Click here to Skip to main content
Rate this: bad
Please Sign up or sign in to vote.
See more: C++ Visual-Studio Driver API , +
I wrote a driver which hooks ZwQueryDirectoryFile and hides a file, "o.txt", but when I access "o.txt" directly using its name (which of course I know), for instance, when I try to delete it in command Prompt using >del o.txt ,the system crashes and I see the blue screen.
What should I do? Should I hook another function in SSDT as well?
I use Visual Studio 2010 and I developed my driver for Windows XP.
P.S. There's only educational purpose behind what I am doing.
Thank you.
Posted 5-Nov-12 20:36pm
Richard MacCutchan at 6-Nov-12 5:24am
Something is happening in your driver to cause the BSOD. Try doing some crash analysis to find out why.

1 solution

Rate this: bad
Please Sign up or sign in to vote.

Solution 1

You should start learning how to debug your driver and do driver crashes analysis. A good place to start with:[^]. You will find many articles, technics and tools there on the Internet regarding this topic.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

  Print Answers RSS
0 Maciej Los 495
1 Sergey Alexandrovich Kryukov 429
2 OriginalGriff 360
3 CHill60 280
4 Sascha Lefévre 269
0 Sergey Alexandrovich Kryukov 10,017
1 OriginalGriff 9,495
2 Peter Leow 5,241
3 Kornfeld Eliyahu Peter 3,373
4 Maciej Los 3,076

Advertise | Privacy | Mobile
Web01 | 2.8.150327.1 | Last Updated 6 Nov 2012
Copyright © CodeProject, 1999-2015
All Rights Reserved. Terms of Service
Layout: fixed | fluid

CodeProject, 503-250 Ferrand Drive Toronto Ontario, M3C 3G8 Canada +1 416-849-8900 x 100