Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.

Installation of kbfiltr example

makrurisan_makkelnmakrurisan_makkeln Member - All Emails Posts: 99
Hi All,

I read this in the kbfiltr example:

If you want to filter keyboard inputs from all the keyboards (ps2, usb)
plugged into the system then you can install this driver as a class filter
and make it sit below the kbdclass filter driver by adding the service
name of this filter driver before the kbdclass filter in the registry at
" HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\
{4D36E96B-E325-11CE-BFC1-08002BE10318}\UpperFilters"

If I look in the registry I found several entries named {4D36E96B-E325-11CE-BFC1-08002BE10318}

What should be done in the registry? It is absolutely not clear.
What is the result in the device tree?

Thnx

Comments

  • Peter_ScottPeter_Scott Member - All Emails Posts: 747
    You will get more responses if you post to the NTDev list. That said,
    there is only 1 key named "{4D36E96B-E325-11CE-BFC1-08002BE10318}" under
    the HKLM\System\CurrentControlSet\Control\Class, this is the class key
    and there can't be more than 1 under the Class key ...

    Pete

    --
    Kernel Drivers
    Windows File System and Device Driver Consulting
    www.KernelDrivers.com <http://www.kerneldrivers.com/>;
    866.263.9295

    ------ Original Message ------
    From: "xxxxx@x-publisher.com" <xxxxx@lists.osr.com>
    To: "Windows File Systems Devs Interest List" <xxxxx@lists.osr.com>
    Sent: 1/12/2018 9:30:05 AM
    Subject: [ntfsd] Installation of kbfiltr example

    >Hi All,
    >
    >I read this in the kbfiltr example:
    >
    > If you want to filter keyboard inputs from all the keyboards (ps2,
    >usb)
    > plugged into the system then you can install this driver as a
    >class filter
    > and make it sit below the kbdclass filter driver by adding the
    >service
    > name of this filter driver before the kbdclass filter in the
    >registry at
    > " HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\
    > {4D36E96B-E325-11CE-BFC1-08002BE10318}\UpperFilters"
    >
    >If I look in the registry I found several entries named
    >{4D36E96B-E325-11CE-BFC1-08002BE10318}
    >
    >What should be done in the registry? It is absolutely not clear.
    >What is the result in the device tree?
    >
    >Thnx
    >
    >---
    >NTFSD is sponsored by OSR
    >
    >
    >MONTHLY seminars on crash dump analysis, WDF, Windows internals and
    >software drivers!
    >Details at <http://www.osr.com/seminars>;
    >
    >To unsubscribe, visit the List Server section of OSR Online at
    ><http://www.osronline.com/page.cfm?name=ListServer>;

    Kernel Drivers
    Windows File System and Device Driver Consulting
    www.KernelDrivers.com
    866.263.9295

  • makrurisan_makkelnmakrurisan_makkeln Member - All Emails Posts: 99
    Hi,

    has someone done this and can exactly show how the entry must look like.

    Is this correct:
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e96b-e325-11ce-bfc1-08002be10318}]
    "Class"="MyKeyboard"
    "UpperFilters"=hex(7):6b,00,62,00,64,00,63,00,6c,00,61,00,73,00,73,00,00,00,00,\00
  • Mark_RoddyMark_Roddy Member - All Emails Posts: 4,303
    https://github.com/Microsoft/Windows-driver-samples/tree/master/storage/filters/addfilter

    The code that shows one how to add a fitler to a class or a device

    Mark Roddy

    On Fri, Jan 12, 2018 at 3:37 PM, xxxxx@x-publisher.com <
    xxxxx@lists.osr.com> wrote:

    > Hi,
    >
    > has someone done this and can exactly show how the entry must look like.
    >
    > Is this correct:
    > [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\
    > Class\{4d36e96b-e325-11ce-bfc1-08002be10318}]
    > "Class"="MyKeyboard"
    > "UpperFilters"=hex(7):6b,00,62,00,64,00,63,00,6c,00,61,00,
    > 73,00,73,00,00,00,00,\00
    >
    >
    > ---
    > NTFSD is sponsored by OSR
    >
    >
    > MONTHLY seminars on crash dump analysis, WDF, Windows internals and
    > software drivers!
    > Details at
    >
    > To unsubscribe, visit the List Server section of OSR Online at <
    > http://www.osronline.com/page.cfm?name=ListServer>;
    >
Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Upcoming OSR Seminars
Writing WDF Drivers 25 Feb 2019 OSR Seminar Space
Developing Minifilters 8 April 2019 OSR Seminar Space