Results 1 to 3 of 3

Thread: custom message on deletion of file...

  1. #1
    shakuni
    Guest

    custom message on deletion of file...

    While deleting some files on windows XP, I get this message
    "Deleting this File Will Make some Programs not Work"
    I want to know whether I can produce a particular message, like above, when a file gets deleted.

    (May be I need to monitor certain files using hook, and when the hook notifies me of their deletion, I show a messagebox like above. But I want to know how "windows" do it).
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Administrator dELTA's Avatar
    Join Date
    Oct 2000
    Location
    Ring -1
    Posts
    4,206
    Blog Entries
    5
    I think Windows just says things like that when deleting files of certain types (DLL, OCX, ...?), and/or located at certain locations (c:\Windows, c:\Program Files, ...?).
    "Give a man a quote from the FAQ, and he'll ignore it. Print the FAQ, shove it up his ass, kick him in the balls, DDoS his ass and kick/ban him, and the point usually gets through eventually."

  3. #3
    Registered User
    Join Date
    Aug 2005
    Location
    Greece
    Posts
    157
    He means Windows File Protection (WFP). shakuni if you read http://ntcore.com/Files/wfp.htm from Daniel Pistelli you can understand how it works. It use FindFirstChangeNotification ( http://msdn.microsoft.com/en-us/library/ms889670.aspx ) in it's native form, WFP also use C:\WINDOWS\system32\dllcache\ folder for storing the files under it's protection, so if you delete the file and Windows can find this inside the dllcache folder it restore it else it inform you to insert Windows installation CD-ROM to restore it from there (you can read a bit more at: http://support.microsoft.com/kb/222193 ). You can make a service that do the same for your files.
    Last edited by blurcode; May 15th, 2008 at 21:26.
    A picture worth 1K words (or .5K DWORDS).

Similar Threads

  1. Editing a PNG file with custom header information?
    By swifty in forum The Newbie Forum
    Replies: 8
    Last Post: March 3rd, 2013, 10:48
  2. custom gpa spy
    By deroko in forum Blogs Forum
    Replies: 3
    Last Post: September 22nd, 2008, 07:58
  3. Circumventing custom SEH
    By REBlog in forum Blogs Forum
    Replies: 0
    Last Post: October 19th, 2007, 20:27
  4. Example for nice custom obfuscation
    By OHPen in forum Malware Analysis and Unpacking Forum
    Replies: 7
    Last Post: July 29th, 2007, 12:37
  5. Example of custom function for MFC42
    By MrSmith in forum OllyDbg Support Forums
    Replies: 2
    Last Post: January 20th, 2005, 02:14

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •