Ananth wrote: > Thomas Hruska <[EMAIL PROTECTED]> wrote: >> s_irshadpk wrote: >> > I have to lock and hide file using API Hooking. please help me >> > regarding this. >> What you are wanting to do should be classified as illegal. Hooking OS >> API calls to hide files falls under rootkit and ADS territory. There's >> almost nothing good or useful about rootkits. Make sure you have a >> strong moral core BEFORE embarking on this adventure or you'll end up >> developing computer viruses instead of productive software. > > umm....not always, I will have to respectfully disagree Thomas. > I had a very legitimate use for locking and hiding files for my > professional work. I agree this is rarely needed, but there cannot be > a blanket filter calling all such needs as illegal. > > Ananth
I guess my perspective is different from yours. The only legitimate use I could see is if you wanted to enhance the already existing NT Security system and still exposed _all_ files to system administrators. Hiding files from a system admin. (e.g. the equivalent of 'root' on Linux) places any app. that does the hiding in the same category as a rootkit. However, hooking APIs is dangerous and very few people know how to do it right - the end result of which is usually blue screens or very odd system behavior...which people like me then have to muddle our way through and figure out that it isn't my product but another vendor's package causing problems because they hooked an API. Not to mention, global hooks of major APIs causes every app. to slow down and use more resources. Even the major antivirus and software firewall vendors haven't got hooking right (they're constantly fiddling with it). If THEY don't know how to do system-wide API hooking - and they have been doing it for at least a decade now - then pretty much no one knows how. I've only done localized per-app. hooking for personal use and even that makes me squeamish knowing that I probably didn't account for some special test case. Ananth: There was probably a more effective way of doing what you wanted to do without stepping into the realm of API hooking. -- Thomas Hruska CubicleSoft President Ph: 517-803-4197 *NEW* MyTaskFocus 1.1 Get on task. Stay on task. http://www.CubicleSoft.com/MyTaskFocus/
