|
-
April 9th, 2004, 12:22 PM
#1
Finding the files that are being accessed by an application
I wanna keep track of the files that are being accessed by an application in real time. For example, consider my program is running. I'm also working with Msword and it is accessing some doc files. I just want my application to know the doc files that r being accessed by my Msword software. How can i do it? can any one help me? Another thing my exam was just using MsWord. But i wanna keep track of all the softwares accessing all the files. Thanks for ur will to help me
-
April 9th, 2004, 12:42 PM
#2
go to www.sysinternals.com they have a free utility that does this.
TheCPUWizard is a registered trademark, all rights reserved. (If this post was helpful, please RATE it!)
2008, 2009,2010
In theory, there is no difference between theory and practice; in practice there is.
* Join the fight, refuse to respond to posts that contain code outside of [code] ... [/code] tags. See here for instructions 
* How NOT to post a question here
* Of course you read this carefully before you posted
* Need homework help? Read this first
-
April 9th, 2004, 12:50 PM
#3
Originally posted by TheCPUWizard
go to www.sysinternals.com they have a free utility that does this.
well since you mentioned it cpuwiz...
the way to do it is to create a filter hook driver and hook the system service table functions such as ZwCreateFile(...) ZwOpenFile(...) etc etc. You will need to order the DDK from microsoft, there are samples on how to hook the system service table that come with the DDK, recommend you buy gary nebbitts windows nt/2000 native api reference and use google
-
April 9th, 2004, 12:56 PM
#4
thanks for the reply
thanks a lot Mick. For the reply. I was suffering with it a long time. take care.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
Click Here to Expand Forum to Full Width
|