Some questions

NTFSD
1

Hi all,
I have for you (very smart people) a few questions:

  1. When I’m writing disk filter driver (not file system filter driver)
    it can be WDM or not?
  2. For testing purpose I’m using Bo Branten’s Filedisk v. 2. I want
    to set my disk filter to be UpperFilter of Filedisk. How can I do this?
    I’ve found some Setup API function, but for this function I need GIUD!
    Where can I obtain GUID of Filedisk? I have only Filedisk.sys and a
    small .reg file.
  3. Are there some samples of steganographic FS?

Thanks for advices.

Ozon

******************************************
* David Mensik
* student of Palacky University
*
* e-mail: xxxxx@seznam.cz
* www: http://www.inf.upol.cz/~mensikd
* icq: 19658607
******************************************

2
  1. You can not write a WDM driver for a disk or file system device. In
    general anything below IFSMGR in 98 is architecturally very different from
    NT. To hook file system drivers use IFSMGR services
    (IFSMGR_InstallFileSystemApiHook), pl. refer to FileMon sample. To hook Disk
    drivers use IOS services, I think it falls under VSD (Vendor Specific
    Driver) and is well documented in 98 DDK. There is even a sample driver
    under <98DDK>\Src\Block\vsd.

I dont understand your other questions (2 & 3).

Raja

Hi all,
I have for you (very smart people) a few questions:

  1. When I’m writing disk filter driver (not file system filter driver)
    it can be WDM or not?
  2. For testing purpose I’m using Bo Branten’s Filedisk v. 2. I want
    to set my disk filter to be UpperFilter of Filedisk. How can I do this?
    I’ve found some Setup API function, but for this function I need GIUD!
    Where can I obtain GUID of Filedisk? I have only Filedisk.sys and a
    small .reg file.
  3. Are there some samples of steganographic FS?

Thanks for advices.

Ozon

******************************************
* David Mensik
* student of Palacky University
*
* e-mail: xxxxx@seznam.cz
* www: http://www.inf.upol.cz/~mensikd
* icq: 19658607
******************************************

You are currently subscribed to ntfsd as: xxxxx@hotmail.com
To unsubscribe send a blank email to $subst(‘Email.Unsub’)