Did a format without decrypting some files..

ctark

Senior member
Sep 6, 2004
726
1
0
I reinstalled windows. Is there anyway to recover these files or am I S.O.L.?
 

Zugzwang152

Lifer
Oct 30, 2001
12,134
1
0
Originally posted by: ctark
I dont have a backup :(

No backup = screwed. If you happened to have been using Windows XP pre-SP1, then you may have a chance of brute forcing it if you have a couple thousand uber computers and a few years. I think RTM only uses a 56-bit key?

But Windows XP SP1 or SP2 uses 256-bit AES. You are screwed.
 

LoverBoyJ

Senior member
Mar 22, 2001
992
0
0
Originally posted by: Zugzwang152
Originally posted by: ctark
I dont have a backup :(

No backup = screwed. If you happened to have been using Windows XP pre-SP1, then you may have a chance of brute forcing it if you have a couple thousand uber computers and a few years. I think RTM only uses a 56-bit key?

But Windows XP SP1 or SP2 uses 256-bit AES. You are screwed.

Yep, your SOL :(
Same thing happened to me during the WinNT days. Never got my data back, and I have to explaing it to my supervisor why I have to redo everything.
 

stardrek

Senior member
Jan 25, 2006
264
0
0
My orginal post is irrelevent at this point unless you have a copy of your orginal registry.

Edit:

A registry key, possibly not the only one you need, resides in some part of the old user profile. I am reading that it may be protected in some way though.

1) This may be of some value: Microsoft Support Page
It shows where some of the reg values may reside. This is something possible, I'll keep digging to see if I can find anything.


2)
Also possibly helpful: Microsoft Support Page


3)
If you are willing to do some Hex Editing you can use this site to recover your data. I am not sure as to which version of XP is covered, but I'm not sure how much that matters for this method: Link


4)
This artical has some interesting information: Link


A program that finds EFS keys: Link
Link to buy the program: http://www.elcomsoft.com/aefsdr.html

Program that recovers EFS encrypted files: http://www.sofotex.com/EFS-Key-download_L18378.html
 

stardrek

Senior member
Jan 25, 2006
264
0
0
Originally posted by: RebateMonger
n.m.

You are MCSE certified for security, though I didn't get to read your original post, you weighing in on the topic I'm sure would be helpful. Can you shed any light on this that may be lost to myself?