Hi,
Install a third party application, there is a tmp file
get created in c:\D$S\user\L$S\temp\ called x.tmp.
x.tmp get encrypted in “temp” folder. The x.tmp file
then get renamed to an ocx file in
c:\Program Files\Common Files\app. The Ocx file
is not encrypted. Every thing works fine as expected at
this point, but something strang happed after I reboot
my Windows machine. The Ocx file becomes encrypted
in c:\Program File\Common Files\App because the
application complaing that the Ocx file is a invalid image
file. If I saved a copy of Ocx file before reboot, then I replace
the bad OCx file with the saved version, the application
can read the Ocx file without problem.
The x.tmp file never get modified after creation in temp
directory before rename operation, I wonder if
something happed in the disk cache. One thng that
I noticed is that there seems to be no disk file created
for x.tmp, all the data are in memory before rename
operation. What could be wrong is my encryption filter
driver, which may have caused the problem???
Wencheng
Try windbg. Add the proper debug print statements and see where it fails.
The possibilities are too numerous to enumerate.
wrote in message news:xxxxx@ntfsd…
>
>
> Hi,
>
> Install a third party application, there is a tmp file
> get created in c:\D$S\user\L$S\temp\ called x.tmp.
> x.tmp get encrypted in “temp” folder. The x.tmp file
> then get renamed to an ocx file in
> c:\Program Files\Common Files\app. The Ocx file
> is not encrypted. Every thing works fine as expected at
> this point, but something strang happed after I reboot
> my Windows machine. The Ocx file becomes encrypted
> in c:\Program File\Common Files\App because the
> application complaing that the Ocx file is a invalid image
> file. If I saved a copy of Ocx file before reboot, then I
replace
> the bad OCx file with the saved version, the application
> can read the Ocx file without problem.
> The x.tmp file never get modified after creation in temp
> directory before rename operation, I wonder if
> something happed in the disk cache. One thng that
> I noticed is that there seems to be no disk file created
> for x.tmp, all the data are in memory before rename
> operation. What could be wrong is my encryption filter
> driver, which may have caused the problem???
>
>
> Wencheng
>
>
>
>
>
did u decrypt the file during the rename operation? if not, the ocx file u
are accessing before the reboot will be the clear version in the cache,
while the underlying physical file is still encrypted. so after the reboot
when the cache has been cleared, what is read to the cache will be the
encrypted version.
Ampsi
----- Original Message -----
From:
To: “File Systems Developers”
Sent: Thursday, July 24, 2003 10:30
Subject: [ntfsd] file get encrypted after reboot
Hi,
Install a third party application, there is a tmp file
get created in c:\D$S\user\L$S\temp\ called x.tmp.
x.tmp get encrypted in “temp” folder. The x.tmp file
then get renamed to an ocx file in
c:\Program Files\Common Files\app. The Ocx file
is not encrypted. Every thing works fine as expected at
this point, but something strang happed after I reboot
my Windows machine. The Ocx file becomes encrypted
in c:\Program File\Common Files\App because the
application complaing that the Ocx file is a invalid image
file. If I saved a copy of Ocx file before reboot, then I replace
the bad OCx file with the saved version, the application
can read the Ocx file without problem.
The x.tmp file never get modified after creation in temp
directory before rename operation, I wonder if
something happed in the disk cache. One thng that
I noticed is that there seems to be no disk file created
for x.tmp, all the data are in memory before rename
operation. What could be wrong is my encryption filter
driver, which may have caused the problem???
Wencheng
—
You are currently subscribed to ntfsd as: xxxxx@pmail.ntu.edu.sg
To unsubscribe send a blank email to xxxxx@lists.osr.com
My “rename” performed a decryption and the application can read
the target file(ocx)
after rename without problem. However, the application can’t read
the ocx file if I reboot
the system after installing the application. I am going to setup
windbg to debug the problem
as suggested by David.
Wencheng
----- Original Message -----
From: “Ampsi”
To: “File Systems Developers”
Sent: Monday, July 28, 2003 9:46 PM
Subject: [ntfsd] Re: file get encrypted after reboot
> did u decrypt the file during the rename operation? if not, the ocx file u
> are accessing before the reboot will be the clear version in the cache,
> while the underlying physical file is still encrypted. so after the reboot
> when the cache has been cleared, what is read to the cache will be the
> encrypted version.
>
> Ampsi
>
> ----- Original Message -----
> From:
> To: “File Systems Developers”
> Sent: Thursday, July 24, 2003 10:30
> Subject: [ntfsd] file get encrypted after reboot
>
>
>
> Hi,
>
> Install a third party application, there is a tmp file
> get created in c:\D$S\user\L$S\temp\ called x.tmp.
> x.tmp get encrypted in “temp” folder. The x.tmp file
> then get renamed to an ocx file in
> c:\Program Files\Common Files\app. The Ocx file
> is not encrypted. Every thing works fine as expected at
> this point, but something strang happed after I reboot
> my Windows machine. The Ocx file becomes encrypted
> in c:\Program File\Common Files\App because the
> application complaing that the Ocx file is a invalid image
> file. If I saved a copy of Ocx file before reboot, then I
replace
> the bad OCx file with the saved version, the application
> can read the Ocx file without problem.
> The x.tmp file never get modified after creation in temp
> directory before rename operation, I wonder if
> something happed in the disk cache. One thng that
> I noticed is that there seems to be no disk file created
> for x.tmp, all the data are in memory before rename
> operation. What could be wrong is my encryption filter
> driver, which may have caused the problem???
>
>
> Wencheng
>
>
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@pmail.ntu.edu.sg
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@covad.net
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>