Installation of kbfiltr example

Hi All,

I read this in the kbfiltr example:

If you want to filter keyboard inputs from all the keyboards (ps2, usb)
plugged into the system then you can install this driver as a class filter
and make it sit below the kbdclass filter driver by adding the service
name of this filter driver before the kbdclass filter in the registry at
" HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\
{4D36E96B-E325-11CE-BFC1-08002BE10318}\UpperFilters"

If I look in the registry I found several entries named {4D36E96B-E325-11CE-BFC1-08002BE10318}

What should be done in the registry? It is absolutely not clear.
What is the result in the device tree?

Thnx

You will get more responses if you post to the NTDev list. That said,
there is only 1 key named “{4D36E96B-E325-11CE-BFC1-08002BE10318}” under
the HKLM\System\CurrentControlSet\Control\Class, this is the class key
and there can’t be more than 1 under the Class key …

Pete


Kernel Drivers
Windows File System and Device Driver Consulting
www.KernelDrivers.com http:</http:>
866.263.9295

------ Original Message ------
From: “xxxxx@x-publisher.com
To: “Windows File Systems Devs Interest List”
Sent: 1/12/2018 9:30:05 AM
Subject: [ntfsd] Installation of kbfiltr example

>Hi All,
>
>I read this in the kbfiltr example:
>
> If you want to filter keyboard inputs from all the keyboards (ps2,
>usb)
> plugged into the system then you can install this driver as a
>class filter
> and make it sit below the kbdclass filter driver by adding the
>service
> name of this filter driver before the kbdclass filter in the
>registry at
> " HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class<br>> {4D36E96B-E325-11CE-BFC1-08002BE10318}\UpperFilters"
>
>If I look in the registry I found several entries named
>{4D36E96B-E325-11CE-BFC1-08002BE10318}
>
>What should be done in the registry? It is absolutely not clear.
>What is the result in the device tree?
>
>Thnx
>
>—
>NTFSD is sponsored by OSR
>
>
>MONTHLY seminars on crash dump analysis, WDF, Windows internals and
>software drivers!
>Details at http:
>
>To unsubscribe, visit the List Server section of OSR Online at
>http:</http:></http:>

Hi,

has someone done this and can exactly show how the entry must look like.

Is this correct:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class{4d36e96b-e325-11ce-bfc1-08002be10318}]
“Class”=“MyKeyboard”
“UpperFilters”=hex(7):6b,00,62,00,64,00,63,00,6c,00,61,00,73,00,73,00,00,00,00,\00

https://github.com/Microsoft/Windows-driver-samples/tree/master/storage/filters/addfilter

The code that shows one how to add a fitler to a class or a device

Mark Roddy

On Fri, Jan 12, 2018 at 3:37 PM, xxxxx@x-publisher.com <
xxxxx@lists.osr.com> wrote:

Hi,

has someone done this and can exactly show how the entry must look like.

Is this correct:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\
Class{4d36e96b-e325-11ce-bfc1-08002be10318}]
“Class”=“MyKeyboard”
“UpperFilters”=hex(7):6b,00,62,00,64,00,63,00,6c,00,61,00,
73,00,73,00,00,00,00,\00


NTFSD is sponsored by OSR

MONTHLY seminars on crash dump analysis, WDF, Windows internals and
software drivers!
Details at http:
>
> To unsubscribe, visit the List Server section of OSR Online at <
> http://www.osronline.com/page.cfm?name=ListServer&gt;
></http:>