WDM-MBRFilter-DiskFilter

所属分类:磁盘编程
开发工具:C
文件大小:25KB
下载次数:0
上传日期:2021-05-16 15:11:22
上 传 者sh-1993
说明:  WDM MBR筛选器磁盘筛选器,,
(WDM-MBRFilter-DiskFilter,,)

文件列表:
AccessMBR (0, 2016-10-21)
AccessMBR\AccessMBR.cpp (3272, 2016-10-21)
AccessMBR\AccessMBR.vcxproj (4606, 2016-10-21)
AccessMBR\AccessMBR.vcxproj.filters (1453, 2016-10-21)
AccessMBR\SCSI_IO.cpp (3788, 2016-10-21)
AccessMBR\SCSI_IO.h (827, 2016-10-21)
AccessMBR\stdafx.cpp (296, 2016-10-21)
AccessMBR\stdafx.h (320, 2016-10-21)
AccessMBR\targetver.h (314, 2016-10-21)
LICENSE (18046, 2016-10-21)
MBRFilter Driver.sln (8046, 2016-10-21)
MBRFilter (0, 2016-10-21)
MBRFilter\Guid.h (148, 2016-10-21)
MBRFilter\MBRFilter.c (21680, 2016-10-21)
MBRFilter\MBRFilter.inf (1235, 2016-10-21)
MBRFilter\MBRFilter.vcxproj (7770, 2016-10-21)
MBRFilter\MBRFilter.vcxproj.filters (1378, 2016-10-21)
MBRFilter\MBRFilter.vcxproj.user (325, 2016-10-21)

MBRFilter This is a simple disk filter based on Microsoft's diskperf and classpnp example drivers. The goal of this filter is to prevent writing to Sector 0 on disks. This is useful to prevent malware that overwrites the MBR like Petya. This driver will prevent writes to sector 0 on all drives. This can cause an issue when initializing a new disk in the Disk Management application. Hit 'Cancel' when asks you to write to the MBR/GPT and it should work as expected. Alternatively, if OK was clicked, then quitting and restarting the application will allow partitoning/formatting. To install: right click the inf file, select 'install' and reboot when prompted. To access sector 0 on drive 0: boot into Safe Mode. To compile: make sure to set: MBRFilter properties -> Configuration properties -> Driver Signing -> General Sign mode: Test Sign Test certificate: generate or select one from your store. To remove MBRFilter, follow these steps: - Remove the line MBRFilter from the UpperFilters registry key in (only remove MBRFilter, there might be other disk drivers here): HKLM\System\CurrentControlSet\Control\Class\{4d36e967-e325-11ce-bfc1-08002be10318} - Reboot AccessMBR Simple program to read sector 0 on Physical drive 0 and write that sector back. Used as a testing program for MBRFilter. This overwrites your MBR, it will restore it once it's done. Nevertheless: USE WITH CAUTION. MBRFilter and AccessMbr Written by Yves Younan, Cisco Talos SCSI passthrough part of AccessMBR written by Andrea Alleivi, Cisco Talos Copyright (C) 2016 Cisco Systems Inc Thanks to Andrea Alleivi for suggested fixes. Thanks to Aaron Adams and Ilja Van Sprundel for reviewing the code. No warranty: use at your own risk.

近期下载者

相关文件


收藏者