本软件为本地离线文件加密工具核心C语言_MiniFilter Driver C#功能如下采用 AES256-CBC、PBKDF2 加密算法对本地文档、图片、CAD等文件进行打开无感加密 / 解密支持自定义文件后缀、绑定对应打开程序、自定义资源图标双击加密文件自动解密编辑完成后自动重新加密覆盖原文件提供独立解密窗口、全局密码修改功能无网络上传、安全存储逻辑。还有很多BUG没有消除但凑合可用本人对C语言不是很熟悉缘故蓝屏死机搞的我接近崩溃...C语言基本原理影子文件机制技术考虑大文件加密解密——也是无奈选择全 IRQL 兼容所有锁均使用自旋锁KSPIN_LOCK替代快速互斥体确保可在 DISPATCH_LEVEL 等高 IRQL 下安全调用。非分页内存关键代码和数据置于NONPAGED段保证分页 I/O 路径的稳定性。缓存管理主动清理文件系统缓存CcPurgeCacheSection防止缓存与密文不一致。异步处理加密/解密、阴影创建等耗时操作通过工作项或后台线程异步执行避免阻塞主 I/O 路径。错误恢复加解密过程中若失败可回滚重命名操作并清理临时文件。兼容性支持 NTFS 文件系统适配 Windows 10/11 及后续版本WDK 10.0.26100.0。注意特别关注 WIN 11 文件打开机制。12:31:44.2457742 Notepad.exe 20048 QueryOpen C:\Users\Administrator\Desktop\111.txt FAST IO DISALLOWED 12:31:44.2458189 Notepad.exe 20048 CreateFile C:\Users\Administrator\Desktop\111.txt SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 12:31:44.2458311 Notepad.exe 20048 QueryNetworkOpenInformationFile C:\Users\Administrator\Desktop\111.txt SUCCESS CreationTime: 2026/8/10 12:31:40, LastAccessTime: 2026/8/10 12:31:40, LastWriteTime: 2026/8/10 12:31:40, ChangeTime: 2026/8/10 12:31:44, AllocationSize: 1601/1/1 8:00:00, EndOfFile: 1601/1/1 8:00:00, FileAttributes: A 12:31:44.2458371 Notepad.exe 20048 CloseFile C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:44.2458493 Notepad.exe 20048 IRP_MJ_CLOSE C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:44.2461099 Notepad.exe 20048 QueryOpen C:\Users\Administrator\Desktop\111.txt FAST IO DISALLOWED 12:31:44.2461429 Notepad.exe 20048 CreateFile C:\Users\Administrator\Desktop\111.txt SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 12:31:44.2461513 Notepad.exe 20048 QueryBasicInformationFile C:\Users\Administrator\Desktop\111.txt SUCCESS CreationTime: 2026/8/10 12:31:40, LastAccessTime: 2026/8/10 12:31:40, LastWriteTime: 2026/8/10 12:31:40, ChangeTime: 2026/8/10 12:31:44, FileAttributes: A 12:31:44.2461563 Notepad.exe 20048 CloseFile C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:44.2461655 Notepad.exe 20048 IRP_MJ_CLOSE C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:44.2463687 Notepad.exe 20048 QueryDirectory C:\Users\Administrator\Desktop\111.txt SUCCESS FileInformationClass: FileBothDirectoryInformation, Filter: 111.txt, 2: 111.txt 12:31:44.4624572 Notepad.exe 20048 CreateFile C:\Users\Administrator\Desktop\111.txt SUCCESS Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Disallow Exclusive, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened 12:31:44.5463558 Notepad.exe 20048 QueryOpen C:\Program Files (x86)\SogouInput\16.6.0.4073\installfile.txt FAST IO DISALLOWED 12:31:44.5464842 Notepad.exe 20048 CreateFile C:\Program Files (x86)\SogouInput\16.6.0.4073\installfile.txt NAME NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 12:31:44.6380071 Notepad.exe 20048 QueryInformationVolume C:\Users\Administrator\Desktop\111.txt SUCCESS VolumeCreationTime: 2026/8/5 10:04:14, VolumeSerialNumber: FAB7-3ABB, SupportsObjects: True, VolumeLabel: 12:31:44.6380368 Notepad.exe 20048 QueryAllInformationFile C:\Users\Administrator\Desktop\111.txt BUFFER OVERFLOW CreationTime: 2026/8/10 12:31:40, LastAccessTime: 2026/8/10 12:31:40, LastWriteTime: 2026/8/10 12:31:40, ChangeTime: 2026/8/10 12:31:44, FileAttributes: A, AllocationSize: 0, EndOfFile: 0 12:31:44.6385514 Notepad.exe 20048 CloseFile C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:44.6385716 Notepad.exe 20048 IRP_MJ_CLOSE C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:44.6497823 Notepad.exe 20048 QueryOpen C:\Users\Administrator\Desktop\111.txt FAST IO DISALLOWED 12:31:44.6498507 Notepad.exe 20048 CreateFile C:\Users\Administrator\Desktop\111.txt SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 12:31:44.6499024 Notepad.exe 20048 QueryNetworkOpenInformationFile C:\Users\Administrator\Desktop\111.txt SUCCESS CreationTime: 2026/8/10 12:31:40, LastAccessTime: 2026/8/10 12:31:40, LastWriteTime: 2026/8/10 12:31:40, ChangeTime: 2026/8/10 12:31:44, AllocationSize: 1601/1/1 8:00:00, EndOfFile: 1601/1/1 8:00:00, FileAttributes: A 12:31:44.6499197 Notepad.exe 20048 CloseFile C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:44.6499673 Notepad.exe 20048 IRP_MJ_CLOSE C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:44.6500775 Notepad.exe 20048 QueryOpen C:\Users\Administrator\Desktop\111.txt FAST IO DISALLOWED 12:31:44.6501207 Notepad.exe 20048 CreateFile C:\Users\Administrator\Desktop\111.txt SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 12:31:44.6501370 Notepad.exe 20048 QueryNetworkOpenInformationFile C:\Users\Administrator\Desktop\111.txt SUCCESS CreationTime: 2026/8/10 12:31:40, LastAccessTime: 2026/8/10 12:31:40, LastWriteTime: 2026/8/10 12:31:40, ChangeTime: 2026/8/10 12:31:44, AllocationSize: 1601/1/1 8:00:00, EndOfFile: 1601/1/1 8:00:00, FileAttributes: A 12:31:44.6501488 Notepad.exe 20048 CloseFile C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:44.6501647 Notepad.exe 20048 IRP_MJ_CLOSE C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:47.1571153 Notepad.exe 20048 QueryOpen C:\Users\Administrator\Desktop\111.txt FAST IO DISALLOWED 12:31:47.1571543 Notepad.exe 20048 CreateFile C:\Users\Administrator\Desktop\111.txt SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 12:31:47.1571780 Notepad.exe 20048 QueryNetworkOpenInformationFile C:\Users\Administrator\Desktop\111.txt SUCCESS CreationTime: 2026/8/10 12:31:40, LastAccessTime: 2026/8/10 12:31:40, LastWriteTime: 2026/8/10 12:31:40, ChangeTime: 2026/8/10 12:31:44, AllocationSize: 1601/1/1 8:00:00, EndOfFile: 1601/1/1 8:00:00, FileAttributes: A 12:31:47.1572004 Notepad.exe 20048 CloseFile C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:47.1572191 Notepad.exe 20048 IRP_MJ_CLOSE C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:47.1572949 Notepad.exe 20048 QueryOpen C:\Users\Administrator\Desktop\111.txt FAST IO DISALLOWED 12:31:47.1573311 Notepad.exe 20048 CreateFile C:\Users\Administrator\Desktop\111.txt SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 12:31:47.1573454 Notepad.exe 20048 QueryNetworkOpenInformationFile C:\Users\Administrator\Desktop\111.txt SUCCESS CreationTime: 2026/8/10 12:31:40, LastAccessTime: 2026/8/10 12:31:40, LastWriteTime: 2026/8/10 12:31:40, ChangeTime: 2026/8/10 12:31:44, AllocationSize: 1601/1/1 8:00:00, EndOfFile: 1601/1/1 8:00:00, FileAttributes: A 12:31:47.1573516 Notepad.exe 20048 CloseFile C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:47.1573633 Notepad.exe 20048 IRP_MJ_CLOSE C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:47.6039555 Notepad.exe 20048 QueryOpen C:\Users\Administrator\Desktop\111.txt FAST IO DISALLOWED 12:31:47.6039935 Notepad.exe 20048 CreateFile C:\Users\Administrator\Desktop\111.txt SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 12:31:47.6040124 Notepad.exe 20048 QueryBasicInformationFile C:\Users\Administrator\Desktop\111.txt SUCCESS CreationTime: 2026/8/10 12:31:40, LastAccessTime: 2026/8/10 12:31:40, LastWriteTime: 2026/8/10 12:31:40, ChangeTime: 2026/8/10 12:31:44, FileAttributes: A 12:31:47.6040200 Notepad.exe 20048 CloseFile C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:47.6040342 Notepad.exe 20048 IRP_MJ_CLOSE C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:47.6042700 Notepad.exe 20048 QueryDirectory C:\Users\Administrator\Desktop\111.txt SUCCESS FileInformationClass: FileBothDirectoryInformation, Filter: 111.txt, 2: 111.txt 12:31:47.6043234 Notepad.exe 20048 QueryOpen C:\Users\Administrator\Desktop\111.txt FAST IO DISALLOWED 12:31:47.6043540 Notepad.exe 20048 CreateFile C:\Users\Administrator\Desktop\111.txt SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 12:31:47.6043631 Notepad.exe 20048 QueryBasicInformationFile C:\Users\Administrator\Desktop\111.txt SUCCESS CreationTime: 2026/8/10 12:31:40, LastAccessTime: 2026/8/10 12:31:40, LastWriteTime: 2026/8/10 12:31:40, ChangeTime: 2026/8/10 12:31:44, FileAttributes: A 12:31:47.6043688 Notepad.exe 20048 CloseFile C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:47.6043798 Notepad.exe 20048 IRP_MJ_CLOSE C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:47.6044154 Notepad.exe 20048 CreateFile C:\Users\Administrator\Desktop\111.txt SUCCESS Desired Access: Generic Read/Write, Disposition: OpenIf, Options: Synchronous IO Non-Alert, Non-Directory File, Disallow Exclusive, Attributes: N, ShareMode: Read, AllocationSize: 0, OpenResult: Opened 12:31:47.6052203 Notepad.exe 20048 WriteFile C:\Users\Administrator\Desktop\111.txt SUCCESS Offset: 0, Length: 12, Priority: Normal 12:31:47.6053273 Notepad.exe 20048 SetEndOfFileInformationFile C:\Users\Administrator\Desktop\111.txt SUCCESS EndOfFile: 12 12:31:47.6053477 Notepad.exe 20048 FASTIO_ACQUIRE_FOR_CC_FLUSH C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:47.6053507 Notepad.exe 20048 WriteFile C:\Users\Administrator\Desktop\111.txt SUCCESS Offset: 0, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 12:31:47.6053586 Notepad.exe 20048 FASTIO_RELEASE_FOR_CC_FLUSH C:\Users\Administrator\Desktop\111.txt SUCCESS 12:31:47.6086358 Notepad.exe 20048 SetAllocationInformationFile C:\Users\Administrator\Desktop\111.txt SUCCESS AllocationSize: 12 12:31:47.6088097 Notepad.exe 20048 CloseFile C:\Users\Administrator\Desktop\111.txt SUCCESS
