• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 912
  • Last Modified:

I cant open backed up files - Im guessing its EFS? - green files - encrypted?


I cant open backed up files - Im guessing its EFS? - green files - encrypted?

The source laptop has been xp reinstalled.

Any help
 
0
worded
Asked:
worded
1 Solution
 
KCTSCommented:
You can take ownership of the files http://support.microsoft.com/kb/308421 but that is not going to remove the encryption - If you did not take the trouble to backup the encryption key then you're stuffed.

There are some third party utilities such as the one from Elcomsoft http://www.elcomsoft.com/aefsdr.html which may do the trick but it could be very time consuling at best.
0
 
wordedAuthor Commented:


Cant take ownership.

Whats the chances this is Encryption? From 1 of 10 say?  
0
 
gtkfreakCommented:
(10/10) Green files are encrypted. The keys would have been lost if you did not back them up, when you rebuilt the PC.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
wordedAuthor Commented:

"If you did not take the trouble to backup the encryption key then you're stuffed"

I didnt know there were any encrypted files.

For future ref - How do you check if there are any encrypted files on a PC before reinstalling windows?
Aside from ask the user(s)?

 
0
 
poseidoncanuckCommented:
The method that Microsoft recommends is to use the CIPHER.EXE utility with the /K /N parameters, as in

CIPHER.EXE /K /N

This works at least on Windows XP SP2, but may also be part of earlier versions of Windows as well.  This'll find the files no matter where they are on the drive (at least, so long as you have the ability to read file properties).

Just in case - is it possible you had backed up the user profile (i.e. the folder under C:\documents and Settings)?  If so, then the EFS key recovery software programs that you can find on the 'net might well get the keys you need to decrypt the files.
0
 
wordedAuthor Commented:
files used encryption = I was stuffed.  Does anyone have the time to make an image of a disk before erasing? Would have been sweet in this case.  Data wasnt important to client in the end, but Iw as in shock for a while.  
0

Featured Post

2017 Webroot Threat Report

MSPs: Get the facts you need to protect your clients.
The 2017 Webroot Threat Report provides a uniquely insightful global view into the analysis and discoveries made by the Webroot® Threat Intelligence Platform to provide insights on key trends and risks as seen by our users.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now