Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Before Posting... Please check out the Community Guidelines in the
Announcements and Administration Category.

Re[2]: Minifilter - STATUS_REPARSE .exe files (win 10 x64) ?

What are you changing the name to?

Pete

--
Kernel Drivers
Windows File System and Device Driver Consulting
www.KernelDrivers.com
866.263.9295

------ Original Message ------
From: "xxxxx@gmail.com" <xxxxx@lists.osr.com>
To: "Windows File Systems Devs Interest List" <xxxxx@lists.osr.com>
Sent: 11/27/2017 12:58:11 AM
Subject: RE:[ntfsd] Minifilter - STATUS_REPARSE .exe files (win 10 x64)
?

>Hey Rod,
>
>I tried just changing the name in the file object (without setting
>STATUS_REPARSE) and it doesn't seem to work (Should it though ?).
>What I get now is a mix of STATUS_OBJECT_NAME_NOT_FOUND and failures.
>
>Still couldn't figure out my next step - would really appreciate your
>helping hand !
>
>---
>NTFSD is sponsored by OSR
>
>
>MONTHLY seminars on crash dump analysis, WDF, Windows internals and
>software drivers!
>Details at <http://www.osr.com/seminars>;
>
>To unsubscribe, visit the List Server section of OSR Online at
><http://www.osronline.com/page.cfm?name=ListServer>;

Kernel Drivers
Windows File System and Device Driver Consulting
www.KernelDrivers.com
866.263.9295

Comments

  • Hey Pete,

    Say I have the following name:
    '\Device\HardDrive4\....\a.exe'

    I'm changing the name to:
    '\Device\HardDrive4\....\b.exe'

    Both images are 64 bit.
    It doesn't work when reparsing nor without reparsing.

    Would love to hear any ideas,

    Thanks a lot.
Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!