Protect process fsfilter driver. Windows x64
Makes use a fsfilter driver to apply irp on your process and deny access.
windows 7, 8.1, 10 x64
use winddk 7.1.0 and type 'build'
compatible with WDK 8.1/10
#example
if (wcsstr(nameInfo->Name.Buffer, L"your_file.exe") != NULL)
{
Data->IoStatus.Status = STATUS_NO_SUCH_FILE;
Data->IoStatus.Information = 0;
return FLT_PREOP_COMPLETE;
}
Dr. R