This type of software cannot be regarded as an encryption software. It is implemented only by exploiting the Windows operating system file naming vulnerability. After encrypting files, you may not see the files in the folder, but these files are still in the folder.
Now let's talk about the "encryption" principle. This "encryption" software creates a folder named dirrecycler in the folder to be encrypted, which is set to system and hidden
And is disguised as a recycle bin, so we can't see it normally, but we can see this directory as long as we use RAR decompression software or total commander. We can see that
Is a "recycle bin" icon, we click this dirrecycler folder (it is best to use total commander to view ). Dirrecycler File
There are 2 folders and 3 files in the folder, which are NUL and System. (Note that there is a dot behind system, and our files will be moved to this folder .)
Dir800621.ini, desktop. ini, and {djp2006}. mem files. The desktop. ini file sets dirrecycler
As long as the desktop. ini file is deleted, the image in the dirrecycler folder is changed from the image in the recycle bin to the icon in the normal folder.
Nul, System. These two folders cannot be created normally. The NUL folder can be imported normally, while the system. Folder cannot be imported normally. The files in the encrypted folder are in system.
Now let's talk about getting encrypted files out without the "folder guard.
Run the command, Enter cmd, and press Enter.
If you encrypt the 123 folder in the C-drive root directory
In the CMD window, enter the following command:
Del C:/123/dirrecycler/desktop. ini press ENTER
Attrib C:/123/dirrecycler-H-s press ENTER
Md c:/123/dirrecycler/system.../(note that there are three points after system) Press ENTER
Now, you can open the C:/123 folder on my computer, you can see the dirrecycler folder, and then click Enter dirrecycler.
System... (note that there are two dots behind the folder) folder. You can see the files in the encrypted folder. You can copy and move the files.
Therefore, do not trust the security of some folder encryption software!
As for how to delete the NUL, system. And system. folders, you only need to use the del command in cmd with the/S parameter, and enter the complete network path.
Let me learn.
ReadArticleThen, I understood the principle of encryption. Thank you.