Description: The program features to prevent file deletion, which consists of three parts, namely: FSD INLINE HOOK primary anti deleted, HOOK IoCreateFile intermediate anti deleted, HOOK IoCheckShareAccess senior defense deleted.
File list (Check if you may need any files):
FSDInlineHook\buildchk_wxp_x86.log
.............\buildchk_wxp_x86.wrn
.............\FsdInlineHook.c
.............\FsdInlineHook.h
.............\FsdInlineHookCode.c
.............\FsdInlineHookCode.h
.............\LDasm.c
.............\LDasm.h
.............\makefile
.............\objchk_wxp_x86\i386\fsdinlinehook.obj
.............\..............\....\fsdinlinehook.obj.oacr.root.x86chk.pft.xml
.............\..............\....\FsdInlineHook.pdb
.............\..............\....\FsdInlineHook.sys
.............\..............\....\fsdinlinehookcode.obj
.............\..............\....\fsdinlinehookcode.obj.oacr.root.x86chk.pft.xml
.............\..............\....\ldasm.obj
.............\..............\....\ldasm.obj.oacr.root.x86chk.pft.xml
.............\..............\....\vc90.pdb
.............\..............\....\_objects.mac
.............\sources
Pass_Is_Xt\buildchk_wxp_x86.log
..........\dbghelp.h
..........\inlineIoCheckShareAccess.c
..........\inlineIoCheckShareAccess.h
..........\makefile
..........\objchk_wxp_x86\i386\inlineiocheckshareaccess.obj
..........\..............\....\inlineiocheckshareaccess.obj.oacr.root.x86chk.pft.xml
..........\..............\....\inlineIoCheckShareAccess.pdb
..........\..............\....\inlineIoCheckShareAccess.sys
..........\..............\....\vc90.pdb
..........\..............\....\_objects.mac
..........\sources
.....TY_MJFK\buildchk_wxp_x86.log
............\buildchk_wxp_x86.wrn
............\dbghelp.h
............\inlineIoCreateFile.c
............\inlineIoCreateFile.h
............\makefile
............\objchk_wxp_x86\i386\inlineiocreatefile.obj
............\..............\....\inlineIoCreateFile.pdb
............\..............\....\inlineIoCreateFile.sys
............\..............\....\vc90.pdb
............\..............\....\_objects.mac
............\sources
testfile\test.txt
........\把这个文件夹复制到C盘根目录，并尝试删除test.txt。
FSDInlineHook\objchk_wxp_x86\i386
Pass_Is_Xt\objchk_wxp_x86\i386
.....TY_MJFK\objchk_wxp_x86\i386
FSDInlineHook\objchk_wxp_x86
Pass_Is_Xt\objchk_wxp_x86
.....TY_MJFK\objchk_wxp_x86
FSDInlineHook
Pass_Is_Xt
Pass_TY_MJFK
testfile
Download