De-crypt Encrypted files on Windows XP

Published in Windows XP Security Tweaks by TweakXP Member with 51,910 views

1. Login as Administrator

2. Go to Start/Run and type in cmd and click OK.

At the prompt type cipher /r:Eagent and press enter

This prompt will then display:

Please type in the password to protect your .PFX file:

Type in your Administrator password
Re-confirm your Administrator password

The prompt will then display

Your .CER file was created successfully.
Your .PFX file was created successfully.

The Eagent.cer and Eagent.pfx files will be saved in the current directory that is shown at the command prompt. Example: The command prompt displays C:\Documents and Settings\admin> the two files are saved in the admin folder. (For security concerns, you should house the two files in your Administrator folder or on a floppy disk).

3. Go to Start/Run and type in certmgr.msc and click OK. This will launch the Certificates Manager. Navigate to Personal and right click on the folder and select All Tasks/Import. The Certificate Import Wizard will appear. Click Next. Browse to the C:\Documents and Settings\admin folder. In the Open dialog box, change the Files of Type (at the bottom) to personal Information Exchange (*.pfx,*.P12). Select the file Eagent.pfx and click Open. Click Next. Type in your Administrator password (leave the two checkboxes blank) and click Next. Make sure the Radio button is active for the first option (Automatically select the certificate store based on the type of certifcate). Click Next. Click Finish. (You'll receive a message that the import was successful). To confirm the import, close Certificates Manager and re-open it. Expand the Personal folder and you will see a new subfolder labeled Certificates. Expand that folder and you will see the new entry in the right side column. Close Certificate Manager.

4. Go to Start/Run and type in secpol.msc and click OK. This will launch the Local Security Policy. Expand the Public Key Policies folder and then right click on the Encrypted File System subfolder and select Add Data Recovery Agent... The Wizard will then display. Click Next. Click the Browse Folders... button. Browse to the C:\Documents and Settings\admin folder. Select the Eagent.cer file and click Open. (The wizard will display the status User_Unknown. That's ok). Click Next. Click Finish. You will see a new entry in the right side column. Close the Local Security Policy.

You, the Administrator are now configured as the default Recovery Agent for All Encrypted files on the Local Machine.

To Recover Encrypted files:

Scenario #1

If you have completed the above steps BEFORE an existing user encrypted his/her files, you can log in to your Administrator account and navigate to the encrypted file(s). Double click on the file(s) to view the contents.

Scenario #2

If you have completed the above steps AFTER an existing user has already encrypted his/her files, you must login to the applicable User's User Account and then immediately logout. Next, login to your Administrator account and navigate to the encrypted file(s). Double click on the file(s) to view the contents.


*Warning

Do not Delete or Rename a User's account from which will want to Recover the Encrypted Files. You will not be able to de-crypt the files using the steps outlined above.


Free Computer Magazines and eBooks
Comments

It doesnt help me out
plz give some more to decrpyt my data
Posted by richa on 5 years ago

how come i cant do step 4 every time i put it in search or run it says it cant be found
Posted by kat on 5 years ago

I tried the exact steps but I couldn't get the encrypted files. Can anybody pls help? :) Cheers.
Posted by whiz on 5 years ago

i had some encrypted documents in my backup drive of my hdd, no prob accessing it with my account. but after my windows got corrupted, i did a reformat of my system drive and reinstalled windows XP pro, im still able to locate my encrypted documents but i can't access them cause, well... "im" a different user. Hence, my Scenario is neither #1 nor #2 and i have no idea how im suppose to retrieve my encrypted documents
Posted by noxtis on 4 years ago

If you don't have the PFX key backed up somewhere and you reload the OS your access is likely gone forever. The files are encrypted with AES-256 which will take a long time to break. Like more than 100 years if your key was long. As a last resort you can try something like this: http://www.elcomsoft.com/aefsdr.html
Posted by Steve Sinchak on 4 years ago

I have problem like this : on my previous Windows XP Pro installation, my MP3 files prperties was ticked at Encrypt files to secure data. And then my HDD was corrupted, so i have to re-install the Windows XP. After all installation succeded, i can't play my mp3 files anymore, and the file's name was in green colour. Is the decrypt technique above can help me out ?
Posted by Aan E. Saputro on 3 years ago

thanks very much it was very helpfull keep good work
Posted by Ahmed on 3 years ago

Article Categories
Like this article?
Latest Comments
Most Popular Tweaks
Affiliates
Translate
Terms of Service - Privacy Policy - Contact    © 2014 Advanced PC Media LLC, all rights reserved.