Best Of

"devcon install" is perhaps the most deceiving command ever invented. The oh-so-inviting name fools people into believing it does things that it doesn't really do. In retrospect, maybe "devcon create" would have been a better choice.

I would also like to know why you can't use ZwQueryInformationProcess.
But anyway you can use PsSetCreateProcessNotifyRoutineEx and create your own database with PID to process image path mapping.

Glad to know you got it working... and that my rant was not entirely wasted.

And thank you, Mr. Laurent, for proving my point that these ridiculous variants are as confusing as they are unnecessary.

Peter

Sorry to resurrect an old thread

From the community guidelines, Mr. Ruske, which you no doubt read before you posted:

There are a number of other behaviors that are considered rules of "good conduct" for posting here on the forums. These include:

1. Please do not revive "old" threads. Please not reply to threads where the last post is more than a month old. This is referred to as "necroposting." If you have a comment/question/issue that's raised in a "dead" thread, just start a new thread (you can post a link to the old thread if you want) and ask your question there.

Peter

Seriously, dude... Mr. Vinay_KP's post was from two years ago? You think he's still looking for help?

PLEASE check the dates of threads before you respond. Please don't necropost.
Peter

You're replying to a post from 2015.

Seriously, Mr. Sangeetha... Two posts out of two... both necroposts. Both in violation of our beloved forum guidelines. You think I should let you continue posting here? Just asking your opinion.

Peter