hiding or locking files/folders/drives
-
hi all ! Could anyone give me some pointers as to how to go about locking and/or hiding files/folders or drives like u have in several freeware/shareware apps in the market? The functionality is basically this : when a file is protected it cannot be accessed..when an attempt is made it asks for a pre set password.unless correct password is typed it denies access. For hiding... when i a folder/drive/file is hidden the OS does not detect the presence of the file/folder or drive. How can i go about this.I was thinking of hooking windows' findfirstfile ( ) but somehow it didn't work out.I saw other codes also but they either needed DDK or didn't work for NT based systems. I need to have mine work for all windows systems...from 98 to 2003. Thanks to the contributors in advance ! Regards Kane:)
-
hi all ! Could anyone give me some pointers as to how to go about locking and/or hiding files/folders or drives like u have in several freeware/shareware apps in the market? The functionality is basically this : when a file is protected it cannot be accessed..when an attempt is made it asks for a pre set password.unless correct password is typed it denies access. For hiding... when i a folder/drive/file is hidden the OS does not detect the presence of the file/folder or drive. How can i go about this.I was thinking of hooking windows' findfirstfile ( ) but somehow it didn't work out.I saw other codes also but they either needed DDK or didn't work for NT based systems. I need to have mine work for all windows systems...from 98 to 2003. Thanks to the contributors in advance ! Regards Kane:)
There are two ways to accomplish this 1.Hooking IAT you can patch the import address tables to your own functions, good for educational use only :) 2.Hooking at kernel level you will have to write a kernel level device driver, which will monitor all file movement, you will need DDK and a LOT of heart ;) device drivers in 9x are .VXD files which are written differently than a .Sys(NT based device driver) so in order to support 9x system you will have to write a VXD file you will need 9x DDK for that and EVEN MORE HEART :D and starting with windows XP microsoft has added extra protection bit (also known as WP bit) to protect kernel level hooking (which suggest that they don't really like ppl hooking in to kernel) hope it helped :D C makes it easy to shoot yourself in the foot; C++ makes it harder, but when you do, it blows away your whole leg
-
There are two ways to accomplish this 1.Hooking IAT you can patch the import address tables to your own functions, good for educational use only :) 2.Hooking at kernel level you will have to write a kernel level device driver, which will monitor all file movement, you will need DDK and a LOT of heart ;) device drivers in 9x are .VXD files which are written differently than a .Sys(NT based device driver) so in order to support 9x system you will have to write a VXD file you will need 9x DDK for that and EVEN MORE HEART :D and starting with windows XP microsoft has added extra protection bit (also known as WP bit) to protect kernel level hooking (which suggest that they don't really like ppl hooking in to kernel) hope it helped :D C makes it easy to shoot yourself in the foot; C++ makes it harder, but when you do, it blows away your whole leg
hi ! yup...it does :) thanks. Well the app i am talking has nothing illegal about it so don't worry ;)Could you point me to a decent article about IAT or maybe a snippet of code??it would be of gr8 help :) i read up Ivo Ivanovs API hooking revealed but it didn't have enough information on IAT . thankx for the reply ! Kane:)