Advanced EFS Data Recovery Breaks Vista and Windows Server 2008 Encryption
BackBy —<strong>Feb. 27</strong><br />ElcomSoft Co. Ltd. has released the professional version 4.0 of Advanced EFS Data Recovery (AEFSDR-Pro) for Windows, a powerful data recovery application that makes it easy to recover (decrypt) files encrypted on NTFS (EFS) partitions created in Windows 2003, XP, 2000, Vista and 2008. In addition to all of the capabilities of the standard version, AEFSDR-Pro can perform low-level disk scanning at the sector level, enabling data recovery and forensics specialists to find encryption keys that have been deleted, even on drives that have been reformatted.<br /> <br />Microsoft EFS allows users to store confidential information on a computer when people who have physical access to your computer could otherwise compromise that information, intentionally or unintentionally. EFS is especially useful for securing sensitive data on portable computers or on computers shared by several users. Encrypting sensitive files by means of EFS adds another layer of security.<br /> <br />The popularity of EFS encryption has made it critical for forensics experts and anti-terrorism operatives to have tools like AEFSDR that can give them access to data files. Because the standard Windows log-on password can be circumvented using widely available software, such as Elcomsoft System Recovery, more and more people are using EFS encryption to protect their files. AEFSDR-Pro is a must-have application for law enforcement officials, security specialists and military intelligence officers.<br /> <br />The professional version of AEFSDR lets data experts recover files where users have set up multiple logical disks, for example, a C Drive that contains Windows plus a D Drive that holds data. When the system has serious problems, users will often reformat the C Drive and reinstall Windows, knowing their data is safe on the D partition. However, EFS encryption stores its encryption keys in certificates that are located on the system drive. After reinstalling Windows, encrypted data files on the D Drive are no longer accessible.<br /> <br />AEFSDR-Pro can search all of the sectors on the C Drive, one-by-one, and find the deleted certificates, even if the drive has been reformatted.<br /> <br />With both the standard and professional versions of AEFSDR, protected files can be decrypted, even when the system is not bootable so you cannot log on, or when some encryption keys (private or master) have been tampered with. In addition, decryption is possible even when Windows is protected using SYSKEY. AEFSDR effectively — and instantly — decrypts the files protected under all versions of Windows 2000, Windows XP (including Service Pack 2), Windows 2003 and Windows Vista.<br /> <br />In addition to enhancing EFS security protection in Vista, Microsoft has added a new Vista facility called BitLocker. BitLocker, however, will be used to protect only a small portion of Vista users' data. BitLocker works only on the Ultimate Version of Vista. It requires special hardware in the form of a TPM chip on the motherboard. Also, BitLocker protects only the system drive, but none of the data drives. AEFSDR will continue to work effectively with the non-BitLocker portion of data stored on Vista machines.<br /> <br />AEFSDR makes it easier for business managers to deal with lost and destroyed encryption keys, as well as with employees who, intentionally or unintentionally, are unable to access critical files that have been encrypted. While some situations make it impossible to recover encryption keys, if the keys are somewhere on the system, and not totally corrupted, AEFSDR usually can find and restore the critical information that will make your system accessible again.<br /> <br />While Microsoft has made it easier for home users to encrypt files, it's also much easier to encrypt files and later make changes to the computer that make these secure files impossible to open again. AEFSDR solves this problem by making these protected files usable. Business people and home users can use it to recover lost files, and law enforcement officers have found that AEFSDR can give them access to encrypted files that would otherwise not be accessible. <br /> <br /><strong>System Requirements:</strong><br />Windows NT/2000/XP/2003/Vista/2008 with Administrator privileges, 2 MB free on Hard Disk.<br /> <br /><strong>Price:</strong><br />$299 for the professional version and $99 for the standard version; free trial version is available. <br />
Viewed 5836 times.