A real time blocking hook enables foolproof monitoring of various global
functions such as file open. In this way, a scanning functionality may be
implemented which prevents execution of the file before scanning is
complete. The address of the open routines may be obtained using a DLL.
Advantageously, an intertask send message is utilized to communicate
between the DLL, the client and the monitoring function since the ability
of other functions to bypass the intertask send message is substantially
eliminated.
