Recover NTFS encypted files.

S

Simon_Howes

Limp Gawd
Joined
Oct 18, 2003
Messages
141
I have had to reformat after getting a virus and I have lost my certificates to decrypt my files. Does anyone know how to recover them?
 
Domain or workgroup environment? If your computer was ever joined to a domain then the certificate for efs recovery agent is actually tied to the domain admin account and you can use that for recovery. If it was in a workgroup environment then the certificate was stored locally and was lost with your reformat. Im not too sure if there is any way to recover at that point. If its win2k then I think its a standard 128 bit md5 hash. If so you may be able to view the hash value and run it through like john the ripper. I dunno though, Im speaking theorectical here at this point cause Ive never had to do any of that.
 
You must log in or register to reply here.
Back
Top