Mike Green

New Member
Joined
Apr 6, 2014
Messages
1
Hi,
I encrypted some files with EFS in Windows 7. Now recently my system crashed, and got corrupted, and so I installed Windows 7 on a new disk.

Now, I would like to pick up my old files, and that workd (Disk is ifne, but OS is corrupted), except I can't get to my encrypted files. I have the EFS files which are supposed to hold the keys (which I thought was what I'd need to access), but those and the encrypted files don't help me to access my files...

(Well actually, it helped me to access some, files, but not all.... did something get regenerated and the new files have a different key? No idea... As you can tell, my EFS experience is limited, and I thought I was being clever to encrypt some files.... to clever by half to never try the reocvery path)

I can also pull those files out of the backup, same situation...

I also have access to the old disk (but can't boot Windows, because it's corrupted - just BSODs every time I try to boot), inclkuding the \ProgramData\Microsoft\...\Crypto files - but don't know what I would do with those?

Other ideas - I could try to brute-force copy portions of the working \Windows directory on the new disk over to the old and hope that it fixes whatever is corrupt on that.... my owrry is I don't know what is program, what is data in \windows, so don't want to proceed with that without understanbding what I should be copying to fix any application files, DLLs, etc, but not keys, passwords, and the like... (I have admin and othe rpasswords to access my files, if I could boot the old installation...)

I'll appreciate any help and advice.

Thanks!
 
Solution
It seems like you're facing issues accessing your encrypted files after a system crash and reinstallation of Windows 7. Let's break down the possible steps you can take to recover your encrypted files:

Recovering Encrypted Files After Windows 7 System Crash:​

  1. Accessing EFS Keys:
    • EFS (Encrypting File System) encryption relies on certificates stored on the system to decrypt files. If you have the EFS files that hold the keys, those are crucial for accessing your encrypted files.
    • Ensure that you have backed up these EFS key files as they are essential for decryption.
    []Recovery from Backup:
    • If you have backups that include your EFS keys, you may be able to restore these keys to the new...
It seems like you're facing issues accessing your encrypted files after a system crash and reinstallation of Windows 7. Let's break down the possible steps you can take to recover your encrypted files:

Recovering Encrypted Files After Windows 7 System Crash:​

  1. Accessing EFS Keys:
    • EFS (Encrypting File System) encryption relies on certificates stored on the system to decrypt files. If you have the EFS files that hold the keys, those are crucial for accessing your encrypted files.
    • Ensure that you have backed up these EFS key files as they are essential for decryption.
    []Recovery from Backup:
    • If you have backups that include your EFS keys, you may be able to restore these keys to the new Windows installation to access your encrypted files.
    • Make sure to restore the keys properly in the appropriate locations to decrypt the files.
    [
    ]Access to Old Disk:
    • Accessing the old disk with the \ProgramData\Microsoft...\Crypto files may help in recovering the necessary encryption keys.
    • These files are crucial for decrypting your EFS-encrypted files. You might need to import these keys into the new installation.
    []Understanding Windows Directory Structures:
    • When considering copying portions of the working \Windows directory from the new disk to the old one, it's crucial to understand which files are system files (program-related) and which are data files.
    • Copying system files without understanding their purpose could potentially cause further issues. Ensure you have a clear understanding of what you're copying.
    [
    ]Brute-Force Copying:
    • Brute-force copying parts of the \Windows directory might not be the best approach unless you are certain about the files you need to replace.
    • Take caution and understand the implications of replacing files from the fresh installation with those from the corrupted one.

      Recommendations:​

      • Before attempting any recovery or file copying, ensure you have a clear understanding of the operation and its potential impact.
      • It's recommended to seek assistance from a professional data recovery service or IT specialist who has experience with EFS and file recovery in Windows environments.
      • Always back up crucial data to prevent loss in case of system failures or crashes.
      Would you like to explore any specific step in more detail or need further assistance with the recovery process?
 
Solution