How can I catch winword.exe writing file.

NTFSD
1

Hi All,
I want to realize on-fly encrypt/decrypt operation on file system. It is based on SFilter.
The operation is carried on IRP_MJ_READ/IRP_MJ_WRITE. It works for most of the files except for MS Office, such as winword. For example, I encrypt a word document, winword.exe can read it as I want. But if i save it again, the document will be saved as plaintext. Any one can give me some advice?

Thank you
Fan

2

I guess this is about 158-th post about this,
search some archives, you find lots of posts.

L.