HELP!! Can't open locked folder!

[nomarjr3]

I used Kakasoft's Folder Protector to lock my important documents.
Now I can't seem to unlock the folder protector!

How do I recover all the data hidden by the program??

I scanned it with Avira AV, and it seems that the program turns the folder for the documents into some sort of archived rootkit.

Please HELP!!
I need to recover my life's worth of documents so badly!!!

[Mrkvonic]

Hello,

The data is not encrypted, right?

Boot from a live CD, like BartPE or Ultimate Boot CD, and copy the data to a removable media, burn it, or simply change the folder permissions.

Instructions here:
http://www.dedoimedo.com/computers/livecd.html

Mrk

[nomarjr3]

Unfortunately, I believe it's encrypted.

[nomarjr3]

OMG.
According to the website, it uses 256-bit Blowfish encryption!!
I'm totally screwed!

My original paperworks, my family tour photos, all down the drain!

Please maybe somebody can help me out
:'( :'( :'(

[GlobalForce]

So much for "think twice, do once." Why you wouldn't have trialed on a test folder I fail to understand.

Can't seem to unlock - your attempt method? Password problem or what?

You believe it's encrypted? It is or it isn't.


S

[nomarjr3]

-{ Quote: "So much for "think twice, do once." Why you wouldn't have trialed on a test folder I fail to understand.

Can't seem to unlock - your attempt method?

You believe it's encrypted? It is or it isn't.


S" }-
I downloaded and used the current version of Folder Protector to lock my folder.
I've been using the same software for nearly a year now. It worked flawlessly until now. And I have no idea why it flunked this time around.

Pardon my English, it is not my native tongue.
Yes, I can't unlock the folder protected by Folder Protector.
And yes, it IS encrypted:
http://www.kakasoft.com/folderprotect.htm

[GlobalForce]

How'd you move into the new version .... uninstall old then install new? On top of? What doesn't work, the password?

S

[GlobalForce]

Don't know what takes so long to answer? Go offline, disable Avira, reboot (keep Avira disabled). Try again to unlock it.
*If nogo - explain further what was meant when you said the modified folder look's like some sort of "archived rootkit."

S

[nomarjr3]

-{ Quote: "How'd you move into the new version .... uninstall old then install new? On top of? What doesn't work, the password?

S" }-
You don't need to install or uninstall the software.
It's a stand-alone software, like Rootkit Unhooker and Flash Disinfector. You can even put it on a USB drive.

Yes, I only use one master password for encrypted files (so that I don't forget)
but this time I couldn't unlock the locked folder.
???

[GlobalForce]

Fine. The old one was unlocked prior to locking with the new, correct? Address post eight.

S

[twl845]

May I suggest that you look for a support link or phone number from the company and contact them. Maybe they have a forum you can go to also. I'm sure you're not the first to have the problem, so they might be able to walk you through a solution.

[GlobalForce]

Go ahead Nomar, go offline and pull Avira's protection - then try.

Slight mis-read - "... the program turns the folder for the documents into some sort of archived rootkit."

I can think one of your security app's causing interference, an outside program induced bug, or .... caps lock.

========================

Longshot - whether you think it's there or not, place another copy of lockdir.exe in the protected folder.


S

[nomarjr3]

Ackk!
This is very confusing.
???

Maybe I should send an email to Kakasoft regarding this matter.
Must be a bug as you said or something.

[GlobalForce]

Have you followed any suggestion's from post twelve?

S

[BlueZannetti]

-{ Quote: "Maybe I should send an email to Kakasoft regarding this matter." }-That's generally the second step one might take, after walking through the suggestions in the vendor's FAQ. The other step one might take would be to provide some feedback regarding advice you've already obtained here. That might encourage some further assistance. At this point you've provided precious little in the way of details. For example.... You note that-{ Quote: "I scanned it with Avira AV, and it seems that the program turns the folder for the documents into some sort of archived rootkit." }-I assume that this is a message provided to you by Avira and not your own technical assessment. If that's the case, did Avira take any additional actions?
You mention that-{ Quote: "Now I can't seem to unlock the folder protector!" }-What are the precise symptoms? Is a password that you enter declined or are you unable to even provide a password?
You mention that-{ Quote: " Unfortunately, I believe it's encrypted." }-To be perfectly candid, in using this type of product and dealing with this type of situation, you simply can't guess. Do you know that it's encrypted or are you guessing that it is? By the way, referring us to the product website where we can see that encryption is possible does not mean it is in use.
Have you actually taken the time to try any of the measures that GlobalForce has taken the time to offer?

Take a moment a provide some feedback to those trying to assist, otherwise, in all likelihood, that assistance will disappear.

Blue

[nomarjr3]

-{ Quote: "Have you followed any suggestion's from post twelve?

S" }-
Yes. It didn't work :(

[nomarjr3]

-{ Quote: "I assume that this is a message provided to you by Avira and not your own technical assessment. If that's the case, did Avira take any additional actions?" }-
No. I scanned it myself, without consent of Avira of course.
-{ Quote: "What are the precise symptoms? Is a password that you enter declined or are you unable to even provide a password?" }-
The password is declined. The password is something I know by heart and I will never forget.
-{ Quote: "Do you know that it's encrypted or are you guessing that it is? By the way, referring us to the product website where we can see that encryption is possible does not mean it is in use.
" }-
It is encrypted. I just went to another forum to ask for further assistance, and they said it is encrypted.

[GlobalForce]

Ah, Blue meant the program, not anyone from Avira support.

"I assume that this is a message provided to you by Avira and not your own technical assessment."


Yes, but is it written down somewhere? Tried with security soft disabled?

"The password is something I know by heart and I will never forget."


S

[BlueZannetti]

-{ Quote: "Ah, Blue meant the program, not anyone from Avira support." }-Quite right, and continuing along this line of inquiry, if this verdict was rendered by the program, was a key executable/file removed from the system during this alert? Look in the log that Avira tracks actions taken to determine this if it's not apparent. If this is the case, a simple restore from quarantine may be all that is needed. If not, things are looking somewhat bleak.

Blue

[nomarjr3]

Sorry for the late reply.
I overslept, so tired from work.

Anyway, here's a SAS scan log:

Trojan.Gromozon (RootKit)
D:\BACKUP\HIJACKTHIS\FILE01\THUMBS.DN\COM1.{D3E34B21-9D75-101A}8C3D-00AA001A1652}\úø .\LASTF\...

The 'File01' folder is the locked folder.

EDIT:
The 'File01' folder (locked folder) is inside the 'HijackThis' folder, which is inside the 'Backup' folder.
The 'Backup' folder being the root folder.

[nomarjr3]

Does anyone know how to make a batch file to move hidden files locked by LockDir v5.33 (aka Kakasoft Folder Protector)??

That is the only solution I can think of.

Unfortunately, I do not have the technical know-how to make such a BAT file.
Can anyone make a test folder locked by LockDir and make a BAT file to unlock the hidden contents?
Any help will be much appreciated.

[GlobalForce]

Not likely. Have you heard from Kakasoft, considering this is your "life's worth of document's?"

"Does anyone know ...."


S

[BlueZannetti]

-{ Quote: "Unfortunately, I do not have the technical know-how to make such a BAT file.
Can anyone make a test folder locked by LockDir and make a BAT file to unlock the hidden contents?
Any help will be much appreciated." }-There's really only one place you'll find detailed technical know-how surrounding this product, or any product of this nature for that matter, and that would be from the vendor. If they can help you, great. If not, you should probably start coming to grips with the fact that this could be an unrecoverable error.

Blue

[nomarjr3]

-{ Quote: "There's really only one place you'll find detailed technical know-how surrounding this product, or any product of this nature for that matter, and that would be from the vendor. If they can help you, great. If not, you should probably start coming to grips with the fact that this could be an unrecoverable error.

Blue" }-
Yes, that's what I just did.
Unfortunately, Kakasoft hasn't given a reply yet.

BTW the reason why I was suggesting the BAT file solution, is because I read in a forum that you can actually move the hidden files locked by LockDir back into the system.

Queue (one of the forum members) gave a code of a BAT file that could unlock Redllar's HideDir program and versions 4.6, 4.7, and 5.0 of Lockdir.

This is the code for the BAT file:
-{ Quote: "@echo off
attrib -s -h desktop.ini
del desktop.ini
attrib -s -h printers
attrib -s -h thumbs.db
attrib -s -h thumbs.dn
cd printers
cd thumbs.db
cd thumbs.dn
attrib -s -h desktop.ini
del desktop.ini
attrib -s -h sys~1
attrib -s -h sys___~1
attrib -s -h com1~1.{d3
cd sys~1
cd sys___~1
cd com1~1.{d3
attrib -s -h system.db
del system.db
attrib -s -h system~1
attrib -s -h system
attrib -s -h aad9~1
attrib -s -h __~1
cd system~1
cd system
cd aad9~1
cd __~1
attrib -s -h dir.fod
del dir.fod
attrib -s -h file.fod
del file.fod
attrib -s -h ps.fod
del ps.fod
rename thumbs~1.{d3 unhidden
rename lastf unhidden
move unhidden ..\..\..\
cd ..
rmdir system~1
rmdir system
rmdir aad9~1
rmdir __~1
cd ..
rmdir sys~1
rmdir sys___~1
rmdir com1~1.{d3
cd ..
rmdir printers
rmdir thumbs.db
rmdir thumbs.dn
attrib -s %~dps0
exit" }-

Unfortunately, it doesn't work for LockDir v5.33
Maybe there's a workaround for this code specifically for v5.33?

[MICRO]

-{ Quote: " I only use one master password for encrypted files (so that I don't forget)
but this time I couldn't unlock the locked folder.
" }-

Would this particular master password be case sensitive ?

[nomarjr3]

-{ Quote: "Would this particular master password be case sensitive ?" }-
No. It's only a series of digits, NO alphabets whatsoever. Only 6 digits.

[nomarjr3]

RESOLVED!!

Thanks to everyone's willingness to help.

A word of caution, be VERY careful if you intend to use this program.
If you lock the folder, there is a slim chance that you may never recover it again.

[stapp]

Are you not going to give some clue as to how you resolved it, or do we have to guess? :)

[GlobalForce]

If a support email then the jist of it ==> in your own word's.

S

[MICRO]

-{ Quote: "RESOLVED!!

" }-
That's good news, but if you don't explain the solution how
is anyone going to help others with a similar problem ?

[GlobalForce]

I'll take a guess Stapp. URGENT! Help with Lockdir v5.33! - http://www.portablefreeware.com/forums/viewtopic.php?t=3719

Ref's (under *default* encryption), courtesy m^(2):
Hunting rootkits / Windows NT "native" file/regist, ghisler.com


Finding rootkits: 2 plugins for Total Commander users, forums.spybot.info


Windows native browsing plugin - snlTCNTplugins01.zip

S

[stapp]

I think you've guessed right :) :) :)

[nomarjr3]

-{ Quote: "I'll take a guess Stapp. URGENT! Help with Lockdir v5.33! - http://www.portablefreeware.com/forums/viewtopic.php?t=3719

S" }-
:-[

;D

[KookyMan]

I do hope that after reading what you have, and getting around it, you realize that the program your using in the current configuration is completely useless, right?

I mean, isn't the whole point of the program to stop you from doing what you just did?

This kind of program is what I like to call "Feel good security." Absolutely insecure, but it makes you "feel good," hence the name.

[shiriam]

Hello! greetings from San Jose, Costa Rica. It turns out that my last time I did the same thing and I could solve it properly.

One day is that you install the suite of services for sight and the next day he could no longer access the files on the lockdir, then I was about to be crazy, but I found such a solution. And that through a very simple program I managed to access the DOS on my hard drive and I was able to recover all the lost documents.

my email is ~Email address removed - Ron~ and I am entirely at the disposal to help them all.

best regards