Developer Forum

First of all sorry but I cannot include a real email address. Last time
I put my real email on a posting to this group (3 days ago) I promptly
received a virus.
I was hoping someone can help, I want to understand something about
anti virus programs. Many of them offer a facility that scans the files
for viruses when the file is read or written to disk. From my limited
understanding of device drivers I started to thing that they must be using
a filter driver to achieve this. I was wondering if someone explain what
needs to be done to write such a filter. I can't get the main book by
Rajeev Nagar so please if at all possible expand as much as possible.
tia

No. Probably no one will try to write you a book in a newsgroup.

> No. Probably no one will try to write you a book in a newsgroup.

Can you at least confirm my analysis in the posting i.e. that the only
way to have a scanner when files are read or written is with a filter
driver ? Anyway, you do not need to write a whole book, just outline
the work in 5 sentences.

Yes, you will need a file system filter driver. This is not a small
project, it is a windows device driver with a lot more entries, and
some challenging problems of potential recursion.


Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting