Monday, 24 June 2019

windows xp - EFS recovery from backed up registry files?

Here's what I have:



  • Backed up encrypted files

  • Backed up registry files (ntuser.dat)

  • password


The original OS (Windows XP) hosting the EFS encrypted files is gone. I do not have a backed up key file.


Is it possible to recover the encrypted files with the present elements?


Edit: I tried aefsdr from elcomsoft but I didn't see any way to direct it to use the registry file. Also, it didn't find any encrypted files, possibly because the attributes identifying them are absent.

No comments:

Post a Comment

How can I VLOOKUP in multiple Excel documents?

I am trying to VLOOKUP reference data with around 400 seperate Excel files. Is it possible to do this in a quick way rather than doing it m...