Ariad_V0_0_0_8
所属分类:USB编程
开发工具:Visual C++
文件大小:56KB
下载次数:5
上传日期:2010-09-07 16:57:08
上 传 者:
agentfactory
说明: 一个小过滤器,用来阻塞对autorun.inf或USB策略的房屋内
( Ariad (AutoRun.Inf Access Denied) started as a minifilter blocking access to \autorun.inf on USB sticks
This version also blocks access to several file types on removable media
USB Sticks are identified by their FILE_REMOVABLE_MEDIA device characteristics.
USB HDD will not be recognized as USB sticks, and as such, content is not blocked.)
文件列表:
Install (0, 2010-07-18)
Install\ariad-boot.inf (2613, 2010-07-18)
Install\ariad-manual.inf (2543, 2010-07-18)
Install\ariad.exe (61880, 2010-07-18)
Install\ariad.sys (15160, 2010-07-18)
Source (0, 2010-07-18)
Source\Common (0, 2010-07-18)
Source\Common\ariad.h (1149, 2009-11-04)
Source\Driver (0, 2010-07-18)
Source\Driver\ariad.c (15643, 2010-07-18)
Source\Driver\ariad.h (2372, 2010-07-16)
Source\Driver\ariad.rc (580, 2010-07-16)
Source\Driver\makefile (374, 2006-11-02)
Source\Driver\sources (202, 2009-01-25)
Source\User (0, 2010-07-18)
Source\User\ariad.c (15092, 2009-11-04)
Source\User\ariad.exe.manifest (550, 2009-11-03)
Source\User\ariad.ico (766, 2009-02-12)
Source\User\ariad.mak (957, 2009-11-04)
Source\User\ariad.rc (3747, 2010-07-18)
Source\User\resource.h (1177, 2009-11-04)
THIS IS EARLY BETA SOFTWARE OPERATING IN THE KERNEL,
SO ONLY USE THIS ON TEST MACHINES WITH FILES YOU CAN MISS.
Source code put in public domain by Didier Stevens, no Copyright
https://DidierStevens.com
Use at your own risk. It's beta software running inside the kernel
Ariad (AutoRun.Inf Access Denied) is a minifilter that started as a way to
block access to \autorun.inf on USB sticks, but now blocks several file types on
several media types.
USB Sticks are identified by their FILE_REMOVABLE_MEDIA device characteristics.
USB HDD will not be recognized as USB sticks but as harddisks
autorun.inf files not in the root directory of the USB stick are accesible
Ariad.sys is the minifilter and runs in the kernel
Ariad.exe is a GUI to configure the filter and runs in user space. It requires admin rights.
Before you install this driver, you'll have to decide if this driver must
start when your machine boots, or if you want to start/stop it when you want to.
To upgrade:
first stop the minifilter: sc stop ariad
then proceed with install
To install and start/stop manually:
use ariad-manual.inf
You'll have to start the driver manually (also after each boot):
net start ariad
To install and start at boot time:
use ariad-boot.inf
You'll be prompted to restart your machine. This is because ariad will
start a boot time. If you don't want to reboot, no problem. Cancel the reboot prompt
and start the driver manually: net start ariad
Next boot, ariad will be running automatically
I advice to use ariad-boot.inf only after you've worked with the
manual start option and are satisfied that your system is stable
To uninstall:
sc stop ariad
sc delete ariad
del \%windowsdir%\system32\drivers\ariad.inf
To stop the driver (for example to allow autorun.inf)
net stop ariad
Bugs:
近期下载者:
相关文件:
收藏者: