No Delete

Suhas N | 2023

Description

This program injects into explorer.exe and plays with its Shift+Delete functionality. The file which is Shift+Delete-ed will be hidden for a while and moved to the store/{unix-epoch} directory. You will know where to use this program.

Read about the inner workings here

Usage

I recommend you to create a seperate directory.

1. Grab NoDelete.exe and NoDeleteH.dll files from Releases and place them in the same folder.
2. Start NoDelete.exe program. It will download shell32.pdb (10-11MB, speed depends on MS symbol servers)
3. If the program ends, check the logs in the log folder.
4. The logs in the log folder as named as follows:

• base.log: contains information of the main executable
• inject_{PID}.log: contains information of the target process.

For every windows update (not product/.NET updates), you should delete the shell32.pdb file and regenerate it.