Description: The IFileOperation COM HOOK code instance WIN7 system operating in the explorer.exe in file to call IFileOperation COM interface, therefore, universal method HOOK Win32 APIs such as DeleteFile will lose the role of the instance successfully HOOK to NewItem RenameItem, RenameItems MoveItem, MoveItems CopyItem Remarks CopyItems, DeleteItem, DeleteItems interface: google you can find com, hook code examples, but there are two major problems: 1 hook only once, and manipulating files will fail, anti-implantation, explorer.exe directly Ben collapse version did not fix these two problems if you need the full version, please visit: http://www.csto.com/case/show/id:51
To Search:
File list (Check if you may need any files):
ZyComHookSample\ZyComHook\cpu.c
...............\.........\cpu.h
...............\.........\CreationHook.cpp
...............\.........\CreationHook.h
...............\.........\disasm.c
...............\.........\disasm.h
...............\.........\disasm_x86.c
...............\.........\disasm_x86.h
...............\.........\disasm_x86_tables.h
...............\.........\dllmain.cpp
...............\.........\Factory.cpp
...............\.........\Factory.h
...............\.........\mhook.cpp
...............\.........\mhook.h
...............\.........\misc.c
...............\.........\misc.h
...............\.........\ReadMe.txt
...............\.........\stdafx.cpp
...............\.........\stdafx.h
...............\.........\targetver.h
...............\.........\VtableHooks.cpp
...............\.........\VtableHooks.h
...............\.........\ZyComHook.cpp
...............\.........\ZyComHook.vcxproj
...............\.........\ZyComHook.vcxproj.filters
...............\.........\ZyComHook.vcxproj.user
...............\ZyComHook.sln
...............\ZyComHook.suo
...............\ZyComHook
ZyComHookSample