Talk:I/O request packet

	This article is within the scope of WikiProject Computing, a collaborative effort to improve the coverage of computers, computing, and information technology on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.ComputingWikipedia:WikiProject ComputingTemplate:WikiProject ComputingComputing articles
???	This article has not yet received a rating on the project's importance scale.

Microsoft Windows: Computing Low‑importance

	This article is within the scope of WikiProject Microsoft Windows, a collaborative effort to improve the coverage of Microsoft Windows on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.Microsoft WindowsWikipedia:WikiProject Microsoft WindowsTemplate:WikiProject Microsoft WindowsMicrosoft Windows articles
Low	This article has been rated as Low-importance on the project's importance scale.
	This article is supported by WikiProject Computing.

IRP hook

There is a Rootkit called IRP hook. I think this should be added to this article but I do not know enough about it to do it myself. Can anyone help? Biscuittin (talk) 20:53, 22 January 2014 (UTC)[reply]

I see a lot of discussion on the net as to how to detect and remove that, but offhand, nothing about how it works. Without reliable sources (preferably at least two) describing how it works and why it is called "IRP hook", no, we can't. I could infer that it has something to do with "hooking" entry points to drivers or system routines that handle IRPs (something very commonly done by legitimate code like live anti-malware checkers)... and assuming that the name means anything at all, that's likely close to correct... but to write that on Wikipedia would be pure WP:OR. If one wanted to just mention its existence that would go better in a "List of known malware" article, if we have one. There are plenty of RSs for its existence. Jeh (talk) 21:42, 22 January 2014 (UTC)[reply]

There is an article on Hooking. Biscuittin (talk) 22:22, 22 January 2014 (UTC)[reply]

It can't go there without RSs either. Jeh (talk) 07:06, 23 January 2014 (UTC)[reply]