Create a folder that cannot be found by anti-virus software
After anti-virus software is installed, every time you open a folder containing hacking tools, an alert window pops up frequently. Program Then "It's Gone with the wind.
After several times, my "Grain Storage" has almost disappeared. It seems that you need to find a folder that no antivirus software can detect.
I. simple principles and clear methods
As we all know, in windows, the "/" symbol is the path separator. For example, "C:/Windows/" indicates the Windows folder in the C partition, while "C: "/Windows/system.exe" indicates that
The system.exe file in the Windows folder. What if the file name contains the "/" symbol? If "s/" is the name of a folder, which is located in "F:/", its path is
"F:/S/". When we try to access it, Windows will mistakenly think that the file we want to open is the folder named "S" under the f partition, instead of the "S/" folder,
In this way, Windows cannot open the folder accurately and an error message is returned because the preceding path does not exist.
2. Create a directory and repeat it.
If you understand the principle, simply create the "S/" folder in Windows XP. Why? The system prompts "the file name cannot contain the '/' symbol ".
It seems that Microsoft has already thought of this, and it seems that it has to adopt other methods to create this "special" folder.
In the "run" column, run the "cmd" command to open the Command Prompt window, enter the "C:/" command (without quotation marks, the same below) in it, and then in the "C: /"and enter" mkdir s .. /", and press Enter.
Now, open the resource manager and you can see that a folder named "S." is created under drive C, but this folder cannot be opened or deleted. It cannot be opened because its actual path is "C:/s ../"
(Because it was created by ourselves, we can determine its actual path), but in system resource manager, its folder name is changed to "s. in this way, when trying to open it,
The system actually tries to open "C:/S./", which of course cannot be opened. Because the system does not think that the folder exists, an error is reported. The reason is that the folder cannot be deleted.
If you type mkdir s.../in C:/and press enter, the folder named "s .." is displayed in resource manager, which can be opened but cannot be deleted. But in fact this folder is invalid,
Copy any file in Windows XP to this folder, and then you will find that there is nothing in it.
Although the new "s ../" folder cannot be opened or deleted, it does not prevent us from copying files to it. However, once this folder is operated, it will be displayed in the current path.
A folder named "S" can be opened normally, but the content is empty. In this case, as long as any folder is deleted, the folder left behind cannot be in the resource manager,
The operation is enabled or deleted normally.
Since such folders will not be deleted in Windows, you can safely save hacking tools or important files. After testing, even if Trojans or even virus programs are stored, they will not be scanned and killed by anti-virus software.
Although these folders cannot be opened normally in the resource manager, they can be opened through the "run" column, provided that the real path of the folder is known.
For example, in this example, you can type "C:/s ../" in the "run" column and press the Enter key to open this folder.
Iii. Easy Deletion
Finally, let's talk about how to delete these folders. If the folder is empty, enter "C:/" in the Command Prompt window, type the "rmdir s ../" command, and press enter to delete the folder.
If the folder contains files, you can type "rmdir/S .. /"command, press the Enter key and prompt" s .. /, are you sure you want to confirm (y/n )?" , Type "Y" to delete the folder.
Many may find that creating such a folder not only prevents accidental deletion. Some important data can also be stored to achieve the effect of alternative encryption,
Generally, cainiao cannot solve this secret!
Tested by myself. Use createfolder in vbs and createdirectory and copyfile functions in API to access this directory.
Therefore, using this method to hide Trojans/viruses is a good choice.
This article is transferred from
Http://g6a71.mail.163.com/a/s? Func = mbox: readmessagehtml & SID = nbtopwddidaqlwqfbjddfkqdolcowjld & Mid = 38: 1 tbijgqalecpetzwsaaasr