Hi all,
I have for you (very smart people) a few questions:
- When I’m writing disk filter driver (not file system filter driver)
it can be WDM or not?
- For testing purpose I’m using Bo Branten’s Filedisk v. 2. I want
to set my disk filter to be UpperFilter of Filedisk. How can I do this?
I’ve found some Setup API function, but for this function I need GIUD!
Where can I obtain GUID of Filedisk? I have only Filedisk.sys and a
small .reg file.
- Are there some samples of steganographic FS?
Thanks for advices.
Ozon
******************************************
* David Mensik
* student of Palacky University
*
* e-mail: xxxxx@seznam.cz
* www: http://www.inf.upol.cz/~mensikd
* icq: 19658607
******************************************
- You can not write a WDM driver for a disk or file system device. In
general anything below IFSMGR in 98 is architecturally very different from
NT. To hook file system drivers use IFSMGR services
(IFSMGR_InstallFileSystemApiHook), pl. refer to FileMon sample. To hook Disk
drivers use IOS services, I think it falls under VSD (Vendor Specific
Driver) and is well documented in 98 DDK. There is even a sample driver
under <98DDK>\Src\Block\vsd.
I dont understand your other questions (2 & 3).
Raja
Hi all,
I have for you (very smart people) a few questions:
- When I’m writing disk filter driver (not file system filter driver)
it can be WDM or not?
- For testing purpose I’m using Bo Branten’s Filedisk v. 2. I want
to set my disk filter to be UpperFilter of Filedisk. How can I do this?
I’ve found some Setup API function, but for this function I need GIUD!
Where can I obtain GUID of Filedisk? I have only Filedisk.sys and a
small .reg file.
- Are there some samples of steganographic FS?
Thanks for advices.
Ozon
******************************************
* David Mensik
* student of Palacky University
*
* e-mail: xxxxx@seznam.cz
* www: http://www.inf.upol.cz/~mensikd
* icq: 19658607
******************************************
You are currently subscribed to ntfsd as: xxxxx@hotmail.com
To unsubscribe send a blank email to $subst(‘Email.Unsub’)