EFS encrypted file decryption

Case:
This hard disk is 250GB of the West Porsche, and the model is: ST3250820AS 3.5 -inch desktop hard disk. According to customers, a mobile hard disk is described.In the past, I used EFS to add secrets, but the system suddenly could not start. The data of the moving hard disk after reinstalling the system could not be opened.

Solution:
The engineer analyzes some characteristics of the encrypted files to find the private key on a full search of the C -drive.Finding the public key through the private key characteristics, the public key is stored in the MFT position, which is the easiest to be covered. Fortunately, the public key is also completely retrieved.Decover the data with the user name of the user’s arch to decrypt the user key.Export data, complete data recovery, successful recovery 100 %, and guest room satisfaction recovery results.