Using IRP for Malware Detection. - FuYong Zhang; DeYu Qi 001; JingLin Hu (RAID, 2010)