I’m studying File System Filter Driver and files can be protected after
FilemonHookRoutine(), one function in the sample driver FileMon downloaded
from http://www.sysinternals.com/ntw2k/source/filemon.shtml, returns
STATUS_ACCESS_VIOLATION as it matches the file patterns.
Some interesting software, like Alfa FileProtect, can make the files
invisible in the explorer. Can any good mem have the experience in such
problem. Please instruct me the process. Sould I make some modification in
IRP_MJ_DIRECTORY_CONTROL case and FilemonHookDone?
Thanks a lot!
B.R.,
Wing
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com