Retrieve the lost encrypted file! Data recovery software has miraculous effects

Some friends often forget to decrypt the encrypted folder before uninstalling and sharing the encrypted folder after trying out the encryption software. As a result, some important data is encrypted and cannot be recovered, this article will tell you how to retrieve these lost encrypted files. When you encounter such problems with your friends, try these methods.

Today, a colleague from the organization rushed to ask the author for help, previously, he used a folder named "E-God encryption folder" to encrypt Several folders that saved important documents. If the software is not registered, it can only be used for 30 times. Now the trial period has reached, so he uninstalls it at will, but the bad thing is that the encrypted folder is still encrypted, he had to re-install the "E-God encryption folder" and then open the several more encrypted folders, but the prompt "30 trial periods have arrived, please register this software" appeared, the original password input box is no longer displayed.

I have tried many folder hiding tools, many of which use Class Identifiers to hide folders, and it is very easy to deal with this encryption method. As long as I rename the encrypted folder in WinRAR, remove the Class Identifier after the folder name. So after hearing his description, I thought it was not a piece of cake. But after a try, I found that I was not as simple as I thought.

　　I. defeat in the first round

Look at his computer and find the encrypted folder icon 1. The first thought is that it seems to have nothing to do with the Class Identifier, because folder icons encrypted with Class Identifiers are always Windows Control Panel, garbage bins, and printers, which are easy to distinguish. I tried it.

These encrypted folders are stored in the root directory of drive F. Therefore, I used WinRAR to locate the root directory of drive F and found that the encrypted folder contains. ywb extension. When I try to remove the extension, WinRAR displays the "Access Denied" error message (2 ). It seems that the encryption method of "E-God encrypted folder" is indeed unique, and the old method does not work.

Some friends often forget to decrypt the encrypted folder before uninstalling and sharing the encrypted folder after trying out the encryption software. As a result, some important data is encrypted and cannot be recovered, this article will tell you how to retrieve these lost encrypted files. When you encounter such problems with your friends, try these methods.

Today, a colleague from the organization rushed to ask the author for help, previously, he used a folder named "E-God encryption folder" to encrypt Several folders that saved important documents. If the software is not registered, it can only be used for 30 times. Now the trial period has reached, so he uninstalls it at will, but the bad thing is that the encrypted folder is still encrypted, he had to re-install the "E-God encryption folder" and then open the several more encrypted folders, but the prompt "30 trial periods have arrived, please register this software" appeared, the original password input box is no longer displayed.

I have tried many folder hiding tools, many of which use Class Identifiers to hide folders, and it is very easy to deal with this encryption method. As long as I rename the encrypted folder in WinRAR, remove the Class Identifier after the folder name. So after hearing his description, I thought it was not a piece of cake. But after a try, I found that I was not as simple as I thought.

I. defeat in the first round

Look at his computer and find the encrypted folder icon 1. The first thought is that it seems to have nothing to do with the Class Identifier, because folder icons encrypted with Class Identifiers are always Windows Control Panel, garbage bins, and printers, which are easy to distinguish. I tried it.

 

These encrypted folders are stored in the root directory of drive F. Therefore, I used WinRAR to locate the root directory of drive F and found that the encrypted folder contains. ywb extension. When I try to remove the extension, WinRAR displays the "Access Denied" error message (2 ). It seems that the encryption method of "E-God encrypted folder" is indeed unique, and the old method does not work.

 

 

Right-click a "suspected" encrypted file, select "Restore/copy", and then click "Yes> OK ", in the pop-up save file dialog box, enter a complete file name including the extension to extract the file. After opening the file, it is indeed one of the encrypted files. However, when I repeat the above operations, I found that WinHex had frequent error prompts and most files could not be saved. It seems that WinHex can solve some problems, but the effect is not perfect.

Victory in 3 and 3

My colleagues are very satisfied with the fact that I finally retrieved several files, but I don't want to be half done. Through WinHex, we can understand that encrypted files are still stored on the F disk, but cannot be directly seen for some reason. How can we make them original? I searched on the Internet and found a data Recovery software named Handy Recovery was introduced. Why didn't I try to search for the drive? Since the deleted files can be found, let alone the physical existence, but only the files that cannot be seen.

After finding and installing the software on the CD, I immediately analyzed the f disk and found nothing in the root directory. However, I found the Recycled directory (that is, the Windows recycle bin directory) there is a "+", which indicates that the file is saved under it. When it is opened, it is found that there is a "pagefiles. sys. {21EC2020-3AEA-1069-A2DD-08002B30309D} "folder. after entering the folder, we finally found all the encrypted files (6). You should know the rest of the operations.

Iv. Postscript

My colleagues' thanks are needless to say. I went back to the office and installed and studied the "E-God encryption folder" on my computer ", it is found that only the Recycled directory of the partition that has performed the encryption operation contains "pagefiles. sys. {21EC2020-3AEA-1069-A2DD-08002B30309D} "folder, which stores all our encrypted files. In addition, I also found an interesting phenomenon: experts know that WinRAR can directly view the Recycled directory and display the real file name of the saved file, however, after "E-God encryption folder" is installed, WinRAR will be automatically disabled as soon as it switches to the Recycled directory. It seems that the author of the software has been wary of this. It is impossible to use WInRAR to retrieve encrypted files directly.