您(Are)是否尝试打开计算机上的某些加密文件?Windows 通常会使用绿色而不是正常的黑色文本来指定加密文件或文件夹名称。(file or folder names)
Note: If you are reading this post looking for information on decrypting files that were encrypted by CryptoLocker, this won’t help. You pretty much have to pay the ransom and hope they actually send you the encryption keys.
加密文件和文件夹时,Windows将使用自生成的证书,其中包含用于加密和解密数据的密钥。登录生成证书的用户帐户(user account)打开加密数据时,解密过程(decryption process)是透明的,文件可以正常打开。
但是,如果另一个用户或系统试图(user or system tries)访问这些相同的数据文件,或者如果文件被移动到另一个位置,那么除非安装了原始证书,否则它们将无法打开。
无论哪种情况,关于在Windows(Windows)中加密和解密文件,您必须记住的一件事是您始终需要加密证书/密钥。当您 在Windows中加密(Windows)文件或文件夹(file or folder)时,会自动创建加密密钥并将其与您的用户帐户(user account)相关联。
在Windows 7及更高版本中,您实际上会收到一个提示,要求您备份加密密钥(encryption key)(EFS 证书(EFS certificate))。
您绝对应该立即执行此操作。如果您没有这些加密密钥,您将无法解密数据。不幸的是,没有办法解决这个问题,因为加密非常强大并且不容易被破解。
如果您仍然可以访问最初加密数据的计算机,您可以尝试导出证书,然后将其导入另一台计算机。
备份 EFS 证书
有几种方法可以备份文件加密证书,我将在下面提到它们。第一种方法是单击Start 并(Start and type)输入certificate。
单击管理用户证书(Manage user certificates),这将打开当前用户的证书。在Windows 7中,您还可以输入certmgr.msc并按Enter打开证书管理(certificate manger)器。
现在展开Personal然后点击Certificates。您应该会看到右侧窗格中列出的所有证书。可能只有一个,但如果没有,您感兴趣的唯一证书是在Intended Purposes下列出的(Intended Purposes)Encrypting File System证书。
右键单击(Right-click)证书,选择所有任务(All Tasks),然后单击导出(Export)。
这将打开证书导出向导(Certificate Export Wizard),如果您在Windows 提示时单击立即备份(推荐) ,您将到达该位置。( Back up now (recommended))
在下一个屏幕上,您将要选择是,将私钥(Yes, export the private key)与证书一起导出。如果您没有私钥,您将无法解密任何加密文件。
在下一个屏幕上,您必须选择要用于导出证书的格式。个人信息交换(Personal Information Exchange)应该已经被选中,您可以只选中第一个框。
由于此证书包含私钥,因此您需要使用密码对其进行保护。选中密码(Password)框并输入强密码。
最后,单击浏览(Browse)并选择要保存文件的位置。强烈建议您不要将文件保存到计算机本身。如果 PC 出现问题,那么您将丢失密钥。
另外,给你的文件起一个对你有帮助的名字,但对其他人来说不是很明显。例如,不要像我在下面那样将其命名(t name)为EFS密钥!(EFS)
单击下一步,然后单击完成(Finish)。您的私人加密密钥(encryption key)现在保存为文件。您现在可以获取此文件并将(file and import)其导入任何其他Windows 机器(Windows machine)。导入(Importing)真的很简单。您所要做的就是双击该文件,它将打开证书导入向导(Certificate Import Wizard)。
导入证书后,您将能够解密使用该证书加密的任何文件。如前所述,如果您尝试打开加密文件并且您没有或找不到证书,那么这些文件基本上已经消失了。
一些程序声称他们可以以高昂的价格解密你的文件,但它们从来没有为我工作过,这就是为什么我没有在这里列出任何一个。如果您有任何问题,请随时发表评论。享受!
How to Decrypt Encrypted Windows Files
Are you trying to open some files on yоur computer that arе encryptеd? Windows will usually designate encryptеd file or folder nаmes with the color green instead оf the normal black text.
Note: If you are reading this post looking for information on decrypting files that were encrypted by CryptoLocker, this won’t help. You pretty much have to pay the ransom and hope they actually send you the encryption keys.
When encrypting files and folders, Windows will use a self-generated certificate that contains keys used to encrypt and decrypt the data. When opening encrypted data when logged into the user account that generated the certificate, the decryption process is transparent and the files are opened normally.
However, if another user or system tries to access those same data files or if the files are moved to another location, then they cannot be opened unless the original certificate is installed.
In either case, one thing you have to remember about encrypting and decrypting files in Windows is that you always need the encryption certificates/keys. When you encrypt a file or folder in Windows, encryption keys are automatically created and associated with your user account.
In Windows 7 and higher, you’ll actually get a prompt asking you to backup your encryption key (EFS certificate).
You should definitely do this immediately. If you do not have these encryption keys, you will not be able to decrypt the data. Unfortunately, there is no way around this since the encryption is very strong and cannot be broken easily.
If you can still access the computer where the data was originally encrypted, you can try exporting the certificate and then importing it on a different machine.
Backing Up EFS Certificates
There are a couple of ways to backup file encryption certificates and I’ll mention them below. The first way is to click on Start and type in certificate.
Click on Manage user certificates and this will open up the certificates for the current user. In Windows 7, you can also type in certmgr.msc and press Enter to open the certificate manger.
Now expand Personal and then click on Certificates. You should see all the certificates listed in the right pane. There might only be one, but if not, the only certificates you are interested in are the ones that have Encrypting File System listed under Intended Purposes.
Right-click on the certificate, choose All Tasks and then click on Export.
This will open the Certificate Export Wizard, which is the same place you will reach if you click on Back up now (recommended) when prompted by Windows.
On the next screen, you will want to select Yes, export the private key along with the certificate. If you don’t have the private key, you won’t be able to decrypt any of the encrypted files.
On the next screen, you have to choose the format you want to use to export the certificate. Personal Information Exchange should already be selected and you can leave it with just the first box checked.
Since this certificate contains a private key, you are required to protect it using a password. Check the Password box and type in a strong password.
Finally, click Browse and choose a location where you want to save the file. It is highly recommended you do not save the file onto the computer itself. If something happens to the PC, then you lose the key along with it.
Also, give your file a name that is helpful for you, but not super obvious to others what it is. For example, don’t name it EFS key like I did below!
Click next and then click Finish. Your private encryption key is now saved as a file. You can now take this file and import it on any other Windows machine. Importing is really easy. All you have to do is double-click on the file and it will open up the Certificate Import Wizard.
Once you import the certificate, you will be able to decrypt any files that were encrypted with that certificate. As previously mentioned, if you are trying to open encrypted files and you don’t have or can’t find the certificate anymore, then those files are basically gone.
Some programs state they can decrypt your files for a hefty price, but they have never worked for me and that’s why I haven’t listed any of them here. If you have any questions, feel free to post a comment. Enjoy!