrypted then he could get the key if successful. Once he has his original windows folder he could use the software I posted to extract the key then un-encrypt the folders.

The key info is not stored in the Windows directory, it's stored in the profile and protected by the account password and SID.

It is possible to recover the profile after a reinstall, but not without data recovery tools that are typically not cheap. And you would also need to make a $245 call to PSS for them to recover the key info from the profile (provided you know the password).

I may have been wrong about it being in the windows directory but he could still recover the data on that drive if the important files aren't overwritten. Once that data is recovered he could scan for the key with the software I posted. It works, I've done it.

i reinstalled windows. that means i wrote over the drive. 😉
 
Originally posted by: WiseOldDude
Sounds like your computer did EXACTLY WHAT YOU TOLD IT TO DO, protect your files from any user but yourself. If you really want to blame someone, don't look at a Window, look in a mirror.

uh huh. what part of me calling myself a retard and a dumbass did you not understand?
 
Originally posted by: thomsbrain
Originally posted by: cessation
Originally posted by: stash
If he tried to recover his original windows folder which he did not say was encrypted then he could get the key if successful. Once he has his original windows folder he could use the software I posted to extract the key then un-encrypt the folders.

The key info is not stored in the Windows directory, it's stored in the profile and protected by the account password and SID.

It is possible to recover the profile after a reinstall, but not without data recovery tools that are typically not cheap. And you would also need to make a $245 call to PSS for them to recover the key info from the profile (provided you know the password).

I may have been wrong about it being in the windows directory but he could still recover the data on that drive if the important files aren't overwritten. Once that data is recovered he could scan for the key with the software I posted. It works, I've done it.

i reinstalled windows. that means i wrote over the drive. 😉

Just because you reinstalled windows doesn't mean all the previous data is gone.
 
I may have been wrong about it being in the windows directory but he could still recover the data on that drive if the important files aren't overwritten. Once that data is recovered he could scan for the key with the software I posted. It works, I've done it.

You still need the password (which the OP probably knows, but still), the documentation even mentions it:

First, if the files were encrypted on Windows XP, Windows Server 2003 or Windows Vista, you have to supply the (logon) password of user who encrypted the file(s), or the password of Recovery Agent. Press Add user password button, and enter the user name and password (as text or in hex/UNICODE). User name, actually, does not matter (only password does), so enter it just for the reference. There is no need to add the empty password.
 
Originally posted by: stash
I may have been wrong about it being in the windows directory but he could still recover the data on that drive if the important files aren't overwritten. Once that data is recovered he could scan for the key with the software I posted. It works, I've done it.

You still need the password (which the OP probably knows, but still), the documentation even mentions it:

First, if the files were encrypted on Windows XP, Windows Server 2003 or Windows Vista, you have to supply the (logon) password of user who encrypted the file(s), or the password of Recovery Agent. Press Add user password button, and enter the user name and password (as text or in hex/UNICODE). User name, actually, does not matter (only password does), so enter it just for the reference. There is no need to add the empty password.

I assumed the OP knows what his password is or was.
 
DIE WINDOWS!
It'd be Windows' fault if the FBI or your wife's divorce lawyer decrypted your stash too, wouldn't it?

seriously, you'd think they'd scream at you to save your key, to keep retards like me from messing things up. but no! they have to let us dumbasses can our entire collection!
I thought there was a message telling you to save the key to a floppy the first time.
 
i not only reinstalled windows, but created two new partitions where one existed, and installed Vista on the other partition, AND dragged all my files over, writing over about 80% of the disk. i took a look at one of those file recovery programs (r-something?) and it didn't come up with anything that wasn't a real file currently on the disk. i vaguely recall using an earlier version of that utility on a crashed disk once and getting all my files back, though, so i know this can work in cases where you haven't blasted over the original data.

alas.
 
Don't worry, I'm sure the automated backup tools known as The Internet probably has copies of these sensitive files for your retrieval. Might take a little searching though.
 
Don't worry, I'm sure the automated backup tools known as The Internet probably has copies of these sensitive files for your retrieval. Might take a little searching though.

Not everyone is as smart with their data as Linus.
 
Back
Top