Click here to Skip to main content
15,889,436 members
Home / Discussions / C / C++ / MFC
   

C / C++ / MFC

 
GeneralRe: ReadDirectoryChangesW vs FindFirstFile (on file server hosting mac file system) Pin
James R. Twine30-Jan-08 7:08
James R. Twine30-Jan-08 7:08 
GeneralRe: ReadDirectoryChangesW vs FindFirstFile (on file server hosting mac file system) Pin
Peter Weyzen30-Jan-08 7:56
Peter Weyzen30-Jan-08 7:56 
QuestionWhich process opened a file? Pin
daavena29-Jan-08 10:54
daavena29-Jan-08 10:54 
AnswerRe: Which process opened a file? Pin
Randor 29-Jan-08 11:55
professional Randor 29-Jan-08 11:55 
AnswerRe: Which process opened a file? Pin
Stephen Hewitt29-Jan-08 12:40
Stephen Hewitt29-Jan-08 12:40 
AnswerRe: Which process opened a file? Pin
Hamid_RT29-Jan-08 18:17
Hamid_RT29-Jan-08 18:17 
GeneralConcerning drivers... Pin
Eikthrynir29-Jan-08 10:40
Eikthrynir29-Jan-08 10:40 
GeneralRe: Concerning drivers... Pin
Randor 29-Jan-08 11:39
professional Randor 29-Jan-08 11:39 
Eikthrynir wrote:
1. I want to create a keyboard filter driver. Is there any method that can ensure no other filter driver (keylogger) will attach to the keyboard driver (between the keyboard driver and my filter driver) ?


The only thing I can think of is modifying the EAT of ntoskrnl and hooking IoCreateDevice. You would need to block devices of type FILE_DEVICE_KEYBOARD from being created. Perhaps the same could be accomplished later by hooking IoAttachDeviceToDeviceStack.


Eikthrynir wrote:
2. I want to create another filter driver that will be installed nearest to a specified application (so that no other filter driver can get between this filter driver and the application). If this is possible, could anyone help me with a few links to documentation involving this kind of issues?


Your ring-3 application will need to communicate with the keyboard filter driver through an IOCTL dispatch interface. You could obfuscate or encrypt communication with the driver, and/or from within the driver you should verify the sender by checksum of its PE image or whatever clever scheme you can think of.


Eikthrynir wrote:
3. Is there any API which I can use to check whether a driver is digitally signed?


Perhaps you should read some Microsoft documentation about kernel driver signing.
http://www.microsoft.com/whdc/winlogo/drvsign/kmcs_walkthrough.mspx[^]

Best Wishes,
-David Delaune
GeneralRe: Concerning drivers... Pin
Eikthrynir29-Jan-08 17:57
Eikthrynir29-Jan-08 17:57 
GeneralLNK:2019 Link Error Using C++ to compile C program Pin
IceWater4229-Jan-08 10:18
IceWater4229-Jan-08 10:18 
GeneralRe: LNK:2019 Link Error Using C++ to compile C program Pin
Mark Salsbery29-Jan-08 10:35
Mark Salsbery29-Jan-08 10:35 
GeneralRe: LNK:2019 Link Error Using C++ to compile C program Pin
IceWater4229-Jan-08 12:29
IceWater4229-Jan-08 12:29 
Generala simplr app. for mobile ... Pin
mostafa_h29-Jan-08 10:10
mostafa_h29-Jan-08 10:10 
QuestionLinking to VB/DLL in a C++ Application Pin
GaryLee29-Jan-08 9:55
GaryLee29-Jan-08 9:55 
AnswerRe: Linking to VB/DLL in a C++ Application Pin
akiraps10-Mar-08 12:02
akiraps10-Mar-08 12:02 
GeneralTIme checking in C++ for visual 6 Pin
nahitan29-Jan-08 7:07
nahitan29-Jan-08 7:07 
GeneralRe: TIme checking in C++ for visual 6 Pin
Maxwell Chen29-Jan-08 7:16
Maxwell Chen29-Jan-08 7:16 
GeneralRe: TIme checking in C++ for visual 6 Pin
Mark Salsbery29-Jan-08 7:17
Mark Salsbery29-Jan-08 7:17 
GeneralRe: TIme checking in C++ for visual 6 Pin
nahitan29-Jan-08 8:46
nahitan29-Jan-08 8:46 
GeneralRe: TIme checking in C++ for visual 6 Pin
Mark Salsbery29-Jan-08 9:03
Mark Salsbery29-Jan-08 9:03 
GeneralRe: TIme checking in C++ for visual 6 Pin
led mike29-Jan-08 9:44
led mike29-Jan-08 9:44 
GeneralRe: TIme checking in C++ for visual 6 Pin
Maxwell Chen29-Jan-08 16:15
Maxwell Chen29-Jan-08 16:15 
GeneralRe: TIme checking in C++ for visual 6 Pin
Mark Salsbery29-Jan-08 17:53
Mark Salsbery29-Jan-08 17:53 
GeneralAçık iş teklifidir! [modified] Pin
Mr. Surprise29-Jan-08 6:43
Mr. Surprise29-Jan-08 6:43 
GeneralRe: Açık iş teklifidir! Pin
Maxwell Chen29-Jan-08 6:54
Maxwell Chen29-Jan-08 6:54 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.