I'm having a problem with my sister's computer. Remember it?
I put her harddrive into another computer. I need to recover her files. However, they are encrypted with NTFS's encryption. I have (well, I cracked.. same thing, really) her passwords, so that's not an issue. However, I can't figure out how to get them decrypted.
I was looking at ntfsdecrypt, which you can get with Linux. However, it requires a key which you can only get by running a program (cipher.exe) on the system with the encrypted files. I booted with Windows XP's recovery console, but it doesn't allow you to run programs so I can't run that stupid cipher.exe.
I also can't find a program which can just decrypt the files using a password.
Any idea how I can retrieve the files? I know that Encase Forensic Suite can, but I don't have $1000's of dollars. Anything else?