I want to hide hard disks on Explorer

NTFSD
1

Hello.

I’m not good at English. Excuse me please.

I want to hide hard disks.

First of all, I hooked “NtQueryInformationProcess” Api.

“NtQueryInformationProcess” Api is a “GetLogicalDrives” Api when the ProcessInformationClass argument is 0x17.

And i deleted the data in “ProcessInformation” Argument.

It was so easy. and it correctly works on Windows 2000 system.

so the Windows Explorer did not show My Hard Disks.

But it did not work on WindowsXP Explorer.

Even other applications did not show My hard disks on windows XP system,

But the Explorer could show me them.

Additionally I hooked “NtOpenSymbolicLinkObject”, “NtQueryVolumeInformationFile”, “NtOpenFile” apis.

But It did not work on Windows XP Explorer.

Please tell me why it did not work on Window XP Explorer.

thank you.

“¿ì¸® ÀÎÅͳÝ, Daum” http://www.daum.net
¡ºÆò»ý¾²´Â ¹«·á ÇѸÞÀϳݡ»





2

Hi, there is nothing wrong with system call hooking, but only if there is no
other solution. In your case it is so easy, click on the Start button, click
Run, type: gpedit.msc. Now browse to Administrative Templates, Windows
Components and then Windows Explorer. Now select ‘prevent access to drives
from My Computer’.

/Daniel

“Darpangs” wrote in message news:xxxxx@ntfsd…
>Hello.
>
>I want to hide hard disks.
>
>First of all, I hooked “NtQueryInformationProcess” Api.