I wrote a driver which hooks ZwQueryDirectoryFile and hides a file, "o.txt", but when I access "o.txt" directly using its name (which of course I know), for instance, when I try to delete it in command Prompt using >del o.txt ,the system crashes and I see the blue screen.
What should I do? Should I hook another function in SSDT as well?
I use Visual Studio 2010 and I developed my driver for Windows XP.
P.S. There's only educational purpose behind what I am doing.
This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)