DOS application identification

NTFSD
1

Hi all !
Can anybody say to me, as i may get of 16-bit
process name during open of the encrypted file ?
Any suggestions may be helpful.
DOS and Win16 application was launched in WOW,
hense of the name of the current process becomes
as NTVDM.EXE, but not of the autorized 16-bit
application…

2

Undocumented EPROCESS fields can help.

----- Original Message -----
From: “oleshii wood”
To: “File Systems Developers”
Sent: Friday, May 24, 2002 11:36 AM
Subject: [ntfsd] DOS application identification

> Hi all !
> Can anybody say to me, as i may get of 16-bit
> process name during open of the encrypted file ?
> Any suggestions may be helpful.
> DOS and Win16 application was launched in WOW,
> hense of the name of the current process becomes
> as NTVDM.EXE, but not of the autorized 16-bit
> application…
>
> —
> You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
> To unsubscribe send a blank email to %%email.unsub%%
>