Printable View
I'm interested in checking and possibly stopping creation of files. If you look at http://www.sophos.com/virusinfo/anal...ojransoma.html -> advanced you see a list of files, i want to make a program/service that stops those files from being created. How?
Why don't you buy a virus checker instead?
checking for files is easy, just read a basic tutorial on file I/O
deleting files can be easy, depending on how "quick and dirty" you want to be about doing it
stopping files from being created is hard - you need a system-wide hook for that.
in this case, getting a good anti-virus is your best bet though.
system-wide hooks sounds interesting, will look into that. thanks alot for the help.
i am well aware that i can buy an finished off-the-shelf anti-virus software but what's the challenge in that?
I'm assuming you're working with windows, in which case you might be able to use ReadDirectoryChangesW although it's probably not the best way.
somehow I knew you'd try writing your own... well, good luck... you'll need thousands of dollars in research money to not only develop your product but keep it updated ;)Quote:
Originally Posted by dathui
JaWiB: interesting, but i've looked into hooks and if i can get it working it seems to be a better way. If you know otherwise don't hesitate to say :)
major_small: i don't want to write an entire suit of anti-virus apps, i leave that to the companies. I just want to learn how to stop any program from being able to create certain files.
but why let that program exist in the first place?Quote:
Originally Posted by dathui
i don't plan to let it but i want to know how to stop it from working if it does get created, plus i think it'd be interesting to learn how to do it.