Method capable of hiding specified file and folder

Abstract

The invention provides a method capable of hiding a specified file and a specified folder. The method comprises the steps that: a file hiding drive module customizes a disguised public folder control function, and hooking an entry of the public folder control function into an internal CommonDirectoryControl function of a Windows file system; and the public folder control function deletes a file or folder in a white list from an IRP operation result, so as to obtain an IRP operation result after the file or folder is hidden. The method has the advantages that: since the manner of hiding the file and the folder by adopting a Windows kernel driving layer Hook file system for driving the internal CommonDirectoryControl function, the technical difficulty is greater, the file and the folder cannot be discovered or cracked by the existing system management tool on the market and cannot be bypassed easily, the method is high in practicality, and is not liable to cause leakage of hidden information, and has the advantage of higher universality.

Description

technical field [0001] The invention belongs to the technical field of computer terminal safety management, and in particular relates to a method for hiding specified files and folders. Background technique [0002] In some occasions, there will be a situation where multiple people share a computer. During the use of the computer, users often have some files or folders that they do not want to be seen by other users of the computer, so they need to be hidden, for example: involving personal Private files or folders, important work files or folders, configuration files or folders of important software, etc. [0003] In the prior art, the method that most people adopt is: place the files or folders that need to be hidden under some very infrequently used file directories, or use the hidden files and folders function that comes with the Windows operating system to hide the files that need to be hidden. Files and folders can be hidden, or simply hidden using Windows' file hidin...

AI Technical Summary

Problems solved by technology

For example, Windows 64-bit version, because the PatchGuard protection kernel mechanism prohibits hooking the Windows kernel, so all 64-bit version operating systems of Windows cannot use this method to hide files or folders

Secondly, using Windows to filter IRP_MJ_DIRECTORY_CONTROL requests, although the PatchGuard mechanism can be bypassed to filter IO requests for browsing directories, there is still a problem that some drivers can bypass the file filter driver to find and display the file list

[0006] The above two methods are already relatively common and common technologies, and the implementation difficulty is relatively low. Many common system management tools can easily crack them. The practicability is poor, and it is easy to cause the leakage of hidden information.

Images