| 摘要 |
A real time blocking hook enables foolproof monitoring of various global functions such as file open. In this way, a scanning functionality may be implemented which prevents execution of the file before scanning is complete. The address of the open routines may be obtained using a DLL. Advantageously, an intertask send message is utilized to communicate between the DLL, the client and the monitoring function since the ability of other functions to bypass the intertask send message is substantially eliminated.
|
