Hooking to FIle API under Windows 2000

NTFSD
1

Hi All,

Is it possible to Hook to API under Windows 2000. So that my function will
be called whenever some API is called.

I want to know if there is something similar to
IFSMGR_InstallFileSystemApiHook() as we have it under windows98.

Thanks,
Kedar.

2

Yes, but with implications.

First, no documented ways of doing this.
Second, the code which installs such hooks cannot be unloaded.
Third, if more then 1 product uses this - then interop issues are nearly
inevitable.

What do you want to achieve?

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

----- Original Message -----
From: “Kedar”
Newsgroups: ntfsd
To: “Windows File Systems Devs Interest List”
Sent: Wednesday, March 31, 2004 4:53 PM
Subject: [ntfsd] Hooking to FIle API under Windows 2000

> Hi All,
>
> Is it possible to Hook to API under Windows 2000. So that my function will
> be called whenever some API is called.
>
> I want to know if there is something similar to
> IFSMGR_InstallFileSystemApiHook() as we have it under windows98.
>
>
> Thanks,
> Kedar.
>
>
>
> —
> Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com

3

Hi Maxim Shatskih,

Thanks for the information.

But as you said if under Windows 98 if more than one application installs
such hooks will there won’t be any problem.

Currently we are working on a file system filter driver which basically does
logging of the requests.

In Windows2000 we are going with file system filter driver, but under
Windows 98 we are hooking to API, I just wanted to know if there is any
possibility of the same under windows 2000 and 98, as we can not have filter
drivers under Windows98, I wanted to know if we can hook API under Windows
2000.

Regards,
Kedar.

“Kedar” wrote in message news:xxxxx@ntfsd…
> Hi All,
>
> Is it possible to Hook to API under Windows 2000. So that my function
will
> be called whenever some API is called.
>
> I want to know if there is something similar to
> IFSMGR_InstallFileSystemApiHook() as we have it under windows98.
>
>
> Thanks,
> Kedar.
>
>
>