Decrypt NTFS files.

FreeUS · #1 30th Sep 02, 02:58 AM

Well, what can I say... PM did it again... I was resizing the clusters of my OS partition and PM8 fux0d up...
I have everything on that partition, my sources, my projects, everything (I make a backup few weeks ago of my data but the lastest things are now PM knows where)... So, I have some cyphered files with NTFS format. I was wondering if there is a chance to decrypt it that files. I mean, if I create an administrator with the same name and password on my new installation of XP.
I know there use a pair to decypher files, but someone know if there is a chance to do it?. There is a 3th parties software to decrypt that files?. Do anyones is interested in develop a decypher program?. They use standard 56bit DES encryption, so there will be "easy" to find the way to decrypt it...

Cactus · #2 30th Sep 02, 08:02 PM

Oosp,

Yet another unhappy user of PM . . .

If you made a beckup that also included the system state, and you restored that, you should be able to logon as the original user, and files shoulkd be automaticly readable.
If such a backup wasn't created, and new users were created, I don't know of a possible way to decypher these files. I never read anything yet on M$ encrypted files being hacked.

Adodikan · #3 3rd Oct 02, 10:43 AM

yeah no your pretty much out of luck. unless you did back up the certificates as a part of the system state, as le cactus said, the files are gone. i dont use encryption simply for the fact that something like this could happen and i'd be out o luck. good luck and if you do find a way to get them back let us know.

FreeUS · #4 3rd Oct 02, 07:10 PM

thanks guys for your answers, an that I was thinking... I cant recover my old criphered files

#5 15th Oct 02, 11:14 PM

As an administrator you could also take ownership of the files/folders and that should solve your problem

FreeUS · #6 16th Oct 02, 03:58 AM

thanks Sanjay to worry about but I think that you don't understand the problem. That encrypted files are on another partition. The partition where have that certificates used to encrypt that files were destroyed by PM. So, now with my new instalation of XP with new certificates I can't decrypt that files, even using the same username/password.
Now Im thinking about how decrypt with another method.