• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Recover NTFS encypted files.

S

Simon_Howes

Limp Gawd
Joined
Oct 18, 2003
Messages
141
I have had to reformat after getting a virus and I have lost my certificates to decrypt my files. Does anyone know how to recover them?
 
Domain or workgroup environment? If your computer was ever joined to a domain then the certificate for efs recovery agent is actually tied to the domain admin account and you can use that for recovery. If it was in a workgroup environment then the certificate was stored locally and was lost with your reformat. Im not too sure if there is any way to recover at that point. If its win2k then I think its a standard 128 bit md5 hash. If so you may be able to view the hash value and run it through like john the ripper. I dunno though, Im speaking theorectical here at this point cause Ive never had to do any of that.
 
You must log in or register to reply here.
Back
Top