Anyone tell me how to do this?

NTDEV
1

Hi,All.
I want to hook course of explorer copy a file, that is if the file which I
pointed will be copy, I need hook those IRPs and backup the file with different
name.

Anyone tell me how to do this?

2

At the kernel level ‘copy file’ is, at best, a sequence of read and
write IRP operations. You can of course hook explorer itself, or user
mode dlls used by explorer (see for example Microsoft’s detours package)
to get at the win32 Copy api.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@gmail.com
Sent: Monday, April 16, 2007 8:40 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] Anyone tell me how to do this?

Hi,All.
I want to hook course of explorer copy a file, that is if the file which
I
pointed will be copy, I need hook those IRPs and backup the file with
different
name.

Anyone tell me how to do this?

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer