locked myself out of my files!

Discussion in 'Computer Security' started by rymetymeuk, Dec 18, 2005.

  1. rymetymeuk

    rymetymeuk Bit Poster

    12
    0
    21
    Hi all

    ive done 3 hrs research and cant find an answer so i hope someone can help! :D

    i did a fresh install of XP pro onto my new raptor yesterday and have hooked my old C drive up as a data drive, but stupidly i had forgotten that there are some encrypted movie files on my old drive and in fact on some of my other drives. I have tried to access them but i havent got the original certificate which would have been used to encrypt them a\s i deleted the windows files from the old drive.

    is there any way that i can access these or are they lost forever?

    thanks all...

    :rolleyes:
     
    Certifications: none so far!!
    WIP: MCSE, MCSA, A+, Security
  2. simongrahamuk
    Honorary Member

    simongrahamuk Hmmmmmmm?

    6,205
    136
    199
    I don't think that there's anyway to recover the files. Unless you want to spend loads of money on data recovery that is.

    I could be wrong though.

    BTW, what is a Raptor?

    :blink
     
  3. rymetymeuk

    rymetymeuk Bit Poster

    12
    0
    21
    hi

    thanks for the reply...i think ur right, i really cant find anyway to do it...maybe if i could get back my certificate but i deleted it along with the windows files :(

    a raptor is a 10,000 rpm hard drive, ive got to the point that my old ide drive was too slow so went for some speed. its expensive but worth it!
     
    Certifications: none so far!!
    WIP: MCSE, MCSA, A+, Security
  4. Boycie
    Honorary Member

    Boycie Senior Beer Tester

    6,281
    85
    174
    this is something i haven't personally come against. If i find anything i will let you know. Am i right in saying you will keep the old drive intact while you try and resolve the matter?
     
    Certifications: MCSA 2003, MCDST, A+, N+, CTT+, MCT
  5. rymetymeuk

    rymetymeuk Bit Poster

    12
    0
    21
    hi

    yes, i will keep the old drive hooked up and not write anything to it, in case i am able to restore on it. ive found a few useful programs in which appear to confirm the deleted files which of course are still actually on the drive until u over write them...

    ive learned a lot about encryption today!! :o(
     
    Certifications: none so far!!
    WIP: MCSE, MCSA, A+, Security
  6. Boycie
    Honorary Member

    Boycie Senior Beer Tester

    6,281
    85
    174
    oh, good. I'll have a look for you, if i find anything i'll come back here
     
    Certifications: MCSA 2003, MCDST, A+, N+, CTT+, MCT
  7. rymetymeuk

    rymetymeuk Bit Poster

    12
    0
    21
    great! thanks mate

    :thumbleft
     
    Certifications: none so far!!
    WIP: MCSE, MCSA, A+, Security
  8. Jakamoko
    Honorary Member

    Jakamoko On the move again ...

    9,924
    74
    229
    I fear you may be goosed here, mate. Not sure if some of the recovery apps (eg Ontrack) would be able to get around the encryption. I guess it's safe to say you never set up a recovery agent other than the default Admin for the original encryption key ? :rolleyes:
     
    Certifications: MCP, A+, Network+
    WIP: Clarity
  9. rymetymeuk

    rymetymeuk Bit Poster

    12
    0
    21
    yeah unfortunately i wasnt au fait with all this until today! haha, its not the end of the world but ive definately learned now...!

    thanks chaps, i tried some of those programs which locate files once deleted, but although one found a lot of files the actual certificate file type was no where to be found..

    nvmd!

    thanks all, :)
     
    Certifications: none so far!!
    WIP: MCSE, MCSA, A+, Security
  10. AJ

    AJ 01000001 01100100 01101101 01101001 01101110 Administrator

    6,897
    182
    221
    I replied to a similar thread ages ago with THIS

    I hope this helps
     
    Certifications: MCSE, MCSA (messaging), ITIL Foundation v3
    WIP: Breathing in and out, but not out and in, that's just wrong
  11. rymetymeuk

    rymetymeuk Bit Poster

    12
    0
    21
    no it doesnt im afraid, thanks tho...it says i need to have a pre-backed up certificate b4 the deletion occured. and that didnt happen for me...

    thanks anyway, but im doomed :p

    ;)
     
    Certifications: none so far!!
    WIP: MCSE, MCSA, A+, Security
  12. eyeball

    eyeball Nibble Poster

    82
    3
    0
    Certifications: A+, Network +, MCSA
    WIP: CCNA, MCSE+security
  13. Bluerinse
    Honorary Member

    Bluerinse Exabyte Poster

    8,878
    181
    256
    IMHO if you have used EFS to encrypt the files and you did not export the private EFS key (recovery key) you are stuffed!

    When you re-installed the OS on the new drive, the local administrator will now have a different recovery key and that won't unlock the encrypted data created on the original OS.

    You could try hooking up your old drive if it still contains an operating system and try booting from that. Then un-encrypt the files in question. Then re-configure to boot with your new drive and they should be accessible.
     
    Certifications: C&G Electronics - MCSA (W2K) MCSE (W2K)

Share This Page

Loading...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.