Re[2]: Minifilter - STATUS_REPARSE .exe files (win 10 x64) ?

What are you changing the name to?

Pete


Kernel Drivers
Windows File System and Device Driver Consulting
www.KernelDrivers.com
866.263.9295

------ Original Message ------
From: “xxxxx@gmail.com
To: “Windows File Systems Devs Interest List”
Sent: 11/27/2017 12:58:11 AM
Subject: RE:[ntfsd] Minifilter - STATUS_REPARSE .exe files (win 10 x64)
?

>Hey Rod,
>
>I tried just changing the name in the file object (without setting
>STATUS_REPARSE) and it doesn’t seem to work (Should it though ?).
>What I get now is a mix of STATUS_OBJECT_NAME_NOT_FOUND and failures.
>
>Still couldn’t figure out my next step - would really appreciate your
>helping hand !
>
>—
>NTFSD is sponsored by OSR
>
>
>MONTHLY seminars on crash dump analysis, WDF, Windows internals and
>software drivers!
>Details at http:
>
>To unsubscribe, visit the List Server section of OSR Online at
>http:</http:></http:>

Hey Pete,

Say I have the following name:
‘\Device\HardDrive4.…\a.exe’

I’m changing the name to:
‘\Device\HardDrive4.…\b.exe’

Both images are 64 bit.
It doesn’t work when reparsing nor without reparsing.

Would love to hear any ideas,

Thanks a lot.