RE: Hide Files and foilder,,,,, rename and delete

NTFSD
1

MessageIf I use IRP_MJ_DIRECTORY_CONTROL for hiding files and folders, does it affect the MFT? I do not think, so the files and folders can be shown when the devices are mounted again. Am I right?

Regards,
Jay
----- Original Message -----
From: Pete Scott
To: File Systems Developers
Sent: Friday, October 05, 2001 12:43 AM
Subject: [ntfsd] RE: Hide Files and foilder, rename and delete

Directory information is obtained through the IRP_MJ_DIRECTORY_CONTROL/IRP_MN_QUERY_DIRECTORY entry point. If you are an FSD, then just don’t add the entries to the buffer returned. If you are a filter, grab the directory information buffer in a completion routine and mess it up there.

For deletion and rename processing, look at the IRP_MJ_SET_INFORMATION with an information class of FileDispositionInformation and FileRenameInformation respectively.

Pete
Peter Scott
xxxxx@KernelDrivers.com
http://www.KernelDrivers.com

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com]On Behalf Of Moises Herrera Vazquez
Sent: Thursday, October 04, 2001 10:14 AM
To: File Systems Developers
Subject: [ntfsd] Hide Files and foilder, rename and delete

Hello,

I want to learn how can I hide a file or folder to OS, for example I need that command dir not list my files and folder, but not using the hidden atribute… I want hide of all…

Can I intercep some IRP or something that manage FindFirst and FindNext?

The other question if how can I denied delete and permit rename and viceversa, under NTFS? is posible?

Thanks guys

Moises

You are currently subscribed to ntfsd as: xxxxx@home.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

You are currently subscribed to ntfsd as: xxxxx@neat.co.kr
To unsubscribe send a blank email to xxxxx@lists.osr.com
???y˫???+.n?+???~?Z?˛??^r*D???kN???r??zǧu??jy???^j??? 0?j?b??(??(

2

No, it doesn’t affect the MFT.

“J. Kang” wrote:

Part 1.1 Type: Plain Text (text/plain)
Encoding: base64

–
Kind regards, Dejan M. www.alfasp.com
E-mail: xxxxx@alfasp.com ICQ#: 56570367
Alfa File Monitor - File monitoring library for Win32 developers.
Alfa File Protector - File protection and hiding library for Win32
developers.
Alfa Registry Monitor - Registry monitoring library for Win32
developers.
Alfa Registry Protector - Registry protection library for Win32
developers.

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

3

If it does not affect MFT, so I think we can make files or folders hidden or unaccessible using FsRtlNofifyFullChangeDirectory. That means the file information or directory information is not valid anymore. In that case, how I can make the file accessible. I’ve tried with ZwQueryDirectoryFile() but there’s no more information about the file which I made unaccessible.

Many Thanks,
Jay

----- Original Message -----
From: “Dejan Maksimovic”
To: “File Systems Developers”
Sent: Saturday, January 05, 2002 9:07 PM
Subject: [ntfsd] RE: Hide Files and foilder, rename and delete

>
> No, it doesn’t affect the MFT.
>
> “J. Kang” wrote:
>
> > Part 1.1 Type: Plain Text (text/plain)
> > Encoding: base64
>
> –
> Kind regards, Dejan M. www.alfasp.com
> E-mail: xxxxx@alfasp.com ICQ#: 56570367
> Alfa File Monitor - File monitoring library for Win32 developers.
> Alfa File Protector - File protection and hiding library for Win32
> developers.
> Alfa Registry Monitor - Registry monitoring library for Win32
> developers.
> Alfa Registry Protector - Registry protection library for Win32
> developers.
>
>
>
>
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@neat.co.kr
> To unsubscribe send a blank email to xxxxx@lists.osr.com
b???.???????&?v?'??j?.n?Qyȩf??]?:.?˛???m??֛???zf???%y?ޞ??v˛??^r*Lzfެ?…???l??ܢ