
Advanced EFS Data Recovery: versions history
============================================

! bug fixed
+ improvement/modification


Version 2.10
------------

+ decrypting files over 2Gb in size
+ an option to change AEFSDR process priority
+ log file now contains Windows and Application Data folder locations
+ an ability to add passwords in hex
+ processing passwords with control characters (Alt + keypad number)
+ adding passwords using the list (dictionary)
! selecting proper private key for FEK decryption
! problems in extracting user password from WinLogon memory
! trying to decrypt the file even if FEK has not been decrypted
! processing some specific encryption keys

Version 2.0
-----------

+ added support for Windows Server 2003 encryption
+ decrypting keys of domain users
+ recognising and parsing of all encryption keys types
+ using autologon password to decrypt keys
+ using password stored in WinLogon process memory (Windows 2000)
+ added "Select highlighted" option on "Encrypted files" tab
! probing direct disk access permissions when system drive is not 'C'
! incorrect information for some EFS-related files (on double-click)
! extracting password hashes from some SAM/SYSTEM files
! decrypting some specific private keys

Version 1.31
------------

+ size of log file can now be limited
+ added support for Windows XP themes (visual styles)
! preventing the program from hanging/looping on some critical errors
! processing folders with a lot of files
! decrypted files now have the same creation and modification dates as original ones
! using empty password to decrypt private keys

Version 1.30
------------

+ added support for Windows XP Service Pack 1 (AES encryption) 
+ show additional information about EFS-related files (on double-click)
+ progress bar during decryption is now based on total file(s) size, not number of files
+ faster initialization; now file tree is drawn on first access to this tab
+ number of encryption keys and encrypted files found, as well as elapsed time, is now calculated globally for all selected disks
+ added "global" progress bar when scanning for encryption keys and encrypted files
+ disks can be selected (for scanning) by double-click
! decrypting very fragmented files
! freeze on scanning some FAT16 partitions

Version 1.22
------------

+ added "Decrypt" button on toolbar
+ loading SYSKEY from any file, not just "StartKey.Key"
+ selecting multiple disks to scan for keys and encrypted files
+ when trying to scan for encrypted files before scanning for encryption keys, warning message is shown
+ improved speed of detecting "decryptable" status for encrypted files
! wrong comments to SYSTEM files on "EFS related data" tab (SYSKEY location)
! crash after "Initializing" screen in some cases
! wrong path to some files on decryption

Version 1.20
------------

+ added support for files encrypted under Windows XP
+ added support for 3DES ecnryption
+ improved reliability though proper exception handling
+ checking for free disk space before decryption
+ using a simple password dictionary (80+ commonly used passwords)
+ improved NTFS reading code
+ added "-debug_log" command-line option
+ on "Encrypted files" tab, now it is possible to select multiple files for removal
+ on "Encrypted files" tab, total size of selected files now shown
+ the program now shows errors for all files it has problems with (when decryption is completed) - in a special window
! saving private keys into backup file
! loading backup files from earlier versions of AEFSDR

Version 1.10
------------

- improved user interface (toolbar, icons in menu etc)
- showing splash screen on program startup
- detecting Windows version (by encryption keys)
- increased scanning speed (for both keys and files)
- better reliability on NTFS scanning, especially for large disks
- working with SYSKEY stored on floppy or through startup password
- more detailed and informative log file:
  - 'normal' and 'debug' modes
  - overwrite/append
- detecting SYSKEY mode (stored locally, or on floppy, or with startup password)
- showing 'legend' at the botto:
  - on 'EFS related files' tab: 'decrypted' or 'not decrypted'
  - on 'Encrypted files' tab: 'decryptable' or 'not decryptable', incl. number of files
  - on 'File tree' tab: 'encrypted', 'decryptable' or 'not decryptable'
- improved error diagnostics
  - if backup file cannot be opened
  - if master or private keys were not found
  - if encrypted files were not found
- scanning for encryption keys on CD and floppy disks
- improved SAM and SYSTEM files analysis
- adding empty password by default
- allowing multiple files selection on 'File tree' tab
- added 'Remove from list' button on 'Encrypted files' tab
- 'Save files' button on 'Encrypted files' tab has been replaced with 'Decrypt'
- saving the following information between sessions:
  - log file options
  - main window position and size
  - width of columns on all tabs
  - SYSKEY mode
- added hot keys
- showing complete name (including domain) of user and recovery agent
  on 'Encrypted files' tab, when/if possible
- using UNICODE file I/O functions to create files with long path names
- showing statistics during disk scanning (for both keys and files):
  - time elapsed
  - total number of files analyzed
  - number of files (EFS-related or encrypted) found
- improved speed of encrypted files analysis (can be decrypted or not)
- 'File tree' tab:
  - showing files as soon as the folder is opened
  - highlighting encrypted files with blue color
  - second (analysis) thread marking files with red or green
- improved progress bar on key search -- now three stages:
  - scanning disk for EFS-related files
  - file analysis
  - decrypting private keys

Version 1.0
-----------

First public release.
