Windows EFS problem (file encryption system)

xospec1alk

Diamond Member
Mar 4, 2002
4,329
0
0
So here is the deal...

I took a computer security last semester, and one of the homeworks was to use the windows encryption system to encrypt a few files. so i encrypted some files, to see if they worked and whatever, and they did...

sooo...my computer started having problems so i reinstalled the OS. i didn't do a format and clean install...basically what i did was this.

old windows installed into c:\windows
reinstalled windows in c:\winnt
deleted c:\windows

so everything looks good, im happy, BUT...

i tried to access some of the files that i had encrypted before...and well...they are encrypted...and i can't do anything about it...and i NEED those files.

so...using the knowledge from th semester, i knew that if the files were copied to a fat32 system the encryption can be conquered, but well there is no way to copy it to a fat32 partition because win2k wont let me copy anything out of the drive that it is in. so..i install linux and try to get at the drive that way...who wouldn't you know, the linux file system keeps the file encryption attributes so i can't get at them that way either.

SOOO...my question is...how can i get to these files?!?!!?

much appreciated thanks in advnace

 

n0cmonkey

Elite Member
Jun 10, 2001
42,936
1
0
You did backup your encryption key right? If not, restore the files from unencrypted backup and you should be fine. If you didnt do that either, you didnt NEED the files. :)
 

xospec1alk

Diamond Member
Mar 4, 2002
4,329
0
0
yeh well, i did NEED the files, but i encrypted these files just to mess around, it wasn't like i was protecting the files for any particular reason...and when i did a reinstall i totally forgot that i even encrypt any folders....
 

stevewm

Senior member
Dec 6, 2001
742
1
0
The file encryption NTFS uses actively encrypts the files. It does not apply a attribute. Attempting to get to the files from another OS will not get around it. Without your EFS certs/key the files cannot be returned to their original decrypted form. Well, unless you can figure out how to brute force the key......

Basically, without the EFS keys, your files are lost forever :)
 

kursplat

Golden Member
May 2, 2000
1,547
0
0
i honesty am not trying to be an a** about this but how can anybody get over a thousand posts around here without reading the FAQ's at least once ? i can't count how many times i've seen someone FAQed ( and yes i'm using fingers AND toes).
sorry about your files but thats why i backup everything i want to keep to 2 other rigs.
good luck