Jump to content

No backup of Vista EFS certificate from system that won't boot -recovering file


Recommended Posts

Guest baby1212
Posted

Thank you in advance for any guidance! style_emoticons//smile.gif

 

Vista Ultimate (32bit SP1) system is corrupted enough to not boot but

accessing the HD from another system seems to have virtually

everything intact. One single file was encrypted using EFS on the

system. I'm wondering if there is a way to manually transfer over the

certificate/s from the old hard drive into the new system.

 

I am aware of ElcomSoft's Advanced EFS Data Recovery software but the

problem is that the file that is encrypted is actually another file

that is encrypted using another encrypted software (basically the file

is encrypted twice, the outside container is Vista EFS and the inside

container is TrueCrypt). So I can't see if ElcomSoft's Advanced EFS

Data Recovery software will work in the demo/trial as I still have yet

another step to proceed to decrypt the file in TrueCrypt.

 

I've found manual recovery processes for XP ( http://www.beginningtoseethelight.org/efsrecovery/

)but the registry structure is different enough in Vista that I can't

find the same place in Vista.

 

Does anyone know the comparable location in Vista for hklm\sam\sam

\domains\account\users\%usernumbers% (which is XP)?

 

Any other ideas?

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...