Click here to Skip to main content
13,146,315 members (45,235 online)
Rate this:
Please Sign up or sign in to vote.

I wrote a driver which hooks ZwQueryDirectoryFile and hides a file, "o.txt", but when I access "o.txt" directly using its name (which of course I know), for instance, when I try to delete it in command Prompt using >del o.txt ,the system crashes and I see the blue screen.

What should I do? Should I hook another function in SSDT as well?

I use Visual Studio 2010 and I developed my driver for Windows XP.
P.S. There's only educational purpose behind what I am doing.

Thank you.
Posted 5-Nov-12 19:36pm
Richard MacCutchan 6-Nov-12 5:24am
Something is happening in your driver to cause the BSOD. Try doing some crash analysis to find out why.

1 solution

Rate this: bad
Please Sign up or sign in to vote.

Solution 1

You should start learning how to debug your driver and do driver crashes analysis. A good place to start with:[^]. You will find many articles, technics and tools there on the Internet regarding this topic.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

  Print Answers RSS
Top Experts
Last 24hrsThis month

Advertise | Privacy |
Web02 | 2.8.170915.1 | Last Updated 6 Nov 2012
Copyright © CodeProject, 1999-2017
All Rights Reserved. Terms of Service
Layout: fixed | fluid

CodeProject, 503-250 Ferrand Drive Toronto Ontario, M3C 3G8 Canada +1 416-849-8900 x 100