Article View: microsoft.public.security.homeusers
Article #5Re: Cannot work with my own files after system change (XP Pro SP3)
From: fixfox
Date: Wed, 24 Mar 2010 01:11
Date: Wed, 24 Mar 2010 01:11
63 lines
4655 bytes
4655 bytes
On 23 Mrz., 23:52, "David H. Lipman" <DLipman~nosp...@Verizon.Net> wrote: > From: "FromTheRafters" <erra...@nomail.afraid.org> > > | "fixfox" <mluise...@googlemail.com> wrote in message > > |news:d1d77f21-d018-499d-a7e6-dab1f60d32c0@r1g2000yqj.googlegroups.com... > > | ...nowhere I read that it did damage on files, specially by encrypting > | them (In this case, it would be called a virus). > > | *** > | It would be called a virus if it replicated via infection. If it was a > | virus, and also encrypted your files, it would be an instance of > | cryptovirology *and* ransomware if it wanted payment for the decryption > | key. > | *** > > | [...] > > | The wicked system > | did not tell me that I would have to store my certificate or else I > | would surely have done it. I am a security fan. > > | *** > | IIRC W2K's EFS, by default, assigns the administrator as a recovery > | agent (sort of like a backup key). but gives no warning to the user > | about the importance of key backup. Vista and beyond do *not* assign a > | recovery agent by default, but do advise the user about key backup. > | *** > > | [...] > > Trojans employong cryptovirology have yet to use EFS to encrypt users data > for ransom. They use their own encryption engine. > > Example: GPCode > > -- > Davehttp://www.claymania.com/removal-trojan-adware.html > Multi-AV -http://www.pctipp.ch/downloads/dl/35905.asp Hi David, your very little remark about encryption was the clue. I suited my intuition and so I followed that trace - and luckily I could get back the keys from my old C: image and an almost hopeless venture went well. Hi everybody, thank you for your help. My problem ist SOLVED. Every single little file is decrypted! The sun shines bright in the middle of the night, I could sing and dance. I did not only have the almost forgotten image but also found a very good software (almost the only one that exists for that purpose) following a link from one of you. It finds even deleted keys and all the green files in a very short time and repairs the lot of 15 GB within half an hour. It is called Advanced EFS Data Recovery, I don't know if I am allowed to tell you the publisher here, but you can google. Well, my ignorance cost me 150 EURO :-( but sometimes we have to learn something the hard way. At least, I don't waste time any more and have saved a ten years' work and that makes me infinitely glad. So long Luise
Technical Details
Message-ID:
<2c72725f-7263-41be-bd3d-f3cc65a48caa@15g2000yqi.googlegroups.com>Path:
arc1-ca.pugleaf.net!g2news1.google.com!postnews.google.com!15g2000yqi.googlegroups.com!not-for-mailReferences:
#gXwpndyKHA.5940@TK2MSFTNGP02.phx.gbl <22ad9909-e13b-402b-806c-26be69e7bfb7@t23g2000yqt.googlegroups.com> <872da17c-0318-4491-a582-fc014b216cbf@t20g2000yqe.googlegroups.com> <Mradna5iLeUpUzrWnZ2dnUVZ7vqdnZ2d@bt.com> <7ceb2815-fb36-42d8-a9b2-539025485084@q15g2000yqj.googlegroups.com> <B4SdnbwdW588lzXWnZ2dnUVZ8umdnZ2d@bt.com> <ho92kh023q6@news3.newsguy.com> <D42dncm1268wjjXWnZ2dnUVZ8hBi4p2d@bt.com> <237m77-5r6.ln1@fully.qualified.domain.name> <17udnewtQvuM5DXWnZ2dnUVZ8nmdnZ2d@bt.com> <n8bm77-1d7.ln1@fully.qualified.domain.name> <183b9642-3d46-4059-8d49-a279cdb8dfc9@z35g2000yqd.googlegroups.com> <ZMydnXc0_sSGAjXWnZ2dnUVZ8qKdnZ2d@bt.com> <d1d77f21-d018-499d-a7e6-dab1f60d32c0@r1g2000yqj.googlegroups.com> <hob7fb$hte$1@news.eternal-september.org> <8f-dnY-FtIu82zTWnZ2dnUVZ_gmdnZ2d@giganews.com>Show Full Headers
Complete Article Headers
X-Google-Thread: 216722,eb1841bc6909b741 X-Google-NewGroupId: yes X-Google-Thread: faa3c,fc8a51b333c04ed9 X-Google-NewGroupId: yes X-Google-Attributes: gid75a5d47e0,gid4e777fa27a,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII Path: arc1-ca.pugleaf.net!g2news1.google.com!postnews.google.com!15g2000yqi.googlegroups.com!not-for-mail From: fixfox <mluisebay@googlemail.com> Newsgroups: microsoft.public.security.homeusers,24hoursupport.helpdesk Subject: Re: Cannot work with my own files after system change (XP Pro SP3) Date: Tue, 23 Mar 2010 18:11:46 -0700 (PDT) Organization: http://groups.google.com Lines: 63 Message-ID: <2c72725f-7263-41be-bd3d-f3cc65a48caa@15g2000yqi.googlegroups.com> References: #gXwpndyKHA.5940@TK2MSFTNGP02.phx.gbl <22ad9909-e13b-402b-806c-26be69e7bfb7@t23g2000yqt.googlegroups.com> <872da17c-0318-4491-a582-fc014b216cbf@t20g2000yqe.googlegroups.com> <Mradna5iLeUpUzrWnZ2dnUVZ7vqdnZ2d@bt.com> <7ceb2815-fb36-42d8-a9b2-539025485084@q15g2000yqj.googlegroups.com> <B4SdnbwdW588lzXWnZ2dnUVZ8umdnZ2d@bt.com> <ho92kh023q6@news3.newsguy.com> <D42dncm1268wjjXWnZ2dnUVZ8hBi4p2d@bt.com> <237m77-5r6.ln1@fully.qualified.domain.name> <17udnewtQvuM5DXWnZ2dnUVZ8nmdnZ2d@bt.com> <n8bm77-1d7.ln1@fully.qualified.domain.name> <183b9642-3d46-4059-8d49-a279cdb8dfc9@z35g2000yqd.googlegroups.com> <ZMydnXc0_sSGAjXWnZ2dnUVZ8qKdnZ2d@bt.com> <d1d77f21-d018-499d-a7e6-dab1f60d32c0@r1g2000yqj.googlegroups.com> <hob7fb$hte$1@news.eternal-september.org> <8f-dnY-FtIu82zTWnZ2dnUVZ_gmdnZ2d@giganews.com> NNTP-Posting-Host: 79.220.115.44 Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Trace: posting.google.com 1269393106 24963 127.0.0.1 (24 Mar 2010 01:11:46 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: Wed, 24 Mar 2010 01:11:46 +0000 (UTC) Complaints-To: groups-abuse@google.com Injection-Info: 15g2000yqi.googlegroups.com; posting-host=79.220.115.44; posting-account=wpbkRQoAAACjnYVJiCFycWpnneHguDT0 User-Agent: G2/1.0 X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2,gzip(gfe),gzip(gfe)