ProtectDriver is a driver to make a process untouchable. If the driver is opened and the process is protected then nobody from user space can open the related process. Actually it hooks NtOpenProcess kernel call and makes filtering there.




File list:
ProtectDriver
............\ProtectDriver
............\.............\BUILD
............\.............\buildchk_win7_x86.log
............\.............\buildchk_win7_x86.wrn
............\.............\buildinc.cmd
............\.............\buildnumber.h
............\.............\ddkbldenv.cmd
............\.............\ddkbuild.cmd
............\.............\ddkpostbld.cmd
............\.............\ddkprebld.cmd
............\.............\drvversion.aps
............\.............\List.h
............\.............\makefile
............\.............\must
............\.............\prefastchk_win7_x86.log
............\.............\PREfast_defects_chk_win7_x86.xml
............\.............\PREfast_defects_chk_win7_x86Sum.txt
............\.............\ProtectDriver.c
............\.............\ProtectDriver.h
............\.............\ProtectDriver.props
............\.............\ProtectDriver.vsprops
............\.............\ProtectDriver.WXP.log
............\.............\ProtectDriver.WXP.vcproj
............\.............\ProtectDriver.WXP.vcproj.KENNY.admin.user
............\.............\ProtectDriver.WXP.vcxproj
............\.............\ProtectDriver.WXP.vcxproj.filters
............\.............\ProtectDriver.WXP.vcxproj.user
............\.............\sources
............\ProtectDriver.ncb
............\ProtectDriver.sdf
............\ProtectDriver.sln
............\ProtectDriver.suo