Elcomsoft

Advanced EFS Data Recovery

I found the software while browsing the internet.  I also tried using "Max PC Safe" and "Active File Recovery", and "Advanced PDF Password Recovery."  However, I couldn’t get those to work.  AEFSDR seemed to be the only program I could find that worked.

It was very easy using AEFSDR.  The interface in general was self-explanatory, given that I knew what I was looking for and what the most crucial issues were (a valid decrypting and restoring of the files).  There were a few things that I wasn't sure about at first, such as what the highlighted color of the files meant (such as if highlighted red meant that they were not accessible but potentially could be, or if they were not ever to be accessible, etc.).  Also, I was unsure what adding a SYSKEY did, as well as a certificate.  Certain things like that I had to either use the HELP function included in the AFSEDR program or browse online to find information.

However, in general it did not take long, as far as the time spent at my computer figuring things out, given that I was somewhat desperate to get these files back.  When I first installed the program I originally opened it up and used the tutorial.  However, when I was more familiar I used the "expert mode."  This enabled me to more quickly work on a specific area of the problem.In total time it is difficult to say how long it took to get more fully accustomed to the interface and find the features, since I was busy with schoolwork, and was forced to work some and then return at a later time.  However, as I said, I believe the interface was easy to use.  

One good feature is the ability to decrypt files and move them exactly where one chooses. 

I would say that the interface could have been easier to use if there would have been a short blurb explaining the colors of the files and a little more tutorial on the SYSKEY and certificates, since Windows doesn't give much information on backing up the certificates, and the purpose and types of SYSKEYs were not clear to me when I first starting using the program (although there may be tutorials that I haven't looked through).

My original situation was that I had some problems with Windows consistently crashing all of the sudden.  So, I tried several things to fix it, and none of them seemed to work.  I decided that I should probably reformat the entire computer and then reinstall Windows.  I went through the process of trying to backup files, including documents, pictures, schoolwork files (such as pdf's, programming files, etc.), resumes, Microsoft Outlook email and calendar backups (pst files), etc., and put them on an external hard drive.  Many of the files were unencrypted, but many of them were encrypted with the Microsoft Encrypting File System (where files turn green when they are encrypted).  Unfortunately, I failed to remember to decrypt them before I reformatted, which denied me access to them because of the nature of the encryption system and the loss of a profile when they .  After backing up the files, I went through the process of reformatting and trying to re-install Windows.  However, after I did that, when I tried to open, or even move, the encrypted files, it told me that access was denied.  I realized that I needed to figure out a way to gain back access.  Most all procedures do not provide a solution to access to the files.  As far as I know, Microsoft does not provide a way to gain back the files, and really little warning was given about the danger of this encryption process when I first used it (although Microsoft provides warnings about reformatting).  It had crossed my mind to try to change my username and password back to my original username and password.  However, this did not seem to work.  I also tried several other things, including trying to change the system administrators password, searching the computer for exported Microsoft certificates, using the Microsoft Virtual PC profiles that I had used previously to access the files, searching online on Microsoft's support website to find a solution, and calling Dell (the manufacturer of my computer).  However, nothing seemed to work.  I tried at least one other file decryption program from a different company that I found online, and that didn't seem to work, either.  I finally stumbled upon the Elcomsoft software, and when I installed it and searched for the files using its searching feature, it seemed to find most all the files I needed.  Also, when I searched for the decryption keys, it actually found many keys in on the hard drive that were thankfully not written over by the reformatting process (since it gradually writes over the hard drive as it needs to, but leaves whatever it doesn't need there, although not accessible except with certain software such as Elcomsoft provides).  Some of the files didn't necessarily work, but of all the files it found, a few of the right ones enabled the files to be decrypted (they turned green in the AEFSDR program).  I was then able to choose where to move the files, and it automatically decrypted them and moved them to that folder.

Data Security

Features
Ease of use
Performance
Documentation quality
Support
Value for money
Overall

http://www.infosecurityadviser.com/review/elcomsoft_advanced_efs_data_recovery_software/45/