spysym

Spysym 007 is a mini filter file system that prevents kernel level execution of executable code and files from the removable devices, thus preventing possible malware infection. spysym007 insists on using data archives{.zip,.rar,.tar..} for data sharing. Following extensions are prevented from execution RTL_CONSTANT_STRING( L"ade"), RTL_CONSTANT_STRING( L"adp"), RTL_CONSTANT_STRING( L"bas"), RTL_CONSTANT_STRING( L"bat"), RTL_CONSTANT_STRING( L"chm"), RTL_CONSTANT_STRING( L"cmd"), RTL_CONSTANT_STRING( L"com"), RTL_CONSTANT_STRING( L"cpl"), RTL_CONSTANT_STRING( L"crt"), RTL_CONSTANT_STRING( L"dll"), RTL_CONSTANT_STRING( L"doc"), RTL_CONSTANT_STRING( L"docs"), RTL_CONSTANT_STRING( L"docx"), RTL_CONSTANT_STRING( L"exe"), RTL

SpySym007.inf
sources
makefile
main.c