透明加密minifilter

基于minifilter过滤驱动技术的透明加密源码 【注意下载完进行评论时，要选择评论框上面的星级，这样减掉的分不仅能原数返回，而且还能多赠1分】

/*++

Copyright （c） 2007 Lenovo

Module Name:

    close.c

Abstract:

    This handles the IRP_MJ_CLOSE pre/post operations.

Environment:

    Kernel mode

--*/

#include 
#include 
#include “spi_filecrypto.h“
#include “filecrypto.h“
#include “list.h“



//---------------------------------------------------------------------------
//  Assign text sections for each routine.
//---------------------------------------------------------------------------

#ifdef ALLOC_PRAGMA
#endif

NTSTATUS 
SpiFileXferFileRemove（
				IN OUT PFLT_CALLBACK_DATA Data
				IN OUT PVOID InternalData
				IN PVOID InputParameter
				IN OUT PVOID OutputParameter
		）
/*++

Routine Description:

    This routine removes a file context to the list maintained by the the File Cryptography.

Arguments:

    Data - Contains information about the given operation.

Return Value:

    Identifies how processing should continue for this operation

--*/
{
    NTSTATUS status = STATUS_SUCCESS;
    PFLT_IO_PARAMETER_BLOCK iopb = Data->Iopb;
    PSPI_FILE_XFER_DATA XferData;
    PVOID FileContext;
    BOOLEAN result = FALSE;
    PSPI_FILE_XFER_LIST_ENTRY fileContextList;

    //
    // Initialization
    //
    FileContext = iopb->TargetFileobject->FsContext;
    XferData = （PSPI_FILE_XFER_DATA） InternalData;

    // 
    // Remove File Context from list
    //
    fileContextList = GetFileContext（ 
                       &XferData->FileContextList 
                       &XferData->FileContextLock 
                       FileContext ）;

    if（fileContextList） {
        //DbgPrint（“SpiFileXferFileRemove:\tFileContext:%08X Count:%u\n“ FileContext fileContextList->FileContext.Count ）;

        result = RemoveFileContext（ 
                       &XferData->LookAside
                       &XferData->FileContextList 
                       &XferData->FileContextLock 
                       FileContext ）;
    }

    return status;
}

 属性            大小     日期    时间   名称
----------- ---------  ---------- -----  ----

    ..A.SH.        85  2009-12-17 20:28  透明加密之minifilter\desktop.ini

    ..A.SH.     15086  2009-12-17 20:28  透明加密之minifilter\ShedkoFolderico3_0627.ico

     文件      20690  2007-11-30 12:50  透明加密之minifilter\user\dblib.c

     文件       1303  2007-11-09 16:12  透明加密之minifilter\user\dblib.h

     文件       1233  2007-08-06 11:35  透明加密之minifilter\user\kringusr.h

     文件        374  2006-11-02 16:37  透明加密之minifilter\user\makefile

     文件      18421  2007-11-13 13:26  透明加密之minifilter\user\mspyLog.h

     文件      73009  2007-11-30 18:15  透明加密之minifilter\user\mspyUser.c

     文件        332  2006-11-02 16:37  透明加密之minifilter\user\mspyUser.rc

     文件       7458  2006-03-03 23:23  透明加密之minifilter\user\Psapi.Lib

     文件       1594  2007-11-28 13:31  透明加密之minifilter\user\secplug.h

     文件        570  2007-11-28 14:03  透明加密之minifilter\user\sources

     文件       5446  2008-03-25 16:31  透明加密之minifilter\opmonitor\buildchk_wxp_x86.log

     文件       2041  2007-10-18 11:06  透明加密之minifilter\opmonitor\cleanup.c

     文件       2436  2007-10-16 17:42  透明加密之minifilter\opmonitor\close.c

     文件       3294  2007-11-20 15:39  透明加密之minifilter\opmonitor\create.c

     文件       2922  2007-10-02 18:22  透明加密之minifilter\opmonitor\interface.c

     文件       7826  2007-11-20 15:39  透明加密之minifilter\opmonitor\list.c

     文件       2219  2007-10-15 12:47  透明加密之minifilter\opmonitor\list.h

     文件       7583  2008-01-02 11:57  透明加密之minifilter\opmonitor\loglist.c

     文件       1091  2007-08-28 11:04  透明加密之minifilter\opmonitor\loglist.h

     文件        356  2002-08-29 15:16  透明加密之minifilter\opmonitor\makefile

     文件        153  2007-08-24 16:25  透明加密之minifilter\opmonitor\opmonitor.def

     文件       2008  2007-10-02 18:25  透明加密之minifilter\opmonitor\opmonitor.h

     文件        376  2007-08-24 16:26  透明加密之minifilter\opmonitor\opmonitor.rc

     文件       2192  2007-09-06 11:06  透明加密之minifilter\opmonitor\query.c

     文件      25495  2007-09-28 10:49  透明加密之minifilter\opmonitor\read.c

     文件       2969  2007-10-16 17:48  透明加密之minifilter\opmonitor\rename.c

     文件        524  2007-10-02 18:24  透明加密之minifilter\opmonitor\sources

     文件       2115  2008-04-02 17:04  透明加密之minifilter\opmonitor\start.c

............此处省略84个文件信息