Reading at least one locked, encrypted or locked, unencrypted computer file

A system of reading at least one locked, encrypted computer file encrypted by an encryption filter driver running on an operating system of a computer system, with an added kernel driver, while the operating system is running, the system comprising:

• a getting module configured to get the handle of the locked, encrypted computer file;
• a causing module configured to cause encryption key information associated with the locked, encrypted computer file to be processed;
• a reading module configured to read data from the locked, encrypted computer file by using the added kernel driver.

A computer program product usable with a programmable computer having readable program code embodied therein of reading at least one locked, encrypted computer file encrypted by an encryption filter driver running on an operating system of a computer system, with an added kernel driver, while the operating system is running, the computer program product comprising:

• computer readable code for getting the handle of the locked, encrypted computer file;
• computer readable code for causing encryption key information associated with the locked, encrypted computer file to be processed;
• computer readable code for reading data from the locked, encrypted computer file by using the added kernel driver.

The computer program product of claim 19 further comprising computer readable code for producing a temporary file having encryption filter driver information associated by the encryption filter driver with the locked, encrypted computer file by using the encryption key information.

A method of reading at least one locked, unencrypted computer file in a computer system with an operating system with an added kernel driver while the operating system is running, the method comprising:

• getting the handle of the locked, unencrypted computer file;
• and
• reading data from the locked, unencrypted computer file by using the added kernel driver.