C++ (Cpp) FltCloseClientPort Examples

Example #1

File: cfsd.c Project: Artorios/rootkit.com

/* 
 * =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= **
 *
 *
 * =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= **
 */
VOID
cfsd_UserModeDisconnect( IN PVOID ConnectionCookie )

{

 UNREFERENCED_PARAMETER( ConnectionCookie );

 KdPrint( (PRINT_TAG "Closed ClientPort 0x%X in Process 0x%X\n", gUserModeConnection.ClientPort, gUserModeConnection.UserProcess ) );

   // Close our handle to the connection
   FltCloseClientPort( gFilterPointer, &gUserModeConnection.ClientPort );
   // Reset our UserProcess field
   gUserModeConnection.UserProcess = NULL;
}

Example #2

File: communication.c Project: 41434944/armadito-av

VOID DisconnectNotifyCallback(IN PVOID ConnectionCookie) {

	UNREFERENCED_PARAMETER(ConnectionCookie );
	DbgPrint("[+] Debug :: ArmaditoGuard!DisconnectNotifyCallback :: Callback DisconnectNotifyCallback !! \n");

	if (gClientComPort != NULL && gFilterHandle != NULL) {
		FltCloseClientPort(gFilterHandle,&gClientComPort);
		gClientComPort = NULL;
		gScanProcess = NULL;
	}


	return;
}