Skip to content

Latest commit

 

History

History
20 lines (15 loc) · 709 Bytes

File metadata and controls

20 lines (15 loc) · 709 Bytes

Explorer-Delete-Protection

Protect files under a specific folder from deleting or moving by explorer.exe.

alt text

Requierments:

Microsoft Detours Library - https://github.com/microsoft/Detours

Compile:

  1. Unzip source code, open command line and enter to source directory
  2. SET DETOURS_TARGET_PROCESSOR=X64
  3. C:\Program Files (x86)\Microsoft Visual Studio\2019\Community\VC\Auxiliary\Build\vcvars64.bat
  4. NMAKE

Add detours.lib to Linker additional libraries.

Hooked Functions:

  • DeleteFileW (kernelbase.dll)
  • MoveFileExW (kernelbase.dll)
  • NtOpenFile (ntdll.dll)