Driver hooking ZwQueryDirectoryFile causes Blue Screen

Question

0.00/5 (No votes)

See more:

, +

Hi,

I wrote a driver which hooks ZwQueryDirectoryFile and hides a file, "o.txt", but when I access "o.txt" directly using its name (which of course I know), for instance, when I try to delete it in command Prompt using >del o.txt ,the system crashes and I see the blue screen.

What should I do? Should I hook another function in SSDT as well?

I use Visual Studio 2010 and I developed my driver for Windows XP.
P.S. There's only educational purpose behind what I am doing.

Thank you.

Posted 5-Nov-12 19:36pm

lilyNaz

Updated 5-Nov-12 21:19pm

Tadit Dash (ତଡିତ୍ କୁମାର ଦାଶ)

v2

Add a Solution

Comments

Richard MacCutchan 6-Nov-12 5:24am

Something is happening in your driver to cause the BSOD. Try doing some crash analysis to find out why.

1 solution

Add a Solution

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Barakat S. · Answer 1 · 2012-11-05T23:31:00

Solution 1

You should start learning how to debug your driver and do driver crashes analysis. A good place to start with: http://www.dedoimedo.com/computers/windows-bsod.html[^]. You will find many articles, technics and tools there on the Internet regarding this topic.

Posted 5-Nov-12 23:31pm

Barakat S.

Driver hooking ZwQueryDirectoryFile causes Blue Screen

1 solution

Solution 1

Add your solution here

Preview 0

Driver hooking ZwQueryDirectoryFile causes Blue Screen

1 solution

Solution 1

Add your solution here

Preview 0

Existing Members

...or Join us