File Rename Hook..

c++ / delphi package - dll injection and api hooking
Post Reply
Jeff_Lawton
Posts: 7
Joined: Tue Jul 20, 2004 8:20 pm
Location: Sacramento, CA
Contact:

File Rename Hook..

Post by Jeff_Lawton »

Does anyone know what function I would need to hook to be able to monitor if someone is renaming a file on the system?

I need to be able to stop them from renaming the file if they don't have a certain level of access on the system. Needs to work from 9x upto XP.

Suggestions would be most helpful.

Thanks.

Jeff Lawton
madshi
Site Admin
Posts: 10753
Joined: Sun Mar 21, 2004 5:25 pm

Post by madshi »

In win9x I'd say "MoveFileA" and "MoveFileExA". In winNT you should probably go to the lowest level which is NtCreateFile/NtOpenFile + NtSetInformationFile.
Post Reply