NtUserOpenClipBoard Intercept

NTFSD
1

Hi all,

I want to write minifilter driver, is there any possibility to intercept “NtUserOpenClipBoard” then let me know.

I didnt get any help or source related to this information.

Thanks

2

I think that clipboard data should only placed in memory not in some file and hence logically you shouldn’t be able to intercept that in minifilter. One more point is that clipboard data does not persist after system reboot which adds +ives to the point made.

Are you developing some security solution, what is the objective ?

Thanks
Aditya

3

Aditya,

I want to capture change event on Clipboard at kernel level , and what data changed on clipboard.

Thanks

4

The Win32 API has support for monitoring clipboard changes. Google for
SetClipboardViewer.

//Daniel

wrote in message news:xxxxx@ntfsd…
> Aditya,
>
> I want to capture change event on Clipboard at kernel level , and what
> data changed on clipboard.
>
>
> Thanks
>

5

In user mode you could intercept GetClipboardData and SetClipboardData
functions (user32.dll)

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@yahoo.com
Sent: 16 June 2009 11:09
To: Windows File Systems Devs Interest List
Subject: [ntfsd] NtUserOpenClipBoard Intercept

*** WARNING ***

This message has originated outside your organisation,
either from an external partner or the Global Internet.
Keep this in mind if you answer this message.

Hi all,

I want to write minifilter driver, is there any possibility to intercept
“NtUserOpenClipBoard” then let me know.

I didnt get any help or source related to this information.

Thanks

NTFSD is sponsored by OSR

For our schedule of debugging and file system seminars (including our
new fs mini-filter seminar) visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

********************************************************************
This email and any attachments are confidential to the intended
recipient and may also be privileged. If you are not the intended
recipient please delete it from your system and notify the sender.
You should not copy it or use it for any purpose nor disclose or
distribute its contents to any other person.
********************************************************************