Antivirus File Unlocking via Kernel Driver Handle Closure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security software lacks effective means to unlock and delete files infected with viruses, as conventional methods are unable to remove encryption locks and restrictive settings set by viruses, hindering antivirus software's ability to clean infected files.
Innovation Solution
A method and system that receive an unlock or delete request for files or folders, verify input parameters, correct deformed paths, and remove restrictive settings such as read-only locks, routine locks, and handle occupations, using kernel mode drivers to re-establish user mode addresses and send file operation control codes to the operating system, thereby overcoming virus-induced obstructions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional deletion methods are used on virus-infected files, then the file can be deleted under normal conditions, but the file cannot be deleted when encrypted locks or restrictive settings are applied by viruses
Solution Approach 1:
The patent introduces a specialized unlocking module as an intermediary between the antivirus software and the virus-infected files. This module acts as a mediator that detects encryption locks and restrictive settings, then applies appropriate unlocking operations (such as handle closure, attribute modification, or forced deletion) to remove these obstacles before the file can be safely deleted. This intermediary approach allows the system to handle both normal and locked files through a unified process.
Solution Approach 2:
The patent changes the operational parameters of file deletion by introducing multiple deletion modes (normal deletion, forced deletion, handle closure, attribute modification) that can be dynamically selected based on the detected state of the file. When encryption locks or restrictive settings are detected, the system automatically switches to alternative deletion parameters that can overcome these obstacles, such as modifying file attributes from read-only to writable or using forced deletion commands that bypass normal permission checks.
2Adaptability or versatility
If security software implements multiple unlocking methods, then the capability to remove virus locks is enhanced, but the system complexity increases
Solution Approach 1:
The patent segments the file deletion process into distinct functional modules: a detection module that identifies encryption locks and restrictive settings, an analysis module that determines the type of lock applied, and an execution module that applies the appropriate unlocking operation. This segmentation allows each module to specialize in a specific task, making the overall system more manageable despite the multiple unlocking methods available. The modular structure enables the system to implement versatile unlocking capabilities while maintaining clear separation of concerns and reducing overall system complexity.
Data Source
AI summary
A method and system for unlocking and deleting a file or a folder. The method for unlocking the file or the folder comprises: receiving an unlock request of a file or a folder, wherein the unlock request includes an input parameter; verifying whether the input parameter complies with a preset condition; if the input parameter complies with the preset condition, correcting a deformed path format of the file or the folder and/or the special file name of the file or the special folder name of the folder according to a preset rule; determining whether restrictive setting of the corrected file or folder is present; and if yes, cleaning the restrictive setting of the file or the folder. The embodiments of the present invention relieves layer by layer the protections arranged by files infected with a virus by employing a plurality of means such as removing the read-only lock, removing the routine lock, adding the authority and closing the handle, thereby increasing the confrontation capacity of a security software against a malignant program.